JP2001236539A - Personal authenticating device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To release a person to enter/leave a room from complicatedness for the procedure of authentication each time that person enters/leaves the room. SOLUTION: In this personal authenticating device, by comparing biometrics information stored in a biometrics information storage part with biometrics information acquired by a biometrics information acquiring part, an authentication part authenticates whether or not a person to be identified is the person himself or herself, on the basis of the result authenticated by the authentication part, a completion/non-completion data preparing part prepares completion/non- completion data showing the identity authentication of the person to be identified is completed or not and on the basis of the completion/non-completion data, a completion/non-completion judging part judges whether the person to be identified is already authenticated or not.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a personal authentication device for authenticating an individual.

[0002]

2. Description of the Related Art In an entry / exit management system, which is one of the systems requiring security, it is necessary to allow only a specific person to enter / exit a room. For that purpose, a person who is allowed to enter and leave the room (hereinafter referred to as "
That. ), There is a system that distributes cards to only those and manages entry and exit based on the cards. As a system that ensures higher security than this system, biometrics information of a person trying to enter and leave the room, for example, iris data is obtained, and the iris data is compared with the iris data of the previously registered entry / exit authorized person. There is a system for managing entry and exit by judging whether or not they match.

[0003]

SUMMARY OF THE INVENTION In the latter system,
Since it is necessary to take an image of the eye to acquire iris data every time entering and leaving the room, the procedure of entering and leaving the room becomes complicated,
In addition, since the entry / exit applicant is made to wait until the authentication based on the iris data is completed, there is a problem that entry / exit is delayed.

[0004]

In order to solve the above-mentioned problems, a personal authentication apparatus according to the present invention comprises a biometric information storage unit which stores biometric information of an identified person in advance; By comparing the biometric information acquisition unit for acquiring the biometric information with the biometric information stored in the biometric information storage unit and the biometric information acquired by the biometric information acquisition unit, An authentication unit for authenticating whether or not the user is authenticated, and an end for creating end / incomplete data indicating whether or not the authentication of the identified person is completed based on a result of the authentication by the authentication unit. An end / incomplete data creation unit, an end / incomplete data storage unit for storing end / incomplete data created by the end / incomplete data creation unit, / Incompletion stored in the data storage unit ends / incompletion based on data, and a trusted / non-judgment unit that the identified user to determine whether a certified person. Once the authentication unit has authenticated the identified person, the authenticated / undetermined unit will treat the identified person as an authenticated person thereafter. It is possible to release from the hassle of having to go through.

[0005]

Embodiments of the present invention will be described. As an embodiment, an entry / exit management system of Example 1 and an entry / exit management system of Example 2 will be described. <Example 1> An entry / exit management system of Example 1 will be described. Prior to describing the entry / exit management system in detail, an outline of the entry / exit management system will be described.

FIG. 2 is a diagram showing the configuration of an entry / exit management system according to the first embodiment. This entry / exit management system is installed in a government office or a company building, and manages entry / exit using cards and biometric information (for example, iris data). For this purpose, the system includes an authentication device 1 and management devices 2-1 to 2-n (n is an integer of 2 or more). The authentication device 1 validates the card for entry and exit, and the management device 2-
1-2-n permit entry / exit using a valid card.

The authentication device 1 is provided at an entrance of a building,
The management devices 2-1 to 2-n are provided at doorways of each room in the building. However, it is not indispensable that both devices are provided at both the entrance and the exit, and providing at least the entrance helps maintain confidentiality. Management device 2
Since -1 to 2-n are all the same, in the following description, one of the management devices 2-1 to 2-n will be referred to as the management device 2, and the management device 2 will be described.

FIG. 1 is a diagram showing a configuration of an authentication device.
The authentication device 1 has an authentication unit 3 and a card unit 4. The authentication unit 3 mainly includes an input unit 30, an imaging unit 31, a processing unit 32, a storage unit 33, an authentication unit 34, an authentication unit 35, a control unit 36, and a communication unit 37 in order to handle iris data. .

