JP2005275661A - System and server for biometric information management - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To considerably improve convenience of users and managers for terminal devices by registering regular biometric features information to a terminal device without appearance of users and attendance of managers when changing a terminal device or a user of a terminal device. <P>SOLUTION: In a server 200A, biometric information to be registered, which is the same sort with the information used for a personal identification function in the terminal device 100A, is stored in a storing section 210 in advance. When changing the terminal device 100A or a user of the terminal device 100A, features information corresponding to the personal identification function in the terminal device 100A is extracted from the biometric information to be registered stored in the storing section 210. Then, the features information is stored and registered in a features information storing section for reference 130 in the terminal device 100A through communication means 240, 300, and 170. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention, for example, when a terminal device such as a mobile phone having a personal authentication function based on biometric information is lent to an employee and used by an employee (more specifically, The present invention relates to a system and a server for managing biometric information registered in the terminal device.

  In recent years, portable terminal devices such as portable electronic information terminals (for example, PDA (Personal Digital Assistant)) and cellular phones have become extremely multifunctional. The functions include not only functions as a conventional electronic notebook and telephone, but also functions for transmitting and receiving electronic information and image information via a wired or wireless network, as well as bank settlement functions, electronic commerce functions, and stock transactions. It is also equipped with functions, and a large amount of personal information is stored in the portable terminal device.

  Along with this, the demand for improvement of security performance in the portable terminal as described above has become extremely high, and in order to ensure security, personal authentication using a PIN number or password input from a push button or keyboard has been conventionally performed. (Authentication that the user of the terminal device is a pre-registered user), personal authentication using an ID (IDentification) card, and the like are employed. However, the password / password and ID card have a high risk of being stolen, and security is neglected for the convenience of carrying a bank settlement function, electronic commerce function, stock transaction function, and the like. For this reason, it is strongly desired to realize more reliable and safe personal authentication.

  In response to such demands, in recent years, personal authentication functions based on biometric information (biological information) that can identify individuals with higher accuracy have begun to be installed in mobile terminal devices such as mobile phones. Personal authentication based on biometric information is considered to be highly reliable and meet the above demands. In particular, when a fingerprint image is used as biometric information, the convenience is high (see, for example, Patent Document 1 below). As biometric information, an iris pattern image, a face image, a palm print image, a blood vessel pattern image, a retina pattern image, a voice pattern image, a signature image, and the like can be used in addition to the fingerprint image.

Here, a functional configuration of a general terminal device having a personal authentication function based on biometric information (here, a fingerprint image), in particular, a configuration related to the personal authentication function will be described with reference to FIG. FIG. 18 is a block diagram showing the configuration.
A terminal device 100 shown in FIG. 18 has a fingerprint information input unit 110, a fingerprint feature information extraction unit 120, a reference fingerprint feature information storage unit 130, a fingerprint feature information collation unit 140, an application to realize a personal authentication function using a fingerprint image. A unit 150 and an information display unit 160 are provided.

  The fingerprint information input unit (input unit) 110 is used by the user of the terminal device 100 to input a verification fingerprint image as verification biometric information. As the fingerprint information input unit 110, for example, a capacitive fingerprint sensor or an optical fingerprint sensor is used, and the fingerprint image (from the finger of the user to be authenticated) is brought into contact with the fingerprint image collection surface by the fingerprint sensor. An image of a pattern composed of a ridge and a valley line that does not contact the sampling surface is collected.

The fingerprint feature information extraction unit (matching feature information extraction unit) 120 extracts the fingerprint feature information for matching from the fingerprint image for matching input from the fingerprint information input unit 110. Specifically, it is collected as described above. From the ridge image, which is the foreground of the fingerprint image, the position information of feature points (branch points and end points) is extracted as feature information.
The reference fingerprint feature information storage unit (reference feature information storage unit) 130 stores the reference fingerprint feature information of the user of the terminal device 100 in advance.

The fingerprint feature information collation unit (collation unit) 140 compares the fingerprint feature information for collation extracted by the fingerprint feature information extraction unit 120 with the reference fingerprint feature information stored in the reference fingerprint feature information storage unit 130. By collating, it is determined whether or not the user (authenticated person) who has input the fingerprint image is a registered person, that is, personal authentication.
When the fingerprint feature information matching unit 140 determines that the user (authenticated person) who entered the fingerprint image is a registered person in advance (when the person is authenticated), the application unit 150 The information display unit 160 is activated and executes various application programs. The information display unit 160 displays various information including personal information of the user in accordance with the operation of the application unit 150.

In the terminal device 100 configured as described above, the terminal device 100 is started, personal information stored in the terminal device 100 is displayed, and various application programs using the personal information are executed. First, the user inputs a fingerprint image from the fingerprint information input unit 110.
Then, fingerprint feature information (feature point information, etc.) for collation is extracted from the input fingerprint image by the fingerprint feature information extraction unit 120, and the fingerprint feature information collation unit 140 extracts the reference fingerprint feature information for reference and reference A comparison is made with reference fingerprint feature information stored in advance in the fingerprint feature information storage unit 130 to determine whether the user (authenticated person) who has input the fingerprint image is a registered person That is, personal authentication is executed.

As a result of the personal authentication, if it is determined that the user (authenticated person) who has input the fingerprint image is a registered person in advance, the application unit 150 is activated and various application programs are executed. Along with this, various information including the user's personal information is displayed on the information display unit 160.
By the way, when lending and using a portable terminal device such as a mobile phone or a PDA to an employee in a company or the like, the terminal device is shared by a plurality of employees or by a plurality of employees. It is used while taking over. At that time, when the portable terminal device lent to an employee from a company or the like is the terminal device 100 having the personal authentication function based on the fingerprint image (biometric information) as described above, the user of the terminal device 100 ( Every time the employee is changed, it is necessary to perform a registration operation to rewrite the reference fingerprint feature information registered / stored in the reference fingerprint feature information storage unit 130 of the terminal device 100. That is, it is indispensable to manage the registrants for each terminal device 100, particularly the registration of authorized users.

At that time, the user (registrant) who should register the reference fingerprint feature information in the reference fingerprint feature information storage unit 130 of the terminal device 100 usually appears at the department (window or the like) where the registration is performed, and super A fingerprint image is input from a fingerprint sensor in the presence of a manager such as a user. Then, the reference fingerprint feature information is extracted from the fingerprint image collected by the fingerprint sensor, and the reference fingerprint feature information is registered in the reference fingerprint feature information storage unit of the terminal device.
JP 2003-274007 A

  As described above, in companies and the like, when lending and using a portable terminal device having a personal authentication function based on biometric information to an employee, the portable terminal device used by each employee can be changed, When changing the user of the terminal device to another employee, the employee must go to the registration department and perform the registration process as described above in the presence of the administrator. It is extremely troublesome for both employees and managers.

At that time, for security reasons, registration permission is granted to legitimate users, monitoring until the legitimate user completes registration, data deletion when the use of the portable terminal device is stopped (deletion of fingerprint characteristic information for reference) ) And other operations management is necessary.
At the time of personnel changes or the like, it is necessary to promptly perform the registration process as described above, and a conventional operation management method involving the appearance of a user (employee) or the presence of an administrator is not realistic.

For this reason, if an employee performs registration processing of his / her fingerprint image only once, when a portable terminal device to be used or a user of a portable terminal device is changed, a user appears or an administrator, etc. It is desired to develop a mechanism that can register regular fingerprint feature information (biometric feature information) to a portable terminal device without attending.
Furthermore, since the collation algorithm currently installed in the portable terminal device (the collation method in the fingerprint feature information collation unit 140) is different for each model, when changing the portable terminal device to be used, If the model of the portable terminal device also changes, the user must appear and be in the presence of the administrator to extract biometric feature information (fingerprint feature information) in a data format corresponding to the matching algorithm of the model. In order to collect biometric information. For this reason, even in the case as described above, the biometrics feature information in the data format corresponding to the model matching algorithm after the change is not changed without the user appearing or the administrator etc. being present. It is also desired to be able to register with a portable terminal device.

  The present invention was devised in view of such a problem, and a regular biometrics feature can be obtained without a user appearing or attending by an administrator or the like when the terminal device is changed or when the user of the terminal device is changed. In addition to registering information with the terminal device, if the model of the terminal device changes when the terminal device is changed, the matching algorithm for that model can be used without the user appearing or attending by the administrator. The object is to greatly improve the convenience of the user and administrator of the terminal device by enabling registration of biometric feature information in a corresponding data format in the changed terminal device.

