JP2004362245A - Personal information input / output system, personal information storage device and personal information input / output method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To enable the input and output of personal information to intended information equipment while safely and surely retaining the personal information. <P>SOLUTION: The portable personal information storage device 10 comprises a fingerprint identification part 13 for identifying a user as a registrant when fingerprint data acquired from the user are matched to preliminarily registered fingerprint data. When the user is identified as the registrant by the identification part 13, read of personal information from a memory 12 or write of personal information to the memory 12 is performed. According to this, if the user is not the registrant of the fingerprint data, the read or write of personal information to the memory 12 is not performed since the fingerprint data acquired from the user are not matched to the registered fingerprint data, and the user is not identified as the registrant. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a personal information input / output system, and more particularly, to a personal information input / output system using a portable personal information storage device.
The present invention also relates to a personal information storage device, and more particularly, to a portable personal information storage device.
The present invention relates to a personal information input / output method, and more particularly, to a personal information input / output method using a portable personal information storage device.
[0002]
[Prior art]
2. Description of the Related Art In recent years, there has been an increasing number of opportunities to carry an IC card in which personal information is stored and transfer personal information from the IC card to a payment machine at a ticket gate at a station or in a cafeteria for electronic payment. Also, it has become common practice to store personal electronic files in a portable flash memory and connect the memory to a personal computer or the like on a business trip to use the electronic files. As described above, a method of storing personal information and related information in a portable information storage device such as an IC card or a portable flash memory and carrying the information is becoming a general method of carrying personal information and the like in the IT society. (See, for example, Patent Document 1).
[0003]
[Patent Document 1]
Japanese Patent Application Laid-Open No. 2002-229861
[Problems to be solved by the invention]
However, the conventional portable information storage device does not have a function of identifying whether a person who uses the device is the owner of the device. For example, with an IC card type commuter pass, it is impossible to identify whether or not the owner is the owner. For this reason, if the owner loses the portable personal information storage device, there is a problem that another person who has acquired the device impersonates the owner and can easily abuse it.
[0005]
The present invention has been made to solve such a problem, and an object of the present invention is to provide a personal information input / output device capable of securely and securely holding personal information and inputting / outputting the personal information to / from a target information device. A system and a personal information storage device are provided.
[0006]
[Means for Solving the Problems]
In order to achieve such an object, a personal information input / output system according to the present invention includes a portable personal information storage device having storage means for holding personal information, and a personal information storage device connected to an information device main body. A read / write device that outputs the personal information read from the storage device to the information device main body and writes the personal information input from the information device main body to the storage device of the personal information storage device, and is provided in the personal information storage device. An authentication means for authenticating the user as the registrant when the biometric information obtained from the user matches the biometric information registered in advance, and when the authentication means authenticates the user as the registrant. Control means for reading personal information from the storage means or writing personal information to the storage means.
In this system, if the user is not a registrant of biometric information, the biometric information obtained from the user does not match the registered biometric information, and the user is not authenticated as the registrant. No information is read or written.
[0007]
Further, the read / write device encrypts the personal information written in the storage device of the personal information storage device, and decrypts the encrypted personal information read from the storage device of the personal information storage device. And decoding means for performing the decoding. By encrypting the personal information written in the storage means by the encryption means, even if the personal information storage device is stolen, the possibility of reading the contents of the storage means is reduced.
[0008]
Also, the personal information storage device of the present invention has a storage means for holding personal information, and outputs the personal information read from the storage means to an external device and inputs the personal information written in the storage means from the external device. Interface means, and authentication means for authenticating the user as a registrant when the biometric information obtained from the user matches the pre-registered biometric information. When the user is authenticated, the personal information is read from the storage means or the personal information is written into the storage means.
In this device, when the user is not a registrant of biometric information, the biometric information obtained from the user does not match the registered biometric information, and the user is not authenticated as the registrant. No information is read or written.
[0009]
Also, the personal information input / output method of the present invention is a portable personal information storage device, comprising: a first step of comparing biometric information obtained from a user with biometric information registered in advance; When the two pieces of biometric information match, a second step of authenticating the user as the registrant is performed. When the user is authenticated as the registrant, the personal information is read or read from the personal information storage device. And a third step of performing writing.
