JP2006212185A - Living body discrimination device, authentication apparatus and living body discrimination method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a living body discrimination device, an authentication apparatus and a living body discrimination method capable of effectively performing living body discrimination even for a forged object having a structure similar to the eye of a living body, such as an artificial eye. <P>SOLUTION: The living body discrimination device comprises: a photographing part 2 for photographing the eye of a person 30 to be authenticated for two or more times; an eye discrimination part 81 for judging whether the eye of the person 30 to be authenticated photographed at a plurality of times in the photographing part 2 is a left eye or a right eye respectively; an order judgment part 63 for judging the order of the eyes photographed by the photographing part 2 on the basis of the result judged in the eye discrimination part 81; and a living body judgement part 64 for judging whether or not the person 30 to be authenticated is a living body on the basis of the order of the eyes photographed by the photographing part judged by the order judgement part 63. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a living body determination device that determines whether or not a subject is a living body, an authentication device that performs personal authentication of a subject, and a living body determination method that determines whether or not a subject is a living body.

  In recent years, as a method of personal authentication at the time of access in devices requiring high security such as entry / exit management devices and information devices storing important information such as personal information, human fingerprints, irises, fundus blood vessels, facial Various authentication methods using information unique to the person to be authenticated, such as features, blood vessel patterns of hands and arms, so-called biometric information, have been put into practical use.

  Among them, an authentication method that uses the difference in the eyelid pattern of the iris part of the eye (hereinafter referred to as “Iris Authentication”) due to its high reliability such as the high identity authentication rate and low acceptance rate of others. (Referred to as Patent Document 1, for example).

  In such an iris authentication method, an iris part is selectively encoded from an image of an eye part of the person to be authenticated (hereinafter, this image is referred to as an eye image), and the obtained information is registered in advance as authentication information. This is a method of comparing and collating with the information (hereinafter referred to as registration authentication information), and authenticating that the person to be authenticated is a person registered in advance if it is determined that they match each other.

  The iris authentication method has a problem of so-called “spoofing” in which an unauthorized person can be authenticated as being a pre-registered person by using a printed matter or a photograph on which an iris pattern is printed. It has been pointed out that solving such problems has become an issue.

In order to prevent such “spoofing”, for example, utilizing the fact that the eye of a living body is a substantially spherical body, the LED is placed at a position where the image is reflected in the pupil, and the LED is placed in the pupil. When an image is reflected, it is determined that the subject is an eye of a living body, and when an LED image does not appear in the pupil, a technique for determining that the subject is a counterfeit such as a photograph has been proposed. (For example, refer to Patent Document 2).
Japanese Patent No. 3307936 JP 2000-298727 A

  However, in the technology as described above, although it is possible to perform biometric determination on a planar forgery such as a photograph or a printed matter, the fake eye or the like has a structure similar to that of a living eye. On the other hand, there is a problem that it is difficult to perform biological discrimination.

  The present invention has been made in view of such a problem, and a biometric discrimination apparatus and authentication capable of effectively performing biometric discrimination on a counterfeit having a structure similar to that of a living eye such as a false eye It is an object of the present invention to provide a device and a living body discrimination method.

  The living body determination device of the present invention includes an imaging unit that images a subject's eye multiple times, an eye determination unit that determines whether the subject's eye captured multiple times by the imaging unit is the left or right eye, and an eye Based on the order determined by the determination unit, the order determination unit that determines the order of the eyes taken by the imaging unit, and the order of the eyes determined by the order determination unit, the images taken by the imaging unit, It is characterized by including a living body determination unit that determines whether or not the subject is a living body.

  With such a configuration, it is determined whether or not the subject is a living body based on the order of the eyes taken by the imaging unit. However, it is possible to provide a living body discriminating apparatus that can effectively perform living body discrimination.

  In addition, a blink detection unit that detects an eye that the subject has blinked using the determination result of the eye determination unit, and the order determination unit is an eye that the subject has blinked based on the result detected by the blink detection unit. The living body determination unit may determine whether the subject is a living body based on the order of the eyes that the subject has blinked, as determined by the order determination unit.

  According to such a configuration, it is possible to effectively perform biometric discrimination by a method with less resistance such as blinking the subject.

  In addition, a sequence storage unit that stores sequence information indicating a sequence of eyes to be photographed or blinked in advance is provided, and the sequence determination unit determines the sequence based on the sequence information stored in the sequence storage unit. The structure to perform may be sufficient.

  According to such a configuration, a configuration with higher security can be realized by a simple configuration in which order information indicating the order of eyes to be photographed or blinked in advance is stored.

  Next, an authentication apparatus according to the present invention includes a biometric identification apparatus according to the present invention, an authentication information creating unit that creates authentication information each time an image is captured by the image capturing unit, from a portion including at least an iris image captured by the image capturing unit. A collation that compares and collates the storage unit that stores the registration authentication information of the right eye and the left eye of the person registered in advance, the authentication information created by the authentication information creation unit, and the registration authentication information stored in the storage unit And an authentication result determination unit that determines whether or not the subject can be authenticated based on a result of comparison and collation in the collation unit.

  According to such a configuration, since it is determined whether or not the subject is a living body based on the order of the eyes taken by the photographing unit, a forgery having a structure similar to that of a living eye such as a fake eye Therefore, it is possible to provide an authentication device with higher security that can effectively perform biometric discrimination.

  In addition, the biometric device of the present invention is an authentication that creates authentication information each time an image is captured by the image capturing unit, from an image capturing unit that captures the subject's eyes a plurality of times and a portion that includes at least an iris image captured by the image capturing unit. An information creation unit, a storage unit that stores registration authentication information of the right eye and left eye of a person registered in advance, authentication information created by the authentication information creation unit, and registration authentication information stored in the storage unit A verification unit that performs comparison and verification, an authentication result determination unit that determines whether or not the subject can be authenticated based on a result of comparison and verification in the verification unit, and an authentication result determination unit that authenticates multiple times An eye discriminating unit that discriminates whether the subject eye is the left or right eye, and an order in which the authentication result judging unit determines the order of the eyes that have been authenticated based on the result discriminated by the eye discriminating unit The determination unit and the order determination unit Boss was, based on the sequence of eye authentication result judging unit has performed authentication, may be configured to subject comprising determining the biological determination unit that determines whether a living body.

