JP2006146796A - Authentication system, authentication method, facility terminal, and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To enhance security in entering facilities by double authentication which is obtained by combining the collation of facial image data by a computer with user confirmation by the visual recognition of an facilities attendant. <P>SOLUTION: When a user portable terminal 10 authenticates a user him/herself, the facial image data of the user registered in the storage part 12 of the user portable terminal 10 is transmitted to a facilities terminal 20. When the facilities terminal 20 authenticates the facial image data and the depression of a visual recognition button 25 by the facilities attendant is detected, admittance information is transmitted from the facilities terminal 20 to an entrance gate device 30. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an authentication system, an authentication method, a facility terminal, and a program, and more particularly, to an authentication system, an authentication method, a facility terminal, and a program using an authentication image.

  A conventional technique for performing authentication using an authentication image is disclosed in, for example, Japanese Patent Laid-Open No. 2002-236664 (Patent Document 1). In this Patent Document 1, the user displays an authentication image (block image, picture, mark, etc.) stored in the storage unit of the portable terminal, and the store terminal reads the displayed authentication image and is registered in advance. It describes that an authentication result is displayed in comparison with an authentication image.

JP 2002-236664 A (paragraphs “0043” to “0045”)

  In Patent Document 1 described above, authentication is started by a user displaying an authentication image stored in a storage unit. However, since user authentication for reading out the authentication image from the storage unit is not performed, it is possible for a third party to display the authentication image using another person's mobile terminal and start authentication. After authentication starts, the authentication image read by the store terminal is only checked against a pre-registered authentication image, so that the user is authenticated regardless of whether the user of the mobile terminal is the person or a third party. There is a problem.

  The authentication image in Patent Document 1 is a block image, a mark, or the like, and is not an image such as a face image that can directly recognize the user. Therefore, only the result of whether or not the store clerk is also authenticated by the store terminal is known, and no consideration is given to security enhancement by double authentication that combines verification by the store terminal and visual verification of the face by the store clerk. It has not been.

  An object of the present invention is to provide an authentication system, an authentication method, a facility terminal, and a program that solve at least one of the above problems.

The first authentication system of the present invention is an authentication system comprising a user portable terminal, a facility terminal, and an entrance gate device,
The user portable terminal includes a storage unit in which user face image data is registered in advance, and includes means for transmitting the face image data registered in the storage unit to the facility terminal,
The facility terminal includes a member information database in which member information including user face image data is registered in advance, and a visual confirmation button that is pressed when a user confirmation is visually confirmed by a facility receptionist. Means for checking whether face image data received from a portable terminal is registered in the member information database; means for displaying member information including face image data of the corresponding user together with an authentication result when registered; Means for transmitting admission permission information to the admission gate device when face image data is authenticated and the visual confirmation button is pressed by a receptionist;
The admission gate device has means for receiving the admission permission information from the facility terminal and opening the admission gate for a certain period of time.

  According to a second authentication system of the present invention, in the first authentication system of the present invention, the facility terminal further includes a video camera, and the facility terminal instructs the video camera to take a picture when receiving facial image data from the user portable terminal. And a means for recording the photographed image data.

The third authentication system of the present invention is an authentication system comprising a user portable terminal, a facility terminal, an entrance gate device, an authentication server, and a network connecting the facility terminal and the authentication server,
The user portable terminal includes a storage unit in which user face image data is registered in advance, and includes means for transmitting the face image data registered in the storage unit to the facility terminal,
The facility terminal includes a visual confirmation button that is pressed when the facility reception staff visually confirms the user, and transfers the face image data received from the user portable terminal to the authentication server to request authentication. Means for displaying the authentication result received from the authentication server and member information including face image data, and the face image data is authenticated by the authentication server, and the reception checker presses the visual confirmation button. Means for transmitting admission permission information to the admission gate device,
The admission gate device has means for receiving the admission permission information from the facility terminal and opening the admission gate for a certain period of time,
The authentication server comprises a member information database in which member information including user face image data is registered in advance, and means for collating whether the face image data received from the facility terminal is registered in the member information database; Means for transmitting member information of the corresponding user together with the authentication result to the facility terminal when registered.

  A fourth authentication system of the present invention is the third authentication system of the present invention, further comprising a video camera, wherein the facility terminal instructs the video camera to take a picture when receiving facial image data from the user portable terminal. And a means for transmitting the photographed image data to the authentication server, and the authentication server further comprises means for recording the photographed image data received from the facility terminal.

  According to a fifth authentication system of the present invention, in the first, second, third, or fourth authentication system of the present invention, the user portable terminal further includes means for authenticating the user, and the user is authenticated And transmitting face image data to the facility terminal.