  In order to achieve the above object, a biometric information management system (claim 1) of the present invention includes a terminal device having a personal authentication function based on biometric information, a server for managing the operation of the terminal device, A communication means capable of communicatively connecting the terminal device and the server to exchange information between the terminal device and the server, and the terminal device allows the user of the terminal device to An input unit for inputting metrics information, a matching feature information extraction unit for extracting matching feature information from the matching biometric information input from the input unit, and pre-stored reference feature information for the user The reference feature information storage unit, the reference feature information extracted by the reference feature information extraction unit, and the reference feature information stored in the reference feature information storage unit And a collation unit that performs personal authentication by comparing and collating with each other, and the server stores in advance registration biometric information of the same type as that used in the personal authentication function of the terminal device A biometric information storage unit; a feature information extraction unit that extracts feature information corresponding to a personal authentication function in the terminal device from the registration biometric information stored in the registration biometric information storage unit; An operation management unit that transmits the feature information extracted by the feature information extraction unit to the terminal device through the communication unit and causes the reference feature information storage unit in the terminal device to store the feature information as the reference feature information; It is characterized by being configured.

  In such a biometrics information management system, the terminal device further manages terminal identification information unique to the terminal device, and transmits a terminal identification information management unit that transmits the terminal identification information to the server through the communication means. And the server further manages the correspondence between the terminal identification information and the data format of the feature information used in the terminal device specified by the terminal identification information, and has been transmitted from the terminal device. A terminal identification information / data format correspondence management unit for managing the extraction operation by the feature information extraction unit so as to extract feature information corresponding to the data format corresponding to the terminal identification information as feature information corresponding to the personal authentication function is provided. (Claim 3).

  The biometric information management system according to the present invention (claim 2) includes the same terminal device, server and communication means as described above, and the terminal device inputs biometric information for verification by the user of the terminal device. An input unit for storing, a conversion code storage unit that stores the conversion code in advance, and the conversion biometric information input from the input unit using the conversion code stored in the conversion code storage unit A collation biometric information conversion unit that performs the conversion process, a collation feature information extraction unit that extracts collation feature information from the collation biometric information converted by the collation biometric information conversion unit, and the user The reference feature information storage unit that stores the reference feature information in advance, and the verification feature information extracted by the verification feature information extraction unit And a collation unit that compares and collates the reference feature information stored in the reference feature information storage unit to perform personal authentication, and the server has a personal authentication function in the terminal device. A registration biometric information storage unit that stores in advance the same type of registration biometric information as used, and a predetermined conversion for the registration biometric information to be stored in the registration biometric information storage unit A registration biometric information conversion unit that performs a predetermined conversion process using a code, and a feature according to a personal authentication function in the terminal device from the registration biometric information converted by the registration biometric information conversion unit Feature information extraction unit for extracting information, the predetermined conversion code, and feature information extracted by the feature information extraction unit An operation management unit that transmits the converted code and the reference feature information to the converted code storage unit and the reference feature information storage unit in the terminal device, respectively. It is characterized by being configured.

  On the other hand, the biometric information management server of the present invention (Claim 4) includes an input unit for inputting verification biometrics information, and verification feature information from the verification biometrics information input from the input unit. A matching feature information extracting unit to extract, a reference feature information storing unit for preliminarily storing reference feature information, the matching feature information extracted by the matching feature information extracting unit, and the reference feature information storing unit Operation of a terminal device having a personal authentication function based on biometrics information, comprising a verification unit that performs personal authentication by comparing and collating with the reference feature information stored in A registration server that pre-stores registration biometric information of the same type as that used in the personal authentication function of the terminal device. A feature information extraction unit that extracts feature information corresponding to a personal authentication function in the terminal device from the registration biometric information stored in the registration biometric information storage unit; An operation management unit that transmits the feature information extracted by the information extraction unit to the terminal device through the communication unit and causes the reference feature information storage unit in the terminal device to store the feature information as the reference feature information; It is characterized by being composed.

  The biometric information management server of the present invention (Claim 5) has an input unit for inputting collation biometric information, a conversion code storage unit for storing conversion codes in advance, and an input from the input unit. The biometric information for verification is converted by the verification biometric information conversion unit that performs a predetermined conversion process using the conversion code stored in the conversion code storage unit, and is converted by the verification biometric information conversion unit. Extracted by the matching feature information extracting unit that extracts the matching feature information from the matching biometric information, the reference feature information storage unit that stores the reference feature information in advance, and the matching feature information extraction unit A collation unit that compares and collates the reference feature information with the reference feature information stored in the reference feature information storage unit to perform personal authentication. Is a server for managing the operation of a terminal device having a personal authentication function based on biometrics information via a communication means, the same type as that used for the personal authentication function in the terminal device A registration biometric information storage unit that stores the registration biometric information in advance, and a predetermined conversion code for the registration biometric information to be stored in the registration biometric information storage unit, using a predetermined conversion code Feature information for extracting feature information corresponding to a personal authentication function in the terminal device from a registration biometric information conversion unit that performs conversion processing, and the registration biometric information converted by the registration biometric information conversion unit Feature information extracted by the extraction unit, the predetermined conversion code, and the feature information extraction unit An operation management unit that transmits the converted code and the reference feature information to the converted code storage unit and the reference feature information storage unit in the terminal device, respectively. It is characterized by being configured.

  In the present invention described above, a user (employee, etc.) of a terminal device first performs registration processing only once in the presence of an administrator or the like, and uses his / her biometric information (raw data) as biometric information. Registration and storage in advance in the registration biometric information storage unit of the management server. When the terminal device is changed or the user of the terminal device is changed, the biometric information management server converts the registration biometric information stored in the registration biometric information storage unit to the personal authentication function in the terminal device. The corresponding feature information is extracted, and the feature information is stored and registered as reference feature information in the reference feature information storage unit in the terminal device through the communication means.

As a result, when the terminal device is changed or when the user of the terminal device is changed, regular biometric feature information can be registered in the terminal device without the user appearing or the administrator or the like being present. In addition, the convenience of the administrator as well as the user of the terminal device is greatly improved.
In addition, when the terminal device model changes when the terminal device is changed, biometric feature information in a data format corresponding to the matching algorithm of the model is extracted and stored in the reference feature information storage unit of the changed terminal device. Since it can be stored and registered, the convenience of the user and administrator of the terminal device can be further enhanced.

Embodiments of the present invention will be described below with reference to the drawings.
[1] Description of First Embodiment FIG. 1 is a block diagram showing a functional configuration of a biometric information management system (terminal device and server) as a first embodiment of the present invention. As shown in FIG. A biometrics information management system 1A according to an embodiment includes a terminal device 100A, a server 200A, and a communication line 300.

The terminal device 100A has a personal authentication function based on biometric information (in this embodiment, a fingerprint image), and is specifically a portable terminal device such as a mobile phone or a PDA.
The server 200A functions as a biometrics information management server that manages the operation of the terminal device 100A (more specifically, reference fingerprint feature information described later registered in the terminal device 100A). Actually, as will be described later, this is realized by executing a predetermined application program (biometric information management program) on a personal computer or the like.

  The communication line (communication means) 300 is used for communication between the terminal device 100A and the server 200A so that information can be exchanged between the terminal device 100A and the server 200A. If the terminal device 100A is a mobile phone, a normal mobile phone line can be used as the communication line 300. If the terminal device 100A is a PDA or the like, a wireless LAN (Local Area Network) or a wired general telephone line can be used as the communication line 300 in addition to a normal mobile phone line. Furthermore, when both the terminal device 100A and the server 200A have an infrared communication function, the infrared communication function can be used as the communication line 300. Further, when there are dedicated connectors and cables that connect the terminal device 100A and the server 200A so that they can communicate with each other, these connectors and cables can also be used as the communication line 300.

  The terminal device 100A includes a fingerprint information input unit (input unit) 110, a fingerprint feature information extraction unit (matching feature information extraction unit) 120, a reference fingerprint feature information storage unit (reference feature information storage unit) 130, a fingerprint A feature information collation unit (collation unit) 140, an application unit 150, an information display unit 160, and a transmission / reception unit (communication means) 170 are provided. Here, the fingerprint information input unit 110, the fingerprint feature information extraction unit 120, the reference fingerprint feature information storage unit 130, the fingerprint feature information matching unit 140, the application unit 150, and the information display unit 160 are described above with reference to FIG. Since it is the same as that in the terminal device 100, its detailed description is omitted. The transmission / reception unit 170 is for exchanging information (various data) with the outside through the communication line 300, and is a basic communication function normally provided in a mobile phone, a PDA, or the like. The terminal device 100A of this embodiment uses this transmission / reception unit 170 to exchange information with the server 200A.

