JPWO2019186792A1 - Admission management system - Google Patents

Abstract

The admission management system of the present invention includes an ID acquisition unit that acquires the user's ID read by the reading device, an image acquisition unit that acquires the user's image captured by the imaging device, and the user's ID, the said. A storage unit that stores an authentication element, which is an element used for user authentication, and user information associated with information used for authentication of the authentication element, which is collation information indicating the characteristics of the user's authentication element. An extraction unit that reads the authentication element associated with the ID acquired by the ID acquisition unit from the storage unit and extracts a portion related to the authentication element from the image acquired by the image acquisition unit, and the ID acquisition unit. The authentication element includes an authentication unit that reads the collation information associated with the ID acquired by the unit from the storage unit and collates with the portion extracted by the extraction unit, and the authentication element is the corresponding collation information. There are at least two types with different amounts of information, and the authentication element can be selected and set for each ID in the user information.

Description

The present invention relates to an admission management system.

The conventional entry / exit management device succeeds in authentication by comparing the face image captured by the imaging means with a plurality of access permission face images stored in the storage means by the first authentication means. 2 When the authentication by the first authentication means fails in the authentication means, if the authentication is successful by comparing the specific information read by the reading means with the plurality of entry / exit permission information stored in the storage means, the authentication is performed. The electric key is controlled to the unlocked state by the lock control means. Then, the face image captured by the imaging means when the authentication by the second authentication means is successful is added to the storage means and stored as an entry / exit permission face image. (See, for example, Patent Document 1).

As a result, when a user who is permitted to enter or leave the room first brings a recording medium such as an IC card close to the reading means to read specific information, the user's face image becomes a storage means as an entry / exit permitted face image. After being memorized, the electric key is unlocked only by taking an image of the user's face.

Japanese Unexamined Patent Publication No. 2014-234637

However, there is a level of security. In particular, when the user has an IC card and reads it, if the security level is low, no additional collation is required, and if the security level is medium, a simple addition such as a name tag is required. In some cases, collation of is sufficient.
On the other hand, in Patent Document 1, in all cases, a face image having a large amount of data is stored, and the face image is used for collation processing, so that a large storage means must be provided.

The present invention has been made to solve the above problems, and can reduce the load of the process of authenticating the user, and can save the resource for storing the information used for the authentication of the user. The purpose is to get the system.

The admission management system according to the present invention is applied to a controlled area provided at the entrance with a reading device that reads an ID stored in a storage medium carried by the user and an imaging device that captures an image of the user. An entrance management system that authenticates the user based on the ID read by the reading device and the image captured by the imaging device when a person enters the controlled area from the entrance. An ID acquisition unit that acquires the ID from the reading device, an image acquisition unit that acquires the image from the imaging device, the ID of the user, an authentication element that is an element used for authentication of the user, and the above. A storage unit that stores user information that is information used for authentication of an authentication element and is associated with collation information indicating the characteristics of the authentication element of the user, and a storage unit that is associated with the ID acquired by the ID acquisition unit. The extraction unit that reads the authentication element from the storage unit and extracts the portion related to the authentication element from the image acquired by the image acquisition unit and the collation information associated with the ID acquired by the ID acquisition unit are described. There are at least two types of the authentication element, which are read from the storage unit and collate with the portion extracted by the extraction unit, and the amount of the corresponding collation information is different, and the user information. It is an admission management system that can select and set the authentication element for each ID in the above.

According to the admission management system according to the present invention, at least two types of authentication elements having different amounts of verification information used for authentication of the authentication element can be authenticated, and the authentication element can be selected and set for each user. Therefore, the load of the process for authenticating the user can be reduced, and the resource for storing the information used for the user authentication can be saved.

It is a block diagram of the admission management system according to Embodiment 1 of this invention. This is user information of the admission management system according to the first embodiment of the present invention. It is a flowchart which shows the operation of the admission management system by Embodiment 1 of this invention.

Hereinafter, preferred embodiments of the entrance management system of the present invention will be described with reference to the drawings.

Embodiment 1.
FIG. 1 is a block diagram of an admission management system according to the first embodiment of the present invention.

First, the outline of the admission management system according to the first embodiment of the present invention will be described with reference to FIG. The entrance management system 10 shown in FIG. 1 is composed of a control unit 11, a storage unit 12, and an interface unit 13, and is provided at the entrance of the control area 1 to read an ID stored in a storage medium 21 carried by a user. The reading device 20, the imaging device 30 that captures the user's image, and the admission restriction device 40 that sets and releases the admission restriction for the user are connected to the control unit 11 via the communication network 50 and the interface unit 13. Then, the control unit 11 executes the program 12a stored in the storage unit 12, and the ID read by the reading device 20, the image captured by the imaging device 30, and the user information 12b stored in the storage unit 12 are obtained. The user is authenticated based on the above, and when the user authentication is successful, that is, when the user can be confirmed, a signal for releasing the admission restriction is output to the admission restriction device 40. Further, the acquired information 12c is recorded in the storage unit 12 based on the user information 12b.