The sixth authentication system of the present invention is an authentication system comprising a user portable terminal, a facility terminal, an entrance gate device, an authentication server, and a network connecting the facility terminal and the authentication server,
The user portable terminal includes a first storage unit in which facility identification user identification information is registered in advance, and a unit that generates and displays a list of facilities registered in the first storage unit is selected by the user. Means for extracting user identification information corresponding to the facility and transmitting the user identification information to the facility terminal;
The facility terminal includes a second storage unit in which face image data corresponding to user identification information is registered in advance, and a visual confirmation button that is pressed when a user confirmation is visually confirmed by a receptionist at the facility, Means for extracting face image data registered in correspondence with the user identification information received from the user portable terminal from the second storage unit and transmitting it to the authentication server to request authentication; and receiving from the authentication server Means for displaying the authentication result and member information including face image data, and the entrance gate when the face image data is authenticated by the authentication server and the visual confirmation button is pressed by a receptionist. Means for transmitting admission information to the device,
The admission gate device has means for receiving the admission permission information from the facility terminal and opening the admission gate for a certain period of time,
The authentication server comprises a member information database in which member information including user face image data is registered in advance, and means for collating whether the face image data received from the facility terminal is registered in the member information database; Means for transmitting member information of the corresponding user together with the authentication result to the facility terminal when registered.

  The seventh authentication system of the present invention is the sixth authentication system of the present invention, further comprising a video camera, wherein the facility terminal instructs the video camera to take a picture when receiving user identification information from the user portable terminal. And a means for transmitting the photographed image data to the authentication server, and the authentication server further comprises means for recording the photographed image data received from the facility terminal.

  According to an eighth authentication system of the present invention, in the sixth or seventh authentication system of the present invention, the user portable terminal further includes means for authenticating the user, and when the user is authenticated, the facility list is generated. , Display.

  According to a ninth authentication system of the present invention, in any of the first to eighth authentication systems of the present invention, data transmission from the user portable terminal to the facility terminal is performed by short-range wireless communication. To do.

The first facility terminal of the present invention is a facility terminal connected to the user portable terminal and the entrance gate device,
A member information database in which member information including user face image data is registered in advance, and a visual confirmation button that is pressed when a user confirmation is visually confirmed by a receptionist at the facility, are received from the user portable terminal. Means for verifying whether face image data is registered in the member information database; means for displaying member information including face image data of the corresponding user together with an authentication result if registered; and the face image data is authenticated And a means for transmitting admission permission information to the admission gate device when the reception checker presses the visual confirmation button.

The second facility terminal of the present invention is a facility terminal connected to the user portable terminal, the entrance gate device, and the authentication server,
Means for requesting authentication by transferring face image data received from the user portable terminal to the authentication server, comprising a visual confirmation button to be pressed when a user confirmation is made visually by a receptionist at the facility; Means for displaying the authentication result received from the server and member information including face image data, and when the face image data is authenticated by the authentication server and the visual confirmation button is pressed by a receptionist, Means for transmitting admission permission information to the admission gate device.

The third facility terminal of the present invention is a facility terminal connected to the user portable terminal, the entrance gate device, and the authentication server,
User identification received from the user portable terminal, comprising: a storage unit in which face image data corresponding to user identification information is registered in advance; and a visual confirmation button that is pressed when user confirmation is visually confirmed by a receptionist at the facility. Means for extracting face image data registered in correspondence with information from the storage unit and transmitting it to the authentication server to request authentication; and member information including an authentication result and face image data received from the authentication server And means for transmitting admission permission information to the admission gate device when the face image data is authenticated by the authentication server and the visual confirmation button is pressed by a receptionist. Have.

The first authentication method of the present invention is an authentication method using a user portable terminal, a facility terminal, and an entrance gate device,
When authentication of the user is performed at the user portable terminal, the face image data of the user registered in the user portable terminal is transmitted to the facility terminal, and the face image data is authenticated at the facility terminal. In addition, when it is detected that the user confirmation is made by the facility staff, the entrance permission information is transmitted from the facility terminal to the entrance gate device.

The second authentication method of the present invention is an authentication method using a user portable terminal, a facility terminal, an authentication server, and an entrance gate device,
When the user mobile terminal is authenticated as the user, the face image data of the user registered in the user mobile terminal is transmitted to the facility terminal, and the face image data received by the facility terminal is transmitted. When it is detected that the face image data has been authenticated by the authentication server and user confirmation has been made by a facility clerk at the facility terminal, the transfer is made to the authentication server to request authentication. The admission permission information is transmitted to the gate device.

