JPH0225925A - Encrypted fingerprint verification device - Google Patents

Abstract

PURPOSE:To realize the collation of fingerprints with the use of the fingerprint data which can not be easily decoded by ciphering the data stored in a memory for collation fingerprint data by means of a cipher key. CONSTITUTION:A cipher key input part 22 is prepared for the input of a cipher key of an approver performing the collation of fingerprints, together with a cipher key memory 631 which stores the cipher key inputted via the part 22, and a fingerprint ciphering means 614 which is connected to a collation fingerprint data memory 632 and a collation means 615 and ciphers the actual fingerprint data obtained via a fingerprint input part 1 based on the cipher key stored in the memory 631. The memory 632 stores the ciphered fingerprint data. Thus it is possible to avoid such an inconvenient case where the fingerprint data is decoded by an outside or decoded easily and carelessly.

Description

[Detailed Description of the Invention] [Field of Industrial Application] The present invention relates to a fingerprint verification device, and in particular, it encrypts fingerprint data based on characteristic points unique to a fingerprint to ensure the confidentiality of a fingerprint user's fingerprint. The present invention relates to an encrypted fingerprint verification device that improves performance.

The encrypted fingerprint matching device of the present invention is used, for example, when a fingerprint of a specific authorized person is used for access control in a security management system.

[Prior art]

Many fingerprint verification devices that identify specific individuals by using fingerprints for verification have been proposed, and some have been put into practical use. Such applications include, for example, access control in safety management systems. Fingerprints vary from person to person, and using fingerprints is an effective means for identifying individuals. In this case, characteristic parts of a specific user's fingerprint are extracted, further patterned, and registered in advance. When that particular user enters or exits, they apply their fingerprint to a fingerprint matching device.

The fingerprint verification device first checks whether the user is an authorized person, then inputs the fingerprint, extracts the characteristics, turns it into a pattern, and compares it with a pre-registered fingerprint pattern to find a match. If so, it is assumed to be the correct person.

In this way, by using fingerprints, accurate entry/exit management is possible.

[Problem to be solved by the invention]

When using such a fingerprint verification device, there is a possibility that the registered fingerprint pattern or the input fingerprint pattern may be decrypted and used for other purposes for some reason or due to carelessness, which may cause users to feel uneasy. Sometimes. A problem has been encountered in which such anxiety limits the use of fingerprint identification devices. Another problem is that a registered fingerprint pattern or an input fingerprint pattern may be easily decrypted and disclosed to a third party or used for other purposes.

In view of the above, an object of the present invention is to enable fingerprint verification using fingerprint data that cannot be easily decoded.

[Means to accomplish the task]

In order to solve the above problems and achieve the above objects, the present invention provides a pre-acceptance condition input section for inputting predetermined conditions of an acceptor for performing fingerprint matching, and a fingerprint input section for extracting fingerprint data from an actual finger. a verification fingerprint data storage means for storing fingerprint data for verification in advance; and a verification means for comparing and verifying the fingerprint data from the fingerprint input section and the fingerprint data from the verification fingerprint data storage means. A fingerprint verification device comprising: a cryptographic key input section for inputting a cryptographic key of the acceptor; a cryptographic key storage means for storing the cryptographic key inputted in the cryptographic key input section; and a fingerprint data storage means for verification. and fingerprint encryption means connected to the verification means and encrypting actual fingerprint data obtained through the fingerprint input section based on the encryption key stored in the encryption key storage means, An encrypted fingerprint verification device is provided, wherein encrypted fingerprint data is stored in a verification fingerprint data storage means.

The image forming apparatus further includes a mode switching section for setting either a fingerprint verification operation or a fingerprint encryption registration operation.

[For production]

Since the verification fingerprint data is registered encrypted, it cannot be easily decrypted. This dramatically improves the confidentiality of the user's fingerprint data.

On the other hand, the accuracy of fingerprint verification itself is maintained as before.

If the encryption key is further encrypted, the secrecy of the encryption key is improved, and since the fingerprint data is encrypted using this encrypted encryption key, there is no possibility that the fingerprint data will be decoded by a third party. It will not be easily decrypted by carelessness.

〔Example〕

As one embodiment of the encrypted fingerprint verification device of the present invention, the first
This will be described with reference to FIGS.