  According to such a configuration, it is possible to realize a configuration with high security capable of performing biometric discrimination based on the result while performing personal authentication using an eye image.

  Further, the registration authentication information is stored together with the identification information in the storage unit, and the verification result determination unit outputs the identification information indicating the registration authentication information used for the comparison verification to the eye determination unit. Stores the eye discrimination information for right and left eyes corresponding to the identification information of the registered authentication information, and based on the eye discrimination information and the identification information sent from the authentication result determination unit, the authentication result determination unit It is determined whether the eye of the subject that has been authenticated a plurality of times is the left or right eye, and the order determination unit determines the order of the eyes that the authentication result determination unit has authenticated based on the result determined by the eye determination unit The structure which determines this may be sufficient.

  According to such a configuration, it is possible to realize a living body determination device that can determine the order of the eyes that have been authenticated with a simple configuration.

  Next, the living body discrimination method of the present invention discriminates between the first step of photographing the subject's eye a plurality of times and the left and right eyes of the subject's eye photographed a plurality of times in the first step. The second step, the third step for determining the order of the eyes photographed in the first step based on the result determined in the second step, and the third step determined in the third step. A fourth step of determining whether or not the subject is a living body based on the order of the eyes photographed in step 1 is provided.

  According to such a method, it is determined whether or not the subject is a living body based on the order of the eyes taken by the photographing unit, so that the forgery having the same structure as the living eye such as a false eye Therefore, it is possible to realize a living body determination method that can effectively perform living body determination.

  A first step of photographing the subject's eyes a plurality of times; a second step of discriminating whether the subject's eyes photographed a plurality of times in the first step are left and right eyes; The third step of detecting the eye where the subject blinks using the determination result of step 4, and the fourth step of determining the order of the eyes where the subject blinked based on the result detected in the third step And a fifth step of determining whether or not the subject is a living body based on the order of the eyes that the subject has blinked determined in the fourth step. Good.

  According to such a method, further, it is possible to perform biometric discrimination effectively by a method with less resistance to blinking the subject.

  As described above, according to the present invention, a biometric discrimination device, an authentication device, and a biometric discrimination that can effectively perform biometric discrimination on a counterfeit having a structure similar to that of a living eye such as a false eye. A method can be provided.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

(First embodiment)
First, the authentication device 1 according to the first embodiment of the present invention will be described. FIG. 1 is a block diagram showing the configuration of the authentication device 1 according to the first embodiment of the present invention.

  As shown in FIG. 1, the authentication device 1 according to the first embodiment of the present invention includes a light source unit 7 that irradiates light in the vicinity of the eye of the person 30 to be authenticated and an eye image for the person 30 to be authenticated. A guiding unit 31 that performs guidance for prompting photographing, a photographing unit 2 that photographs an eye image of the person 30 to be authenticated guided by the guiding unit 31, an image quality determination of the eye image photographed by the photographing unit 2, and the like. Capture processing unit 3 that performs processing for sending an image determined to be good to the authentication processing unit 17 (hereinafter, this processing is referred to as capture processing), and an iris that is captured by the capture processing unit 3 using a predetermined method. An authentication processing unit 17 that performs authentication processing, an eye determination unit 81 that determines whether the authenticated eye is the right eye or the left eye of the person 30 to be authenticated, based on the output of the authentication processing unit 17, an eye determination Based on the result determined by the section 81, the person 30 to be authenticated A living body discriminating unit 65 that determines whether the body is a body, an output unit 23 that outputs an authentication result in the authentication processing unit 17 and a biometric discrimination result in the living body discriminating unit 65, and a light source unit 7, a guiding unit 31, and an imaging unit 2 The control unit 6 controls the operations of the capture processing unit 3 and the authentication processing unit 17.

  The light source unit 7 irradiates the eye with a light beam having a near infrared wavelength (a wavelength of about 700 to 1000 nm) in order to capture a clear iris image with a good contrast of the eye of the person 30 to be authenticated. Can be used.

  As an example of the photographing unit 2, a monochrome camera using a CCD as an image sensor can be used. As a lens system attached to the photographing unit 2 in the authentication device 1 according to the first embodiment of the present invention, a telephoto lens that can magnify and photograph the eye area of the person 30 to be authenticated is mounted. desirable. In the authentication device 1 according to the first embodiment of the present invention, the to-be-authenticated person 30 positions one of the left and right eyes within the angle of view of the lens system of the photographing unit 2, Authentication processing can be performed.

  As will be described later, the guide unit 31 has a display unit such as a liquid crystal display or a sound generation unit such as a speaker, and may be configured to urge the person 30 to be authenticated multiple times.

  As the output unit 23, for example, a known display device using liquid crystal, EL, or the like can be used, a device such as a speaker that can notify the authentication result 30 to the person to be authenticated 30 by voice, or an external device It is possible to use various communication devices that can transmit information such as authentication results to devices connected to the. Devices such as a display device and a speaker in the output unit 23 can be shared with those of the guide unit 31, or can be provided in each of the output unit 23 and the guide unit 31.

  In the authentication device 1 according to the first embodiment of the present invention, the capture processing unit 3 is output from the image quality determination unit 9 that determines the image quality of the image from the image output from the imaging unit 2 and the imaging unit 2. The eye detection unit 10 determines whether or not a circular object that is regarded as an eye is captured in the image.

  The image quality determination in the image quality determination unit 9 is performed by, for example, analyzing the frequency of an image using a high-quality image with a high amount of information of a predetermined high-frequency component, and calculating the information amount of the predetermined high-frequency component. A method of integrating and determining that the larger the integrated value is, the better the image quality can be used, but the present invention is not limited to this method. For example, using the average luminance information of the entire image, a method for determining that the image quality is good when the average luminance information is within a predetermined threshold range, another known image quality evaluation method, or a combination of these methods Can be used.