The third authentication method of the present invention is an authentication method using a user portable terminal, a facility terminal, an authentication server, and an entrance gate device,
When the user portable terminal is authenticated as the user, the user identification information registered in the user portable terminal is transmitted to the facility terminal, and the facility terminal corresponds to the user identification information. When the registered face image data is extracted and transmitted to the authentication server, and it is detected that the face image data is authenticated by the authentication server and that the facility staff has confirmed the user by the facility terminal. The entrance permission information is transmitted from the facility terminal to the entrance gate device.

  The first program of the present invention has a function for registering member information including user face image data in a database, a function for checking whether face image data received from a first external device is registered in the database, and registration A function to display the member information including the face image data of the corresponding user together with the authentication result when it has been set, and when the face image data is authenticated and the pressing of the specific button is detected, the second external device is entered. A function of transmitting permission information is realized in a computer.

  The second program of the present invention includes a function for requesting authentication by transferring face image data received from the first external device to the second external device, and an authentication result and face image received from the second external device. A function for displaying member information including data, and when the face image data is authenticated by the second external device and the pressing of a specific button is detected, admission permission information is transmitted to the third external device. Functions are realized on a computer.

  The third program of the present invention has a function of registering face image data corresponding to user identification information in a database, and image information registered corresponding to user identification information received from the first external device from the database. A function to extract and transmit to a second external device to request authentication; a function to display an authentication result received from the second external device and member information including face image data; and the face image data is the first The computer realizes a function of transmitting admission permission information to the third external device when it is authenticated by the second external device and the pressing of the specific button is detected.

  The present invention performs double authentication that combines the verification of face image data by a computer and the verification of a user's face visually registered by a facility staff and registered face image data. Has the effect of strengthening.

  Embodiments of the present invention will be described in detail with reference to the drawings.

  FIG. 1 is a diagram showing a configuration of a first exemplary embodiment of the present invention, in which a user portable terminal 10, a facility terminal 20, an entrance gate device 30, an authentication server 40, the facility terminal 20, and the authentication And a network 100 to which the server 40 is connected.

  The user portable terminal 10 is a portable information terminal such as a cellular phone, a PHS (Personal Handyphone System), or a PDA (Personal Digital Assistance) used by the user. The user portable terminal 10 includes a control unit 11, a storage unit 12, a display unit 13, a short-range wireless communication unit 14, and an input unit 15.

The control unit 11 is a control device such as a CPU (Central Processing Unit), and its operation is controlled by a program. The control unit 11
-A function to display a password input screen when the face image transmission program is started.
-A function that verifies a password entered by a user against a previously registered password.
A function of reading face image data from the storage unit 12 and transmitting it to the facility terminal 20 when the password is authenticated.
It has.

  The storage unit 12 is a readable / writable storage device. In the storage unit 12, face image data, face image data read, and a transmission password are registered in advance. The face image data is a captured face image of the user and may be captured by an external camera. If the user portable terminal 10 has a camera, the face image data is captured by the built-in camera. There may be. The display unit 13 is a display device such as an LCD (Liquid Crystal Display), and the short-range wireless communication unit 14 is a communication device having a short-range communication function such as infrared communication or Bluetooth. The input unit 15 is input means such as a numeric keypad, function keys, and pointing device, and is used for inputting a password or the like.

The facility terminal 20 is an information processing device such as a personal computer installed near the entrance of a facility such as a membership sports club or a resort facility, and includes a short-range wireless communication unit 21, a control unit 22, an input unit 23, A display unit 24 and a visual confirmation button 25 are provided. The near field communication unit 21 is a communication device having a near field communication function such as infrared communication or Bluetooth. The control unit 22 is a control device such as a CPU, and its operation is controlled by a program. The control unit 22
A function of transmitting face image data received from the user portable terminal 10 to the authentication server 40 and requesting authentication.
A function for displaying the authentication result and member information received from the authentication server 40.
A function of transmitting admission permission information to the admission gate device 30 when the face image data is authenticated and the visual confirmation button 25 is pressed.
It has.
The input unit 23 is a keyboard or a pointing device including a numeric keypad and function keys, and has a function of inputting member information such as name and address. The display unit 24 is a display device such as an LCD (Liquid Crystal Display). The visual confirmation button 25 is, for example, a non-lock type button that is pressed when the receptionist at the facility visually compares the user's face with the registered face image and determines that they match.