The admission management system 10 shown in FIG. 1 will be described in detail below.

The storage medium 21 stores the user's ID. As the storage medium 21, for example, an RF tag for RFID (Radio frequency identification) is used. RF tags are sometimes referred to as IC tags or RFID tags. RF tags are classified according to the RFID classification such as electromagnetic coupling, electromagnetic induction, transmission method such as microwave (radio wave), and communication frequency, and the communication accuracy, communication distance, communication range, etc. are different, but one type. RF tags may be used, or a plurality of types of RF tags may be used in combination for each user.

The reading device 20 reads the user's ID stored in the storage medium 21 provided at the entrance of the control area 1, and sends the ID read from the storage medium 21 to the control unit 11 via the communication network 50 and the interface unit 13. Send. As the reading device 20, for example, a reader / writer for RFID is used. As the reader / writer, a reader / writer corresponding to the type of RF tag is used. The reader / writer may have at least a reader function among a function of reading data from an RF tag (reader function) and a function of writing data to an RF tag (writer function).

The image pickup device 30 is provided at the entrance of the control area 1 to capture an image of the user, and transmits the captured image to the control unit 11 via the communication network 50 and the interface unit 13. When the user heads for the entrance of the controlled area 1 or the reading device 20, the image capturing device 30 captures an image including the user's face and the authentication element used by the entrance management system 1 for the user's authentication.

Here, the authentication elements are, for example, a face, a name tag, an employee ID card, a uniform, and an armband.

The admission restriction device 40 is provided at the entrance of the controlled area 1 to set an admission restriction for the user, and releases the admission restriction from the control unit 11 connected via the communication network 50 and the interface unit 13. When the signal is received, the admission restrictions are lifted. The entrance restriction device 40 is, for example, an electronic lock of a door provided at the entrance of the controlled area 1 and a security gate provided at the entrance of the controlled area 1.

The storage unit 12 stores the program 12a executed by the control unit 11, the user information 12b associated with the ID, the authentication element, the verification information, the processing information, and the permitted area, and the acquired information 12c. The storage unit 12 is, for example, a RAM, a ROM, or an HDD.

The control unit 11 executes various processes by reading the program 12a stored in the storage unit 12. The control unit 11 is provided with an ID acquisition unit 11a, an image acquisition unit 11b, an extraction unit 11c, an authentication unit 11d, an acquisition information processing unit 11e, and a signal output unit 11f as functional units for realizing the entrance management system 1. There is. The control unit 11 is, for example, a CPU, a programmed processor.

The ID acquisition unit 11a receives and acquires an ID read and transmitted from the storage medium 21 carried by the user by the reading device 20 connected via the communication network 50 and the interface unit 13.

The permission area associated with the ID acquired by the ID acquisition unit 11a is read from the storage unit 12, and when the management area 1 in which the user enters is not included in the permission area, the ID acquisition unit 11a processes the acquired ID. finish.

Here, the permitted area is the controlled area 1 in which the user has the authority to enter.

The image acquisition unit 11b receives and acquires an image imaged and transmitted by the image pickup device 30 connected via the communication network 50 and the interface unit 13.

The extraction unit 11c reads the authentication element associated with the ID acquired by the ID acquisition unit 11a from the storage unit 12, and extracts the portion related to the authentication element from the image acquired by the image acquisition unit 11b.

Here, the information extracted by the extraction unit 11c is used as the extraction information.

The authentication unit 11d reads the collation information associated with the ID acquired by the ID acquisition unit 11a from the storage unit 12, and collates it with the extracted information extracted by the extraction unit 11c. Then, the authentication element is authenticated based on the collation result, and the user is authenticated.

Here, the collation information is information used for authentication of the authentication element, and shows the characteristics of the user's authentication element.

The acquisition information processing unit 11e reads the processing information associated with the ID acquired by the ID acquisition unit 11a from the storage unit 12, adjusts the amount of information of the image acquired by the image acquisition unit 11b based on the processing information, and adjusts the amount of information. The adjusted image and the ID acquired by the ID acquisition unit 11a are associated with each other and recorded in the storage unit 12.

Here, the image obtained by adjusting the amount of information by the acquisition information processing unit 11e is used as the processed image, and the information associated with the processed image and the ID acquired by the ID acquisition unit 11a is referred to as the acquisition information 12c.