  The eye detection unit 10 determines whether or not a circular object such as an iris or a pupil is photographed from the eye image. As a determination method in the eye detection unit 10, for example, in an eye image captured by the imaging unit 2, a round region estimated to be a pupil or a black eye portion (for example, a region that is round and has a lower luminance than the surroundings). A pattern matching process between an eye image and an image having a low-luminance area of a predetermined size, a pupil candidate detection unit that detects the position of a pupil candidate from the eye image, and A luminance difference calculation unit for obtaining a difference between the maximum value and the minimum value of the luminance of the eye image on the circumference of a circle having a predetermined radius centered on the center coordinates of the pupil candidate, and the output of the luminance difference calculation unit is A method of determining that the pupil candidate is a pupil when it is within a predetermined threshold can be used.

  The authentication processing unit 17 detects the iris portion of the eye from the image output from the capture processing unit 3, and uses a predetermined method from the iris portion image detected by the iris detection unit 11. An authentication information creating unit 19 that creates authentication information, a storage unit 21 that stores pre-registered person's binocular registration authentication information, and a registration authentication information and authentication information creation unit stored in the storage unit 21 A verification unit 20 for comparing and verifying the authentication information, and an authentication result determination unit 22 for determining whether or not the person 30 to be authenticated is a person registered in advance based on the comparison verification result of the verification unit 20.

  In the authentication device 1 according to the first embodiment of the present invention, the registration authentication information of both eyes of a person registered in advance is added to the storage unit 21 and identification (ID) information is attached to each registration authentication information. The verification unit 20 compares the verification information created by the verification information creation unit 19 with the registered authentication information stored in the storage unit 21, and is used for comparison verification along with the verification result. The ID information of the registered authentication information is sent to the eye determination unit 81 through the authentication result determination unit 22. The authentication result determination unit 22 determines whether or not the person to be authenticated 30 is a person registered in advance based on the result of comparison and collation by the collation unit 20. The authentication result determination unit 22 outputs information indicating the authentication result, that is, information indicating “authentication possible” to the output unit 23 when the authenticated person 30 is a previously registered person. If the person is not registered, information indicating “authentication impossible” is output to the output unit 23. Further, the authentication result determination unit 22 sends the information indicating the authentication result and the ID information of the registered authentication information used for comparison and collation at the time of authentication to the eye determination unit 81.

  Each component of the authentication processing unit 17, that is, an iris detection method in the iris detection unit 11, an authentication information creation method in the authentication information creation unit 19, a verification method in the verification unit 20, and an authentication result determination unit For example, the method described in Patent Document 1 can be used as the determination method of the authentication result in 22, but the present invention is not limited to this method, and the function of the authentication processing unit 17 is the iris or retina. Or other known biometric authentication processing blocks such as facial feature points.

  In the authentication device 1 according to the first embodiment of the present invention, the eye discriminating unit 81 transmits information indicating the authentication result sent from the authentication result determining unit 22 and the ID of the registered authentication information used for comparison and collation. Using the information, it is determined whether the person 30 to be authenticated is photographed by the photographing unit 2 and the eye subjected to the authentication process is the right eye or the left eye. As a method of determining the eye of the person 30 to be authenticated in the eye determination unit 81, for example, the eye determination unit 81 stores in advance eye determination information 25 indicating the right eye and the left eye for each ID information of the registered authentication information. By doing so, it is possible to determine the right and left of the eye of the person 30 to be authenticated who has been used for photographing and authentication. FIG. 2 shows an example of the eye discrimination information 25 in the authentication device 1 according to the first embodiment of the present invention. In the example illustrated in FIG. 2, registration authentication information with ID information “1” to “4” is stored in the storage unit 21 and indicates whether each eye is a right eye or a left eye. Left and right information is stored in association with each other. In the eye discrimination information 25 shown in FIG. 2, the registration authentication information of ID information “1” is registration authentication information created from “right eye”, and the registration authentication information of ID information “2” is “left The registration authentication information created from “eye”, the registration authentication information of ID information “3” is the registration authentication information created from “right eye”, and the registration authentication information of ID information “4” is It indicates that the registration authentication information is created from “left eye”. By storing such eye discrimination information 25, the eye discrimination unit 81 sends the ID information of the registered authentication information sent from the authentication result determination unit 22 when the authentication result is “authenticable”. By referencing, it can be determined whether the subject 30 has been left or right for photographing and authentication. For example, when information indicating that “authentication is possible” is sent from the authentication result determination unit 22 using the registration authentication information of the ID information “1”, the eye determination unit 81 determines that the person 30 to be authenticated , It can be determined that photographing and authentication have been performed using the “right eye”.

  The biometric discrimination unit 65 according to the first embodiment of the present invention includes an order storage unit 62 that stores a pre-registered order of imaging and authentication of eyes (hereinafter referred to as a registration authentication order), and each time of imaging and authentication. Received from the eye discriminating unit 81 is a signal indicating whether the eye of the subject 30 to be authenticated, which has been photographed and authenticated, is left or right, and the order (hereinafter simply referred to as an authentication order) and the order stored in the order storage unit The order determination unit 63 that compares the registration authentication order and outputs whether or not they match, and the information that indicates whether or not the authentication order matches the registration authentication order that is output from the order determination unit 63. If the order matches, the person to be authenticated 30 is a living eye, and if it is determined that the order does not match, it is determined that the person to be authenticated 30 is not a living eye. Is output to the output unit 23 That includes a biological determination portion 64.

  Here, the reason why the authentication apparatus 1 according to the first embodiment of the present invention can determine whether or not the person 30 to be authenticated is a living body will be described. FIG. 3 is a diagram for explaining the reason why the authentication device 1 according to the first embodiment of the present invention can perform biometric discrimination. FIG. 3A is a diagram showing an example of registration order information 70 stored in the order storage unit 62 of the authentication device 1 according to the first embodiment of the present invention. FIG. 3B and FIG. () Is a figure which shows an example of the order information 71 and 72 acquired from the to-be-authenticated person 30, respectively in the authentication apparatus 1 in the 1st Embodiment of this invention.

  In the authentication device 1 according to the first embodiment of the present invention, the order of eyes to be authenticated by the person to be authenticated 30 is determined in advance, and the information is registered as the order information 70 and the order of the biometric determination unit 65. It is stored in the storage unit 62. In the example shown in FIG. 3A, it is necessary to perform authentication four times, and the order of the authenticated eyes is “right”, “left”, “right”, “left” in order from the first time. At some point, it is determined that the person 30 to be authenticated is a living body.