In this method, if the user is not a registrant of biometric information, the biometric information obtained from the user does not match the registered biometric information, and the user is not authenticated as the registrant. Reading or writing of personal information is not performed.
[0010]
Further, the third step may include a step of encrypting the personal information and then writing the encrypted personal information to the personal information storage device, and a step of decrypting the encrypted personal information read from the personal information storage device. Good. By encrypting personal information written in the personal information storage device, even if the personal information storage device is stolen, the possibility that the stored personal information is read is reduced.
[0011]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, an embodiment of the present invention will be described in detail with reference to the drawings.
FIG. 1 is a block diagram showing an overall configuration of a personal information input / output system according to one embodiment of the present invention. This personal information input / output system includes an information device main unit 30 such as a personal computer, a read / write device 20 connected to and used by the information device main unit 30, and a portable personal information storage device such as an IC card or a portable flash memory. And 10.
[0012]
The portable personal information storage device 10 includes a control unit 11 for controlling the operation of each unit in the device, a memory (storage means) 12 for holding personal information, and a user who registers the user based on fingerprint data obtained from the user. It has a fingerprint authentication unit 13 for authenticating the identity of the user and an interface unit 14 for transmitting and receiving signals to and from the read / write device 20. Here, the “user” refers to a person who actually wants to use the portable personal information storage device 10, and the “registrant” refers to a person who has registered his / her fingerprint in the portable personal information storage device 10 in advance. Note that the portable personal information storage device 10 may include a battery as a power source.
[0013]
The read / write device 20 is an interface for transmitting / receiving signals between an encryption / decryption unit 21 that encrypts personal information and decrypts the encrypted personal information, and a portable personal information storage device 10. And a part 22.
[0014]
The information device main body 30 includes a control unit 31 for controlling the operation of each unit in the device, a storage unit 32 for storing a control program for operating the control unit 31 and personal information, and an operation for a user to perform an operation. It has a unit 33 and a display unit 34 for displaying various information. The personal information is transmitted and received between the information device main body 30 and the read / write device 20 via the input / output port 23, and the control signal is transmitted and received via the control port 24.
[0015]
FIG. 2 is a block diagram showing a configuration of the fingerprint authentication unit 13 of the portable personal information storage device 10. The fingerprint authentication unit 13 includes a fingerprint sensor 13A that reads a user's fingerprint and acquires fingerprint data, a memory 13B that holds registrant's fingerprint data (hereinafter, referred to as registered fingerprint data), a user's fingerprint data and registered fingerprint data. And a matching circuit 13C for matching the two. As an example of the fingerprint sensor 13A, a plurality of capacitance elements which are arranged in a matrix at intervals of about 150 μm and whose capacitance changes due to the unevenness of the fingerprint, a plurality of capacitance detection circuits for detecting capacitance formed in the capacitance element, And a processing circuit for converting the capacity detected by the detection circuit into light and shade to generate image data. The image data generated by the processing circuit is called fingerprint data. In the matching circuit 13C, the fingerprint data is compared using the pattern matching technique of the image. As a result of the comparison, when the fingerprint data of the user matches the registered fingerprint data, the user is authenticated as the registrant.
[0016]
FIG. 3 is a diagram illustrating an appearance of the portable personal information storage device 10. The fingerprint sensor 13A of the fingerprint authentication unit 13 is provided on the surface of the case 15 of the portable personal information storage device 10. The position of the fingerprint sensor 13A is determined by the user trying to connect the portable personal information storage device 10 to the information device (the read / write device 20 is connected to the information device main body 30) as shown in FIG. In this case, the user's finger may be set to a position where it can be easily touched. Accordingly, when the user uses the portable personal information storage device 10, the fingerprint sensor 13A can reliably read the user's fingerprint. Other components of the portable personal information storage device 10 except the fingerprint sensor 13A are housed inside the case 15.
[0017]
Next, the operation of the personal information input / output system according to the present embodiment will be described.
First, an operation of registering fingerprint data in the portable personal information storage device 10 in advance will be described with reference to FIG.