  The entrance gate device 30 is a device that performs opening / closing control of the entrance gate, such as an automatic ticket gate device or a flapper gate at a station, provided near the reception of a facility such as a membership-based sports club or a resort facility. The entrance gate device 30 has a function of opening the entrance gate for a predetermined time by receiving entrance permission information from the facility terminal 20. The connection between the entrance gate device 30 and the facility terminal 20 may be via a LAN (Local Area Network), or data may be transmitted / received directly or by wire.

The authentication server 40 is an information processing apparatus such as a workstation server, and includes a control unit 41 and a storage unit 42 including a member information database 421. The control unit 41 is a control device such as a CPU, and its operation is controlled by a program. The control unit 41
A function of registering and updating member information including face image data in the member information database 421 in response to a request from the facility terminal 20.
A function of receiving face image data from the facility terminal 20 and collating and authenticating the face image data registered in the member information database 421.
A function of transmitting the authentication result to the facility terminal 20 (in the case of authentication OK, the corresponding member information acquired from the member information database 421).
It has. The storage unit 42 is a readable / writable storage device and includes a member information database 421. In this member information database 421, as shown in FIG. 2 (a diagram showing an example of data stored in the member information database 421), a member number, name, address, telephone number, date of birth, gender, expiration date, Face image data etc. are registered at the time of member registration.

  The network 100 is a communication network such as the Internet or a LAN, and connects the facility terminal 20 and the authentication server 40.

  Next, the operation of the first exemplary embodiment of the present invention will be described in detail with reference to the drawings.

  First, the operation at the time of member registration will be described with reference to FIGS. FIG. 3 is a flowchart showing the operation at the time of member registration.

  When a user newly registers as a member in a membership-type sports club, etc., the user fills in a predetermined form with personal information such as name, address, telephone number, date of birth, and gender, and submits it to the receptionist . The reception clerk inputs user information consisting of the user's personal information and member number on the member registration screen of the facility terminal 20 (step A1 in FIG. 3), and requests the user to transmit face image data when the input is completed.

  The user enters the face image data transmission procedure according to the request of the receptionist. Specifically, the user starts a face image data transmission program on the user portable terminal 10. As the activation method, for example, the face image data transmission menu may be selected from the menu provided in the user portable terminal 10, or may be performed by pressing a predetermined function key (step A2). ).

  When the face image data transmission menu is selected or when a predetermined function key is pressed, the control unit 11 of the user portable terminal 10 displays a password input screen on the display unit 13 (step A3). .

  When the user inputs a password from the input unit 15 (step A4), the control unit 11 checks whether the input password matches a password registered in advance in the storage unit 12 (step A5). If they do not match, the control unit 11 displays a password re-input request screen on the display unit 13 (step A6).

  When the password verification in step A5 matches and is authenticated, the control unit 11 acquires the face image data from the storage unit 12, and transmits the facial image data to the facility terminal 20 through the short-range wireless communication unit 14 by infrared communication or the like (step). A7). In step A1 to step A7, the face image data itself is not displayed on the user portable terminal 10.

  The control unit 22 of the facility terminal 20 displays the face image data received via the short-range wireless communication unit 21 on the display unit 24, and the receptionist confirms that the displayed face image data is the face of the person. . Thereafter, by a registration operation on the screen by the user, the control unit 22 transmits the face image data to the authentication server 40 together with the user information input in Step A1, and requests membership information registration (Step A8). The control unit 41 of the authentication server 40 registers the member information (see FIG. 3) including the received user information and face image data in the member information database 421 (step A9). Thereafter, the control unit 41 notifies the facility terminal 20 that the member registration has been completed (step A10), and the control unit 22 of the facility terminal 20 displays the received registration completion notification on the display unit 24 (step A11).

  Next, the user authentication operation when entering the facility will be described with reference to FIG. 1, FIG. 2, and FIG. FIG. 4 is a flowchart showing an operation of user authentication at the time of facility entrance according to the first embodiment of the present invention.

  When a user enters a facility such as a membership-type sports club, user authentication is first performed at the reception. The user transmits face image data for authentication from the user portable terminal 10 to the facility terminal 20 installed at the reception by short-range wireless communication. This specific operation is shown in steps B1 to B6 in FIG. 4, but these operations are the same as the operations in steps A2 to A7 in FIG.

  Following step B6, the control unit 22 of the facility terminal 20 transfers the face image data received from the user portable terminal 10 to the authentication server 40, and requests authentication (step B7). The control unit 41 of the authentication server 40 collates the received face image data with the face image data registered in the member information database 421, and determines whether there is a match (step B8). Then, the control unit 41 notifies the facility terminal 20 of the authentication result. At this time, when authenticated (when matched as a result of the collation), the control unit 41 transmits the fact of authentication to the facility terminal 20 together with the member information as shown in FIG. That is, member information such as the member number, name, address, telephone number, date of birth, sex, expiration date, face image data of the authenticated user is also transmitted to the facility terminal 20. On the other hand, when it is not authenticated (when there is no match as a result of collation), the control unit 41 transmits only a notification that the authentication has not been performed to the facility terminal 20 (step B9).