The input unit 30 is composed of, for example, a keyboard and a voice input device, and is a person who carries the card C (hereinafter, referred to as a card C).
Called "Card Carrier." ) Is used to enter information required for authentication.

The photographing section 31 is constituted by a camera or the like, and photographs the eyes of the card carrier.

The processing section 32 is composed of, for example, a logic circuit or the like, and generates iris data based on the image of the eye given by the photographing section 31.

The storage unit 33 stores a database DB. FIG. 3 is a diagram showing the contents of the database in the storage unit. As shown in the figure, the database DB indicates whether or not the employee number, iris data, and card holder are authenticated as a plurality of authorized persons, in other words, whether the card is valid. Information that represents
It is called "authentication information." ), Information indicating a period during which entry and exit are permitted, that is, a period during which the card is valid (hereinafter referred to as “expiration date information”).

For example, the iris data, authentication information, and time limit information of a person having an employee number “0001” are 13AE (hexadecimal),
Valid, indicating that it is December 31, 2000. For the employee with the employee number "0003",
Despite being originally allowed to enter and exit until the 29th of March, the fact that the identity has not been verified indicates that the card has not been validated.

The expiration date information is added with the date and time, if necessary, in addition to the date and time. In addition, the date and time when the card was validated, and in a system having a plurality of authentication devices, the card was validated. The serial number of the authentication device is added.

The authentication section 34 carries out the card carrying based on the employee number read from the card C and the iris data generated by the processing section 32 and the employee number and iris data stored in the storage section 33 as described later. It is determined whether the person corresponds to the entry / exit permitted person.

The judging section 35 gives an instruction relating to entry / exit to the management apparatus 2 based on the result of the authentication by the authentication section 34.

The control section 36 is composed of, for example, a CPU or the like, and controls the operation of the entire authentication unit 3.

The communication unit 37 is composed of, for example, a MODEM or the like, and communicates with the card unit 4 and the management device 2.
(Accurately, communication with the management unit 5).

The card unit 4 mainly includes an insertion section 40, a read / write section 41,
It comprises a control unit 42, a display unit 43, and a communication unit 44.

The insertion section 40 is used for inserting the card C.

The read / write unit 41 reads information written on the card C, for example, an employee number, and writes information related to authentication as necessary.

The control section 42 is composed of, for example, a CPU and controls the operation of the entire card unit 4.

The display unit 43 is composed of, for example, a CRT or a liquid crystal, and operates the card unit 4 and the authentication unit 3.
Displays the result of authentication by.

The communication unit 44 is composed of, for example, a MODEM and communicates with the authentication unit 3.

FIG. 4 is a diagram showing the configuration of the management device.
The management device 2 has a management unit 5 and a door unit 6. In order to handle the card C in the same manner as the card unit 4 in the authentication device 1, the management unit 5 mainly
0, a read / write unit 51, a control unit 52, a display unit 53, and a communication unit 54.

The insertion section 50 includes a reading / writing section 51, and the insertion section 40 and the reading / writing section 4 in the card unit 4, respectively.
Functions the same as 1.

The control section 52 is composed of, for example, a CPU and controls the overall operation of the management unit 5.

The communication unit 54 is composed of, for example, a MODEM or the like, and communicates with the door unit 6 and the authentication unit 3.
Communicates with

The door unit 6 mainly includes a door unit 60, a control unit 61, and a communication unit 62 for opening and closing the door.

The door section 60 comprises, for example, a door and a shutter.

The control section 61 controls the entire operation of the door unit 6.

The communication section 62 communicates with the management unit 5.

