Abstract:
The invention relates to a method for testing a fingerprint whose reference data are stored in a portable data carrier. The reference data contain at least positions and orientations of minutiae and pores and an orientation vector. According to the invention it is provided that the testing of the fingerprint includes first sensing measuring values stating the actual value of the sensed fingerprint and extracting the minutiae and the pores from said measuring values. Then the reference data of the minutiae and the orientation vector are read from the portable data carrier and the minutiae from the sensed fingerprint compared with the corresponding reference data. Subsequently, the position of the pores relative to the minutiae is transmitted to the portable data carrier and the pores are checked in the portable data carrier.

Description:
CROSS-REFERENCE TO RELATED APPLICATION 
     This application is a §371 of PCT Application Serial No. PCT/EP02/05801, filed May 27, 2002. 
     BACKGROUND OF THE INVENTION 
     1. Field of the Invention 
     This invention relates to a method for testing a fingerprint. 
     2. Description of the Background Art 
     Fingerprint testing is gaining more and more importance in connection with the use of chip cards used for identifying and verifying authorized persons, for example in access controls or the performing of financial transactions. 
     Checking the fingerprint substantially replaces PIN entry in such cases, the advantages being that the user does not have to remember any combination of numbers and security is increased since a fingerprint, unlike a PIN, cannot be spied out or found by trial. 
     For checking the fingerprint it is known to provide terminals equipped with a sensor for sensing the fingerprint. The sensed fingerprint is compared either in the terminal or on the chip card with a fingerprint stored on the chip card. Such assemblies are known for example from EP-A 0 343 580. 
     Since evaluation of a fingerprint exceeds the computing power that can be realized on a chip card, evaluation is usually done in the terminal. However, calculation in the terminal has the disadvantage that the reference values stored in the chip card are sent outside, making it possible for unauthorized third parties to determine the reference values as they are stored in the chip card by interception or other kinds of attacks. 
     To avoid the abovementioned disadvantages it was proposed in DE-A 198 11 332 to perform all security-relevant operations within the data carrier and only swap out computing-intensive operations if the swap does not endanger security. In the swap the chip card specifies which data are transmitted from the terminal to the data carrier in what form. In particular, the terminal performs a pre-evaluation of the measuring values in the course of which temporary results obtained from the measuring values are linked with data that were transmitted to the terminal from the data carrier. The terminal then only transmits the result of linking to the data carrier, in which it can be checked with comparatively little effort on the basis of the linking results whether the detected biometric feature comes from an authorized user. 
     SUMMARY OF THE INVENTION 
     Advantageous embodiments of the invention are stated in the dependent claims. 
     The invention provides a method for testing a fingerprint wherein reference data containing at least the positions and orientations of minutiae and pores and an orientation vector are stored in a portable data carrier. During testing of a fingerprint the measuring values determining the actual value of the currently sensed fingerprint are first sensed. The minutiae and the pores are extracted from said measuring values. For checking the minutiae the corresponding reference data and the orientation vector are read from the portable data carrier so that the minutiae of the sensed fingerprint can be compared with the corresponding reference data. 
     For further checking within the portable data carrier, the position of the pores or their position relative to the minutiae is transmitted to the data carrier, i.e. the check of the pores is done in the portable data carrier. The inventive method involves a division of labor for checking a fingerprint by which the check of the minutiae, which is comparatively computing-intensive, is preferably done in the terminal while the check of the pores is done in the portable data carrier, e.g. a chip card, which has less computing power. Since a check of the pores is a necessary part of the checking method, no loss of security is suffered by the computing-intensive minutiae test being done in an external device. 
     A further simplification of the calculation within the portable data carrier is obtained if a positional and rotational deviation of the orientation vector is calculated in the external device, an orientation point is determined therefrom, said point is sent to the portable data carrier, and the position of the pores relative to the minutiae compared with the reference values there. This permits the time for calculation within the portable data carrier to be further reduced. It has further proved advantageous that the starting point of the orientation vector is the centroid of the minutiae coordinates or the center of a fingerprint. This choice of the starting point facilitates later sorting of the minutiae or pores. 
     To increase the security in evaluation, the ridge counts can additionally be stored in the portable data carrier as part of the reference data record so that the ridge counts can also be taken into account in the check of the fingerprint. 
     Further, a comparative data record containing the coordinates of the pores relative to the starting point of the orientation vector can preferably be generated in the external device. 
     A further advantageous embodiment of the invention provides that the relative coordinates are sorted according to distance and/or angle relative to the starting point. The sorting simplifies the check of the fingerprint since the sorting already specifies a favorable order for testing the individual minutiae or pores. 
     An increase in security can also be obtained by additionally recording and evaluating the ridge counts between the starting point and the pores. This additional feature of ridges between starting point and pores can be evaluated either in the external device or in the portable data carrier. 
     To increase security, it can further be provided that the orientation data record is readable in the chip card but the comparative data record is stored in unreadable fashion. 
    