  The control unit 21 of the facility terminal 20 displays the received authentication result on the display unit 24. At this time, if authenticated, member information is also displayed. If not authenticated, the receptionist informs the user to that effect (step B10). If authenticated, the receptionist refers to the member information displayed on the facility terminal 20 and visually checks whether the displayed face image data belongs to the user who is currently receiving. As a result of the visual inspection, when the reception clerk determines that the face image data matches the face of the current user, the reception clerk presses the visual confirmation button 25. The control unit 21 of the facility terminal 20 detects that the visual confirmation button 25 is pressed, confirms that the authentication by the authentication server 40 is OK, and transmits the entrance permission information to the entrance gate device 30. The admission permission information is instruction information for causing the admission gate device 30 to open the admission gate, and is, for example, a predetermined command, signal, keyword, or the like (steps B11 to B13). The admission gate device 30 that has received admission permission information from the facility terminal 20 opens the admission gate for a certain period of time, and the user enters during that time (step B14).

  Next, a second embodiment of the present invention will be described in detail with reference to the drawings.

  In 1st Embodiment mentioned above, face image data was transmitted to the facility terminal 20 from the user portable terminal 10, and it demonstrated as the authentication server 40 authenticating the face image data transferred from the facility terminal 20. FIG. In the present embodiment, user identification information is transmitted from the user portable terminal 10 to the facility terminal 20, the facility terminal 20 extracts face image data registered in advance corresponding to the user identification information, and the authentication server 40 Is different from that of the first embodiment. For this reason, in the configuration shown in FIG. 1, user identification information is registered in advance in the storage unit 12 of the user portable terminal 10 instead of face image data, and face image data is registered in advance in a storage unit (not shown) of the facility terminal 20. Keep it. Specifically, as shown in FIG. 6 (a diagram showing an example of user identification information stored in the user portable terminal 10 according to the second embodiment of the present invention), user identification information ( For example, a membership number or the like is registered in the user portable terminal 10 in advance. Further, as shown in FIG. 7 (a diagram showing an example of face image data stored in the facility terminal 20 in the second embodiment of the present invention), user face image data in a form corresponding to each user identification information Are registered in the facility terminal 20 in advance.

  Next, an operation of user authentication at the time of facility entrance in the present embodiment will be described with reference to FIGS. FIG. 5 is a diagram showing an example of a display screen of the user portable terminal 10 in the second embodiment of the present invention, and FIG. 8 shows user authentication at the time of facility entrance in the second embodiment of the present invention. It is a flowchart which shows operation | movement.

  Referring to FIG. 8, when the user enters the facility, the user enters a user identification information transmission procedure, and the control unit 11 of the user portable terminal 10 displays a password input screen on the display unit 13. Note that the details of the user identification information transmission procedure are the same as those described in step B1 of FIG. 4, and thus the description thereof is omitted (steps C1 and C2). When the user who has seen the password request screen as shown in FIG. 5 inputs the password from the input unit 15 (step C3), the control unit 11 matches the input password with the password registered in advance in the storage unit 12. (Step C4). If they do not match, the control unit 11 displays a password re-input request screen on the display unit 13 (step C5).

  When the password verification in step C4 matches and is authenticated, the control unit 11 generates a list of facilities registered in the storage unit 12 and displays it on the display unit 13 as shown in FIG. 5 (step C6). When the user selects a facility and presses the confirm button on the facility list screen of FIG. 5, the control unit 11 acquires user identification information corresponding to the selected facility from the storage unit 12 (see FIG. 6). It transmits to the facility terminal 20 via the communication unit 14 (step C7). The control unit 22 of the facility terminal 20 extracts face image data registered corresponding to the user identification information received from the user portable terminal 10 from a storage unit (not shown) (see FIG. 7), and extracts the extracted face image data. It transmits to the authentication server 40 (steps C8 and C9).

  The operations in steps C10 to C16 in FIG. 8 are the same as those in steps B8 to B14 in FIG. 4 (first embodiment), and thus description thereof is omitted.

  As described above, in the first or second embodiment, the facility terminal 20 and the authentication server 40 are used to register face image data by a computer and the user's face visually observed by a facility staff. It performs double authentication combining verification with face image data. For this reason, there is an effect that security at the time of entering the facility is strengthened.