FIG. 1 is a plan view of the encrypted fingerprint matching device. In the drawing, ■ is a fingerprint input section for the operator to input an arbitrary index finger, and 2 is a fingerprint input section for inputting acceptor conditions previously assigned to the operator, such as for inputting a password, and various data, for example, This is the input section for the fingerprint selection code and encryption key. Here, a numeric keypad is used, but various function switches may also be used. Reference numeral 3 denotes a display unit that displays verification results, various guidance, and the like. Here, the liquid crystal (LCD)
), but a cathode ray tube or audio alone or a combination of these may also be used. 4 is a mode switching unit for setting a "verification mode" in which the device is used for verification, and a "registration mode" in which fingerprint data for verification and an encryption key are registered and the fingerprint data is encrypted. Here, each mode is set using a key, but a switch between a card and a card reader or a function button may also be used.

FIG. 2 shows a system configuration diagram of the encrypted fingerprint matching device.

In the same figure, the fingerprint input unit 1 includes a finger rest made of a prism for placing a finger, and an LE for illuminating the fingerprint.
D, a sensor unit 11 consisting of an optical lens for extracting the fingerprint as image data, a CCD image sensor, etc. for storing the image data, and an A/D conversion for quantizing the fingerprint image stored in the sensor part 11. 12. 6 is a ROM that stores the CPU, peripheral circuits 61, and programs for realizing the functions of the fingerprint verification device.
62, has a microprocessor-type basic configuration consisting of a RAM 63 for storing fingerprint data, encryption keys, and various data for each individual; , mode switching section 4
It is electrically connected to each part of the

FIG. 3 mainly shows the configuration of the control section 6 in the encrypted fingerprint matching device of FIG. The configuration of the control section 6 will be explained in more detail with reference to FIG. The control section 6 is coupled to an acceptor input section 21 and a code key input section 22 . In this example,
Although the input units 21 and 22 are performed using the common numeric keypad 2, they may be provided individually, or may be replaced by function button switches or a card and a card reader. Furthermore,
The control section 6 is connected to a fingerprint input section 11 for inputting a pointing finger, a mode switching section 4, and a display section 3. The control unit 6 is
Conditions for the acceptor, for example, password
When the password is input, the acceptor determining means 611 determines whether the password has been registered in advance, and the mode switching unit 4
mode setting means 612 for setting "verification mode" or "registration mode" in response to the operation of the fingerprint input section 1; and a fingerprint data extraction means connected to the fingerprint input section 1 for extracting a characteristic pattern of the fingerprint from the fingerprint input section 1. 613, a cryptographic key storage means 631 connected to the cryptographic key input section 22 and registering the input cryptographic key when the "registration mode" is set in the mode setting means 612; a fingerprint data extraction means 613; It has an encryption means 614 connected to the key storage means 631 and encrypting the fingerprint characteristic pattern. Furthermore, when the "registration mode" is set in the mode setting means 612, the control unit 6 further includes a verification fingerprint data storage means 632 that stores the ↑fingerprint data encrypted in the encryption means 614 for verification. in particular,
A verification means is connected to the RAM 63 (FIG. 2), the encryption means 614, and the verification fingerprint data storage means 632, and compares and verifies the input encrypted fingerprint data with the stored verification encrypted fingerprint data. 615. The comparison result is output to the display section 3.

The operation of registering a fingerprint will be described with reference to FIG.

Step 001 (SOOI) The operator sets the mode switching unit 4 to "registration mode" using a predetermined key. Based on the above operation, the mode setting means 612 sets the registration mode.

On the display unit 3, a menu of "registration" or "delete" is displayed by a driving means (not shown).

Steps 002-005 (3002-S005) The operator enters the registration code on the numeric keypad 2 based on the display section 3.
is input to the control unit 6 via (S002).

Next, the accepter conditions assigned to each individual, such as a password, are input into the control unit 6 using the numeric keypad 2 (S0
03). In the control unit 6, the acceptor determining means 611 determines whether the password is registered in advance. next,
The operator inputs the "cipher key" via the numeric keypad 2. The encryption key is, for example, a three-digit number, and in the "registration mode", the encryption key is stored in the encryption key storage means 631.
is memorized. Next, based on the operator's will, the fingerprint selection code corresponding to the finger for verification is entered on the numeric keypad 2 in the same manner as described above.
is input to the control unit 6 via (S005).

Input of each data via the numeric keypad 2 is performed by pressing "#" in the numeric keypad 2, inputting predetermined code data (numbers), and finally pressing "*".

Steps 006 to 007 (SOO6, 5OO7) Place the selected finger on the fingerprint input section 1. The sensor part 11 reads the fingerprint (S006). The read fingerprint image is quantized by the A/D converter 12 and applied to the fingerprint data extraction means 613, where the fingerprint characteristic pattern, for example, a ridge pattern, is extracted as data (S 007).