  The registration order information 70 in the authentication device 1 according to the first embodiment of the present invention is the registration desired by the person 30 to be registered when he / she wants to register his / her authentication information in the authentication device 1. By inputting the order information, the order information can be stored in the order storage unit 62. As a method for inputting the registration order information, for example, the person to be authenticated 30 who is going to register first photographs the iris pattern of his / her right eye and left eye, and the authentication information creating unit 19 from each image. The information created in step (b) is given ID information as registration authentication information and stored in the storage unit 21. At this time, information on whether the imaged eye is the right eye or the left eye is also stored in the storage unit 21 together with the registration authentication information. As will be described later, the ID information for identifying the registered authentication information includes the left / right information indicating whether the eye that has been photographed and authenticated is the right eye or the left eye, and the eye determination unit 81 as the eye determination information 25. Is remembered. Next, the person 30 to be registered registers his or her left eye or right eye within the imaging range of the imaging unit 2 to register the registration order information. Shoot in order and let them authenticate. At this time, because of the output from the authentication processing unit 17, the eye determination unit 81 can determine whether the eye taken by the person 30 to be registered is the left eye or the right eye. Information indicating the order in which the person 30 to be registered performs photographing and authentication is stored in the order storage unit 62 as registration order information 70.

  In the above-described example, the registration method of the registration order information 70 is a method in which the person 30 to be registered captures and authenticates and inputs his / her eyes in the desired order as described above. However, the present invention is not limited to this method. For example, the person 30 to be registered registers the registration authentication information by photographing the iris pattern of his left eye and right eye. After that, it goes without saying that the registration order information may be input using an input unit such as an arrow key (not shown) according to the display on the display unit (not shown). In any of the methods, the person to be authenticated 30 who wants to register can determine the order and the number of times of photographing and authentication.

  An unauthorized person who tries to impersonate using counterfeits such as fake eyes cannot know this registration order information. Therefore, even if the authentication result is “authenticable”, the order determination unit 63 captures and It is determined that the authentication order is different from the registration order information, and as a result, the biometric determination unit 64 determines that it is not a living eye.

  In the authentication device 1 according to the first embodiment of the present invention, the person to be authenticated 30 performs an iris authentication process four times by the guidance of the guidance unit 31 described later, and is created by the order determination unit 63 at that time. The order determination unit 63 determines whether or not the order information 71 indicating the order of the authenticated eyes matches the registration order information 70 stored in the order storage unit 62. However, if the person to be authenticated 30 is a living body and, on the contrary, does not match each other, the living body determination unit 64 determines that the person to be authenticated 30 is not a living body, that is, the possibility of impersonation is high. For example, the registration order information 70 is “right”, “left”, “right”, “left” as shown in FIG. 3A, and the order information actually performed by the person 30 to be authenticated. However, if the order information 71 is the order information 71 as shown in FIG. 3B, the registration order information 70 and the order information 71 match each other. Judge that there is. On the other hand, the person 30 to be authenticated does not know the registration authentication order, and captures and captures the order information 72 (“right”, “right”, “right”, “left”) as shown in FIG. When the authentication is performed, the registration order information 70 and the order information 72 do not match each other. Therefore, even if the authentication result in the authentication processing unit 17 is “authenticable”, the biometric determination unit 64 It is determined that the person to be authenticated 30 is not a living body, and the result is output to the output unit 23.

  As described above, according to the authentication apparatus 1 in the first embodiment of the present invention, only when the predetermined registration authentication order matches the authentication order actually performed by the person 30 to be authenticated. Since it is determined that the person 30 is a living body, if an unauthorized person who tries to impersonate does not know the predetermined registration authentication order, no matter how elaborate, such as fake eyes, I cannot get certified.

  Next, operation | movement of the authentication apparatus 1 in the 1st Embodiment of this invention is demonstrated.

  FIG. 4 is a flowchart showing operation steps of the authentication device 1 according to the first embodiment of the present invention. As shown in FIG. 4, in the authentication device 1 according to the first embodiment of the present invention, the control unit 6 first places the eye of the person 30 to be authenticated within the imaging range of the imaging unit 2 with respect to the guiding unit 31. The guidance is performed so as to be positioned at (1).

  An example of guidance performed by the guidance unit 31 on the person 30 to be authenticated will be described. FIG. 5 is a diagram illustrating an example of guidance information displayed when the guidance unit 31 of the authentication device 1 according to the first embodiment of the present invention guides the person 30 to be authenticated.

  FIG. 5A shows an example of guidance information that the guidance unit 31 should display for the person 30 to be authenticated in step S1. As shown in FIG. 5 (a), the guiding unit 31 provides information indicating how many times the authentication and verification of the person to be authenticated 30 are to be performed (for example, “shoot the eye four times. )) And information indicating how many times authentication will be performed from now on (for example, “Because the first shooting is performed, please turn your eyes toward the camera”) as guide information 91. By seeing the guidance information 91 or listening to the voice, the person 30 to be authenticated places his / her eyes within the imaging range of the imaging unit 2.

  Returning to FIG. 4, next, the control unit 6 turns on the light source unit 7 and irradiates the eye of the person 30 to be authenticated (S2). The order of step S1 and step S2 may be either first or may be started simultaneously.

  Next, the control unit 6 causes the photographing unit 2 to photograph the eye 31 of the person 30 to be authenticated (S3).

  Next, the control unit 6 causes the capture processing unit 3 to perform the above-described capture processing (S4).

  In step S4, if the capture processing unit 3 can capture the image, the process proceeds to step S6. If the capture processing cannot be performed, the process returns to step S3, and the control unit 6 controls the photographing unit 2. The subject is photographed again (S5).

  In step S5, when it is determined that the capture processing of the eye image has been performed by the capture processing unit 3, the iris detection unit 11 detects a portion regarded as an iris from the image sent from the capture processing unit 3, The authentication information creating unit 19 creates authentication information, and the collation unit 20 performs comparison / verification processing with the registered authentication information stored in the storage unit 21 and the authentication result judgment unit 22 performs authentication result judgment processing. (S6).

  When the authentication result by the authentication result determination unit 22 indicates that the authenticated person 30 can be authenticated as a previously registered person, the process proceeds to step S8, while the authenticated person 30 is registered in advance. If the result indicates that the authentication cannot be performed, the output unit 23 notifies the authentication target person 30 of the result (S7, S9).