  Moreover, the user portable terminal 10 in the first or second embodiment performs user authentication in advance by password verification as a condition for the user to transmit authentication data. For this reason, there is an effect that it is possible to prevent a third party from using the authentication data by using another person's mobile terminal.

  Next, application examples and modification examples of the present invention will be described.

  In the first embodiment, the authentication server 40 includes the member information database 421, and the authentication server 40 authenticates the face image data and notifies the facility terminal 20 of the authentication result. The facility terminal 20 may be provided with a function. Thereby, installation of the authentication server 40 becomes unnecessary and the effect that a system is simplified is acquired.

  In the user portable terminal 10 of the second embodiment, the facility list is displayed after the user authentication by the password, and the user identification information corresponding to the facility selected by the user is read from the storage unit 12 and transmitted to the facility terminal 20 As explained. In addition to this, when there is only one registered facility, the facility list display is not performed after the user authentication, and the user identification information stored in the storage unit 12 is automatically read and transmitted to the facility terminal 20. It may be. In this case, the control unit 11 of the user portable terminal 10 checks the number of facilities stored in the storage unit 12 after user authentication. Then, the control unit 11 generates and displays a facility list when there are a plurality of facilities, and automatically transmits user identification information to the facility terminal 20 without displaying a list when there is only one facility. As a result, when there is only one facility or user identification information recognition, there is an effect that the selection operation on the list screen by the user becomes unnecessary.

  In the first or second embodiment, the user portable terminal 10 and the facility terminal 20 have been described as performing data transmission / reception via infrared communication or Bluetooth via the short-range wireless communication unit 14. It is good also as data transmission / reception by direct connection and wired communication.

  In the first or second embodiment, the user authentication in the user portable terminal 10 has been described as being performed using a password. However, authentication may be performed using biometric information such as fingerprints and veins. In this case, it is necessary to provide the user portable terminal 10 with fingerprint reading and collation means, but the effect of further enhancing security can be obtained.

  In the first or second embodiment, the visual confirmation button 25 is described as a non-lock type button provided in the facility terminal 20, but the button on the authentication result display screen of the facility terminal 20 is substituted. May be. That is, the facility terminal 20 that has received the authentication result from the authentication server 40 displays a visual confirmation button on the authentication result display screen together with the authentication result and member information when the authentication result is OK. Then, the user may recognize that the control unit 22 has been visually confirmed by pressing a visual confirmation button on the screen. Further, a specific key in the input unit 23 provided in the facility terminal 20 is assigned as a visual confirmation button, and the controller 22 recognizes that the control unit 22 has been visually confirmed by pressing the assigned function key. It may be. As described above, an effect that the configuration of the facility terminal 20 is simplified can be obtained.

  You may further add the recording function of the facility entrance user shown below to the said 1st or 2nd embodiment. In this case, a video camera for taking a picture of the user at the facility entrance gate is newly installed in the facility. Then, when the control unit 22 of the facility terminal 20 receives the face image data or the user identification information from the user portable terminal 10, the video camera is instructed to take a user for a certain time (for example, 3 seconds). The video camera transmits the captured image data to the facility terminal 20 when the photographing for a predetermined time is finished. The facility terminal 20 that has received the captured image data transmits it to the authentication server 40 together with the face image data. The authentication server 40 authenticates the face image data, adds the received date and time information and the member information obtained as a result of the authentication to the photographed image data, and registers them in a facility visit user recording database (not shown) for a certain period. As another method, when face image data or user identification information is received from the user portable terminal 10, only a shooting start instruction is transmitted to the video camera, and shooting is performed on the video camera when the visual confirmation button is pressed. There is a way to indicate the end. In this case, the facility terminal 20 transmits the photographed image received from the video camera at the end of the photographing to the authentication server 40 together with the member information, and the authentication server 40 attaches the reception date information and the member information to the photographed image data and visits the facility. Register in the user recording database for a certain period. Thereby, the effect that a visitor can be confirmed on the facility side at a later date is obtained.

  In the first or second embodiment, when the face image data is transmitted from the facility terminal 20 to the authentication server 40 to request authentication, the facility ID in the first embodiment is changed to the second embodiment. In the form, a facility ID or a membership number may be added and transmitted. In this case, the facility ID corresponding to the member is also registered in the member information database 421 of the authentication server 40. Thereby, since the number of target face images can be narrowed down at the time of face image matching in the authentication server 40, an effect that the matching time is shortened can be obtained.

