1. Field of the Invention
The present invention relates to an authentication technology, and it particularly relates to an authentication apparatus and an authentication method for implementing individual authentication using biometric data and other data.
2. Description of the Related Art
A material belonging to a person such as a magnetic card or an IC card, or secret information allotted to the person such as a password or a security code number has been utilized individual authentication. Nowadays, biometric data have alternatively come to be utilized in the individual authentication. The biometric data to be utilized in such biometric authentication are, for example, information showing the bodily features of a person such as a fingerprint, a palm print, a face, an iris or voiceprint. As another example, feature in a person's behavior can also be the biometric data, such as a signature or a gesture of the person.
It is often the case that the biometric authentication can not be carried out enough accurately based only on one type of the biometric data. In another case, the biometric data of that type can not be obtained or extracted from a person because of his/her physical defection or the like. Therefore, a combined type authentication technology is being developed, where biometric data of more than two types are utilized for individual authentication (For example, refer to the related art list: [1]). By utilizing the biometric data of more than two types in the biometric authentication, authentication accuracy can be increased than the authentication by biometric data of a single kind. Therefore, this combined type biometric authentication method can be implemented for practical use while it has been difficult to utilize practically the biometric authentication based on only information of one kind because of its inaccuracy.
Related Art List
[1] Japanese Patent Application Laid-Open No. 2003-30154
In a system or apparatus for the combined type authentication, however, different input devices are respectively provided therein for each biometric data type. Accordingly, the entire size of such system or apparatus inevitably becomes larger and the manufacturing cost thereof becomes high. Moreover, such system or apparatus is not sufficiently convenient for users, as the users have to input their biometric data via several input devices.
The present invention has been made in view of foregoing circumstances, and an object thereof is to provide an authentication technology where the structure of a combined type authentication system can be simplified and manufacturing cost thereof can be reduced.
A preferred embodiment according to the present invention relates to an authentication apparatus. This apparatus includes a single input device, wherein biometric data of two or more types are sequentially inputted to the single input device. The biometric data are not inputted to the single input device all at once, but are inputted thereto sequentially from one type after another. The biometric data comprise information showing the bodily feature of a person, such as a fingerprint, a palm print, a face, an iris, a retina, vein or voiceprint. The biometric information may also comprise information showing features in the person's behavior, such as a signature or a gesture. According to the apparatus of the present invention, the single input unit can be commonly used for inputting the biometric data of two or more kinds.
Another preferred embodiment of the present invention also relates to an authentication apparatus. This apparatus comprises a single input device to which biometric data and non-biometric data are inputted, wherein the biometric data and the non-biometric data are inputted thereto sequentially. The non-biometric data comprise secret information allotted to a person such as a password or a security code number. According to the apparatus of the present invention, the input device for the biometric data can also be utilized for inputting the non-biometric data.
Another preferred embodiment of the present invention relates to an authentication method. This method comprises: receiving input of information for authentication of more than two types by a single input device; and receiving from a user information specifying a type of the information to be inputted when the information is inputted.
Another preferred embodiment of the present invention also relates to an authentication method. This method comprises: receiving input of information for authentication of more than two types by a single input device; and detecting a type of the inputted information for the authentication among precedently assumed types.
Moreover, any arbitrary replacement or substitution of the above-described structural components and the steps, expressions replaced or substituted in part or whole between a method and an apparatus as well as addition thereof, and expressions changed to a system, a computer program, a storage medium, a transmission medium or the like are all effective as and are encompassed by the present invention.
This summary of the invention does not necessarily describe all necessary features, so that the invention may also be a sub-combination of these described features.
The invention will now be described by reference to the preferred embodiments. This does not intend to limit the scope of the present invention, but to exemplify the invention.
First Embodiment
Hereunder will be described an authentication system according to the first embodiment of the present invention. The authentication system comprises an input apparatus for authentication (hereinafter referred to as “authentication input apparatus”) which receives from a user the input of information to be utilized in the authentication (hereinafter referred to as “authentication information”) and a processing apparatus for the authentication (hereinafter referred to as “authentication processing apparatus”) which performs the authentication of the user based on the authentication information being inputted to the authentication input apparatus.
