A biometric authentication method executed by a biometric authentication system including a server device to store first biometric data of a plurality of users in a registering unit;
- and a client device to retain second biometric data of the plurality of users in a retaining unit together with user information, the biometric authentication method comprising:
- verifying biometric data sampled from a user among the plurality of users with the second biometric data retained in the retaining unit, wherein the second biometric data is retained in the retaining unit when the server device authenticates the second biometric data by use of the first biometric data and the authentication is successful;
- acquiring synthesized information of the second biometric data of which verification is successful and the biometric data sampled from the user;
- and
- authenticating the synthesized information by use of the first biometric data specified by the user information of the biometric data of which the verification is successful in plural sets of the first biometric data registered in the registering unit,
- wherein a first processor of the client device executes:
- extracting information on feature points from the biometric data of the user,
- selecting match feature points getting matched under predetermined conditions with feature points contained in the second biometric data from the extracted feature points,
- determining whether or not the verification gets successful or unsuccessful by use of the information on the selected match feature points, and
- organizing the information on the match feature points into the synthesized information,
- determining such a polygonal area as to embrace all the match feature points and to minimize an area on the basis of the match feature point information;
- and
- calculating, as a match rate, a rate of the match feature points to all the feature points embraced in the polygonal area,
- wherein the first processor executes, if the calculated match rate exceeds a predetermined threshold value, determining that the verification becomes successful.
- wherein a second processor of the server device executes:
- storing a history of the match rates together with time information with respect to each user;
- calculating a variation quantity of the match rate on the basis of the stored match rate history and the stored time information and monitoring that the variation quantity of the match rate reaches a predetermined decrease status;
- and
- notifying the client device that the match rate variation quantity about the user whose biometric data is authenticated reaches the predetermined decrease status, and
- the first processor further executes updating, when the server device notifies the client device that the match rate variation quantity about the user reaches the predetermined decrease status, the second biometric data with the biometric data sampled from the user.