JP2007094580A - Authentication system, method, and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To improve efficiency and safety while reducing cost in an authentication system by photograph collation. <P>SOLUTION: A user takes a photograph 107 with a camera 101 and takes the data into a terminal 200. The terminal 200 receives time information and position information from a GPS satellite 102 or the like. The terminal 200 sends the data to a certification code issue server 300. The certification code issue server 300 receives weather information from a meteorological satellite 103 and composes the weather information and the time information and position information received from the terminal 200 to generate a certification code 108. The terminal 200 prints the certification code 108 and the photograph 107 as an entry certificate 105 by a printer 104. At an entrance of a company site or the like, the certification code 108 is input into an entry/exit management server 400 when the user 106 enters, and the photograph 107 corresponding to the certification code 108 is displayed and checked. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to an authentication system, an authentication method, and an authentication program. In particular, the present invention relates to an entrance / exit management system using a service that proves time and location.

  In a conventional entrance / exit management system, an IC (Integrated Circuit) card that stores authentication information, a bookkeeping system, a badge, or a simple entrance permit is used for authentication of visitors and entrance / exit records. The barcode printed on the card is read to read a face photograph of the entrance / exit that has been converted into a barcode in advance, and this is enlarged and displayed on a display to determine whether the person is the person (for example, Patent Document 1). reference.).

As a method for proving time and position, for example, synthetic information is generated from time information indicating time and proof information of time information which changes with time (e.g., weather information). The method to be used is known (for example, refer to Patent Document 2). As a service that actually uses this method, for example, there is a COCO-DATES (registered trademark) service (website URL <http://www.mitsubishielectric.co.jp/coco-dates/>).
JP 2002-183360 A JP 2001-297062 A

The conventional entrance / exit management system has the following problems.
(1) IC cards are expensive, and cost performance is poor for use by temporary contractors such as construction contractors (IC cards are about 2000 yen).
(2) In the case of entrance / exit management using a bookkeeping system, badges, etc., it is inefficient because it involves manual management.
(3) A simple admission permit with a bar code is easy to forge by copying or the like, and it is difficult to verify the identity.

  The present invention relates to an authentication method based on photo collation, and aims to reduce the cost and improve the efficiency and safety.

The authentication system of the present invention includes:
A first storage device for storing information indicating a prescribed condition including at least one of a prescribed time and position;
A second storage device that associates and stores a photograph of the subject and proof information that certifies shooting conditions including at least one of the time and position at which the photograph was taken;
A printing device for printing the photograph and the certification information on a document for authenticating the subject;
A first input device for inputting certification information printed on the document by the printing device;
An indexing unit for determining the imaging condition proved by the certification information input by the first input device, and a rule indicated by the information stored in the first storage device for the imaging condition determined by the indexing unit A determination unit that determines whether or not the condition is satisfied; and the second unit that associates with the proof information input by the first input device when the determination unit determines that the prescribed condition is satisfied. A processing device having a reading unit for reading a photograph stored in the storage device;
And an output device for outputting a photograph read by the reading unit of the processing device for collation of the photograph printed on the document by the printing device.

  In the present invention, the processing device determines whether or not the photographing condition proved by the certification information printed on the document satisfies the prescribed condition, and corresponds to the certification information when it is judged that the prescribed condition is satisfied. The attached photo is read and the output device outputs the photo read by the processing device for collation of the photo printed on the document, thereby reducing the cost of the authentication method based on photo collation. In addition, the efficiency and safety can be improved.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

Embodiment 1 FIG.
FIG. 1 is a diagram showing a configuration of an authentication system according to the present embodiment.

  In the present embodiment, the authentication system 100 includes a terminal 200, a certification code issuing server 300, and an entrance / exit management server 400.

  The terminal 200 is, for example, a PC (personal computer), and a camera 101 and a printer 104 (an example of a printing apparatus) are connected to the terminal 200. The certification code issuing server 300 is a server device, and provides a service for certifying at least one of time and position. As this service, for example, the method described in Patent Document 2 (specifically, COCO-DATES (registered trademark) service) may be used, or a hash function or the like is used for information indicating time or position. A method of generating irreversible fixed-length data and using the fixed-length data as proof data may be used. In the present embodiment, the certification code issuance server 300 uses the method described in Patent Document 2 to certify the time and position, and further, weather information (photograph 107 is taken as the time-dependent change information described above. An example of unique data that can be obtained only at a specific time) is used.