The authentication input apparatus according to the first embodiment of the present invention comprises a single input device for a user to input the authentication information and an authentication type selector for a user to selectively specify the type of authentication information. Hereunder will be described various types of the authentication input apparatus according to the first embodiment of the present invention.
A fingerprint selection button 12 and a signature selection button 14 are buttons for the user to selectively specify the kind of authentication information to be inputted. Fingerprint data are obtained when the user puts his/her finger on the input unit 10a after pressing the fingerprint selection button 12. On the other hand, signature data are obtained when the user signs on the input unit 10a after pressing the signature selection button 14.
The authentication input apparatus 100 and the authentication processing apparatus 200 may be connected by a connection cable or the like or may be connected via a network. In another configuration, the authentication input apparatus 100 and the authentication processing apparatus 200 can be structured integrally as a single authentication apparatus. The feature extraction unit 70 and the authentication unit 72 may not be provided in the authentication processing unit 200 but may be provided in the authentication input unit 100. In this case, the authentication input apparatus 100 retrieves the personal authentication information database 74 through a connection cable or a network.
The sensor 50 is a pressure sensitive sensor or an optical sensor, which receives the authentication information presented by the user. When the user inputs the authentication information, the user selectively specifies the type of authentication information to be inputted by the action of pushing a button or the like. The authentication type input unit 54 receives the specified type of authentication information. The adjustment unit 52 adjusts the sensor 50's parameter and so forth based on the type of the authentication information obtained by the authentication type input unit 54. The adjustment unit 52, for example, adjusts the sensitivity of the pressure sensitive sensor or the focal distance of a lens in a CCD camera unit in accordance with the type of the authentication information. The authentication data generation unit 56 processes signals obtained by the sensor 50 and generates authentication data. Then the authentication data generation unit 56 transmits the authentication data to the authentication processing apparatus 200 with identification information which indicates the type of authentication information obtained by the authentication type input unit 54.
As components of an authentication processing unit, the authentication processing apparatus 200 is provided with the feature extraction unit 70 and the authentication unit 72. The feature extraction unit 70 extracts a feature necessary for the authentication from the authentication data provided by the authentication input apparatus 100. The extraction of the features is carried out by applying image processing or another analysis method suitable for the type of the authentication information, which is determined based on the identification information showing the type of the authentication information. The authentication unit 72 performs the authentication by comparing the data of extracted feature to feature data of the user precedently registered in the personal authentication information database 74. The personal authentication information database 74 comprises biometric feature data 76 and non-biometric feature data 78. The biometric feature data 76 are data of the bodily features of users or the features in behaviors of users, such as a fingerprint, an iris, handwriting or the like. The non-biometric data 78 are data of secret information such as a password, a security code number and so forth. The authentication unit 72 carries out a retrieval on the biometric data 76 or the non-biometric data 78 in accordance with the identification information showing the type of the authentication information. Then the extracted feature data of the user are compared therewith.
The authentication type input unit 54 in the authentication input apparatus 100 receives the action of pushing down the authentication selection button by the user (S10). The case where the user pushes the fingerprint selection button 12 (A in S10) will hereunder be described first. The adjustment unit 52 adjusts the sensor 50 for obtaining the fingerprint of the user (S12). The user puts his/her finger on the surface of the image input unit 11 when inputting the fingerprint as the authentication information. Accordingly, the adjustment unit 52 adjusts the lens of the CCD camera unit in the sensor 50 so that the focus thereof might be put on the surface of the image input unit 11. Then the fingerprint image is obtained by the sensor 50 (S14). The authentication data generation unit 56 obtains identification information from the authentication type input unit 54 and adds it to the fingerprint image obtained in the sensor 50, the identification information indicating that the type of the authentication information is the fingerprint. Then the authentication data generation unit 56 sends the fingerprint image with the identification information to the feature extraction unit 70 in the authentication processing apparatus 200. As the identification information shows that the type of the authentication information is the fingerprint, the feature extraction unit 70 carries out image processing suitable for fingerprint image on the fingerprint image sent from the authentication data generation unit 56 and then extracts the feature in the fingerprint (S16).