The connector 16 of the portable personal information storage device 10 is inserted into a connector (not shown) of the read / write device 20 connected to the information device main body 30. Thus, when the portable personal information storage device 10 and the read / write device 20 are electrically connected (step S1, YES), power is supplied from the read / write device 20 to the portable personal information storage device 10. (If the portable personal information storage device 10 has a built-in battery, power supply from the read / write device 20 is unnecessary. The same applies hereinafter.)
[0018]
A person who intends to register his / her fingerprint in the portable personal information storage device 10 places a predetermined finger on the fingerprint sensor 13A of the portable personal information storage device 10 and operates the operation unit 33 of the information device main body 30. Order fingerprint registration. Thereby, the fingerprint registration command is transmitted from the control unit 31 of the information device main body 30 to the portable personal information storage device 10 via the control port 24 and the interface unit 22 of the read / write device 20 (step S2).
In the portable personal information storage device 10 that has received the fingerprint registration command, the control unit 11 controls the fingerprint authentication unit 13 to read the fingerprint of the finger placed on the fingerprint sensor 13A, and to obtain the obtained fingerprint data. Writing to the memory 13B (step S3). This completes fingerprint registration.
[0019]
Next, an operation when a user ID and personal information are stored in advance in the portable personal information storage device 10 in which a fingerprint is registered will be described with reference to FIG.
The user ID and personal information are prepared in the storage unit 32 of the information device main body 30 in advance. When the connector 16 of the portable personal information storage device 10 is inserted into a connector (not shown) of the read / write device 20 and the portable personal information storage device 10 and the read / write device 20 are electrically connected (step (S11, YES), power is supplied from the read / write device 20 to the portable personal information storage device 10.
[0020]
At this time, if the user's finger touches the fingerprint sensor 13A of the portable personal information storage device 10 (step S12, YES), the controller 11 controls the fingerprint authentication unit 13 to perform fingerprint collation. Specifically, first, the fingerprint of the user touching the fingerprint sensor 13A is read. On the other hand, the registered fingerprint data is read from the memory 13B. Then, the fingerprint data of the user and the registered fingerprint data are collated by the collation circuit 13C (step S13). As a result, if the two fingerprint data match (step S14, YES), the user is authenticated as the registrant, and a personal authentication notification indicating this is read / written by the control unit 11 via the interface unit 14. The data is transmitted to the device 20 (step S15). The personal authentication notification is input to the information device main body 30 via the interface unit 22 and the control port 24 of the read / write device 20.
[0021]
The information device main body 30 to which the personal authentication notification has been input reads the user ID and the personal information from the storage unit 32 under the control of the control unit 31 and outputs the user ID and personal information to the read / write device 20 via the input / output port 23. In the read / write device 20, the input user ID and personal information are encrypted by the encryption / decryption unit 21 (step S16), and transmitted to the portable personal information storage device 10 via the interface unit 22. In the portable personal information storage device 10, the encrypted user ID and personal information received via the interface unit 14 are written into the memory 12 under the control of the control unit 11 (step S17). Thereby, the storage of the user ID and the personal information in the portable personal information storage device 10 is completed.
[0022]
On the other hand, if the fingerprint data of the user and the registered fingerprint data do not match in the fingerprint verification (step S14, NO), the user cannot be authenticated as the registrant, so the control unit 11 of the portable personal information storage device 10 does not authenticate the user. An error message is transmitted to the information device main body 30 via the read / write device 20 (step S18). In the information device main unit 30, the control unit 31 controls the display unit 34 to display that an error has occurred, and notifies the user that personal information could not be written to the portable personal information storage device 10.
[0023]
Here, an example has been described in which the control unit 11 of the portable personal information storage device 10 performs the control autonomously during fingerprint matching, but the control is performed in accordance with the fingerprint matching command transmitted from the control unit 31 of the information device main body 30. Fingerprint collation may be performed in the portable personal information storage device 10.
[0024]
Next, an operation for reading a user ID and personal information from the portable personal information storage device 10 will be described with reference to FIG. It is assumed that the portable personal information storage device 10 has already been registered with a fingerprint, and stores a user ID and personal information.
When the connector 16 of the portable personal information storage device 10 is inserted into a connector (not shown) of the read / write device 20 and the portable personal information storage device 10 and the read / write device 20 are electrically connected (step (S21, YES), power is supplied from the read / write device 20 to the portable personal information storage device 10.
