Technique for authenticating an object on basis of features extracted from the object

• US 8,064,646 B2
• Filed: 06/18/2007
• Issued: 11/22/2011
• Est. Priority Date: 06/27/2006
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Kashima, Hiroaki, Hagino, Masao, Tomoda, Daisuke, Takeuchi, Shigeki
• Primary Examiner(s): DULANEY, KATHLEEN YUAN
• Application Number:
  US11/764,283
• Publication Number:
  US 20080253619A1
• Time in Patent Office: 1,618 Days
• Field of Search: 382/115, 382/116, 902/3, 340/5.82, 713/186
• US Class Current: 382/116
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06V 40/70 Multimodal biometrics, e.g. combining information from different biometric modalities
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861

Abstract

The present invention discourages effective illegal use of compromised biometric information in biometric authentication and allows biometric authentication to be securely continued even when some biometric information is compromised. A user authentication system compares extracted user features with a previously registered combination of features and authenticates the user on the basis of the result of the comparison. If the authentication is successful, the previously registered combination is replaced with a new combination of features that are registered for use in the subsequent authentication of the authentication object.

Claims

1. A system for authenticating an authentication object that represents a user by comparing features that are extracted from the authentication object with features previously registered in an information recording medium associated with the user, the number of registered features recorded in said information recording medium being fewer than the number of extracted features, the system comprising:

an extraction unit for extracting a plurality of features from the authentication object in response to a user authentication request;

an authentication unit for reading a combination of registered features previously recorded on said information recording medium, comparing the registered features with corresponding ones of the extracted features and authenticating the authentication object based on a result of the comparison;

a selection unit for responding to a successful authentication by selecting, from the extracted features, a new combination of features different from the combination previously recorded on said information recording medium; and

a registration unit for recording the selected new combination of features on said information recording medium in place of the previously recorded registered features.

2. The system according to claim 1, wherein the extraction unit reads a plurality of features from an authentication object at substantially the same time and extracts a plurality of extracted features.

3. The system according to claim 1, wherein the system authenticates a user who is an authentication object by comparing extracted biometric features of the user with corresponding features previously recorded in the information recording medium, and

the selection unit combines features that are parts of fingerprints in relation to a plurality of fingers that are different from each other to select the combined features as a newly selected combination of features to be recorded in the information recording medium.

4. The system according to claim 1, wherein the selection unit determines whether one or more combinations of features are prohibited from being used as registered features and selects a combination of features from other than said prohibited combinations.

5. The system according to claim 1, wherein the selection unit selects a combination of extracted features to be recorded in the information recording medium according to a predetermined rule each time the authentication is successfully completed, and responsive to a notice that at least part of the extracted features are compromised, changes the predetermined rule to another rule to be used in a subsequent authentication operation.

6. The system according to claim 1, wherein information recorded in the information recording medium includes a medium identifier, and

the selection unit selects a combination of extracted features to be recorded in the information recording medium according to a predetermined rule every time the authentication is successfully completed, and responds to a determination that the current medium identifier is different from the medium identifier detected on the prior authentication operation by changing the predetermined rule to another rule.

7. A computer-implemented method for authenticating a user by comparing features that are extracted from the user with features that are registered in advance as a combination of features recorded on an information recording medium associated with the user, the method comprising:

extracting a plurality of features from the user;

comparing at least some of the extracted features with a previously registered combination of features recorded on the information recording medium;

the number of the registered features being fewer than the number of the extracted features, and authenticating the user based on a result of the comparison;

if the authentication is successfully completed, selecting a new combination of extracted features; and

registering the new combination for use in a subsequent authentication of the user by recording the new combination on the information recording medium in place of the previously registered combination on the information recording medium.

8. The computer-implemented method according to claim 7 wherein the previously registered combination of features was selected in accordance with a particular rule and selecting a new combination of extracted features comprises selecting a new rule for forming the new combination.

9. The computer-implemented method according to claim 8 wherein selecting a new combination further includes excluding any new combination consisting of extracted features which have been identified as being compromised.

10. A computer program product comprising a machine readable storage medium embodying program instructions, said program instructions when loaded into and executed by a computer causing the computer to perform a method of authenticating a user comprising the steps of:

extracting a plurality of features from the user;

reading a previously registered combination of user features from an information recording medium associated with the user;

the number of the previously registered features being fewer than the number of the extracted features;

comparing at least some of the extracted features with the previously registered combination of features and authenticating the user based on a result of the comparison;

if the authentication is successfully completed, selecting a new combination of extracted features; and

registering the new combination by recording the new combination on the information recording medium in place of the previously registered combination for use in a subsequent authentication of the user.

11. The computer program product according to claim 10 wherein the previously registered combination of features was selected in accordance with a particular rule and the program instructions for causing selection of a new combination further comprise program instructions for selecting a different rule for forming the new combination.

12. The computer program product according to claim 11 wherein program instructions for selecting a new combination further includes program instructions for excluding any new combination of extracted features which have been identified as being compromised.