  In the authentication system 100, the user 106 (an example of a subject) inputs the user's 106 name, company name, validity period, and other necessary information (hereinafter, these pieces of information are collectively referred to as various information) through the terminal 200. At the same time, the user 106 takes a photograph 107 of the user 106 with the camera 101 and captures the data with the terminal 200. Furthermore, the terminal 200 receives time information and position information from a GPS (Global Positioning System) satellite 102 or the like. Since the terminal 200 causes the certification code issuing server 300 to generate the certification code 108 (COCO-DATES (registered trademark) code when using the COCO-DATES (registered trademark) service) based on these data (information), These data are sent to the certification code issuing server 300. The certification code issuance server 300 receives the weather information from the weather satellite 103 (it may be received via another device instead of receiving it directly from the weather satellite 103), and the time information and position received from the terminal 200 The certification code 108 is generated by combining the information and the weather information. At this time, instead of the weather information or together with the weather information, natural phenomenon information such as temperature, humidity, atmospheric pressure, altitude, and wind speed (an example of unique data that can be obtained only at the position where the photograph 107 was taken) is synthesized. May be.

  The certification code issuing server 300 processes the data of the photograph 107 to create data (hereinafter referred to as the photograph 107) in which the certification code 108 is written on the photograph 107, and transmits the data to the terminal 200. The certification code issuing server 300 transmits the certification code 108 at the same time. Further, the certification code issuing server 300 associates the certification code 108 with various information received from the terminal 200 and the photograph 107 and stores them in a database (an example of a second storage device). Here, the terminal 200 processes the data of the photograph 107 to create data in which the certification code 108 is written on the photograph 107, or associates the certification code 108 with various information and the photograph 107 to create a database (first table). Or an example of the second storage device).

  The terminal 200 receives the certification code 108 and the photograph 107 from the certification code issuing server 300 and prints them on the printer 104 as an introduction certificate 105 (an example of a document). At this time, the certification code 108 may be a bar code or a two-dimensional bar code (for example, a QR code (registered trademark)) so that it can be easily read by a bar code reader or the like in addition to the text. In this embodiment, the introductory certificate 105 is printed as a two-dimensional barcode 109 (an example of a barcode).

  In the present embodiment, a certification code input bar code reader 110 (an example of a first input device) and an introductory bar code reader 111 (an example of a first input device) are provided at an entrance (gate) such as a company site that restricts entry and exit of the user 106. An example of a first input device), an entrance bar code reader 112 (an example of a first input device), and the like are installed, and these are connected to the entrance / exit management server 400. The user 106 or an administrator (guard, etc.) reads the two-dimensional bar code 109 printed on the entrance certificate 105 with the printer 104 by the bar code reader 110 for inputting the certification code connected to the entrance / exit management server 400, and the certification code The certification code 108 generated by the issuing server 300 is registered in the entrance / exit management server 400 in advance, and various information such as personal information to be input separately (the entrance / exit management server 400 issues the certification code using the certification code 108 as a key). It may be automatically acquired from the server 300.) and the photograph 107.

  When entering the user 106, the administrator reads the two-dimensional barcode 109 printed on the entrance certificate 105 with the entrance barcode reader 111 connected to the entrance / exit management server 400, and enters the corresponding various information and photographs 107. Display on the exit management server 400 and check. Similarly, when the user 106 goes to the entrance, the entrance barcode reader 112 reads the two-dimensional barcode 109 printed on the entrance certificate 105 and displays the corresponding information and photographs 107 on the entrance / exit management server 400 for checking. If it is carried out, it becomes possible to manage entry and exit with the introductory certificate 105.

  As described above, the introductory certificate 105 of the present embodiment is an introductory certificate 105 corresponding to the certification code 108 and the photograph 107, and it is difficult to forge. Further, by inputting the certification code 108 from the entrance / exit management server 400, the photograph 107 and various information of the user 106 can be confirmed, and the identity verification becomes easy.

  FIG. 2 is a block diagram showing a configuration of terminal 200 and certification code issuing server 300 in the present embodiment.

  The terminal 200 includes a second storage device 201, a processing device 202, and a communication device 203. The certification code issuing server 300 is connected to the terminal 200 via a network 700 such as the Internet, and includes a second storage device 301, a generation device 302, and a communication device 303. The operation of each device will be described later together with a flowchart.

  FIG. 3 is a block diagram showing the configuration of the entrance / exit management server 400 in the present embodiment.

  The entrance / exit management server 400 includes a first storage device 401, a third storage device 402, a processing device 403, a keyboard 404 (an example of a first input device), and a CRT (Cathode Ray Tube) 405 (an example of an output device). The communication device 406 is provided. The operation of each device will be described later together with a flowchart.

  The processing device 403 includes an indexing unit 407, a determination unit 408, a reading unit 409, and an entrance / exit management unit 410. The operation of each part will be described later together with a flowchart.