Further, the processing information includes information on whether or not to record the image acquired by the image acquisition unit 11b in the storage unit 12, and information for adjusting the amount of information of the image acquired by the image acquisition unit 11b. When there is no information for adjusting the amount of information in the processing information, an image in which the amount of information of the image acquired by the image acquisition unit 11b is not adjusted may be recorded in the storage unit 12 as a processed image.

The information for adjusting the amount of information is information necessary for reducing the amount of information in an image by, for example, changing the resolution of the image, compressing the image, or cropping the image.

When the authentication unit 11d succeeds in authenticating the user, the signal output unit 11f outputs a signal for releasing the entrance restriction to the entrance restriction device 40 provided in the control area 1 where the user enters.

Next, an example of user information 12b will be described. FIG. 2 is user information of the admission management system according to the first embodiment of the present invention.

In FIG. 2, the user information 12b is composed of an ID, an authentication element, verification information, processing information, and information on a permitted area. Regarding the four different IDs, for example, the ID of employee A who is a manager is 001, the ID of employee B who is not a manager is 100, the ID of a visitor C who has a trading record is 500, and the ID of a visitor C who has no trading record is 500. ID is 600.

Employee A can enter the controlled area 1a, which has very strict security, and therefore authenticates the user using a face image, which is an authentication factor having excellent security. Employee B is not able to enter the controlled area 1a from the beginning, and the security is moderate, so the security is inferior to the authentication using the face image, but the advantage is that the amount of collation information is small. Authenticate using the image of a certain name tag. Employee A and Employee B ensure security by image authentication and do not record the user's image. Since the visitor C and the visitor D are external users and can only enter the controlled area 1c where the security level is extremely low, they are not authenticated using the user's image. Instead, it records the user's image. Since the visitor C has a track record of transactions and is credible, the resolution of the processed image is reduced to reduce the amount of information to be recorded. Since the visitor D has no transaction record and no credibility, the visitor D records the processed image without adjusting the resolution.

That is, there are two types of authentication elements having different amounts of corresponding collation information, and the authentication element can be selected and set for each ID in the user information 12b. The authentication factor is one ID, that is, one or none for one user, but two or more may be used.

Then, the authentication unit 11d reads all the authentication elements associated with the ID acquired by the ID acquisition unit from the storage unit 12, and when the authentication of all the authentication elements is successful, the user authentication is successful. Further, when the authentication element is not associated with the ID acquired by the ID acquisition unit, the authentication unit 11d succeeds in authenticating the user without authenticating the authentication element.

Next, the operation of the admission management system 10 will be described. FIG. 3 is a flowchart showing the operation of the admission management system according to the first embodiment of the present invention.

The ID acquisition unit 11a receives and acquires the ID transmitted from the reading device 20 (S1 in FIG. 3).

The permission area associated with the ID acquired by the ID acquisition unit 11a is read from the storage unit 12, and when the management area 1 in which the user enters is not included in the permission area, the ID acquisition unit 11a processes the acquired ID. It ends (S2 in FIG. 3).

When the controlled area 1 in which the user enters is included in the permitted area, the image acquisition unit 11b receives and acquires the image captured and transmitted by the image pickup device 30 (S2 and S3 in FIG. 3).

In the storage unit 12, an image is used when the authentication element is associated with the ID acquired by the ID acquisition unit 11a, that is, when the authentication element is set for the ID acquired by the ID acquisition unit 11a in the user information. To authenticate the authentication element (S4 in FIG. 3).

The extraction unit 11c extracts the extraction information indicating the characteristics of the authentication element from the image acquired by the image acquisition unit 11b (S5 in FIG. 3).

The authentication unit 11d reads the collation information associated with the ID acquired by the ID acquisition unit 11a from the storage unit 12 and collates it with the extraction information extracted by the extraction unit 11c (S6 in FIG. 3).

If the verification unit 11d succeeds in collating the verification information with the extracted information, that is, if the authentication of the authentication element is successful and the authentication of all the authentication elements is not completed, the authentication element that has not been authenticated is continued. To authenticate (S7 and S8 in FIG. 3).

When the authentication unit 11d fails to authenticate the authentication element, that is, when the user cannot be confirmed, the processing for the ID acquired by the ID acquisition unit 11a ends (S7 in FIG. 3).

When the storage unit 12 succeeds in authenticating all the authentication elements associated with the ID acquired by the ID acquisition unit 11a, the user authentication is successful (S8 and S9 in FIG. 3).

When authenticating the user, the authentication elements are collated one by one, but the user may be authenticated by authenticating all the authentication elements in parallel.

When the user authentication is successful, the signal output unit 11f outputs a signal for releasing the entrance restriction to the entrance restriction device 40 provided in the controlled area 1 where the user enters (S10 in FIG. 3).