The authentication unit 72 retrieves the biometric feature data 76 of registered users, which are stored in the personal authentication information database 74. The authentication unit 72 then compares the feature in the fingerprint of the user extracted by the feature extraction unit 70 with the features in the fingerprints of registered users for examining if there is a fingerprint having the feature identical with that of the user in the biometric feature data 76 (S18). When it is determined that the fingerprint of the user is the fingerprint of one of the registered users (Y in S18), the notification unit 58 presents an allowance notification to the user by a buzzer, a light or the like (S20). When there is no fingerprint identical with the user's fingerprint found among the fingerprints of the registered users (N in S18), the notification unit 58 presents a rejection notification to the user (S30).
Descriptions will be made next on a case that the iris selection button 22 is pressed by the user (B in S10). The adjustment unit 52 adjusts the sensor 50 for carrying out the authentication by an iris (S22). The user brings his/her eye close to the image input unit 11 of the authentication input apparatus 100 for inputting the iris. The distance between the eye and the image input unit 11 varies on a case-by-case basis. Thus the adjustment unit 52 adjusts the focal distance of the lens of the CCD camera unit in the sensor 50 in an auto focusing manner. The sensor 50 obtains the iris image (S24). The authentication data generation unit 56 obtains identification information from the authentication type input unit 54 and adds it to the iris image obtained in the sensor 50, the identification information indicating that the type of the authentication information is the iris. Then the authentication data generation unit 56 sends the iris image with the identification information to the feature extraction unit 70 in the authentication processing apparatus 200. As the identification information shows that the type of the authentication information is the iris, the feature extraction unit 70 carries out image processing suitable for iris images on the iris image sent from the authentication data generation unit 56 and then extracts the feature in the iris (S26).
The authentication unit 72 retrieves the biometric feature data 76 of the registered users, which are stored in the personal authentication information database 74. The authentication unit 72 then compares the feature in the iris of the user extracted by the feature extraction unit 70 with the features in the irises of the registered users for examining if there is an iris having the feature identical with that of the user in the biometric feature data 76 (S28). When it is determined that the iris of the user is the iris of one of the registered users (Y in S28), the notification unit 58 presents the allowance notification to the user by a buzzer, a light or the like (S20). When there is no iris identical with the user's iris found among the irises of the registered users (N in S28), the notification unit 58 presents a rejection notification to the user (S30).
According to the authentication procedure described above, the authentication of the user is carried out based on the fingerprint or the iris. Accordingly, even in a case that one type of the biometric data can not be presented for the authentication because of the user's particular circumstance, the authentication of the user can be carried out based on the other type of the biometric data. In another example, the authentication of the user may be carried out based on both types of the biometric data. In that case, the accuracy of the authentication can be increased because of the combination of the fingerprint authentication and the iris authentication.
With the authentication input apparatus 100 according to the first embodiment of the present invention, the authentication information of two or more kinds can be input into the single input device one kind after another. The authentication information of two or more kinds may be the biometric data of two or more types, such as a fingerprint, a palm print, an iris and so forth. In another case, the authentication information may be the combination of the biometric data and the non-biometric data such as a security code number. Generally, in inputting authentication information of two or more kinds, an input device dedicated for inputting one type of authentication information and another input device dedicated for inputting another type of authentication information are used respectively. On the other hand, according to the first embodiment of the present invention, the single input device is used commonly for inputting different kinds of authentication information. Thus the size of the apparatus can be made small. Also, cost for manufacturing the apparatus can be reduced.
Moreover, in the authentication system according to the first embodiment of the present invention, the accuracy of the authentication can be enhanced because of the combination of biometric authentication of two or more kinds or because of the combination of the biometric authentication and the non-biometric authentication. For a particular user, one type of biometric authentication can not be carried out because of the user's circumstance. The authentication system of the first embodiment can perform the authentication in such a case. Therefore, this authentication system can be utilized in various manners or fields.
Moreover, according to the first embodiment of the present invention, a user inputs the type of authentication information to be utilized for the authentication in inputting the authentication information to the single input device, therefore the authentication system can properly performs the authentication processing corresponding to the type of authentication information being inputted without detecting the type thereof by itself.
Second Embodiment
The user inputs his/her fingerprint or signature into an input unit 10. The authentication input apparatus 110 automatically judges whether authentication information being input is the fingerprint or the signature. A warning message is indicated on the display 30 when authentication information other than the fingerprint and the signature is input. The message is, for example, “Please input your fingerprint or signature.”