The server 200A includes a fingerprint image storage unit (registration biometric information storage unit) 210, a fingerprint feature information extraction unit (feature information extraction unit) 220, an operation management unit 230, and a transmission / reception unit (communication means) 240. Has been.
Here, the fingerprint image storage unit 210 stores in advance the registration biometric information itself of the same type as that used in the personal authentication function in the terminal device 100A, that is, the registration fingerprint image itself (raw data) in this embodiment. Is. In the present embodiment, the user (employee, etc.) of the terminal device 100A first performs registration processing of his / her fingerprint image only once in the presence of an administrator or the like, and the raw data of the fingerprint image is obtained. It is registered and stored in advance in the fingerprint image storage unit 210 of the biometric information management server 200A.

The fingerprint feature information extracting unit 220 uses fingerprint feature information (registered data / reference fingerprint feature information) corresponding to the personal authentication function (collation algorithm) in the terminal device 100A from the fingerprint image information stored in the fingerprint image storage unit 210. Is extracted.
The operation management unit 230 manages registration / deletion of registration data (reference fingerprint feature information) with respect to the terminal device 100A, and in particular, the fingerprint feature information extracted by the fingerprint feature information extraction unit 220 during registration. The data is transmitted to the terminal device 100A through the transmission / reception unit 240 and the communication line 300, and is stored as reference fingerprint feature information (registered data) in the reference feature information storage unit 130 in the terminal device 100A.

The transmission / reception unit 240 is for exchanging information (various data) with the outside through the communication line 300. The transmission / reception unit 240 is a function generally provided in a personal computer or the like. 240 is used to exchange information with the terminal device 100A.
Next, operations of the system 1A and the server 200A configured as described above will be described with reference to the flowchart (steps S11 to S14) shown in FIG.

  In the server 200A, the user (employee, etc.) of the terminal device 100A first performs the process of registering his / her fingerprint image only once in the presence of an administrator or the like, and saves the fingerprint image raw data as a fingerprint image. The unit 210 is registered and stored in advance. That is, the server 200A reads raw data of a registration fingerprint image input from a fingerprint sensor (not shown) (step S11), and registers and stores it in the fingerprint image storage unit 210 in advance (step S12).

  When registering the reference user's fingerprint feature information of a new user of the terminal device 100A in the terminal device 100A using the server 200A, first, the server 200A previously registers and stores it in the fingerprint image storage unit 210. A fingerprint image of the user is read out, and fingerprint feature information (registered data / reference) corresponding to a personal authentication function (collation algorithm) in the terminal device 100A is extracted from the read fingerprint image by the fingerprint feature information extraction unit 220. Fingerprint feature information) is extracted (step S13). Thereafter, the extracted fingerprint feature information is transmitted from the server 200A to the terminal device 100A through the transmission / reception unit 240 and the communication line 300 (step S14). In the terminal device 100A, the fingerprint feature information received by the transmission / reception unit 240 is registered / stored in the reference fingerprint feature information storage unit 130 as reference fingerprint feature information.

  When starting the terminal device 100A, displaying personal information stored in the terminal device 100A, or executing various application programs using the personal information, the terminal device 100 shown in FIG. Similarly, first, the user inputs a fingerprint image from the fingerprint information input unit 110, and fingerprint feature information (feature point information or the like) is extracted from the input fingerprint image by the fingerprint feature information extraction unit 120.

  Thereafter, in the fingerprint feature information matching unit 140, the extracted fingerprint feature information for comparison is compared and verified with the reference fingerprint feature information registered in the reference fingerprint feature information storage unit 130 from the server 200A as described above. A determination is made as to whether or not the user (authenticated person) who has input the fingerprint image is a registered person, that is, personal authentication is executed. As a result of the personal authentication, if it is determined that the user (authenticated person) who has input the fingerprint image is a registered person in advance, the application unit 150 is activated and various application programs are executed. Along with this, various information including the user's personal information is displayed on the information display unit 160.

  As described above, according to the biometrics information management system 1A and the server 200A of the first embodiment, the user (employee, etc.) of the terminal device 100A performs the registration process only once in the presence of the administrator. The fingerprint image (raw data) is simply registered and stored in the fingerprint image storage unit 210 of the server 200A in advance, and the user is changed when the terminal device 100A is changed or when the user of the terminal device 100A is changed. Regular fingerprint feature information can be registered in the terminal device 100A without the appearance of an administrator or the presence of an administrator, etc., greatly improving the convenience of not only the user of the terminal device 100A but also the administrator. To do.

Further, when the terminal device 100A changes when the terminal device 100A is changed, the fingerprint feature information in the data format corresponding to the matching algorithm of the model is extracted and the changed reference fingerprint feature information of the terminal device 100A. Since it can be stored and registered in the storage unit 130, the convenience of the user and the administrator of the terminal device 100A can be further enhanced.
Further, by collectively managing fingerprint images as biometric information on the server 200A side, registration / deletion of reference fingerprint feature information in the terminal device 100A and extraction / creation of reference fingerprint feature information (registration data) are performed by the server. The management can be performed collectively on the 200A side, and the convenience of the administrator can be improved.

[2] Description of Second Embodiment FIG. 3 is a block diagram showing a functional configuration of a biometrics information management system (terminal device and server) as a second embodiment of the present invention. As shown in FIG. The biometric information management system 1B according to the second embodiment includes a terminal device 100B, a server (biometrics information management server) 200B, and a communication line 300. In FIG. 3, the same reference numerals as those already described indicate the same or substantially the same parts, and detailed description thereof will be omitted.

In the terminal device 100B of the second embodiment, a data format management unit 180 is further added to the configuration of the terminal device 100A shown in FIG. The data format management unit 180 manages the data format (that is, the collation algorithm) of the fingerprint feature information used by the fingerprint feature information matching unit 140, and registers / stores the fingerprint feature information for reference from the server 200B to the storage unit 130. At this time, information on the data format is transmitted to the server 200B through the transmission / reception unit 170 and the communication line 300. At this time, along with information on the data format,
The type information of the fingerprint sensor (input unit) 110 mounted on the terminal device 100B may also be transmitted to the server 200B.

  The server 200B according to the second embodiment is configured in the same manner as the server 200A according to the first embodiment, but the server 200B according to the second embodiment operates in place of the operation management unit 230 of the server 200A. A management unit 231 is provided, and a data format management unit 250 is added. Here, the operation management unit 231 performs the same function as the operation management unit 230 of the first embodiment described above, and in the second embodiment, when the transmission / reception unit 240 receives information on the data format from the terminal device 100B, The data format management unit 250 is operated as follows. At this time, the data format management unit 250 causes the fingerprint feature information extraction unit 220 to extract fingerprint feature information (registered data / reference fingerprint feature information) corresponding to the data format transmitted from the terminal device 100B. The extraction operation of the fingerprint feature information extraction unit 220 is managed.

Next, operations of the system 1B and the server 200B configured as described above will be described with reference to the flowchart (steps S21 to S25) illustrated in FIG.
Also in the server 200B, as in the server 200A of the first embodiment, the user of the terminal device 100B first performs the registration process of his / her fingerprint image only once in the presence of an administrator or the like. Raw data is registered and stored in advance in the fingerprint image storage unit 210 (steps S21 and S22).

  When registering the reference user's fingerprint feature information of a new user of the terminal device 100B in the terminal device 100B using the server 200B, first, information regarding the data format managed by the data format management unit 180 is obtained. The server 200B transmits / notifies the server 200B via the transmission / reception unit 170 and the communication line 300 (step S23), and the server 200B registers and stores the user who should be registered in the fingerprint image storage unit 210 in advance. The fingerprint image is read out.

  Then, from the read fingerprint image, fingerprint feature information (registered data / reference) according to the data format notified from the terminal device 100B by the fingerprint feature information extracting unit 220 (that is, the matching algorithm installed in the terminal device 100B). Fingerprint feature information) is extracted (step S24). Thereafter, the extracted fingerprint feature information is transmitted from the server 200B to the terminal device 100B through the transmission / reception unit 240 and the communication line 300 (step S25). In the terminal device 100B, the fingerprint feature information received by the transmission / reception unit 240 is registered / stored in the reference fingerprint feature information storage unit 130 as reference fingerprint feature information. Note that the personal authentication operation in the terminal device 100B is the same as the operation of the terminal device 100A described above, and a description thereof will be omitted.

  As described above, according to the biometrics information management system 1B and the server 200B of the second embodiment, the same effects as those of the first embodiment can be obtained. In the system 1B of the second embodiment, the individual of the terminal device 100B can be obtained. The data format of the fingerprint feature information used in the authentication function is notified from the terminal device 100B to the server 200B, and the server 200B obtains the fingerprint feature information in the notified data format, that is, the fingerprint feature information for the matching algorithm in the terminal device 100B. It can be extracted and registered in the terminal device 100B. Therefore, even when the collation algorithm (fingerprint feature information data format) is different for each terminal device 100B, the fingerprint feature information corresponding to the collation algorithm (fingerprint feature information data format) of each terminal device 100B is surely correct. Can be extracted and registered.