  FIG. 4 is a flowchart showing the operation of the authentication system according to the present embodiment when the user 106 prints the introductory certificate 105.

  Although not shown, the processing device 202 of the terminal 200 causes the user 106 to input various information via an input device such as a keyboard, and stores the input information in a storage device such as a memory. The camera 101 takes a photograph 107 of the user 106. The processing device 202 of the terminal 200 reads the data of the photograph 107 taken by the camera 101 and stores it in the storage device, and also receives time information and position information from the GPS satellite 102 and stores them in the storage device. The communication device 203 of the terminal 200 transmits the photograph 107, various information, time information, and position information stored in the storage device via the network 700, and the communication device 303 of the certification code issuing server 300 receives these data. To do.

  As shown in FIG. 4, the generation device 302 of the certification code issuing server 300 receives the weather information from the weather satellite 103 and combines the received weather information with the time information and the position information received by the communication device 303. Thus, the certification code 108 is generated to prove the photographing condition including the time and position when the photograph 107 of the user 106 was photographed (step S101: generation step (process)). Further, the generation device 302 of the certification code issuing server 300 processes the photograph 107 received by the communication device 303 into a photograph 107 in which the generated certification code 108 is described, and associates the processed photograph 107 with the certification code 108. And stored in the second storage device 301 (step S102: second storage step (process)). At this time, weather information, time information, position information, various information, and the like are also stored in the second storage device 301 in association with the certification code 108. Then, the communication device 303 of the certification code issuing server 300 transmits the photograph 107 and the certification code 108 stored in the second storage device 301 via the network 700, and the communication device 203 of the terminal 200 transmits these data. Receive.

  In steps S102 and S103, the second storage device 301 of the certification code issuing server 300 is used to manage the photograph 107 and the certification code 108, but instead of or simultaneously with the second storage device 301 of the terminal 200. The storage device 201 can also be used. In this case, the processing device 202 of the terminal 200 processes the photograph 107 stored in the storage device into a photograph 107 in which the certification code 108 received by the communication device 203 is described, and the processed photograph 107 and the certification code 108 are processed. The image may be stored in the second storage device 201 in association with each other, or the photograph 107 and the certification code 108 received by the communication device 203 may be stored in the second storage device 301 in association with each other.

  The processing device 202 of the terminal 200 converts the certification code 108 received by the communication device 203 into a two-dimensional barcode 109. The printer 104 prints the photograph 107, the certification code 108, and the two-dimensional barcode 109 received by the communication device 203 of the terminal 200 on the introduction certificate 105 of the user 106 (step S103: printing step (processing)).

  FIG. 5 is a flowchart showing the operation of the authentication system according to the present embodiment when the user 106 enters and leaves the company premises where entry and exit are restricted.

  As shown in FIG. 5, the first storage device 401 of the entrance / exit management server 400 stores information indicating a specified condition including a specified time and position (step S104: first storage step (process)). . The introductory bar code reader 111 reads the two-dimensional bar code 109 printed on the introductory certificate 105, extracts the certification code 108, and inputs the extracted certification code 108 (step S105: first input step (process)) ). The indexing unit 407 of the entrance / exit management server 400 associates with the certification code 108 input by the entry barcode reader 111, the second storage device 301 of the certification code issuing server 300 (the second storage device of the terminal 200). The weather information, time information, position information, and the like stored in (201) may be acquired, and the imaging conditions proved by the certification code 108 are determined (step S106: indexing step (processing)). The determination unit 408 of the entrance / exit management server 400 determines whether the shooting condition determined by the indexing unit 407 satisfies the specified condition indicated by the information stored in the first storage device 401 (the photograph 107 is specified in advance). It is determined whether or not the image is taken at a place defined by the time (step S107: determination step (process)).

  When the prescribed condition is satisfied (step S108: continuing from the determination step (processing)), the reading unit 409 of the entrance / exit management server 400 certifies in association with the certification code 108 input by the entrance barcode reader 111. The photograph 107 stored in the second storage device 301 of the code issuing server 300 is read (step S109: reading step (processing)). The CRT 405 of the entrance / exit management server 400 outputs the photograph 107 read for collation of the photograph 107 printed on the entrance certificate 105 (step S110: output step (processing)).

  In step S109, the reading unit 409 of the entrance / exit management server 400 may further read various information, and in step S110, the CRT 405 of the entrance / exit management server 400 may output various information.