  FIG. 6 is a diagram illustrating an example of output information output to the person 30 to be authenticated by the output unit 23 of the authentication device 1 according to the first embodiment of the present invention. FIG. 6A is a diagram illustrating an example of the output information 96 output from the output unit 23 to the authenticated person 30 in step S9, and the authentication result in the authentication processing unit 17 is “authentication impossible”. In this case, as shown in FIG. 6A, messages such as “Could not be authenticated” and “Not registered” are displayed from the output unit 23.

  Returning to FIG. 4, if it is determined in step S <b> 7 that the person 30 to be authenticated is “authenticable”, the ID information of the registered authentication information used at the time of authentication is stored in the eye determination unit 81. Then, in the eye discriminating unit 81, it is discriminated whether the eye taken and authenticated by the person to be authenticated 30 is the right eye or the left eye (S8).

  Next, the result of the eye discrimination unit 81 determining the eye that the person to be authenticated 30 has photographed and authenticated is sent to the order determination unit 63 of the biometric discrimination unit 65, and the order determination unit 63 determines the authentication order. Performed (S10).

  In step S <b> 10, the order determination unit 63 extracts information corresponding to the number of times of authentication from the registration order information 70 stored in the order storage unit 62. For example, in the case of the registration order information 70 shown in FIG. 3A and the authentication process is the first time, information indicating “right” is extracted. The order determination unit 63 compares the information indicating “right” with the information indicating which eye has been authenticated and is actually sent from the eye determination unit 81.

  If the results compared by the order determination unit 63 match, the process proceeds to step S12. If the results are not correct, the result is sent from the order determination unit 63 to the biological determination unit 64, and the biological determination unit 64 The person 30 to be authenticated is determined not to be a living body, and the result is output from the output unit 23 to the person 30 to be authenticated (S11, S13).

  FIG. 6B shows an example of the output information 97 output from the output unit 23 to the authenticated person 30 in step S13. As shown in FIG. 6B, the output unit 23 outputs the output information 97 such as “Could not be authenticated” and “The order is different” from the output unit 23 to the person to be authenticated 30 and ends the process.

  Returning to FIG. 4, in step S <b> 11, the eye information that is authenticated by the person to be authenticated 30 sent from the eye determination unit 81 by the order determination unit 63 matches the eye information extracted from the registration order information. If it is determined, the order determination unit 63 further determines whether or not the number of authentications matches a predetermined number of authentications (four in the example shown in FIG. 3A) (S12). ). If the order determination unit 63 determines that the number of authentications is the same, the process proceeds to step S15 assuming that the shooting and authentication are complete. If it is determined that the numbers do not match, the order determination unit 63 determines again that the shooting is not complete and is authenticated again. In order to capture the eye image of the person 30, the process returns to step S2 (S14).

  When the process returns to step S2, the guiding unit 31 performs guiding information 92 (“the first shooting has been completed”) and guiding information 93 (see FIG. 5B and FIG. 5C). "I will shoot the eye four times" and "I will shoot the second time so please point my eyes at the camera"), and the first shot is completed for the subject 30 And to perform the second shooting.

  On the other hand, when the order determination unit 63 determines in step S12 that the number of authentications matches the predetermined number of authentications (in the example shown in FIG. 3A, when authentication is performed four times), The biometric determination unit 64 determines that the person 30 to be authenticated is a living body (S15), outputs the result to the output unit 23, and ends the process (S16).

  FIG. 6C shows an example of output information 98 output from the output unit 23 to the person 30 to be authenticated in step S16. As shown in FIG. 6C, the output unit 23 outputs the output information 98 for notifying that the user 30 has been authenticated, such as “authentication is OK”, and ends the process. To do.

  Thus, according to the authentication device 1 in the first embodiment of the present invention, it is possible to determine whether or not the person 30 to be authenticated is a living body using an iris authentication method having high reliability. In addition, it is possible to realize a configuration with higher security by performing biometric determination using the order of eyes to be photographed and authenticated.

(Second Embodiment)
Next, the configuration of the authentication device 101 according to the second embodiment of the present invention will be described. The authentication apparatus 101 according to the second embodiment of the present invention is configured such that the person to be authenticated 30 is a living body using the order of eyes that have been photographed and authenticated, like the authentication apparatus 1 described in the first embodiment. Unlike the configuration in which it is determined whether or not there is an authentication process, after performing the authentication process, the person to be authenticated 30 blinks a predetermined number of times, and depending on the order of the eyes that have been blinked, the person to be authenticated 30 It is determined whether or not it is a living body.

  FIG. 7 is a block diagram showing the configuration of the authentication device 101 according to the second embodiment of the present invention. As shown in FIG. 7, the authentication apparatus 101 according to the second embodiment of the present invention is different from the authentication apparatus 1 according to the first embodiment of the present invention in that two photographings of the photographing unit 2 and the photographing unit 42 are performed. And a switching unit 12 that switches between the outputs of the photographing unit 2 and the photographing unit 42 and outputs them to the image quality determination unit 9 under the control of the control unit 6. In the authentication apparatus 101 according to the second embodiment of the present invention, the control unit 6 can switch the output from the switching unit 12 at a cycle of 33 ms, but the present invention is not limited to this cycle.

  In addition, the eye determination unit 80 according to the second embodiment of the present invention is connected to the eye detection unit 10 of the capture processing unit 3, determines whether the captured eye is left or right, and the biometric determination unit It outputs to 65 order judgment part 63. The eye discriminating unit 80 according to the second embodiment of the present invention is controlled by the control unit 6 and refers to the timing at which the control unit 6 switches the signal of the switching unit 12, whereby the imaging unit 2 and the imaging unit. It is possible to determine which output of 42 is currently output from the capture processing unit 3.