[3] Description of Third Embodiment FIG. 5 is a block diagram showing a functional configuration of a biometrics information management system (terminal device and server) as a third embodiment of the present invention. As shown in FIG. The biometric information management system 1C of the third embodiment includes a terminal device 100C, a server (biometrics information management server) 200C, and a communication line 300. In FIG. 5, the same reference numerals as those already described indicate the same or substantially the same parts, and detailed description thereof is omitted.

  In the terminal device 100C of the third embodiment, a terminal ID management unit (terminal identification information management unit) 181 is further added to the configuration of the terminal device 100A illustrated in FIG. The terminal ID management unit 181 manages a terminal ID (terminal identification information; for example, a serial number registered for each terminal device 200C) unique to the terminal device 200C, and stores reference fingerprint feature information from the server 200C to the storage unit 130. When registering / saving, the terminal ID is transmitted to the server 200C through the transmission / reception unit 170 and the communication line 300.

  The server 200C according to the third embodiment is configured in the same manner as the server 200A according to the first embodiment, but the server 200C according to the third embodiment operates in place of the operation management unit 230 of the server 200A. A management unit 232 is provided, and a terminal ID / data format correspondence management unit (terminal identification information / data format correspondence management unit) 251 is added. Here, the operation management unit 232 performs the same function as the operation management unit 230 of the first embodiment described above. In the third embodiment, when the terminal ID is received from the terminal device 100C by the transmission / reception unit 240, the terminal ID / The data format correspondence management unit 251 is operated as follows.

  The terminal ID / data format correspondence management unit 251 associates a terminal ID with a data format (that is, a matching algorithm) of fingerprint feature information used in the terminal device 100C specified by each terminal ID (FIG. 7). , See FIG. 8), and the correspondence between the terminal ID and the data format is managed using this reference table. Then, when the terminal ID is received from the terminal device 100C by the transmission / reception unit 240, the terminal ID / data format correspondence management unit 251 searches the reference table with the terminal ID and reads the data format associated with the terminal ID. The fingerprint feature information extraction unit 220 manages the extraction operation so that the fingerprint feature information extraction unit 220 extracts fingerprint feature information (registered data / reference fingerprint feature information) corresponding to the read data format.

Next, operations of the system 1C and the server 200C configured as described above will be described with reference to a flowchart (steps S31 to S36) illustrated in FIG.
Also in the server 200C, as in the case of the server 200A of the first embodiment, the user of the terminal device 100C first performs registration processing of his / her fingerprint image only once in the presence of an administrator or the like. Raw data is registered and stored in advance in the fingerprint image storage unit 210 (steps S31 and S32).

When registering the reference user's fingerprint feature information of a new user of the terminal device 100C in the terminal device 100C using the server 200C, first, the terminal ID managed by the terminal ID management unit 181 is the terminal device 100C side. Is transmitted and notified to the server 200C through the transmission / reception unit 170 and the communication line 300 (step S33).
In the server 200C, when the terminal ID is received from the terminal device 100C by the transmission / reception unit 240, the terminal ID / data format correspondence management unit 251 searches the reference table with the terminal ID, and data associated with the terminal ID. The format is read (step S34), and the registration fingerprint image for the user to be registered, which is registered and stored in the fingerprint image storage unit 210 in advance, is read. Then, fingerprint feature information (registration data) corresponding to the data format read from the reference table by the fingerprint feature information extraction unit 220 (that is, the matching algorithm installed in the terminal device 100C) from the read registration fingerprint image. / Reference fingerprint characteristic information) is extracted (step S35).

  Thereafter, the extracted fingerprint feature information is transmitted from the server 200C to the terminal device 100C through the transmission / reception unit 240 and the communication line 300 (step S36). In the terminal device 100C, the fingerprint feature information received by the transmission / reception unit 240 is registered / stored in the reference fingerprint feature information storage unit 130 as reference fingerprint feature information. Note that the personal authentication operation in the terminal device 100C is the same as the operation of the terminal device 100A described above, and a description thereof will be omitted.

  Here, FIGS. 7 and 8 show an example and other examples of the reference table provided in the terminal ID / data format correspondence management unit 251 of the third embodiment, respectively. In the reference table shown in FIG. 7, the terminal ID (000001,000002,000003,000004,000005), the biometric method and the collation software format (that is, the collation algorithm / Data format of biometrics characteristic information). Further, in the reference table shown in FIG. 8, the terminal ID (000001,000002,000003,000004,000005), the biometric method adopted by the terminal device 100C specified by each terminal ID, and the data format of the biometric information And the type information of the fingerprint sensor (input unit) 110 mounted on each terminal device 100C is also associated. 7 and 8 show an example of a reference table when the terminal device 100C using any one of fingerprint image, face image, and iris image as biometric information is mixedly used in the system 1C. Yes. For this reason, in the reference tables shown in FIGS. 7 and 8, information such as fingerprints, faces, and irises is registered as a biometric method.

  Thus, according to the biometrics information management system 1C and the server 200C of the third embodiment, the same effects as those of the first embodiment can be obtained. In the system 1C of the third embodiment, the terminal of the terminal device 100C The terminal device 100C notifies the server 200C of the ID, and the server 200C extracts the fingerprint feature information in the data format associated with the notified terminal ID, that is, the fingerprint feature information for the matching algorithm in the terminal device 100C, and It can be registered in the device 100C. Therefore, as in the second embodiment mobile phone, even if the collation algorithm (fingerprint feature information data format) is different for each terminal device 100C, the fingerprint corresponding to the collation algorithm (fingerprint feature information data format) of each terminal device 100C. Feature information can be extracted and registered without error.

[4] Description of Fourth Embodiment FIG. 9 is a block diagram showing a functional configuration of a biometric information management system (terminal device and server) as a fourth embodiment of the present invention. As shown in FIG. The biometric information management system 1D of the fourth embodiment includes a terminal device 100D, a server (biometrics information management server) 200D, and a communication line 300. In FIG. 9, the same reference numerals as those already described indicate the same or substantially the same parts, and detailed description thereof will be omitted.

The terminal device 100D of the fourth embodiment is configured in the same manner as the terminal device 100C shown in FIG. 5, and in this fourth embodiment, the remote control is performed remotely by the server 200D through the communication line 300 and the transmission / reception unit 170. It has a control function.
The server 200D according to the fourth embodiment is configured in the same manner as the server 200C according to the third embodiment. However, in the server 200D according to the fourth embodiment, operation management is performed instead of the operation management unit 232 of the server 200C. A unit 233 is provided, and a remote control function for remotely controlling the terminal device 100D through the transmission / reception unit 240 and the communication line 300 is provided. With this remote control function, the operation management unit 233 of the server 200D can remotely control registration / deletion of reference fingerprint feature information (registration data) in the terminal device 100D and start / stop of use of the terminal device 100D. It can be done.

Next, the remote control operation of the system 1D configured as described above will be described with reference to the flowcharts shown in FIGS.
FIG. 10 is a flowchart (steps S41 to S47) for explaining the remote control operation at the time of registering the feature information of the system 1D. When registering the fingerprint feature information for reference by remote control, as shown in FIG. First, mutual authentication is performed between the server 200D and the terminal device 100D (step S41). Examples of the mutual authentication method include mutual authentication based on a public key method, mutual authentication based on secret information, and device authentication based on ID (identification information). If mutual authentication fails, the server 200D sends an error notification.

After the mutual authentication is completed, a registration command is issued from the server 200D to the terminal device 100D to be registered through the communication line 300 (step S42), and is managed by the terminal ID management unit 181 from the terminal device 100D side that has received this registration command. Terminal ID is transmitted / notified to server 200D through transmission / reception unit 170 and communication line 300 (step S43).
Thereafter, as in the third embodiment, in the server 200D, the terminal ID / data format correspondence management unit 251 searches the reference table with the terminal ID notified from the terminal device 100D and associates it with the terminal ID. The data format is read (step S44), and the fingerprint image for the user to be registered, which is registered and stored in the fingerprint image storage unit 210 in advance, is read. Then, fingerprint feature information (registered data / reference) corresponding to the data format read from the reference table by the fingerprint feature information extracting unit 220 (that is, the matching algorithm installed in the terminal device 100D) from the read fingerprint image. Fingerprint feature information) is extracted (step S45).

  Thereafter, the extracted fingerprint feature information is transmitted from the server 200D to the terminal device 100D through the transmission / reception unit 240 and the communication line 300 (step S46). In the terminal device 100D, the fingerprint feature information received by the transmission / reception unit 240 is registered and stored in the reference fingerprint feature information storage unit 130 as reference fingerprint feature information (step S47). Note that the personal authentication operation in the terminal device 100D is the same as the operation of the terminal device 100A described above, and a description thereof will be omitted.