Regarding the relationship between the personal authentication device described in the claims and the entry / exit management system of the first embodiment,
The biometric information storage unit corresponds to the storage unit 33, and the biometric information acquisition unit includes the imaging unit 31 and the processing unit 32.
, The authentication unit corresponds to the authentication unit 34, the end / incomplete data creation unit corresponds to the authentication unit 34, the end / incomplete data storage unit corresponds to the storage unit 33, and the completed / undetermined unit is Judgment unit 35
Corresponding to

FIG. 5 is a flowchart showing the operation of the entry / exit management system according to the first embodiment. Hereinafter, the operation will be described along this flowchart. Step S100: The card carrier carrying the invalid card C, which is the card C of the employee number “0003”,
For example, the card C is inserted into the insertion unit 40 in front of the authentication device 1 installed at the entrance, and information necessary for authentication is input from the input unit 30. Upon detecting the insertion of the card, the read / write unit 41 reads out the employee number “0003” from the card C, and notifies the authentication unit 34 of the employee number “0003” via the communication unit 44 and the communication unit 37.

The photographing section 31 photographs the eyes of the card carrier according to the operation of the card carrier.
The iris data is generated based on the obtained eye image, and the generated iris data is output to the authentication unit 34.

Step S110: Upon receiving the employee number "0003" and the iris data of the card carrier, the authentication unit 34
Compares the employee number and the iris data with the employee number “0003” and the iris data in the database DB of the storage unit 33, so that the card carrier can identify the employee “0003”.
Determine if you are the person.

Step S120: If it is determined that the employee is "0003", the authentication unit 34 writes the effect that the card C is "valid" as the authentication information of the employee number "0003" in the storage unit 33. The authentication unit 34 also transfers the authentication information to the control unit 42 via the communication unit 37 and the communication unit 44. The control unit 42 indicates to the display unit 4 that the card has been validated.
3 is displayed. If it is not determined that the employee is “0003”, the authentication unit 34 keeps the authentication information “invalid”.

Step S130: After the card is validated, the card carrier inserts the card C into the insertion section 50, for example, in front of the management device 2 installed at the entrance of the data room. When detecting the insertion of the card C, the read / write unit 51
Reads out the employee number “0003” from the card C.

Step S140: The control unit 52 notifies the determination unit 35 of the read employee number “0003” via the communication unit 54 and the communication unit 37. Employee number "000
Upon receiving “3”, the determination unit 35 determines whether the card C is valid based on the authentication information of the employee number “0003” in the storage unit 33.

Step S150: When it is confirmed that the card C is "valid", the judging section 35 further refers to the term information of the employee number "0003" to notify the card carrier at that date and time of the room. It is determined whether entry / exit is permitted. That is, it is determined whether the entry / exit permission period has expired. Step S160: After confirming that the time has not expired,
The determination unit 35 instructs the control unit 36 to output a signal indicating that the door should be opened to the control unit 52. In response to this instruction, the control unit 36 notifies the control unit 52 that the door unit 60 should be opened. In response to this notification, the control unit 52
Notifies the control unit 61 that the opening of the door unit 60 is permitted, and the control unit 61 opens the door unit 60.

Step S170: When it is confirmed that the card C is invalid or the permission period for entering / leaving the room has expired, the judging unit 35 prohibits the door unit 60 from being opened. Keep the door closed. Also, the judgment unit 35
Displays on the display unit 53 via the control units 36 and 42 and the communication units 37 and 44 that the card should be validated and the entry / exit time limit should be updated.

As described above, according to the entry / exit management system of the first embodiment, when the authentication device 1 completes the authentication that the card carrier of the card C is the person, it is determined that the card C is valid. Authentication information to be stored. When the card carrier attempts to enter or leave the room, the authentication device 1 instructs the management device 2 to open and close the door based on the authentication information corresponding to the employee number written on the card. Therefore,
The card carrier can smoothly enter and leave the room without having to obtain a complicated procedure of photographing the eyes and obtaining iris data each time the user enters and leaves the room and performs authentication. Further, since it is not possible to enter and leave the room using the card unless the identity of the person is confirmed, it is possible to prevent a third party from entering and leaving the room using the forged card.

Since the authentication device 1 stores time limit information indicating a time limit for entering and leaving the room, when the third party attempts to enter or leave the room using a valid card C obtained by theft, loss, or the like. Even so, it can be expected that entry and exit will be prevented due to expiration, and at least the loss and damage caused by entering and exiting will be reduced compared to those that can occur if the expiration date is not limited. Can be expected.