It is a figure which shows the structure of the 1st Embodiment of this invention. It is a figure which shows an example of the data stored in the member information database. It is a flowchart which shows the operation | movement at the time of member registration. It is a flowchart which shows the operation | movement of the user authentication at the time of the facility entrance in the 1st Embodiment of this invention. It is a figure which shows an example of the display screen of the user portable terminal 10 in the 2nd Embodiment of this invention. It is a figure which shows an example of the user identification information stored in the user portable terminal 10 in the 2nd Embodiment of this invention. It is a figure which shows an example of the face image data stored in the facility terminal 20 in the 2nd Embodiment of this invention. It is a flowchart which shows the operation | movement of the user authentication at the time of the facility entrance in the 2nd Embodiment of this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 User portable terminal 11 Control part 12 Storage part 13 Display part 14 Near field communication part 15 Input part 20 Facility terminal 21 Near field communication part 22 Control part 23 Input part 24 Display part 25 Visual confirmation button 30 Entrance gate apparatus 40 Authentication Server 41 Control unit 42 Storage unit 421 Member information database

Claims (18)

An authentication system comprising a user portable terminal, a facility terminal, and an entrance gate device,
The user portable terminal includes a storage unit in which user face image data is registered in advance, and includes means for transmitting the face image data registered in the storage unit to the facility terminal,
The facility terminal includes a member information database in which member information including user face image data is registered in advance, and a visual confirmation button that is pressed when a user confirmation is visually confirmed by a receptionist at the facility. Means for checking whether face image data received from a portable terminal is registered in the member information database; means for displaying member information including face image data of the corresponding user together with an authentication result if registered; Means for transmitting admission permission information to the admission gate device when face image data is authenticated and the visual confirmation button is pressed by a receptionist;
The said admission gate apparatus has a means to receive the said admission permission information from the said facility terminal, and to open an admission gate for a fixed time, The authentication system characterized by the above-mentioned. The facility terminal further comprises a means for instructing the video camera to take a picture when the face image data is received from the user portable terminal and recording the shot image data. The authentication system according to claim 1. An authentication system comprising a user portable terminal, a facility terminal, an entrance gate device, an authentication server, and a network connecting the facility terminal and the authentication server,
The user portable terminal includes a storage unit in which user face image data is registered in advance, and includes means for transmitting the face image data registered in the storage unit to the facility terminal,
The facility terminal includes a visual confirmation button that is pressed when the facility reception staff visually confirms the user, and transfers the face image data received from the user portable terminal to the authentication server to request authentication. Means for displaying the authentication result received from the authentication server and member information including face image data, and the face image data is authenticated by the authentication server, and the reception checker presses the visual confirmation button. Means for transmitting admission permission information to the admission gate device,
The admission gate device has means for receiving the admission permission information from the facility terminal and opening the admission gate for a certain period of time,
The authentication server comprises a member information database in which member information including user face image data is registered in advance, and means for collating whether the face image data received from the facility terminal is registered in the member information database; An authentication system comprising means for transmitting member information of a corresponding user together with an authentication result to the facility terminal when registered. The facility terminal further includes means for instructing the video camera to take a picture when the face image data is received from the user portable terminal and transmitting the shot image data to the authentication server. 4. The authentication system according to claim 3, wherein the authentication server further includes means for recording captured image data received from the facility terminal. 5. The authentication according to claim 1, 2, 3, or 4, wherein the user portable terminal further includes means for authenticating the user, and transmits face image data to the facility terminal when the user is authenticated. system. An authentication system comprising a user portable terminal, a facility terminal, an entrance gate device, an authentication server, and a network connecting the facility terminal and the authentication server,
The user portable terminal includes a first storage unit in which facility identification user identification information is registered in advance, and a unit that generates and displays a list of facilities registered in the first storage unit is selected by the user. Means for extracting user identification information corresponding to the facility and transmitting the user identification information to the facility terminal;
The facility terminal includes a second storage unit in which face image data corresponding to user identification information is registered in advance, and a visual confirmation button that is pressed when a user confirmation is visually confirmed by a receptionist at the facility, Means for extracting face image data registered in correspondence with the user identification information received from the user portable terminal from the second storage unit and transmitting it to the authentication server to request authentication; and receiving from the authentication server Means for displaying the authentication result and member information including face image data, and the entrance gate when the face image data is authenticated by the authentication server and the visual confirmation button is pressed by a receptionist. Means for transmitting admission information to the device,
The admission gate device has means for receiving the admission permission information from the facility terminal and opening the admission gate for a certain period of time,