  FIG. 11 is a flowchart (steps S51 to S53) for explaining the remote control operation at the time of deleting feature information of the system 1D. When the reference fingerprint feature information is deleted by remote control, as shown in FIG. First, as in the registration, mutual authentication is performed between the server 200D and the terminal device 100D (step S51), and then a deletion request command is issued from the server 200D to the terminal device 100D to be registered through the communication line 300 ( In step S52), in the terminal device 100D that has received this deletion request command, the reference fingerprint feature information registered and stored in the reference fingerprint feature information storage unit 130 is deleted (step S53).

  FIG. 12 is a flowchart (steps S61 to S63) for explaining the remote control operation at the start of use of the system 1D. When the use of the terminal device 100D is started by remote control, as shown in FIG. Similarly to the registration, after mutual authentication is performed between the server 200D and the terminal device 100D (step S61), a usage start command is issued from the server 200D to the registration target terminal device 100D through the communication line 300 (step S62). In the terminal device 100D that has received this use start command, the reference fingerprint feature information registered and stored in the reference fingerprint feature information storage unit 130 is switched and set to a state where it can be used (that is, individual authentication is possible). (Step S63).

  FIG. 13 is a flowchart (steps S71 to S73) for explaining the remote control operation when the use of the system 1D is stopped. When the use of the terminal device 100D is stopped by the remote control, as shown in FIG. Similarly to the registration, after mutual authentication is performed between the server 200D and the terminal device 100D (step S71), a use stop command is issued from the server 200D to the registration target terminal device 100D through the communication line 300 (step S72). In the terminal device 100D that has received this use stop command, the reference fingerprint feature information registered / stored in the reference fingerprint feature information storage unit 130 is switched / set to an unusable state (that is, personal authentication is not possible). (Step S73).

  Thus, according to the biometrics information management system 1D and the server 200D of the fourth embodiment, the same effects as those of the first to third embodiments can be obtained. In the system 1D of the fourth embodiment, the server 200D From the side, registration / deletion of reference fingerprint feature information (registration data) in the terminal device 100D and start / stop of use of the terminal device 100D can be remotely controlled. The feature information need not be registered at all, and the management cost of system operation can be greatly reduced, and the possibility of unauthorized registration can be surely eliminated and the reliability can be improved.

[5] Description of Fifth Embodiment FIG. 14 is a block diagram showing a functional configuration of a biometric information management system (terminal device and server) as a fifth embodiment of the present invention. As shown in FIG. A biometric information management system 1E according to the fifth embodiment includes a terminal device 100E, a server (biometrics information management server) 200E, and a communication line 300. In FIG. 14, the same reference numerals as those already described indicate the same or substantially the same parts, and detailed description thereof will be omitted.

  Similarly to the terminal device 100D of the fourth embodiment, the terminal device 100E of the fifth embodiment has a remote control function that is remotely controlled by the server 200E through the communication line 300 and the transmission / reception unit 170, as shown in FIG. Further, a conversion code storage unit 111 and a fingerprint image conversion unit (collation biometric information conversion unit) 112 are added to the configuration of the terminal device 100D.

  Here, the conversion code storage unit 111 stores a predetermined conversion code in advance, and this conversion code is set for each terminal device 100E by a user or an administrator. The fingerprint image conversion unit 112 uses a conversion code stored in the conversion code storage unit 111 for the verification fingerprint image input from the fingerprint information input unit 110 to perform a predetermined conversion process (a deformation process that distorts the fingerprint image). Is to be applied. The fingerprint image (biometrics image) deformation process is a process of deforming a fingerprint image by a predetermined function, and the conversion code is a code related to the parameter of the function.

  In the terminal device 100E according to the fifth embodiment, the fingerprint feature information extraction unit 120 extracts collation fingerprint feature information from the collation fingerprint image converted by the fingerprint image conversion unit 112. Further, as will be described later, the reference fingerprint feature information storage unit 130 is extracted from the fingerprint image that has been subjected to the above conversion processing by the same conversion code as the reference fingerprint feature information of the user of the terminal device 100E. Registered and stored in advance from the server 200E. The fingerprint feature information collation unit 140 then collates the fingerprint feature information extracted from the deformed fingerprint image by the fingerprint feature information extraction unit 120 and the reference fingerprint feature stored in the reference fingerprint feature information storage unit 130. Whether the user (authenticated person) who entered the fingerprint image is a registered person in advance by comparing / collating the information (extracted from the transformed fingerprint image on the server 200E side) Determination, that is, personal authentication is performed.

  The server 200E of the fifth embodiment is configured in the same manner as the server 200D of the fourth embodiment, and has a remote control function for remotely controlling the terminal device 100E through the transmission / reception unit 240 and the communication line 300. In the server 200E of the fifth embodiment, an operation management unit 234 is provided instead of the operation management unit 233 of the server 200D, and a fingerprint image conversion unit (registration biometric information conversion unit) 211 and terminal ID / data format / A conversion code correspondence management unit (terminal identification information / data format / conversion code correspondence management unit) 252 is added.

  Here, the operation management unit 234 manages registration data (reference fingerprint feature information) and conversion code registration / deletion for the terminal device 100E. In particular, at the time of registration, a conversion process for a fingerprint image is described later. And the fingerprint feature information (registered data) extracted by the fingerprint feature information extraction unit 220 as described later is transmitted to the terminal device 100E through the transmission / reception unit 240 and the communication line 300, and this terminal device 100E. Are stored in the conversion code storage unit 111 and the reference feature information storage unit 130, respectively. Further, when the operation management unit 234 receives the terminal ID from the terminal device 100E by the transmission / reception unit 240, the operation management unit 234 operates the terminal ID / data format / conversion code correspondence management unit 252 as follows.

  The terminal ID / data format / conversion code correspondence management unit 252 associates the terminal ID with the data format (that is, the collation algorithm) of fingerprint characteristic information and the conversion code used in the terminal device 200C specified by each terminal ID. A reference table (see FIG. 16) for managing the correspondence between the terminal ID, the data format, and the conversion code. Then, when the terminal ID is received from the terminal device 100E by the transmission / reception unit 240, the terminal ID / data format / conversion code correspondence management unit 252 searches the reference table with the terminal ID, and data associated with the terminal ID. The fingerprint feature information extraction unit 220 performs the extraction operation so that the fingerprint feature information (registration data / reference fingerprint feature information) corresponding to the read data format is extracted by the fingerprint feature information extraction unit 220. to manage. The terminal ID / data format / conversion code correspondence management unit 252 registers the conversion code (registered user) and the conversion code in the reference table (see FIG. 16) when registering the reference fingerprint characteristic information and the conversion code. The correspondence between the conversion code and the terminal ID is managed by associating the registered terminal ID of the terminal device 100E.

  The fingerprint image conversion unit 211 performs a predetermined conversion process on the registration fingerprint image to be stored in the fingerprint image storage unit 210 by using a predetermined conversion code. The fingerprint image storage of the fifth embodiment In the unit 210, the registration fingerprint image (transformed fingerprint image) that has been subjected to the conversion process in advance by the fingerprint image conversion unit 211 is stored in correspondence with the conversion code used for the conversion process. It has become.

In the server 200E, the fingerprint feature information extraction unit 220 uses the fingerprint feature information (registration) corresponding to the personal authentication function (collation algorithm) in the terminal device 100E from the transformed fingerprint image stored in the fingerprint image storage unit 210. Data / reference fingerprint feature information) is extracted.
Further, the remote control function provided in the server 200E of the fifth embodiment allows the operation management unit 234 of the server 200E to register / delete reference fingerprint feature information (registration data) and conversion codes in the terminal device 100E, and The use start / use stop of the terminal device 100E can be remotely controlled.

Next, operations of the system 1E and the server 200E configured as described above will be described with reference to a flowchart (steps S81 to S87) illustrated in FIG.
In the server 200E, a user (employee, etc.) of the terminal device 100E first performs the process of reading his / her fingerprint image only once in the presence of an administrator or the like, and the process of reading the conversion code (step). S81). Then, the raw data of the read fingerprint image is subjected to conversion processing (deformation processing) using the conversion code simultaneously read by the fingerprint image conversion unit 211, and the converted fingerprint image (deformation processed fingerprint image) Is stored in the fingerprint image storage unit 210 as a fingerprint image for registration, and the conversion code is also stored in association with the fingerprint image (step S82).

