Hitachi, Ltd.

Yosuke Kaga

Kenta Takahashi

Masakazu Fujio

Ken Naganuma

Osamu Takata

Yoshiaki Isobe

Wataru Nakamura

Takao Murakami

Yoshiko Yasumura

An authentication apparatus holds: a combination of a concealment template generated from a secret key and biometric information through use of biometric cryptography and encrypted identity verification information obtained by encrypting identity verification information through use of the secret key; and biometric information on a user, and is configured to: extract the secret key from the concealment template through use of the biometric information on the user; acquire the identity verification information by decrypting the encrypted identity verification information through use of the extracted secret key; and verify identity of the user based on the acquired identity verification information.

Authentication apparatus and authentication method

A biometric signature system holds a first template indicating a result of transforming, by predetermined transformation, first biometric information acquired from a predetermined part of a user; and a second template indicating a result of transforming, by predetermined one-way transformation, second biometric information acquired from the predetermined part of the user, identifies a parameter for which a similarity between the first template of the person to be authenticated corrected, generates a second template of the person to be authenticated from each piece of corrected second biometric information, and determines whether authentication of the person to be authenticated is successful by comparing each generated second template with the second template.

Biometric signature system and biometric signature method

Provided is a signature verification system comprising: a signature terminal including a biometric information acquisition unit for acquiring biometric information of a user, a public template certificate generation unit for generating a public template certificate by subjecting the biometric information to predetermined processing, a key pair generation unit for generating a pair of a secret key and a public key, and a public key certificate generation unit for generating a public key certificate by providing a biometric signature to the public key with the biometric information used as a key; and a verification terminal including a public key certificate verification unit for receiving a transaction including the public template certificate, the public key certificate, and a signature to verify the validity of the public key certificate using the public template certificate, and a signature verification unit for verifying the signature using the public key certificate.

Signature verification system, signature verification method, and storage medium

This biometric signature system comprises: a biometric certificate storage module that stores a biometric certificate generated on the basis of a user's biometric information; a biometric information acquisition module that acquires new biometric information from the user; a biometric certificate generation module that generates a new biometric certificate on the basis of the new biometric information; a biometric signature generation module that assigns a biometric signature to the new biometric certificate on the basis of the new biometric information; a biometric signature verification module that verifies the biometric signature using the biometric certificate stored in the biometric certificate storage module; and a biometric certificate registration module that registers the new biometric certificate in the biometric certificate storage module if verification of the biometric signature was successful.

Biometric signature system and biometric certificate registration method

In additional enrollment of a template in a biometric authentication system, the template is automatically enrolled on the basis of a plurality of authentication results to assure a user's convenience and security. A post-migration authentication server receives a first template and a second template from a post-migration authentication terminal, performs authentication on the basis of the comparison result between the received first template and the user's preliminarily first enrolled template, and provisionally enrolls the first template and the second template. It repeats the reception, authentication, and provisional enrollment and calculates a match probability from a plurality of comparison results of the provisionally first enrolled templates, determines whether or not to store a second enrolled template on the basis of the match probability, and automatically enrolls the second template in the post-migration authentication server.

Growing community of inventors

Tokyo, Japan

Yosuke Kaga