Method of controlling biometric authentication system, non-transitory, computer readable storage medium and biometric authentication system

• US 8,863,259 B2
• Filed: 02/28/2012
• Issued: 10/14/2014
• Est. Priority Date: 09/18/2009
• Status: Expired due to Fees

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Takagi, Junji
• Primary Examiner(s): Hoffman, Brandon
• Assistant Examiner(s): Anderson, Michael D
• Application Number:
  US13/406,953
• Publication Number:
  US 20120159600A1
• Time in Patent Office: 959 Days
• Field of Search: 713/186, 726/7
• US Class Current: 726/7
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06V 10/993 Evaluation of the quality of the acquired pattern
• CPC Class Codes: G06V 40/1365 Matching; Classification

Abstract

A control method for controlling a biometric authentication system including a server that stores reference biometric data, and a client that acquires biometric authentication data of the user, has saving in the server a table in which identification information identifying the user and a previous authentication result of the user are associated with each other, transmitting the identification information to the server, referring to the identification information and acquiring a previous authentication result of the user corresponding to the identification information from the table, calculating, an authentication success rate of the user from the acquired previous authentication result, transmitting the reference biometric data to the client when the authentication success rate is less than or equal to a certain value, calculating, a degree of matching between the biometric authentication data and the reference biometric data, and determining, whether or not the authentication of the user has succeeded.

Claims

1. A control method of controlling a biometric authentication system including a server that stores reference biometric data used as a reference for authentication of a user, and a client that acquires biometric authentication data from the user, the control method comprising:

saving, in the server, associated information in which identification information identifying the user and a previous authentication result of the user are associated with each other;

transmitting the identification information identifying the user to the server from the client;

referring to, at the server, the identification information transmitted from the client and acquiring a previous authentication result of the user corresponding to the identification information from the saved associated information;

calculating, at the server, an authentication success rate of the user from the acquired previous authentication result;

determining, at the server, to calculate a degree of matching at the client when the calculated authentication success rate does not satisfy a threshold, and to calculate the degree of matching at the server when the calculated authentication success rate satisfies the threshold;

transmitting, when said determining determines to calculate the degree of matching at the client, the reference biometric data from the server to the client and then calculating, at the client, the degree of matching between the biometric authentication data and the reference biometric data transmitted from the server, so that the degree of matching is thereby calculated at the client when the authentication success rate does not satisfy the threshold; and

determining, based on the degree of matching calculated at the client, whether or not the authentication of the user has succeeded.

2. The control method according to claim 1, further comprising, when said determining determines to calculate the degree of matching at the server,

calculating, at the server, the degree of matching between the biometric authentication data, which is transmitted from the client to the server, and the reference biometric data, so that the degree of matching is thereby calculated at the server when the authentication success rate satisfies the threshold, and

determining whether or not the authentication of the user has succeeded based on the degree of matching calculated at the server.

3. The control method according to claim 1, further comprising storing, in the client, reference biometric data corresponding to a user for which the authentication success rate does not satisfy the threshold, and, when an authentication process is performed on the user, verifying, at the client, biometric authentication data of the user against the stored reference biometric data.

4. The control method according to claim 1, further comprising recording, at the server, a history of authentication results corresponding to the client, and referring to, at the server, the history of authentication results to perform said determining.

5. The control method according to claim 1, further comprising, when said determining determines to calculate the degree of matching at the client, transforming, at the server, the reference biometric data using specific information, transmitting the transformed reference biometric data from the server to the client, transforming, at the client, the biometric authentication data using the specific information, and performing, at the client, a verification process between the transformed reference biometric data and the transformed biometric authentication data.

11. The control method according to claim 1, wherein the authentication success rate calculated at the server is a success rate over a prior period of time in which the user has successfully been authenticated by the biometric authentication system.

6. A non-transitory, computer readable storage medium storing a program to control a biometric authentication system including a server that stores reference biometric data used as a reference for authentication of a user, and a client that acquires biometric authentication data from the user, the program, when executed, causes the biometric authentication system to perform a process comprising:

saving, in the server, associated information in which identification information identifying the user and a previous authentication result of the user are associated with each other;

transmitting the identification information identifying the user to the server from the client;

referring to, at the server, the identification information transmitted from the client and acquiring a previous authentication result of the user corresponding to the identification information from the stored associated information;

calculating, at the server, an authentication success rate of the user from the acquired previous authentication result;

determining to calculate a degree of matching at the client when the calculated authentication success rate does not satisfy a threshold, and to calculate the degree of matching at the server when the calculated authentication success rate satisfies the threshold;

when said determining determines to calculate the degree of matching at the client,

transmitting the reference biometric data from the server to the client, and

calculating, at the client, the degree of matching between the biometric authentication data and the reference biometric data transmitted from the server, so that the degree of matching is thereby calculated at the client when the authentication success rate does not satisfy the threshold; and

determining, based on the degree of matching calculated at the client, whether or not the authentication of the user has succeeded.

12. The non-transitory, computer readable storage medium according to claim 6, wherein the authentication success rate calculated at the server is a success rate over a prior period of time in which the user has successfully been authenticated by the biometric authentication system.

7. A biometric authentication system comprising:

a server that stores reference biometric data used as a reference for authentication of a user; and

a client that acquires biometric authentication data from the user,

the server including a storage unit to store associated information in which identification information identifying user and a previous authentication result of the user are associated with each other, a calculating unit to refer to the identification information and the stored associated information, to calculate an authentication success rate of the user from a previous authentication result of the user corresponding to the identification information, and to determine to calculate a degree of matching at the client when the calculated authentication success rate does not satisfy a threshold and to calculate the degree of matching at the server when the calculated authentication success rate satisfies the threshold, and a transmitting unit to transmit the reference biometric data to the client when the calculating unit determines to calculate the degree of matching at the client,

the client including a determining unit to, when the calculating unit of the server determines to calculate the degree of matching at the client, calculate the degree of matching between the biometric authentication data and the reference biometric data, which is transmitted from the server to the client, and to determine, based on the degree of matching, whether or not the authentication of the user has succeeded,

so that the degree of matching is thereby calculated at the client when the authentication success rate does not satisfy the threshold.

8. The biometric authentication system according to claim 7, wherein the server further includes a determining unit to, when the calculating unit of the server determines to calculate the degree of matching at the server, calculate the degree of matching between the biometric authentication data, which is transmitted from the client to the server, and the reference biometric data, and to determine, based on the degree of matching, whether or not the authentication of the user has succeeded, so that the degree of matching is thereby calculated at the server when the authentication success rate satisfies the threshold.

9. The biometric authentication system according to claim 7, wherein the client further includes a storage unit to store reference biometric data corresponding to a user for which the authentication success rate does not satisfy the threshold, and the determining unit of the client calculates a degree of matching between the reference biometric data stored in the storage unit of the client and biometric authentication data of the user, and determines, based on the degree of matching, whether or not the authentication of the user has succeeded.

10. The biometric authentication system according to claim 7, wherein the server further includes a transforming unit to, when the calculating unit of the server determines to calculate the degree of matching at the client, transform, at the server, the reference biometric data using specific information, the client further includes a transforming unit to transform the biometric authentication data using the specific information, and the determining unit of the client calculates a degree of matching between the transformed reference biometric data and the transformed biometric authentication data, and determines, based on the degree of matching, whether or not the authentication of the user has succeeded.

13. The biometric authentication system according to claim 7, wherein the authentication success rate calculated at the server is a success rate over a prior period of time in which the user has successfully been authenticated by the biometric authentication system.