    
     
       BRIEF DESCRIPTION OF THE DRAWINGS 
       Hereinafter the invention will be set forth in more detail with reference to  FIGS. 1 to 5 , in which: 
         FIG. 1  shows a chip card in a front view, 
         FIG. 2  shows a block diagram of the integrated circuit of the chip card from  FIG. 1 , 
         FIG. 3  shows a block diagram of a terminal, 
         FIG. 4  shows fingerprints in different enlargements, and 
         FIG. 5  shows the example of a flowchart according to the inventive method. 
     
    
    
     DETAILED DESCRIPTION OF THE INVENTION 
       FIG. 1  shows a front view of chip card  1  as an example of a portable data carrier. Chip card  1  consists card body  2  and chip module  3  disposed in a gap of card body  2 . Chip module  3  consists of contact bank  4  and integrated circuit  5  disposed below contact bank  4 . The dimensions of chip card  1  are defined e.g. by ISO standard 7810 and the mode of functioning of integrated circuit  5  is for example compatible with ISO standard 7816. Chip card  1  can be provided as an ID card for access control for a building or as an authorization card for access to an electric device, for example a computer. Further, chip card  1  can be a bank card, credit card, check card or the like with which financial transactions can be performed. 
     Besides chip card  1  shown in  FIG. 1 , the invention can also be used in connection with other chip cards or any other data carriers capable of storing data. 
       FIG. 2  shows a simplified block diagram of integrated circuit  5  of chip card  1  shown in  FIG. 1 . Integrated circuit  5  is a microprocessor capable of performing calculations independently. Integrated circuit  5  consists of central processing unit  6 , memory  7  and input/output device  8 . Central processing unit  6  is connected for the purpose of data exchange both with memory  7  and with input/output device  8 . Central processing unit  6  controls the functioning of integrated circuit  5 , normally resorting to commands stored in memory  7 . Memory  7  can be executed as a nonvolatile memory, normally a ROM or EEPROM, or as a volatile memory (RAM). Usually both a volatile and a nonvolatile memory are present simultaneously. The commands executed by central processing unit  6  are usually stored in the ROM, partly also in the EEPROM. The EEPROM in addition stores the reference values for the PIN or for the biometric feature and further data required for the application. The RAM serves as a working memory in which data required at the moment are temporarily buffered. 
     The data exchange between integrated circuit  5  and the outside world is effected via input/output device  8 , which is executed for example as a serial interface and electrically connected with the contact of contact bank  4  provided for input/output of data. The inventive method does not necessarily require that the data exchange between integrated circuit  5  and the outside world is handled via contact bank  4 . Instead, a contactless chip card can also be used, by which data exchange is effected not via contact bank  4  but for example via an antenna coil or electric coupling surfaces. 
     Although this is not explicitly shown in  FIG. 1 , chip card  1  can have a fingerprint sensor for detecting the fingerprint by measurement technology. Said sensor would then be mounted at a suitable place on card body  2 . However, the fingerprint sensor will normally be mounted on the terminal, as shown in  FIG. 3 , since fingerprint sensors suitable for integration in chip cards  1  are not very readily available at present. 
       FIG. 3  shows a block diagram of terminal  9  with which chip card  1  enters into data exchange. Terminal  9  has integrated circuit  10  and fingerprint sensor  11 , keyboard  12  and display  13 . Fingerprint sensor  11  can be omitted in the variant of the invention where the chip card has its own fingerprint sensor. Integrated circuit  10  of terminal  9 , in analogy to integrated circuit  5  of chip card  1 , has central processing unit  14  connected with memory  15  and input/output device  16 . Further, central processing unit  14  is also connected with fingerprint sensor  11 , with keyboard  12  and display  13 . 
     Fingerprint sensor  11  can be used to detect a fingerprint of the user by measurement technology. The thus determined data can then be processed in central processing unit  14  and the result of said processing can be transmitted via input/output device  16  to corresponding input/output device  8  of integrated circuit  5  of chip card  1 . Likewise, central processing unit  14  can receive data from integrated circuit  5  of chip card  1  via the two input/output devices  8  and  16 . Via keyboard  12  the user can manually input data required for the particular application. The particular data input required can be indicated on display  13 . 
     To prevent abusive use of chip card  1  by an unauthorized third party, for example in case of loss or theft of chip card  1 , the use of chip card  1  is possible only subsequent to positive identification or verification of the fingerprint. Identification via this biometric feature replaces or supplements authentication of the user by input of a secret personal identification number (PIN) as is usual with chip cards  1 . A reference value for said identification number is stored in memory  7  of integrated circuit  5  so as to be inaccessible from outside and is compared with the inputted identification number. Analogously, reference values for the fingerprint are stored according to the invention in memory  7  of integrated circuit  5 , which are used in the testing of the measuring values. If the PIN comparison or testing of the fingerprint is positive, chip card  1  is enabled for use. Otherwise a certain number of further attempts is normally permitted and if these attempts are not positive either, the chip card is blocked. 
       FIG. 4   a  shows fingerprint  17  with center  18  and minutiae  19 . During evaluation of the fingerprints, the fingerprint is first detected by measurement technology and distinctive details of the fingerprint subsequently extracted from the obtained measuring values. Distinctive features of a fingerprint are for example minutiae. Minutiae are characteristic points or forms of the fingerprint ridges, for example ridge bifurcations  20  or ridge ending points  21 . 
     Further distinctive features of a fingerprint are the pores, which are depicted in  FIG. 4   b  showing an enlarged detail of a fingerprint. The pores of fingerprint  1  are marked by  22  here. 
     For evaluation, the coordinates and the kind of minutiae, for example, can be determined and compared with corresponding reference data. The corresponding reference data are stored in the portable data carrier in tabular form, as shown in Tables 1 and 2. 
     