  Furthermore, the authentication apparatus 101 according to the second embodiment of the present invention inputs information indicating whether the photographed eye is left or right, which is output from the eye discrimination unit 80, and the person to be authenticated 30 A blink detection unit 26 that determines whether any eye is blinking is provided. The blink detection unit 26 according to the second embodiment of the present invention has an eye that is closed by intentional blinking when there is no output from one eye for a predetermined time, for example, 1 second. Is determined. If the predetermined time is too short, determination is made including blinking due to the physiological phenomenon of the person 30 to be authenticated. Therefore, a certain amount of time, for example, so that the intentional blinking of the person 30 to be authenticated can be selectively detected. It is necessary to provide a lower limit of about 0.5 seconds. Further, if the predetermined time is too long, it is determined that the eye of the person to be authenticated 30 is not photographed well, so that it is determined that the eye is blinking. Therefore, for example, about 3 seconds so as not to include such a case. It is necessary to set an upper limit of. Information indicating whether the eye closed by blinking detected by the blink detection unit 26 is left or right is sent to the order determination unit 63 of the living body determination unit 65.

  In the authentication apparatus 101 according to the second embodiment of the present invention, the order storage unit 62 of the biometric determination unit 65 stores the order of eyes closed by blinking as registration order information 70, and the order determination unit 63 blinks. The order information on the order of eyes closed by blinking output from the detection unit 26 is compared with the registration order information 70, and if they match, the biometric determination unit 64 determines that the person 30 to be authenticated is a living body. On the other hand, if they do not match, it is determined that the person 30 to be authenticated is not a living body. In the authentication apparatus 101 according to the second embodiment of the present invention, the number and order of blinking after performing the authentication process are determined by the registered person 30 to photograph his / her iris pattern. It is assumed that registration is performed when registration is performed in 101.

  In the authentication apparatus 101 according to the second embodiment of the present invention, as a method of inputting the registration order information 70, for example, the person 30 to be authenticated will first have his right eye and left eye. An iris pattern is photographed, and information created by the authentication information creation unit 19 from each image is stored in the storage unit 21 as registered authentication information. Next, in order to register the registration order information 70, the person to be authenticated 30 who wants to register himself / herself captures the left eye and the right eye with the photographing unit 2 and the photographing unit 42, respectively, and his / her desired order. Blink. At this time, the function of the eye discriminating unit 80 and the blink detection unit 26, which will be described later, discriminates whether the eye to be registered 30 to be registered is the left eye or the right eye closed by blinking. Therefore, information indicating the order in which the person 30 who is going to register has blinked is stored in the order storage unit 62 as registration order information 70.

  In the example described above, the registration method of the registration order information 70 is described as a method in which the person 30 to be registered blinks and inputs his / her eyes in the order desired as described above. However, the present invention is not limited to this method. For example, after the person 30 to be registered has taken the iris pattern of his / her left eye and right eye and registered the registration authentication information. In the authentication according to the first embodiment, the registration order information 70 may be input using an input unit such as an arrow key (not shown) according to the display on the display unit (not shown). Same as device 1. In either method, the person to be authenticated 30 who wants to register can determine the order and number of times to perform blinking. An unauthorized person who is trying to impersonate cannot know the order and number of times this blinking is performed, so it is determined that the person is not a living body and a highly secure configuration can be realized.

  In the authentication apparatus 101 according to the second embodiment of the present invention, at least the authentication result may be output from the authentication result determination unit 22 to the output unit 23, and the authentication according to the first embodiment is performed. Unlike the apparatus 1, it is not necessary to output the ID information of the registration authentication information used for the comparison and collation in the collation unit 20 together.

  As described above, the authentication device 101 according to the second embodiment of the present invention includes the photographing unit 2 and the photographing unit 42, and the photographing units 2 and 42 respectively have the right eye and the left eye of the person 30 to be authenticated. The installation interval and the field angle of view are adjusted so that each can be photographed (for example, the photographing unit 2 photographs the right eye and the photographing unit 42 photographs the left eye).

  Other components are the same as those of the authentication device 1 according to the first embodiment of the present invention, and thus the description thereof is omitted.

  The authentication device 101 according to the second embodiment of the present invention does not perform the authentication processing in the authentication processing unit 17 every time the eye is photographed by the photographing unit 2, like the authentication device 1 according to the first embodiment. First, the authentication process of the person 30 to be authenticated is performed, and after the result of “authentication possible” is obtained, the eyes 30 are blinked in a predetermined order, so that the person 30 to be authenticated is a living body in the blinking order. It is possible to determine whether or not there is.

  Next, operation | movement of the authentication apparatus 101 in the 2nd Embodiment of this invention is demonstrated. FIG. 8 is a flowchart showing operation steps of the authentication device 101 according to the second embodiment of the present invention.

  As shown in FIG. 8, in the authentication device 101 according to the second embodiment of the present invention, first, the control unit 6 starts to shoot and authenticate the person to be authenticated 30 with respect to the guidance unit 31. (S21).

  An example of guidance performed by the guidance unit 31 on the person 30 to be authenticated will be described. FIG. 9 is a diagram illustrating an example of information displayed when the guide unit 31 of the authentication apparatus 101 guides the person to be authenticated 30 according to the second embodiment of the present invention.

  FIG. 9A shows an example of guidance information to be displayed by the guidance unit 31 in step S21. As illustrated in FIG. 9A, the guide unit 31 sends information indicating that authentication is to be started to the authenticated person 30 (for example, “performs authentication”), and Information for opening both eyes (for example, “please open both eyes”) is shown as guidance information 121. With this guidance information 121, the person 30 to be authenticated places his / her eyes in the imaging ranges of the imaging unit 2 and the imaging unit 42. In addition, about the method of arrange | positioning one's eyes in the imaging | photography range of the imaging | photography part 2 and the imaging | photography part 42 with respect to the to-be-authenticated person 30, well-known methods, such as the method of performing guidance using a mirror, an image | video, and an audio | voice. It is possible to use.

  Next, the control unit 6 turns on the light source unit 7 and irradiates both eyes of the person 30 to be authenticated (S22).

  Next, the control unit 6 causes the photographing unit 2 and the photographing unit 42 to photograph both eyes of the person 30 to be authenticated, and the control unit 6 causes the switching unit 12 to move from the photographing unit 2 and the photographing unit 42 at a predetermined cycle. Are switched and output to the capture processing unit 3 (S23).

  Next, the control unit 6 causes the capture processing unit 3 to perform the above-described capture processing for each of the images photographed by the photographing unit 2 and the photographing unit 42 (S24).