Step 008 (SOO8) In the encryption means 614, the fingerprint data extraction means 613
The fingerprint characteristic pattern data extracted in step 3 is encrypted based on the encryption key stored in the encryption key storage means 631. This encryption can be performed, for example, by bit-expanding the three-digit code key into a binary number and directly adding it to the fingerprint feature pattern data, or by taking an exclusive OR, as well as the three methods mentioned above. Combine a digit numeric encryption key with a password, generate an internal encryption key by, for example, performing an exclusive OR, and expand the bits into a binary number,
Indirect encryption such as exclusive OR with fingerprint feature pattern data can be performed. In particular, when indirect encryption is used, encrypted fingerprint data cannot be decrypted unless an encryption key and password are used at the same time.

Step 009 (SOO9) As mentioned above, the encrypted fingerprint data is stored in a predetermined area of the RAM 63, that is, the verification fingerprint data storage means 63.
2.

When the above registration process is completed, a message to that effect is outputted to the display section 3, and it becomes possible to proceed to the next verification operation.

The matching operation will be described with reference to FIG.

Step 021 (5021) The operator sets the mode switching unit 4 to "verification mode". The mode setting means 612 changes the mode setting from "registration mode" to "verification mode", and the encryption key storage means 631
, the verification means 615, and the encryption means 614 are notified of the mode change.

Step 022.023 (SO22, 3023) The operator inputs a password via the numeric keypad 2 as an acceptor condition. The numeric keypad 2 functions as an acceptor input section 21, and the acceptor determining means 611 determines whether this password has been registered in advance. If the password matches the password registered in advance, proceed to the next step.

Steps 024-028 (3024-3028) Similar to steps 005-008 in FIG. 4, fingerprint selection code input to fingerprint data encryption are performed. In this case, since the mode is verification mode, the encrypted fingerprint data is not stored in the verification fingerprint data storage means 632.

Steps 029 and 030 (SO29, 3030) The verification means 615 verifies whether the fingerprint data encrypted in step 028 matches the encrypted fingerprint data registered in the verification fingerprint data storage means 632.

As a result of the comparison, if they match, a message to the effect that they match is output to the display section 3. If there is a mismatch, a mismatch message will be displayed. In addition, together with the display section 3, or together with the display section 3
Instead, a printer may be provided to leave a print record.

It is also possible to use an IC card for inputting fingerprint data for verification, passwords, etc. instead of using the numeric keypad.

〔Effect of the invention〕

As described above, according to the present invention, the function as a fingerprint verification device is the same as the conventional one by using a fingerprint and a password, and the stored data in the verification fingerprint data storage means is is encrypted, and since the encrypted fingerprint data are compared against each other during verification, it is possible for a third party to understand or decrypt the fingerprint data, as well as inadvertently. , the fingerprint data itself will not be made public.

[Brief explanation of the drawing]

FIG. 1 is a plan view of the encrypted fingerprint matching device according to the embodiment of the present invention, FIG. 2 is a system configuration diagram of the encrypted fingerprint matching device of FIG. 1, and FIG. 3 is the encrypted fingerprint matching device of FIG. FIGS. 4 and 5 are flowcharts illustrating the registration operation and verification operation, respectively, of the encrypted fingerprint verification device according to the embodiment of the present invention. (Explanation of symbols)

Claims (1)

[Scope of Claims] 1. An acceptor condition input section (21) for inputting predetermined conditions for an acceptor who performs fingerprint matching, and a fingerprint input section (1) for extracting fingerprint data from an actual finger; Verification fingerprint data storage means (63) that stores fingerprint data for verification in advance.
2) and a verification means (615) for comparing and verifying the fingerprint data from the fingerprint input section and the fingerprint data from the verification fingerprint data storage means, wherein the fingerprint verification device comprises: Encryption key input section (22
), an encryption key storage means (631) for storing the encryption key inputted at the encryption key input section, and an encryption key storage means (631) connected to the verification fingerprint data storage means and the verification means, and the encryption key inputted through the fingerprint input section. fingerprint encryption means (614) for encrypting the actual fingerprint data stored in the encryption key storage means based on the encryption key stored in the encryption key storage means; An encrypted fingerprint matching device characterized in that data is stored. 2. The encrypted fingerprint verification device according to claim 1, further comprising a mode switching section (4) for setting either a fingerprint verification operation or a fingerprint encryption registration operation.