When registering the reference user's fingerprint feature information of a new user of the terminal device 100E in the terminal device 100E using the server 200E, first, the terminal ID managed by the terminal ID management unit 181 is the terminal device 100E side. Is transmitted and notified to the server 200E through the transmission / reception unit 170 and the communication line 300 (step S83).
In the server 200E, when the terminal ID is received from the terminal device 100E by the transmission / reception unit 240, the terminal ID / data format / conversion code correspondence management unit 252 searches the reference table with the terminal ID and associates the terminal ID with the terminal ID. The read data format is read (step S84), and the registration fingerprint image (deformed fingerprint image) for the user to be registered, which is registered and stored in advance in the fingerprint image storage unit 210, is read. Then, the fingerprint feature information (registration) corresponding to the data format read from the reference table by the fingerprint feature information extraction unit 220 (that is, the matching algorithm installed in the terminal device 100E) from the read processed fingerprint image. Data / reference fingerprint characteristic information) is extracted (step S85).

  Then, the fingerprint feature information extracted as described above and the conversion code used for the deformation processing of the registration fingerprint image from which the fingerprint feature information is extracted are transmitted from the server 200E through the transmission / reception unit 240 and the communication line 300. It is transmitted to the terminal device 100E (step S86). In the terminal device 100E, the fingerprint feature information received by the transmission / reception unit 240 is registered / stored in the reference fingerprint feature information storage unit 130 as reference fingerprint feature information, and the conversion code received by the transmission / reception unit 240 is It is registered and stored in the conversion code storage unit 111 (step S87).

  FIG. 16 shows an example of the reference table provided in the terminal ID / data format / conversion code correspondence management unit 252 of the fifth embodiment. In the reference table shown in FIG. 16, the terminal ID (000001,000002,000003,000004,000005), the biometric method and the matching software format (that is, the matching algorithm / And a conversion code registered in each terminal device 100E and a registered user number for the user of the terminal device 100E are associated with each other. 16, as in the reference tables shown in FIGS. 7 and 8, the present invention is applied to a system 1 </ b> E in which a terminal device 100 </ b> E that uses any one of a fingerprint image, a face image, and an iris image is used as biometric information. An example lookup table is shown. For this reason, in the reference table shown in FIG. 16, information such as a fingerprint, a face, and an iris is registered as a biometric method. Further, the reference table shown in FIG. 16 shows an example in which a plurality of users (users) are registered with different conversion codes in the terminal device 100E specified by the terminal ID 000001.

Next, the verification operation in the terminal device 100E will be described with reference to the flowchart (steps S91 to S95) shown in FIG.
When starting the terminal device 100E, displaying personal information stored in the terminal device 100E, or executing various application programs using the personal information, the user first uses the terminal device 100E. The fingerprint image for verification input from the fingerprint information input unit 110 is read (step S91). Then, the fingerprint image conversion unit 112 performs a predetermined conversion process (deformation process) on the read fingerprint image for verification using the conversion code registered in the conversion code storage unit 111 (step S92). The fingerprint feature information extraction unit 120 extracts the fingerprint feature information for verification from the deformed fingerprint image for verification (step S93).

  Thereafter, the fingerprint feature information matching unit 140 compares and compares the extracted fingerprint feature information for matching with the reference fingerprint feature information registered in the reference fingerprint feature information storage unit 130 from the server 200E as described above ( In step S94), a determination is made as to whether or not the user (authenticated person) who has input the fingerprint image is a registered person in advance, that is, personal authentication is executed. If a match of a predetermined amount or more is found in the comparison / collation result in step S94, it is determined that the user (authenticated person) who entered the fingerprint image is a registered person in advance (step S95). The unit 150 is activated and various application programs are executed. Along with this, various information including the user's personal information is displayed on the information display unit 160.

  Thus, according to the biometrics information management system 1E and the server 200E of the fifth embodiment, the same effects as those of the first to fourth embodiments can be obtained. In the system 1E of the fifth embodiment, the server 200E In the fingerprint image storage unit 210 on the side, the fingerprint image of the user is stored in a state in which a predetermined conversion is performed with a conversion code instead of raw data, that is, as a deformed fingerprint image. Even if the fingerprint image in the storage unit 210 leaks, the fingerprint image cannot be abused, and personal privacy can be reliably protected.

  At this time, on the terminal device 100E side, when the reference fingerprint feature information is registered, the conversion code used in the conversion process for the fingerprint image from which the reference fingerprint feature information is extracted is also stored in the conversion code storage unit 111. It is registered. Therefore, when personal authentication is performed by the terminal device 100E, the fingerprint image conversion unit 112 uses the conversion code registered in the conversion code storage unit 111 to perform a predetermined check on the fingerprint image for collation from the fingerprint information input unit 110. Since the fingerprint characteristic information for verification is extracted after performing the conversion process, it is possible to perform personal authentication without any problem.

In the fifth embodiment, the raw data of the fingerprint image is converted using the conversion code in the server 200E. However, the conversion process using the conversion code is performed in a dedicated server other than the server 200E. Then, the converted fingerprint image (deformed fingerprint image) may be stored in the fingerprint image storage unit 210 in association with the conversion code.
[6] Others The present invention is not limited to the above-described embodiments, and various modifications can be made without departing from the spirit of the present invention.

  For example, in the above-described embodiment, the case where the biometric information is a fingerprint image has been described. However, the present invention is not limited to this, and the biometric information includes an iris pattern image, A face image, palm print image, blood vessel pattern image, retinal pattern image, voice pattern image, signature image, or the like may be used, or two or more types of biometric information may be used in combination.

  In the above-described embodiment, the case where the terminal devices 100A, 100B, 100C, 100D, and 100E are portable terminal devices such as mobile phones and PDAs has been described. However, the present invention is not limited to this. In addition to various other portable electronic information terminals (such as notebook personal computers) and portable terminal devices, the present invention can be applied to fixed terminal devices such as personal computers in the same manner as described above, and the same effects as those of the above-described embodiment can be obtained. .

  Furthermore, the servers 200A, 200B, 200C, 200D, and 200E in the above-described embodiments are realized by executing a predetermined application program (biometrics information management program) on a personal computer, for example. That is, the above-described fingerprint image storage unit 210 is realized by a hard disk or the like in a personal computer, and the above-described fingerprint image conversion unit 211, fingerprint feature information extraction unit 220, operation management units 230 to 234, data format management unit 250, terminal ID. A computer (including a CPU, an information processing apparatus, and various terminals) has predetermined functions (a function of all or a part of each unit) as the / data format correspondence management unit 251 and the terminal ID / data format / conversion code correspondence management unit 252 This is realized by executing the application program (biometrics information management program).

  The program is provided in a form recorded on a computer-readable recording medium such as a flexible disk, CD-ROM, CD-R, CD-RW, or DVD. In this case, the computer reads the biometric information management program from the recording medium, transfers it to the internal storage device or the external storage device, and uses it. Further, the program may be recorded in a storage device (recording medium) such as a magnetic disk, an optical disk, or a magneto-optical disk, and provided from the storage device to a computer via a communication line.

  Here, the computer is a concept including hardware and an OS (operating system), and means hardware operating under the control of the OS. Further, when the OS is unnecessary and the hardware is operated by the application program alone, the hardware itself corresponds to the computer. The hardware includes at least a microprocessor such as a CPU and means for reading a program recorded on a recording medium. An application program as a control program for the biometrics information management storage system is stored in the above-described computer by using a fingerprint image conversion unit 211, a fingerprint feature information extraction unit 220, operation management units 230 to 234, a data format management unit 250, and a terminal. The program code for realizing the functions as the ID / data format correspondence management unit 251 and the terminal ID / data format / conversion code correspondence management unit 252 is included. Also, some of the functions may be realized by the OS instead of the application program.

  In addition to the above-mentioned flexible disk, CD-ROM, CD-R, CD-RW, DVD, magnetic disk, optical disk, magneto-optical disk, IC card, ROM cartridge, magnetic tape, punch card, Various computer-readable media such as an internal storage device of a computer (memory such as RAM and ROM), an external storage device, and a printed matter on which a code such as a barcode is printed can also be used.

[7] Appendix (Appendix 1)
A terminal device having a personal authentication function based on biometric information;
A server for managing the operation of the terminal device;
Communication means capable of communicably connecting between the terminal device and the server to exchange information between the terminal device and the server;
The terminal device
An input unit for the user of the terminal device to input collation biometric information;
A matching feature information extracting unit that extracts matching feature information from the matching biometric information input from the input unit;
A reference feature information storage unit for storing the user reference feature information in advance;
A collation unit that compares and collates the collation feature information extracted by the collation feature information extraction unit with the reference feature information stored in the reference feature information storage unit to perform personal authentication; Configured
The server
A biometric information storage unit for registration for preliminarily storing biometric information for registration of the same type as that used in the personal authentication function in the terminal device;
A feature information extraction unit that extracts feature information corresponding to a personal authentication function in the terminal device from the registration biometric information stored in the registration biometric information storage unit;
An operation management unit that transmits the feature information extracted by the feature information extraction unit to the terminal device through the communication unit and causes the reference feature information storage unit in the terminal device to store the feature information as the reference feature information; A biometrics information management system characterized by being configured.