  In step S24, when the capture processing unit 3 can capture each of the images photographed by the photographing unit 2 and the photographing unit 42, the process proceeds to step S27, and any of the images photographed by the photographing unit 2 and the photographing unit 42 is detected. If the capture process cannot be performed, the process returns to step S23 again, and the control unit 6 causes the photographing unit 2 or the photographing unit 42 to photograph the eye of the person 30 to be authenticated again (S25).

  In step S <b> 25, when it is determined that the capture processing unit 3 has captured each of the images captured by the imaging unit 2 and the imaging unit 42, the iris detection unit 11 is sent from the capture processing unit 3. A portion that is regarded as an iris is detected from the image, and authentication information is created by the authentication information creation unit 19. The collation processing with the registered authentication information stored in the storage unit 21 in the collation unit 20, and authentication result determination An authentication result determination process in the unit 22 is performed (S27).

  The determination of the authentication result by the authentication result determination unit 22 is determined that both the right eye and the left eye of the person to be authenticated 30 match the registered authentication information of the person registered in advance in order to realize higher security. In this case, it is possible to determine that “authentication is possible”, and in order to improve usability, either the right eye or the left eye of the person to be authenticated 30 matches the registered authentication information of the person registered in advance. If it is determined, it can be determined that “authentication is possible”.

  If the authentication result by the authentication result determination unit 22 in step S27 indicates that the authenticated person 30 can “authenticate” as a previously registered person, the process proceeds to step S29, while the authenticated person 30 If the result is “authentication is not possible”, the output unit 23 notifies the authenticated person 30 of the result (S28, S30).

  In step S30, output information 96 (messages such as “Could not be authenticated” or “Not registered”) as shown in FIG. 6A is sent from the output unit 23 to the person 30 to be authenticated. , Notified by video or audio.

  Returning to FIG. 8, when it is determined in step S <b> 28 that the person to be authenticated 30 is “authenticable”, the control unit 6 instructs the guiding unit 31 as shown in FIG. 9B. The guide information 122 is displayed and the person 30 to be authenticated is guided (S29). In step S29, as shown in FIG. 9B, a message prompting blinking such as “authentication completed” or “please blink” is displayed to the person 30 to be authenticated. .

  Next, the control unit 6 causes the photographing unit 2 and the photographing unit 42 to start photographing both eyes of the person to be authenticated 30 in order to detect blinking (S31).

  Next, the capture processing unit 3 performs capture processing on each of the images captured by the imaging unit 2 and the imaging unit 42 (S32).

  Information indicating that the capture process is successful is sent from the eye detection unit 10 of the capture processing unit 3 to the eye discrimination unit 80, and the eye discrimination unit 80 is sent from the control unit 6 to the switching unit 12. With reference to the output switching cycle, it is determined whether the image that has been successfully captured is the right-eye image or the left-eye image (S33).

  Information indicating the right and left eyes of the eye successfully captured from the eye discrimination unit 80 is sent to the blink detection unit 26, and the blink detection unit 26 detects which eye is closed by blinking (S34). ).

  As described above, the blink detection unit 26 sends information indicating that an image cannot be captured from the eye detection unit 10 from at least one of the imaging unit 2 and the imaging unit 42 for a predetermined time (for example, 1 second). In this case, it can be determined that the eye corresponding to the photographing unit is closed (that is, blinked). For example, as described above, the imaging unit 2 captures the right eye of the person 30 to be authenticated, and the imaging unit 42 captures the left eye of the person 30 to be authenticated. When the time image is not captured, it is determined that the right eye is closed, and when the predetermined time image is not captured from the image captured by the imaging unit 42, the left eye is closed. Further, if no image is captured for a predetermined time from either of the images taken by the photographing unit 2 and the photographing unit 42, it is determined that both eyes are closed.

  Information regarding which eye of the person 30 to be authenticated is closed by the eye determination unit 80 (reversely, information regarding which eye is open) may be the order of the biometric determination unit 65. Sent to the determination unit 63, the order determination unit 63 determines whether or not the order information indicating the closed side of the eyes matches the registration order information 70 stored in the order storage unit 62 in advance. (S35).

  When the order in which the subject 30 closes his eyes matches the registration order information 70, the process proceeds to step S <b> 37. Otherwise, the biometric determination unit 64 determines that the person 30 to be authenticated is not a living body. Then, output information 97 as shown in FIG. 6B is output from the output unit 23 (S38).

  In step S37, the order determination unit 63 refers to the registration order information 70 stored in the order storage unit 62, determines whether or not a predetermined number of blinks has been performed (S37), and is completed. When it is determined, the process proceeds to step S40. On the other hand, when it is determined that the process is not completed, the process returns to step S29, and the control unit 6 starts to guide the authentication target person 30 to the guide unit 31 again. (S39).

  In step S40, the biometric determination unit 64 determines that the person to be authenticated 30 is a living body, and the result (for example, output information 98 as shown in FIG. 6C) is output from the output unit 23 to the person to be authenticated. 30 and the process is terminated (S41).

  As described above, when the authentication apparatus 101 according to the second embodiment of the present invention is used, both eyes of the person 30 to be authenticated can be photographed at the same time, and after performing highly reliable authentication processing using the eye image, It is possible to determine whether or not to-be-authenticated person 30 is a living body by blinking the to-be-authenticated person 30 and in that order.

  If the authentication device 101 according to the second embodiment of the present invention is used, a person who performs a so-called impersonation action does not know a predetermined order of blinking, and therefore uses a fake object such as a sophisticated false eye. However, it is not determined to be a living body, and higher security can be realized, as in the authentication device 1 in the first embodiment.

  In addition, according to the authentication device 101 in the second embodiment of the present invention, as compared with the authentication device 1 in the first embodiment, the eye of the person to be authenticated 30 is photographed and captured each time. In addition, after the binocular authentication process is performed once without performing the authentication process, only the capture process of the person to be authenticated is performed, and the authentication process is not performed, so that a quick process can be performed.

  In addition, in the second embodiment of the present invention, a configuration for performing blink detection after performing authentication processing is shown, but the present invention is not limited to this configuration, for example, after performing blink detection, The configuration may be such that authentication processing using an eye image is performed.