The authentication server comprises a member information database in which member information including user face image data is registered in advance, and means for collating whether the face image data received from the facility terminal is registered in the member information database; An authentication system comprising means for transmitting member information of a corresponding user together with an authentication result to the facility terminal when registered. The facility terminal further includes a means for instructing the video camera to take a picture when the user identification information is received from the user portable terminal and transmitting the shot image data to the authentication server. The authentication system according to claim 6, wherein the authentication server further includes means for recording captured image data received from the facility terminal. The authentication system according to claim 6 or 7, wherein the user portable terminal further includes a means for authenticating the user, and generates and displays a list of the facilities when the user is authenticated. The authentication system according to claim 1, wherein data transmission from the user portable terminal to the facility terminal is performed by short-range wireless communication. A facility terminal connected to the user portable terminal and the entrance gate device,
A member information database in which member information including user face image data is registered in advance, and a visual confirmation button that is pressed when a user confirmation is visually confirmed by a receptionist at the facility, are received from the user portable terminal. Means for verifying whether face image data is registered in the member information database; means for displaying member information including face image data of the corresponding user together with an authentication result if registered; and the face image data is authenticated And a means for transmitting admission permission information to the admission gate device when the visual confirmation button is pressed by a receptionist. A facility terminal connected to a user portable terminal, an entrance gate device, and an authentication server,
Means for requesting authentication by transferring face image data received from the user portable terminal to the authentication server, comprising a visual confirmation button to be pressed when a user confirmation is made visually by a receptionist at the facility; Means for displaying the authentication result received from the server and member information including face image data, and when the face image data is authenticated by the authentication server and the visual confirmation button is pressed by a receptionist, A facility terminal comprising means for transmitting admission permission information to the admission gate device. A facility terminal connected to a user portable terminal, an entrance gate device, and an authentication server,
User identification received from the user portable terminal, comprising: a storage unit in which face image data corresponding to user identification information is registered in advance; and a visual confirmation button that is pressed when user confirmation is visually confirmed by a receptionist at the facility. Means for extracting face image data registered in correspondence with information from the storage unit and transmitting it to the authentication server to request authentication; and member information including an authentication result and face image data received from the authentication server And means for transmitting admission permission information to the admission gate device when the face image data is authenticated by the authentication server and the visual confirmation button is pressed by a receptionist. The facility terminal characterized by having. An authentication method using a user portable terminal, a facility terminal, and an entrance gate device,
When authentication of the user is performed at the user portable terminal, the face image data of the user registered in the user portable terminal is transmitted to the facility terminal, and the face image data is authenticated at the facility terminal. And an admission permission information is transmitted from the facility terminal to the admission gate device when it is detected that a user confirmation has been made by a facility attendant. An authentication method using a user portable terminal, a facility terminal, an authentication server, and an entrance gate device,
When the user mobile terminal is authenticated as the user, the face image data of the user registered in the user mobile terminal is transmitted to the facility terminal, and the face image data received by the facility terminal is transmitted. When it is detected that the face image data has been authenticated by the authentication server and user confirmation has been made by a facility clerk at the facility terminal, the transfer is made to the authentication server to request authentication. An authentication method characterized by transmitting admission permission information to a gate device. An authentication method using a user portable terminal, a facility terminal, an authentication server, and an entrance gate device,
When the user portable terminal is authenticated as the user, the user identification information registered in the user portable terminal is transmitted to the facility terminal, and the facility terminal corresponds to the user identification information. When the registered face image data is extracted and transmitted to the authentication server, and it is detected that the face image data is authenticated by the authentication server and that the facility staff has confirmed the user by the facility terminal. An authentication method characterized by transmitting admission permission information from the facility terminal to the admission gate device. A function for registering member information including face image data of the user in the database, a function for checking whether the face image data received from the first external device is registered in the database, and the face of the corresponding user if registered. A function of displaying member information including image data together with an authentication result, and a function of transmitting admission permission information to the second external device when the face image data is authenticated and the pressing of a specific button is detected. A program to make it happen. A function of requesting authentication by transferring face image data received from the first external device to the second external device, an authentication result received from the second external device, and member information including face image data are displayed. Function for causing a computer to realize a function, a function of transmitting admission permission information to a third external device when the face image data is authenticated by the second external device and pressing of a specific button is detected program. A function of registering face image data corresponding to user identification information in a database, image information registered corresponding to user identification information received from a first external device is extracted from the database, and stored in a second external device A function to send and request authentication, a function to display an authentication result received from the second external device and member information including face image data, the face image data is authenticated by the second external device, and A program for causing a computer to realize a function of transmitting admission permission information to a third external device when the pressing of a specific button is detected.

Images