When the image acquisition unit 11b does not record the acquired image as a result of reading the processing information associated with the acquired ID from the storage unit 12, the ID acquisition unit 11a ends the processing for the acquired ID. (S11 in FIG. 3).

When recording the image acquired by the image acquisition unit 11b, the acquisition information processing unit 11e reads the processing information associated with the ID acquired by the ID acquisition unit 11a from the storage unit 12, and the image acquisition unit 11b acquires the image. The acquired information 12c in which the processed image, which is an image obtained by adjusting the amount of information of the above, is adjusted based on the processed information, and the ID acquired by the ID acquisition unit 11a are associated with each other, is recorded in the storage unit 12 (S12 in FIG. 3).

As described above, according to the admission management system according to the first embodiment of the present invention, at least two types of authentication elements having different amounts of collation information used for authentication of the authentication element are authenticated, and the authentication element is used for each user. Can be selected and set.

As a result, the load of the process of authenticating the user can be reduced, and the resource for storing the information used for the authentication of the user can be saved.

Further, according to the admission management system according to the first embodiment of the present invention, when the user is not associated with the authentication element, the authentication of the user is successful without the authentication of the authentication element.

As a result, for example, a user who has difficulty in obtaining collation information used for authentication of an authentication element, such as a visitor, can be authenticated only by an ID.

Further, according to the admission management system according to the first embodiment of the present invention, it is possible to set whether or not to record an image captured by the user for each user.

As a result, for a user who has difficulty in obtaining collation information used for authentication of the authentication element, such as a visitor, an image of the user can be recorded instead of authenticating the authentication element.

Further, according to the admission management system according to the first embodiment of the present invention, the admission restriction device 40 connected via the communication network 50 and the interface unit 13 is provided for each user in the control area 1 provided at the entrance. You can set whether to allow admission or not.

As a result, based on the result of authenticating the user, a signal for releasing the admission restriction can be output to the admission restriction device 40 provided at the entrance of the controlled area 1 where the user enters to restrict the admission of the user.

1 Control area, 10 Admission control system, 11 Control unit, 11a ID acquisition unit, 11b image acquisition unit, 11c extraction unit, 11d authentication unit, 11e acquisition information processing unit, 11f signal output unit, 12 storage unit, 12a program, 12b User information, 12c acquisition information, 13 interface unit, 20 reading device, 21 storage medium, 30 imaging device, 40 admission restriction device, 50 communication network.

Claims (4)

A reading device that reads an ID stored in a storage medium carried by a user and an imaging device that captures an image of the user are applied to a management area provided at an entrance, and the user moves from the entrance to the management area. An entrance management system that authenticates the user based on the ID read by the reading device and the image captured by the imaging device when entering the venue.
An ID acquisition unit that acquires the ID from the reader,
An image acquisition unit that acquires the image from the image pickup device, and
The ID of the user, the authentication element which is an element used for the authentication of the user, and the collation information which is the information used for the authentication of the authentication element and indicates the characteristics of the authentication element of the user are associated with each other. A storage unit that stores user information and
An extraction unit that reads out the authentication element associated with the ID acquired by the ID acquisition unit from the storage unit and extracts a portion related to the authentication element from the image acquired by the image acquisition unit.
An authentication unit that reads the collation information associated with the ID acquired by the ID acquisition unit from the storage unit and collates with the portion extracted by the extraction unit.
With
There are at least two types of the authentication element having different amounts of corresponding collation information.
The authentication element can be selected and set for each ID in the user information.
An admission management system that features this. When the authentication element is not associated with the ID acquired by the ID acquisition unit in the user information, the authentication of the user is successful without the authentication of the authentication element.
An admission management system that features this. The user information is associated with processing information which is information for adjusting the amount of information of the image recorded in the storage unit and whether or not the image acquired by the image acquisition unit is recorded in the storage unit. ,
A processed image which is an image obtained by reading the processing information associated with the ID acquired by the ID acquisition unit from the storage unit and adjusting the amount of information of the image acquired by the image acquisition unit based on the processing information. , An acquisition information processing unit that records acquisition information associated with the ID acquired by the ID acquisition unit in the storage unit.
The admission management system according to claim 1 or 2, wherein the admission management system is provided. The controlled area is provided with an admission restriction device at the entrance for setting and canceling admission restrictions for the user.
The user information is associated with a permitted area, which is the controlled area in which the user is authorized to enter.
When the permission area associated with the ID acquired by the ID acquisition unit is read from the storage unit, the management area to which the user enters is included in the permission area, and the user's authentication is successful. , A signal output unit that outputs a signal for releasing the entrance restriction to the entrance restriction device provided in the controlled area where the user enters.
The admission management system according to any one of claims 1 to 3, wherein the admission management system is provided with.

Images