(Appendix 2)
A terminal device having a personal authentication function based on biometric information;
A server for managing the operation of the terminal device;
Communication means capable of communicably connecting between the terminal device and the server to exchange information between the terminal device and the server;
The terminal device
An input unit for the user of the terminal device to input collation biometric information;
A conversion code storage unit for storing the conversion code in advance;
A biometric information conversion unit for collation that performs a predetermined conversion process using the conversion code stored in the conversion code storage unit for the biometric information for collation input from the input unit;
A feature information extraction unit for verification that extracts feature information for verification from the biometric information for verification converted by the biometrics information conversion unit for verification;
A reference feature information storage unit for storing the user reference feature information in advance;
A collation unit that compares and collates the collation feature information extracted by the collation feature information extraction unit with the reference feature information stored in the reference feature information storage unit to perform personal authentication; Configured
The server
A biometric information storage unit for registration for preliminarily storing biometric information for registration of the same type as that used in the personal authentication function in the terminal device;
A registration biometric information conversion unit that performs a predetermined conversion process using a predetermined conversion code on the registration biometric information to be stored in the registration biometric information storage unit;
A feature information extraction unit that extracts feature information corresponding to a personal authentication function in the terminal device from the registration biometric information converted by the registration biometric information conversion unit;
The predetermined conversion code and the feature information extracted by the feature information extraction unit are transmitted to the terminal device through the communication means, and the conversion code storage unit and the reference feature information storage in the terminal device, respectively. A biometrics information management system comprising: an operation management unit that stores the conversion code and the reference feature information in a unit.

(Appendix 3)
The terminal device further includes:
A data format management unit configured to manage the data format of the feature information used in the verification unit and transmit the data format to the server through the communication means;
The server further
A data format management unit configured to manage an extraction operation by the feature information extraction unit so as to extract feature information corresponding to the data format transmitted from the terminal device as feature information corresponding to the personal authentication function. The biometrics information management system according to Supplementary Note 1 or Supplementary Note 2, wherein

(Appendix 4)
The terminal device further includes:
A terminal identification information management unit that manages terminal identification information unique to the terminal device and transmits the terminal identification information to the server through the communication means;
The server further
Managing the correspondence between the terminal identification information and the data format of the feature information used in the terminal device specified by the terminal identification information, and according to the data format corresponding to the terminal identification information transmitted from the terminal device A terminal identification information / data format correspondence management unit that manages an extraction operation by the feature information extraction unit so as to extract feature information as feature information corresponding to the personal authentication function is provided. The biometric information management system according to appendix 1.

(Appendix 5)
The terminal device further includes:
A terminal identification information management unit that manages terminal identification information unique to the terminal device and transmits the terminal identification information to the server through the communication means;
The server further
The conversion code corresponding to the terminal identification information transmitted from the terminal device, managing the correspondence between the terminal identification information and the data format and conversion code of the feature information used in the terminal device specified by the terminal identification information Is used as the predetermined conversion code to manage the conversion operation by the registration biometric information conversion unit so that the registration biometric information is converted, and the terminal identification information transmitted from the terminal device Terminal identification information / data format / conversion code correspondence management unit for managing the extraction operation by the feature information extraction unit so as to extract feature information corresponding to the data format corresponding to the personal authentication function as feature information The biometrics information management system according to appendix 2, wherein the system is configured as described above.

(Appendix 6)
The terminal device has a remote control function that is remotely controlled by the server through the communication means,
The biometrics information management system according to any one of appendix 1 to appendix 5, wherein the server has a remote control function of remotely controlling the terminal device through the communication unit.

(Appendix 7)
Note that the server remotely controls registration / deletion of the reference feature information or the conversion code and start / stop of use of the terminal device by the remote control function. 6. The biometric information management system according to 6.
(Appendix 8)
The terminal device is a portable electronic information terminal or a mobile phone, and a communication line connected to the terminal device is used as the communication means between the terminal device and the server. The biometric information management system according to any one of appendix 7.

(Appendix 9)
The biometrics information management system according to any one of appendix 1 to appendix 7, wherein an infrared communication function provided for each of the terminal device and the server is used as the communication unit.
(Appendix 10)
The biometric information is at least one of a fingerprint image, an iris pattern image, a face image, a palm print image, a blood vessel pattern image, a retinal pattern image, a voice pattern image, and a signature image. The biometric information management system according to any one of appendix 9.

(Appendix 11)
An input unit for inputting biometrics information for matching, a feature information extracting unit for matching that extracts matching feature information from the biometrics information for matching input from the input unit, and pre-stored reference feature information Comparing and collating the reference feature information storage unit, the verification feature information extracted by the verification feature information extraction unit, and the reference feature information stored in the reference feature information storage unit A server for managing the operation of a terminal device having a personal authentication function based on biometric information, configured with a verification unit that performs personal authentication, via communication means,
A biometric information storage unit for registration for preliminarily storing biometric information for registration of the same type as that used in the personal authentication function in the terminal device;
A feature information extraction unit that extracts feature information corresponding to a personal authentication function in the terminal device from the registration biometric information stored in the registration biometric information storage unit;
An operation management unit that transmits the feature information extracted by the feature information extraction unit to the terminal device through the communication unit and causes the reference feature information storage unit in the terminal device to store the feature information as the reference feature information; A biometrics information management server characterized by being configured.

(Appendix 12)
An input unit for inputting collation biometric information, a conversion code storage unit that stores conversion codes in advance, and the collation biometric information input from the input unit are stored in the conversion code storage unit. A matching biometric information conversion unit that performs a predetermined conversion process using the conversion code, and a matching biometric information that is extracted by the matching biometric information converted by the matching biometric information conversion unit A feature information extraction unit; a reference feature information storage unit that stores reference feature information in advance; and the matching feature information extracted by the matching feature information extraction unit and the reference feature information storage unit. A personal authentication device using biometric information, comprising: a collation unit for comparing and collating the reference feature information with the reference feature information for personal authentication The operation of the terminal device having the a server for managing via the communication means,
A biometric information storage unit for registration for preliminarily storing biometric information for registration of the same type as that used in the personal authentication function in the terminal device;
A registration biometric information conversion unit that performs a predetermined conversion process using a predetermined conversion code on the registration biometric information to be stored in the registration biometric information storage unit;
A feature information extraction unit that extracts feature information corresponding to a personal authentication function in the terminal device from the registration biometric information converted by the registration biometric information conversion unit;
The predetermined conversion code and the feature information extracted by the feature information extraction unit are transmitted to the terminal device through the communication means, and the conversion code storage unit and the reference feature information storage in the terminal device, respectively. A biometrics information management server, comprising: an operation management unit that stores the conversion code and the reference feature information in a unit.

(Appendix 13)
The data format of the feature information used in the verification unit of the terminal device is received from the terminal device through the communication means, and the feature information corresponding to the received data format is used as the feature information corresponding to the personal authentication function. 13. The biometrics information management server according to appendix 11 or appendix 12, wherein the biometrics information management server is configured to include a data format management unit that manages an extraction operation by the feature information extraction unit so as to perform extraction.

(Appendix 14)
Data format corresponding to the terminal identification information transmitted from the terminal device through the communication means, managing the correspondence between the terminal identification information and the data format of the feature information used in the terminal device specified by the terminal identification information A terminal identification information / data format correspondence management unit that manages an extraction operation by the feature information extraction unit so as to extract feature information corresponding to the personal authentication function as feature information. The biometrics information management server according to appendix 11.

(Appendix 15)
The terminal identification information is managed in correspondence with the data format and conversion code of the feature information used in the terminal device specified by the terminal identification information, and the terminal identification information transmitted from the terminal device through the communication means A terminal identification information / data format / conversion code correspondence management unit for managing an extraction operation by the feature information extraction unit so as to extract feature information corresponding to the corresponding data format as feature information corresponding to the personal authentication function is provided. The biometrics information management server according to appendix 12, which is configured.

(Appendix 16)
The biometrics information management server according to any one of appendix 11 to appendix 15, wherein the server has a remote control function of remotely controlling the terminal device through the communication unit.
(Appendix 17)
The server is configured to remotely control the registration / deletion of the reference feature information or the conversion code and the start / stop of use of the terminal device by the remote control function. 16. The biometric information management server according to 16.

(Appendix 18)
The biometrics information management according to any one of appendix 11 to appendix 17, characterized in that a communication line connected to the terminal device is used as the communication means between the terminal device and the server. server.
(Appendix 19)
The biometrics information management server according to any one of appendices 11 to 17, wherein an infrared communication function provided for each of the terminal device and the server is used as the communication unit.