  Moreover, although the authentication apparatus 1 and the authentication apparatus 101 in the embodiment of the present invention have been described as performing the iris authentication process, the authentication apparatus according to the present invention is limited to the authentication process method. is not. For example, biometric authentication methods such as retina authentication and face authentication can be used as appropriate.

  As described above, according to the present invention, it has an excellent effect that it is possible to effectively perform biometric discrimination against a counterfeit having a structure similar to that of a living eye such as a false eye. Is useful as a biometric discrimination device that discriminates whether or not a subject is a living body, an authentication device that performs personal authentication of a subject, a biometric discrimination method that discriminates whether or not a subject is a living subject, and the like.

The block diagram which shows the structure of the authentication apparatus in the 1st Embodiment of this invention. The figure which shows an example of the eye discrimination information in the 1st Embodiment of this invention The figure for demonstrating the reason the authentication apparatus in the 1st Embodiment of this invention is biometric discrimination is possible The flowchart which shows the operation | movement step of the authentication apparatus in the 1st Embodiment of this invention. The figure which shows an example of the guidance information displayed in the case of the guidance which the guidance part of the authentication apparatus in the 1st Embodiment of this invention performs with respect to a to-be-authenticated person. The figure which shows an example of the output information which the output part of the authentication apparatus in the 1st Embodiment of this invention outputs with respect to a to-be-authenticated person. The block diagram which shows the structure of the authentication apparatus in the 2nd Embodiment of this invention. The flowchart which shows the operation | movement step of the authentication apparatus in the 2nd Embodiment of this invention. The figure which shows an example of the guidance information displayed in the case of the guidance which the guidance part of the authentication apparatus in the 2nd Embodiment of this invention performs with respect to a to-be-authenticated person.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1,101 Authentication apparatus 2,42 Image pick-up part 3 Capture process part 6 Control part 7 Light source part 9 Image quality determination part 10 Eye detection part 11 Iris detection part 12 Switching part 17 Authentication process part 19 Authentication information creation part 20 Verification part 21 Storage part DESCRIPTION OF SYMBOLS 22 Authentication result determination part 23 Output part 25 Eye discrimination | determination information 26 Blink detection part 30 Authentication person 31 Guidance part 62 Order memory | storage part 63 Order determination part 64 Biometric determination part 65 Biometric discrimination | determination part 70 Registration order information 71,72 Order information 80, 81 Eye discriminating part 91, 92, 93, 121, 122 Guide information 96, 97, 98 Output information

Claims (8)

An imaging unit that shoots the subject's eyes multiple times;
An eye discriminating unit for discriminating whether each of the eyes of the subject photographed a plurality of times by the photographing unit is the left or right eye;
An order determining unit that determines the order of eyes taken by the imaging unit based on a result determined by the eye determining unit;
A living body determination apparatus comprising: a living body determination unit that determines whether or not the subject is a living body based on an order of eyes taken by the shooting unit, which is determined by the order determination unit. A blink detection unit that detects an eye that the subject blinks using the determination result of the eye determination unit,
The order determination unit determines the order of eyes in which the subject blinks based on the result detected by the blink detection unit,
The said biological determination part determines whether the said subject is a biological body based on the order of the eye which the said subject blinked which the said order determination part determined. Biological discrimination device. A sequence storage unit that stores sequence information indicating a sequence of eyes to be photographed or blinked in advance,
The living body discrimination apparatus according to claim 1, wherein the order determination unit determines the order based on the order information stored in the order storage unit. The living body discrimination device according to any one of claims 1 to 3,
An authentication information creating unit that creates authentication information every time the photographing unit captures, from a portion including at least the iris of the image captured by the photographing unit,
A storage unit for storing pre-registered right and left eye registration authentication information;
A verification unit for comparing and verifying the authentication information created by the authentication information creation unit and the registered authentication information stored in the storage unit;
An authentication apparatus comprising: an authentication result determination unit configured to determine whether or not the subject can be authenticated based on a result of comparison and collation in the collation unit. An imaging unit that shoots the subject's eyes multiple times;
An authentication information creating unit that creates authentication information every time the photographing unit captures, from a portion including at least the iris of the image captured by the photographing unit,
A storage unit for storing pre-registered right and left eye registration authentication information;
A verification unit for comparing and verifying the authentication information created by the authentication information creation unit and the registered authentication information stored in the storage unit;
An authentication result determination unit that determines whether or not the subject can be authenticated based on a result of comparison and collation in the collation unit;
An eye discriminating unit for discriminating whether the eye of the subject that has been authenticated a plurality of times by the authentication result determining unit is the left or right eye;
An order determination unit that determines the order of the eyes that the authentication result determination unit has authenticated based on the result determined by the eye determination unit;
A biometric determination comprising a biometric determination unit that determines whether or not the subject is a living body based on the order of eyes determined by the order determination unit and authenticated by the authentication result determination unit apparatus. In the storage unit, the registration authentication information is stored together with identification information,
The authentication result determination unit outputs the identification information indicating the registration authentication information used by the verification unit for comparison verification to an eye determination unit,
The eye discriminating unit stores eye discrimination information for right and left eye corresponding to the identification information of the registration authentication information, and the eye discrimination information and the identification information sent from the authentication result judgment unit And determining whether the eye of the subject that has been authenticated a plurality of times by the authentication result determination unit is the left or right eye, and the order determination unit is based on the result determined by the eye determination unit The biometric determination device according to claim 5, wherein the authentication result determination unit determines the order of eyes that have been authenticated. A first step of photographing the subject's eye multiple times;
A second step of determining whether the eyes of the subject photographed a plurality of times in the first step are left and right eyes, respectively;
A third step of determining the order of the eyes photographed in the first step based on the result determined in the second step;
A fourth step of determining whether or not the subject is a living body based on the order of the eyes photographed in the first step determined in the third step is provided. Biological discrimination method. A first step of photographing the subject's eye multiple times;
A second step of determining whether the eyes of the subject photographed a plurality of times in the first step are left and right eyes, respectively;
A third step of detecting an eye that the subject has blinked using the determination result of the second step;
A fourth step of determining the order of eyes in which the subject blinks based on the result detected in the third step;
And a fifth step of determining whether or not the subject is a living body based on the order of eyes that the subject has blinked determined in the fourth step. Item 8. The living body discrimination method according to Item 7.

Images