[0025]
At this time, if the user's finger is touching the fingerprint sensor 13A of the portable personal information storage device 10 (step S22, YES), the controller 11 controls the fingerprint authentication unit 13 to perform fingerprint collation. Specifically, first, the fingerprint of the user touching the fingerprint sensor 13A is read. On the other hand, the registered fingerprint data is read from the memory 13B. Then, the fingerprint data of the user and the registered fingerprint data are collated by the collation circuit 13C (step S23). As a result, if the two fingerprint data match (step S24, YES), the user is authenticated as the registrant. Then, under the control of the control unit 11, the encrypted user ID and the personal information stored in the memory 12 are read and transmitted to the read / write device 20 via the interface unit 14 (Step S25).
[0026]
In the read / write device 20, the encrypted user ID and personal information received via the interface 22 are decrypted in the encryption / decryption unit 21 to return to the original user ID and personal information (step S26). Via the input / output port 23 to the required location in the information device main body 30. As described above, immediately after the personal authentication is performed, the user ID and the personal information are sent to necessary portions in the information device main body 30.
[0027]
On the other hand, if the fingerprint data of the user does not match the registered fingerprint data in the fingerprint collation (step S24, NO), the user cannot be authenticated as the registrant, so the control unit 11 of the portable personal information storage device 10 does not authenticate the user. An error message is transmitted to the information device main body 30 via the read / write device 20 (step S27). In the information device main unit 30, the control unit 31 controls the display unit 34 to display that an error has occurred, and notifies the user that the personal information could not be read from the portable personal information storage device 10.
[0028]
Here, the example has been described in which the control unit 11 of the portable personal information storage device 10 independently controls the fingerprint collation in accordance with the fingerprint collation command transmitted from the control unit 31 of the information device main body 30. Alternatively, fingerprint collation may be performed in the portable personal information storage device 10.
Also, an example has been described in which the control unit 11 of the portable personal information storage device 10 independently controls the reading of the user ID and the personal information. However, after the personal authentication, the control unit 11 of the portable personal information storage device 10 performs the control. 11 transmits a personal authentication notification, and reads the user ID and personal information in the portable personal information storage device 10 in accordance with the read command transmitted from the control unit 31 of the information device main body 30 that has received the personal authentication notification. Is also good.
[0029]
As described above, personal authentication using a fingerprint is performed in the portable personal information storage device 10, and personal information is read or written when the user is authenticated. For this reason, if the user is not the person himself / herself, reading or writing cannot be performed, so that impersonation use by another person can be prevented beforehand.
In addition, since the personal information stored in the portable personal information storage device 10 is encrypted, even if the portable personal information storage device 10 is stolen, the stored personal information may be read. Is small. On the other hand, when the portable personal information storage device 10 is connected to the read / write device 20 for use, when the encrypted personal information is read from the portable personal information storage device 10, the read / write device is used. By decrypting at 20, the information device body 30 can use the personal information before encryption.
[0030]
In the present embodiment, an example is shown in which the portable personal information storage device 10 and the read / write device 20 are connected via a connector, but specifically, an interface such as USB (Universal Serial Bus) or IEEE 1394 is used. Technology can be applied. The invention is not limited to such a wired interface technology, and a wireless interface technology such as Bluetooth or an infrared interface technology such as IrDA may be used. By using the wireless interface technology or the like, the trouble of searching for a connector connection portion can be omitted, and a more convenient system can be realized. Specifically, there is an example in which the fingerprint authentication unit 13 is built in a non-contact type IC card.
[0031]
Further, in the present embodiment, an example has been described in which a fingerprint is used to perform personal authentication in the portable personal information storage device 10. However, instead of using the fingerprint, other personal information can be used to distinguish oneself from another. Authentication may be performed.
Further, in the present embodiment, an example in which the read / write device 20 and the information device main body 30 are separate bodies has been described, but various functions of the read / write device 20 are built into the information device from the beginning. There may be.
[0032]
Although FIG. 1 shows an example in which the portable personal information storage device 10 has the control unit 11, the portable personal information storage device 10 may not have the control unit as in the portable personal information storage device 110 shown in FIG. In this case, control of each unit of the portable personal information storage device 110 is directly performed by the control unit 31 of the information device main body 30. For example, fingerprint verification in the fingerprint authentication unit 13 and reading of the user ID and personal information from the memory 12 are performed based on an instruction from the information device main body 30.