(Appendix 20)
The biometric information is at least one of a fingerprint image, an iris pattern image, a face image, a palm print image, a blood vessel pattern image, a retinal pattern image, a voice pattern image, and a signature image. The biometric information management server according to any one of appendix 19.

It is a block diagram which shows the function structure of the biometrics information management system (a terminal device and a server) as 1st Embodiment of this invention. It is a flowchart for demonstrating operation | movement of the system shown in FIG. It is a block diagram which shows the function structure of the biometric information management system (a terminal device and a server) as 2nd Embodiment of this invention. It is a flowchart for demonstrating operation | movement of the system shown in FIG. It is a block diagram which shows the function structure of the biometrics information management system (a terminal device and a server) as 3rd Embodiment of this invention. It is a flowchart for demonstrating operation | movement of the system shown in FIG. It is a figure which shows an example of the reference table of 3rd Embodiment. It is a figure which shows the other example of the reference table of 3rd Embodiment. It is a block diagram which shows the function structure of the biometric information management system (a terminal device and a server) as 4th Embodiment of this invention. It is a flowchart for demonstrating the remote control operation | movement (registration) of the system shown in FIG. 10 is a flowchart for explaining a remote control operation (deletion) of the system shown in FIG. 9. It is a flowchart for demonstrating the remote control operation | movement (utilization start) of the system shown in FIG. It is a flowchart for demonstrating the remote control operation | movement (utilization stop) of the system shown in FIG. It is a block diagram which shows the function structure of the biometrics information management system (a terminal device and a server) as 5th Embodiment of this invention. It is a flowchart for demonstrating operation | movement of the system shown in FIG. It is a figure which shows an example of the reference table of 5th Embodiment. It is a flowchart for demonstrating the collation operation | movement in the terminal device shown in FIG. It is a block diagram which shows the function structure (especially structure concerning a personal authentication function) of the general terminal device which has the personal authentication function by biometric information.

Explanation of symbols

1A, 1B, 1C, 1D, 1E Biometrics information management system 100, 100A, 100B, 100C, 100D, 100E Terminal device 110 Fingerprint information input unit (input unit)
111 Conversion Code Storage Unit 112 Fingerprint Image Conversion Unit (Verification Biometric Information Conversion Unit)
120 fingerprint feature information extraction unit (matching feature information extraction unit)
130 Reference fingerprint feature information storage unit (reference feature information storage unit)
140 Fingerprint feature information collation unit (collation unit)
150 Application section 160 Information display section 170 Transmission / reception section (communication means)
180 Data format management unit 181 Terminal ID management unit (terminal identification information management unit)
200A, 200B, 200C, 200D, 200E Server (Biometric Information Management Server)
210 Fingerprint image storage (registration biometrics information storage)
211 Fingerprint Image Conversion Unit (Registration Biometric Information Conversion Unit)
220 fingerprint feature information extraction unit (feature information extraction unit)
230, 231, 232, 233, 234 Operation management unit 240 Transmission / reception unit (communication means)
250 Data format management unit 251 Terminal ID / data format correspondence management unit (terminal identification information / data format correspondence management unit)
252 Terminal ID / data format / conversion code correspondence management unit (terminal identification information / data format / conversion code correspondence management unit)
300 Communication line (communication means)

Claims (5)

A terminal device having a personal authentication function based on biometric information;
A server for managing the operation of the terminal device;
Communication means capable of communicably connecting between the terminal device and the server to exchange information between the terminal device and the server;
The terminal device
An input unit for the user of the terminal device to input collation biometric information;
A matching feature information extracting unit that extracts matching feature information from the matching biometric information input from the input unit;
A reference feature information storage unit for storing the user reference feature information in advance;
A collation unit that compares and collates the collation feature information extracted by the collation feature information extraction unit with the reference feature information stored in the reference feature information storage unit to perform personal authentication; Configured
The server
A biometric information storage unit for registration for preliminarily storing biometric information for registration of the same type as that used in the personal authentication function in the terminal device;
A feature information extraction unit that extracts feature information corresponding to a personal authentication function in the terminal device from the registration biometric information stored in the registration biometric information storage unit;
An operation management unit that transmits the feature information extracted by the feature information extraction unit to the terminal device through the communication unit and causes the reference feature information storage unit in the terminal device to store the feature information as the reference feature information; A biometrics information management system characterized by being configured. A terminal device having a personal authentication function based on biometric information;
A server for managing the operation of the terminal device;
Communication means capable of communicably connecting between the terminal device and the server to exchange information between the terminal device and the server;
The terminal device
An input unit for the user of the terminal device to input collation biometric information;
A conversion code storage unit for storing the conversion code in advance;
A biometric information conversion unit for collation that performs a predetermined conversion process using the conversion code stored in the conversion code storage unit for the biometric information for collation input from the input unit;
A feature information extraction unit for verification that extracts feature information for verification from the biometric information for verification converted by the biometrics information conversion unit for verification;
A reference feature information storage unit for storing the user reference feature information in advance;
A collation unit that compares and collates the collation feature information extracted by the collation feature information extraction unit with the reference feature information stored in the reference feature information storage unit to perform personal authentication; Configured
The server
A biometric information storage unit for registration for preliminarily storing biometric information for registration of the same type as that used in the personal authentication function in the terminal device;
A registration biometric information conversion unit that performs a predetermined conversion process using a predetermined conversion code on the registration biometric information to be stored in the registration biometric information storage unit;
A feature information extraction unit that extracts feature information corresponding to a personal authentication function in the terminal device from the registration biometric information converted by the registration biometric information conversion unit;
The predetermined conversion code and the feature information extracted by the feature information extraction unit are transmitted to the terminal device through the communication means, and the conversion code storage unit and the reference feature information storage in the terminal device, respectively. A biometrics information management system comprising: an operation management unit that stores the conversion code and the reference feature information in a unit. The terminal device further includes:
A terminal identification information management unit that manages terminal identification information unique to the terminal device and transmits the terminal identification information to the server through the communication means;
The server further
Managing the correspondence between the terminal identification information and the data format of the feature information used in the terminal device specified by the terminal identification information, and according to the data format corresponding to the terminal identification information transmitted from the terminal device A terminal identification information / data format correspondence management unit that manages an extraction operation by the feature information extraction unit so as to extract feature information as feature information corresponding to the personal authentication function is provided. The biometric information management system according to claim 1. An input unit for inputting biometrics information for matching, a feature information extracting unit for matching that extracts matching feature information from the biometrics information for matching input from the input unit, and pre-stored reference feature information Comparing and collating the reference feature information storage unit, the verification feature information extracted by the verification feature information extraction unit, and the reference feature information stored in the reference feature information storage unit A server for managing the operation of a terminal device having a personal authentication function based on biometric information, configured with a verification unit that performs personal authentication, via communication means,
A biometric information storage unit for registration for preliminarily storing biometric information for registration of the same type as that used in the personal authentication function in the terminal device;
A feature information extraction unit that extracts feature information corresponding to a personal authentication function in the terminal device from the registration biometric information stored in the registration biometric information storage unit;
An operation management unit that transmits the feature information extracted by the feature information extraction unit to the terminal device through the communication unit and causes the reference feature information storage unit in the terminal device to store the feature information as the reference feature information; A biometrics information management server characterized by being configured. An input unit for inputting collation biometric information, a conversion code storage unit that stores conversion codes in advance, and the collation biometric information input from the input unit are stored in the conversion code storage unit. A matching biometric information conversion unit that performs a predetermined conversion process using the conversion code, and a matching biometric information that is extracted by the matching biometric information converted by the matching biometric information conversion unit A feature information extraction unit; a reference feature information storage unit that stores reference feature information in advance; and the matching feature information extracted by the matching feature information extraction unit and the reference feature information storage unit. A personal authentication device using biometric information, comprising: a collation unit for comparing and collating the reference feature information with the reference feature information for personal authentication The operation of the terminal device having the a server for managing via the communication means,
A biometric information storage unit for registration for preliminarily storing biometric information for registration of the same type as that used in the personal authentication function in the terminal device;
A registration biometric information conversion unit that performs a predetermined conversion process using a predetermined conversion code on the registration biometric information to be stored in the registration biometric information storage unit;
A feature information extraction unit that extracts feature information corresponding to a personal authentication function in the terminal device from the registration biometric information converted by the registration biometric information conversion unit;
The predetermined conversion code and the feature information extracted by the feature information extraction unit are transmitted to the terminal device through the communication means, and the conversion code storage unit and the reference feature information storage in the terminal device, respectively. A biometrics information management server, comprising: an operation management unit that stores the conversion code and the reference feature information in a unit.

Images