System, apparatus, and program for biometric authentication

A server apparatus communicable with a client apparatus which executes a biometric authentication and transmits obtained biometric authentication information, and verifying the validity of the biometric authentication information received from the client apparatus based on a predetermined biometric authentication policy, the server apparatus comprising:

• an environmental information policy storage device having stored, in advance, an environmental information policy indicating a condition to be satisfied by the environmental information during the biometric authentication;
• a retry policy storage device having stored, in advance, retry policy information in which information indicating that a “biometric authentication information verification result is legal or illegal”, information indicating that an “environmental information verification result is illegal”, and information indicating “permission of retry” are made to correspond to one another;
• an account lock storage device having stored, in advance, account lock information in which information indicating that a “biometric authentication information verification result is illegal”, information indicating that an “environmental information verification result is illegal”, information indicating “past retry count is equal to or greater than predetermined number”, and information indicating “a strength of an account lock” are made to correspond to one another;
• a principal confirmation information temporary storage device configured to store a determination result of a determination device for a preset certain period as a past principal confirmation information;
• a retry counter storage device configured to store a retry count for every user;
• a user database device configured to store accounts of all users registered in advance as well as an account lock flag and unlocking time, the account lock flag indicating an account lock state;
• an environmental information verification device configured to verify the validity of the environmental information received based on the environmental information policy when the server apparatus receives “the environmental information during execution of the biometric authentication, the environmental information including at least one of a luminance information, a humidity information, and a biological detection information” and the “biometric authentication information” from the client apparatus;
• the determination device configured to determine whether the biometric authentication information verification result using the biometric authentication policy and the environmental information verification result using the environmental information verification device correspond to a principal confirmation success or a principal confirmation failure based on the retry policy information, the account lock information and the past principal confirmation information, the principal confirmation failure indicating the “permission of the retry” or “account lock”;
• a device configured to return an improvement message related to the environmental information to the client apparatus if the determination device determines that the biometric authentication information verification result using the biometric authentication policy and the environmental information verification result using the environmental information verification device correspond to the “permission of the retry” as the principal confirmation failure;
• a retry counter management device configured to increment the retry counter if the determination device determines that the biometric authentication information verification result using the biometric authentication policy and the environmental information verification result using the environmental information verification device correspond to the “permission of the retry” as the principal confirmation failure;
• and
• an account lock device configured to lock the account of the user stored in the user database device on the basis of the “strength of the account lock” of the account lock information if the determination device determines that the biometric authentication information verification result using the biometric authentication policy and the environmental information verification result using the environmental information verification device correspond to the “account lock” as the principal confirmation failure.

A computer program stored in a non-transitory computer-readable storage medium used by a server apparatus communicable with a client apparatus which executes a biometric authentication and transmits obtained biometric authentication information, and verifying the validity of the biometric authentication information received from the client apparatus based on a predetermined biometric authentication policy, the program comprising:

• a first program code, when executed by a processor, causing a computer of the server apparatus to execute a processing for writing, in advance, an environmental information policy indicating a condition to be satisfied by the environmental information during the biometric authentication in a storage device of the computer of the server apparatus;
• a second program code, when executed by the processor, causing the computer to execute a processing for writing, in advance, retry policy information in which information indicating that a “biometric authentication information verification result is legal or illegal”, information indicating that an “environmental information verification result is illegal”, and information indicating “permission of retry” are made to correspond to one another, in a storage device of the computer;
• a third program code, when executed by the processor, causing the computer to execute a processing for writing, in advance, account lock information in which information indicating that a “biometric authentication information verification result is illegal”, information indicating that an “environmental information verification result is illegal”, information indicating “past retry count is equal to or greater than predetermined number”, and information indicating “a strength of an account lock” are made to correspond to one another, in a storage device of the computer;
• a fourth program code, when executed by the processor, causing the computer to execute a processing for storing a determination result of a determination processing for a preset certain period as a past principal confirmation information, in a storage device of the computer;
• a fifth program code, when executed by the processor, causing the computer to execute a processing for writing, a retry count for every user, in a storage device of the computer;
• a sixth program code, when executed by the processor, causing the computer to execute a processing for writing, accounts of all users registered in advance as well as an account lock flag and unlocking time, the account lock flag indicating an account lock state, in a storage device of the computer;
• a seventh program code, when executed by the processor, causing the computer to execute an environmental information verification processing for verifying the validity of the environmental information received based on the environmental information policy when the server apparatus receives “the environmental information during execution of the biometric authentication, the environmental information including at least one of a luminance information, a humidity information, and a biological detection information” and the “biometric authentication information” from the client apparatus;
• an eighth program code, when executed by the processor, causing the computer to execute a determination processing for determining whether the verification result of the biometric authentication information using the biometric authentication policy and the verification result of the environmental information using the environmental information verification processing correspond to a principal confirmation success or a principal confirmation failure based on the retry policy information, the account lock information and the past principal confirmation information, the principal confirmation failure indicating the “permission of the retry” or “account lock”;
• a ninth program code, when executed by the processor, causing the computer to execute a processing for returning an improvement message related to the environmental information to the client apparatus if it is determined that the verification result of the biometric authentication information using the biometric authentication policy and the verification result of the environmental information using the environmental information verification processing correspond to the “permission of the retry” as the principal confirmation failure;
• a tenth program code, when executed by the processor, causing the computer to execute a processing for incrementing the retry counter if the determination processing determines that the biometric authentication information verification result using the biometric authentication policy and the environmental information verification result using the environmental information verification processing correspond to the “permission of the retry” as the principal confirmation failure;
• and
• an eleventh program code, when executed by the processor, causing the computer to execute a processing for locking the account of the user stored in the storage device on the basis of the “strength of the account lock” of the account lock information if the determination processing determines that the biometric authentication information verification result using the biometric authentication policy and the environmental information verification result using the environmental information verification processing correspond to the “account lock” as the principal confirmation failure.