[0033]
【The invention's effect】
As described above, in the present invention, when the fingerprint data obtained from the user matches the fingerprint data registered in advance, the user is authenticated as the registrant, and the user is authenticated as the registrant. At times, personal information is read from or written to the storage means. Therefore, if the user is not the registrant of the fingerprint data, reading or writing cannot be performed, so that impersonation use by another person can be prevented.
[0034]
Further, in the present invention, by encrypting the personal information written in the storage means by the encryption means, even if the personal information storage device is stolen, the possibility of reading the contents of the storage means is reduced. On the other hand, when the personal information storage device is used by connecting it to a read / write device, when the encrypted personal information is read from the storage means, the encrypted personal information is decrypted by the decryption means so that the information device main body can be decrypted. Then, the personal information before encryption can be used.
[0035]
Therefore, according to the present invention, personal information can be securely and securely stored in the personal information storage device, and the personal information can be used in a target information device.
[Brief description of the drawings]
FIG. 1 is a block diagram showing an overall configuration of a personal information input / output system according to an embodiment of the present invention.
FIG. 2 is a block diagram illustrating a configuration of a fingerprint authentication unit of the portable personal information storage device.
FIG. 3 is a diagram showing an appearance of a portable personal information storage device.
FIG. 4 is a diagram showing a usage image of the personal information input / output system.
FIG. 5 is a flowchart showing a flow of an operation when registering a fingerprint in the portable personal information storage device.
FIG. 6 is a diagram showing a flow of operation when a user ID and personal information are stored in a portable personal information storage device.
FIG. 7 is a diagram showing a flow of operation when reading out a user ID and personal information from a portable personal information storage device.
FIG. 8 is a block diagram showing an overall configuration of a personal information input / output system according to another embodiment of the present invention.
[Explanation of symbols]
10, 110: portable personal information storage device, 11: control unit, 12: memory, 13: fingerprint authentication unit, 13A: fingerprint sensor, 13B: memory, 13C: matching circuit, 14: interface unit, 15: case, 16 .. Connector, 20 read / write device, 21 encryption / decryption unit, 22 interface unit, 23 input / output port, 24 control port, 30 information equipment main body, 31 control unit, 32 storage unit , 33 ... operation unit, 34 ... display unit.

Claims (5)

A portable personal information storage device having storage means for holding personal information, and personal information connected to the information device main body and read from the storage means of the personal information storage device being output to the information device main body, A personal information input / output system comprising: a read / write device for writing personal information input from an information device main body to the storage means of the personal information storage means;
Provided in the personal information storage device, an authentication unit that authenticates the user as a registrant when biometric information obtained from the user matches biometric information registered in advance,
Control means for reading the personal information from the storage means or writing the personal information to the storage means when the registrant is authenticated by the authentication means. Personal information input / output system. The personal information input / output system according to claim 1,
The read / write device comprises:
Encryption means for encrypting the personal information written in the storage means of the personal information storage device;
A decryption means for decrypting the encrypted personal information read from the storage means of the personal information storage device. A portable personal unit comprising: a storage unit for holding personal information; and an interface unit for outputting the personal information read from the storage unit to an external device and inputting the personal information written to the storage unit from the external device. In the information storage device,
When the biometric information obtained from the user matches the biometric information registered in advance, an authentication unit that authenticates the user as the registrant is provided,
A personal information storage device for reading the personal information from the storage means or writing the personal information in the storage means when the registrant is authenticated by the authentication means; A personal information input / output method for reading personal information from a portable personal information storage device to an information device main body and writing personal information from the information device main body to the personal information storage device,
A first step of comparing the biometric information obtained from the user with biometric information registered in advance in the personal information storage device;
A second step of authenticating the user as a registrant when the two pieces of biometric information match as a result of the matching;
A third step of reading or writing the personal information in the personal information storage device when the user is authenticated as a registrant. The personal information input / output method according to claim 4,
The third step is
Writing the personal information in the personal information storage device after encrypting the personal information;
Decrypting the encrypted personal information read from the personal information storage device.

Images