In steps S140 to S170, instead of closing the door when confirming that the card C has expired after confirming that the card C is "valid", it is confirmed whether the card C has expired. The door may be closed without judging the validity.

Other time limit information can be used instead of the time limit information described above. FIG. 6 is a diagram showing other time limit information. As shown in the drawing, this expiration date information differs from the expiration date information of FIG. 3 in that a permission period is set for each of a plurality of rooms in accordance with the nature of the room to be used and the degree of security. For example, two weeks are assigned as a permission period for a reception room that does not require much security, while one day is assigned as a permission period for a power room that requires the most security.
Thus, for example, when the card C is made “valid” on February 1, 2000, the permission period for entering and leaving the power supply room is only the same day of the same month in the same year, while the permission period for entering and leaving the interview room is permitted. The deadline is until the 14th of the same year.

Since the judging unit 35 judges whether to enter or leave the room on the basis of the time limit information thus finely defined,
Loss or damage caused by a third party using a "valid" card obtained through loss or theft to enter a room in a building can be used to determine the loss or damage that has not been set according to the nature and security of the room. 3, it is possible to reduce the number of entrances / exits when managing the entry / exit based on the term information.

<Embodiment 2> FIG. 7 is a diagram showing the configuration of an entry / exit management system according to Embodiment 2. The main feature of this entry / exit management system is that an invalidation device 7 is provided at the exit of the building. Hereinafter, the invalidation device 7 will be mainly described.

The system is provided in the building 100. The building 100 has a plurality of rooms 200-1 to 200-n.
(N is the same as n defined above). Building 10
The entrance of the building 0 is provided with the authentication device 1 described above, the exit of the building 100 is provided with the invalidation device 7, and the rooms 200-1 to 200-n are provided with the management device 2-
1-2-n are provided.

FIG. 8 is a diagram showing the configuration of the invalidation device.
The invalidating device 7 includes an insertion unit 70, a reading /
Writing unit 71, control unit 72, display unit 73, and communication unit 74
Having. The function of each unit is substantially the same as the function of each unit of the management unit 5. The invalidation device 7 writes, as “authentication information”, data indicating that the card is “invalid”.

Regarding the relationship between the personal authentication device described in the claims and the entry / exit management system of the specific example 2 having such a configuration, the end / incomplete data rewriting unit corresponds to the authentication unit 34.

The operation of the entry / exit management system according to the second embodiment will be described. When entering the building 100, the card carrier sets the card C to "valid" by the authentication device 1. That is, as described above, the authentication unit 34 of the authentication device 1 sets “valid” as “authentication information”. Thereafter, if necessary, the card C is inserted into the management devices 2-1 to 2-n provided in the rooms 200-1 to 200-n to enter and leave the room.

On the other hand, when leaving the building 100, the card carrier inserts the card C into the invalidation device 7. Upon detecting the insertion, the read / write unit 71 reads out the employee number from the card C and passes the employee number to the control unit 72. The control unit 72 notifies the authentication unit 34 via the communication units 74 and 37 to set “invalid” in the “authentication information” of the passed employee number. Upon receiving the notification, the authentication unit 34 rewrites the authentication information so as to make the card C “invalid”. When the rewriting is completed, the controller 72 is notified that the card has been invalidated, and the controller 72 notifies the card carrier of the termination of the card invalidation through the display unit 73.

As described above, according to the entry / exit management system of the specific example 2, when the card carrier leaves, the authentication unit 34 changes the “authentication information” of the card C from “valid” to “invalid”. rewrite. As a result, the card carrier can use Building 1
00, and the third party loses the card C
Since the card C is invalid even when the third party has acquired the room 200-1
It is possible to prevent entry into 0-n.