       
         
               
             
               
               
               
               
               
               
               
               
               
             
           
               
                 TABLE 1 
               
               
                   
               
               
                 for n minutiae: 
               
               
                   
               
             
             
               
                   
               
             
          
           
               
                 x 1   
                 y 1   
                 t 1 |α 1   
                 r 11   
                 r 12   
                 r 13   
                 r 14    
                 . . .  
                 r 1,20   
               
               
                 x 2   
                 x 2   
                 t 2 |α 2   
                 r 21   
                 r 22   
                 r 23   
                 r 24    
                 . . .  
                 r 2,20   
               
               
                 x 3   
                 x 3   
                 t 3 |α 3   
                 r 31   
                 r 32   
                 r 33   
                 r 34    
                 . . .  
                 r 3,20   
               
               
                 X n   
                 Y n   
                 t n |α n   
                 r n1   
                 r n2   
                 r n3   
                 r n4    
                 . . .  
                 r n,20   
               
               
                   
               
             
          
         
       
     
     
       
         
               
             
               
               
               
             
           
               
                 TABLE 2 
               
               
                   
               
               
                 for m pores: 
               
               
                   
               
             
             
               
                   
               
             
          
           
               
                   
                 x 1   
                 y 1   
               
               
                   
                 x 2   
                 x 2   
               
               
                   
                 x 3   
                 x 3   
               
               
                   
                 x m   
                 y m   
               
               
                   
                   
               
             
          
         
       
     
     In Tables 1 and 2, x i  and y i  designate the positions of the ith minutia or pore. In Table 1, t|α moreover states the type and direction of the minutia, these data being stored in compressed form, preferably in one byte in the memory of the chip card. The ridge counts of the ith minutia with respect to the yth neighbor is stated as r ij . The table contains a total number n of minutiae (Table 1), the total number of pores considered being m. Moreover, the tables also store the coordinates of the reference point (x com , y com ) and the direction of the reference vector (α com ). 
       FIG. 5  finally shows a flowchart indicating the basic procedure for verifying a fingerprint. 
     First, fingerprint  1  is sensed by a sensor in first step  30  and the distinctive features are extracted. A division into minutiae (step  31 ) and pores (step  32 ) is thereby effected. The check of the minutiae is done in the terminal in step  33 . For the check the reference data relating to the minutiae, which were made available separately according to minutiae and pore information in step  36 , are transmitted from the chip card to the terminal via an interface in step  37 . 
     In dependence on the check result in step  33 , the verification is either aborted (step  35 ) if the minutiae detected or extracted from the fingerprint do not match the reference data stored in the chip card. 
     During the check of the minutiae a matching pair of minutiae is first sought and the position used to determine an offset and optionally a rotation angle of the fingerprint. Offset and rotation angle are taken as a basis for the further check, whereby a correction of offset and rotation angle can be made after the check of further minutiae. 
     In the case of a match, step  33  yields an offset and a rotation angle that are made available for following step  34 . In this step, the offset and rotation angle that were determined in the minutiae check are used to generate relative positions with respect to the position of the minutiae, said positions being transmitted to the chip card. 
     In the chip card a comparison of the currently sensed pores with the reference data of the pores is thereupon performed in step  38 . Here, too, either the process of verification is aborted (step  35 ) or the check is terminated successfully with step  39 , i.e. access to the card data and thus to the desired services is granted, in dependence on the result of comparison. 
     The inventive method makes it possible for the comparatively elaborate minutiae check to be effected in a terminal while the less elaborate check of the pores is done in the chip card.