The authentication data generation unit 56 processes signals obtained by the sensor 50 and generates authentication data. Thereafter, the authentication data generation unit 56 transmits the authentication data to the authentication type detection unit 60. The authentication type detection unit 60 analyzes the authentication data and detects the type thereof among types of authentication information precedently assumed to be utilized in the authentication. A message for instructing the user to input the predetermined type of authentication information is indicated on the display unit 62 when the authentication type detection unit 60 can not find the type of authentication information being inputted among the precedently assumed types.
The authentication data generation unit 56 provides the authentication data to the authentication processing apparatus 200 after adding thereto identification information indicating the type of authentication information determined by the authentication type detection unit 60. The notification unit 58 receives the result of the authentication from the authentication processing unit 200 and presents it to the user. The result of the authentication by the authentication processing apparatus 200 may be indicated in the display unit 62.
When the authentication type detection unit 60 detects that the image inputted for the authentication is the fingerprint image (A in S42), the feature extraction unit 70 carries out image processing suitable for fingerprint images on the image provided from the authentication data generation unit 56 and extracts the feature of the fingerprint (S46). The procedure of comparing the inputted fingerprint to fingerprints of registered users carried out by the authentication unit 72 (S48) and issuing an allowance notification or rejection notification to the user (S50) and S60) are respectively same with S18, S20 and S30 in
When the authentication type detection unit 60 detects that the image inputted for the authentication is the signature image (B in S42), the feature extraction unit 70 carries out image processing suitable for signature images on the image provided from the authentication data generation unit 56 and extracts the feature of the signature (S56). The image processing suitable for signature images is, for example, edge extraction processing, edge enhancement processing or the like. The authentication unit 72 carries out retrieval on biometric feature data 76 of registered users, which are stored in a personal authentication information database 74. The authentication unit 72 then compares the feature in the signature of the user extracted by the feature extraction unit 70 with the features in the signatures of the registered users for examining if there is a signature having the feature identical with that of the user in the biometric feature data 76 (S58). When it is determined that the signature of the user is the signature of one of the registered users (Y in S58), the notification unit 58 presents the allowance notification to the user (S50). When there is no signature identical with the user's signature found among the signatures of the registered users (N in S58), the notification unit 58 presents a rejection notification to the user (S30). These notifications may be indicated by the display unit 62.
The authentication system according to the present embodiment does not need to be provided with buttons or the like for a user to selectively specify the type of the authentication information since the type of the authentication information being inputted to the single input device is automatically detected. Accordingly, the structure of the system can be simplified and user convenience can also be enhanced. Moreover, the system can require a user to input authentication information of one of the predetermined types by indicating a warning message in the display unit, when the user inputs authentication information of which the type is not included in the predetermined types.
Although the present invention has been described by way of exemplary embodiments, it should be understood that many changes and substitutions may further be made by those skilled in the art without departing from the scope of the present invention which is defined by the appended claims.
In the embodiments described above, description is made on the combined type authentications based on the combination of two kinds of biometric data and of biometric data and non-biometric data. However, three types of authentication information may naturally be utilized in the authentication or non-biometric data of two or more kinds may be utilized therein. A retina, vein or voiceprint may also be utilized as biometric data for identifying a person. For example, in a case that the system utilizes voiceprint, a user is requested by the system to pronounce a password. Thereby, a combined type authentication based both on voiceprint authentication and fingerprint authentication can be realized. The gesture of a user can be utilized as one type of biometric data for authenticating the user. Movement or behavior of a person, such as his/her manner of walking, can also be utilized for the authentication. Such feature in a person's behavior can also be utilized as biometric data, in addition to the bodily features.
In the first embodiment, the authentication information is inputted by the user after the user presses the buttons for selecting the type of authentication information. However, the type of the authentication information may be specified after inputting the authentication information. The order of kinds of authentication information to be inputted may precedently be defined. As a user has to merely input plural kinds of authentication information in accordance with that order, the selection buttons for the authentication information can be omitted. In this case, a display unit may be provided for instructing a user the kinds of authentication information one after another in accordance with the order.
Number | Date | Country | Kind |
---|---|---|---|
2003-332498 | Sep 2003 | JP | national |