Unlike the entry / exit management system of the specific example described above, although the security is somewhat difficult in that a third party can easily access the information, the authentication information and the term information are stored in the storage unit 3.
Instead of storing in the card 3, it is also possible to store in the card C itself. Alternatively, the authentication information and the time limit information may be stored in a server device or a host device (neither is shown) for controlling and managing the entire system, without being stored in the authentication device 1.

The authentication device 1 can be used in an automatic cash transaction system, a credit card transaction system, or the like, unlike the above-described specific example used in the entry / exit management system. In these systems, for example, transfer, inquiry, withdrawal, borrowing, or the like can be used as the time limit information instead of the reception room, reference room, laboratory, or the like shown in FIG.

[0056]

According to the personal authentication apparatus of the present invention, the completed / undetermined unit determines whether or not the authentication unit has once authenticated the identified person.
The identified person is treated as an authenticated person. As a result, the identified person can be released from the trouble of having to go through the authentication procedure many times.

[Brief description of the drawings]

FIG. 1 is a diagram illustrating a configuration of an authentication device.

FIG. 2 is a diagram illustrating a configuration of an entry / exit management system according to a specific example 1.

FIG. 3 is a diagram showing contents of a database of a storage unit.

FIG. 4 is a diagram illustrating a configuration of a management device.

FIG. 5 is a flowchart illustrating an operation of the entry / exit management system according to the first embodiment.

FIG. 6 is a diagram showing other time limit information.

FIG. 7 is a diagram illustrating a configuration of an entry / exit management system according to a specific example 2.

FIG. 8 is a diagram illustrating a configuration of an invalidation device.

[Explanation of symbols]

 Reference Signs List 1 authentication device 2 management device 3 authentication unit 4, 6 card unit 5 management unit 30 input unit 31 imaging unit 32 processing unit 33 storage unit 34 authentication unit 35 determination unit 36, 42, 52, 61 control units 37, 44, 54, 62 communication unit 40, 50 insertion unit 41, 51 read / write unit 43, 53 display unit 60 door unit

Continued on the front page F-term (reference) 2E250 AA04 BB04 BB10 BB25 BB29 CC11 CC16 DD08 EE03 EE08 FF05 FF13 FF14 FF44 FF50 FF53 3E038 AA01 CA06 CA07 CC01 FA10 JA01 JA03 5B058 KA02 KA04 KA38 YA11 AE11 5B85

Claims (4)

[Claims] 1. A biometrics information storage unit that stores biometrics information of an identified person in advance; a biometrics information acquiring unit that acquires biometrics information of the identified person; and a biometrics information storage unit. By comparing the stored biometrics information with the biometrics information acquired by the biometrics information acquisition unit, an authentication unit that authenticates whether the identified person is the person himself, and the authentication unit An end / incomplete data creation unit that creates end / incomplete data indicating whether or not the authentication of the identified person is completed based on the authentication result; Finish / created by the department
Based on the end / incomplete data storage unit for storing the incomplete data and the end / incomplete data stored in the end / incomplete data storage unit, it is determined whether or not the identified person has been authenticated. A personal authentication device comprising an already / undetermined part. 2. The personal authentication device according to claim 1, further comprising: a term data storage unit that stores term data indicating a term during which the authentication is valid; and whether the authentication is valid based on the term data. A personal identification device, comprising: a time limit determining unit configured to determine whether the identification is not valid when the time limit determining unit determines that the authentication is not valid. 3. The personal authentication device according to claim 1, further comprising a plurality of time limit data indicating a plurality of time limits for which the authentication is valid, each of which corresponds to a plurality of use targets of the identified person. A term data storage unit for storing a plurality of term data, and a term judging unit for judging whether or not the authentication is valid for a use object corresponding to the term data based on each term data, However, when it is determined that the authentication is not valid for one use target, the identified person is treated as not having been authenticated for the one use target. 4. The personal authentication device according to claim 1, further comprising: an end / incomplete data indicating that the authentication of the identified person is completed, A personal authentication device, comprising: an end / uncompleted data rewriting unit that replaces end / uncompleted data indicating that authentication of a user is not completed.