  When the photo 107 printed on the entrance certificate 105 matches the photo 107 output by the CRT 405 of the entrance / exit management server 400 (step S111: entrance / exit management step (process)), entrance / exit management of the entrance / exit management server 400 The unit 410 determines whether the user 106 is allowed to enter or leave the company site (for example, the CRT 405 of the entrance / exit management server 400 outputs a message indicating that entry / exit is permitted) (step S112: entrance / exit management). Step (continuation of processing)). When the photographs 107 do not match (step S111: entrance / exit management step (process)), the entrance / exit management unit 410 of the entrance / exit management server 400 determines whether the user 106 is not allowed to enter or leave the company site (for example, Then, the CRT 405 of the entrance / exit management server 400 outputs a message to reject entry / exit) (step S113: continuation of entrance / exit management step (process)).

  The entrance / exit management unit 410 of the entrance / exit management server 400 indicates the result of determination regarding whether the user 106 is allowed to enter or leave, the user ID (for example, included in various information), and the time of entry / exit of the user 106. Information is stored in the third storage device 402 (step S114: third storage step (process)). The CRT 405 of the entrance / exit management server 400 outputs information stored in the third storage device 402 (step S115: output step (processing)).

  In step S <b> 110 or the like, the entrance / exit management unit 410 of the entrance / exit management server 400 may cause the CRT 405 to output history information related to past entrance / exit of the user 106 stored in the third storage device 402.

As described above, the authentication system according to the present embodiment is
A first storage device for storing information indicating a prescribed condition including at least one of a prescribed time and position;
A second storage device that associates and stores a photograph of the subject and proof information that certifies shooting conditions including at least one of the time and position at which the photograph was taken;
A printing device for printing the photograph and the certification information on a document for authenticating the subject;
A first input device for inputting certification information printed on the document by the printing device;
An indexing unit for determining the imaging condition proved by the certification information input by the first input device, and a rule indicated by the information stored in the first storage device for the imaging condition determined by the indexing unit A determination unit that determines whether or not the condition is satisfied; and the second unit that associates with the proof information input by the first input device when the determination unit determines that the prescribed condition is satisfied. A processing device having a reading unit for reading a photograph stored in the storage device;
And an output device for outputting a photograph read by the reading unit of the processing device for collation of the photograph printed on the document by the printing device.

  With such a feature, it is possible to reduce the cost and improve the efficiency and safety of the authentication method using photo collation. For example, in this embodiment, the introductory certificate 105 need only be a photograph 107, a certification code 108, a two-dimensional bar code 109, etc. printed on paper, and is therefore less expensive than an IC card or the like. Further, when managing entry / exit, since the regular photograph 107 of the user 106 is automatically output from the certification code 108, the efficiency is high. Furthermore, since the photograph 107 printed on the user 106 and the introductory certificate 105 can be compared with the photograph 107 corresponding to the certification code 108, the photograph can be collated, so that the photograph is issued by another user or another system. Even if a certification code or the like is used, the introductory certificate 105 that can be successfully authenticated cannot be forged, and security is high.

The authentication system further includes:
A combination of time information indicating the time when the photograph was taken and unique data that can be obtained only at the time, position information indicating a position where the photograph was taken, and unique data that can be obtained only at the position A generation device is provided that generates at least one combination of the combinations to generate the certification information.

  Such features increase the proof ability of proof information.

The printing device prints the certification information as a barcode,
The first input device reads the barcode printed by the printing device, extracts the certification information, and inputs the extracted certification information.

  With such a feature, it is possible to save the trouble of manually inputting certification information.

The processing device further determines whether the subject is allowed to enter or leave the restricted place based on a result of collating a photo printed on the document by the printing device with a photo read by the reading unit. Has an entrance / exit management department to judge,
The authentication system further includes:
A third storage device for storing information indicating a result of the determination by the entrance / exit management unit of the processing device and the subject and the entry / exit time of the subject;
The output device further outputs information stored in the third storage device.

  With such a feature, it is possible to reduce the cost and improve the efficiency and safety of the entrance / exit management system.

The authentication method according to the present embodiment is as follows.
A first storage step in which the first storage device stores information indicating a specified condition including at least one of a specified time and position;
A second storage step in which the second storage device stores a photograph of the subject in association with certification information proving the photographing condition including at least one of the time and position at which the photograph was photographed;
A printing step in which a printing device prints the photograph and the certification information on a document for authenticating the subject;
A first input device for inputting certification information printed on the document by the printing device;
An indexing step in which the processing device determines a photographing condition proved by the certification information input by the first input device;
A determination step of determining whether or not the imaging condition determined by the indexing step satisfies a specified condition indicated by information stored in the first storage device;
When the processing device determines that the prescribed condition is satisfied by the determination step, the processing device is stored in the second storage device in association with the certification information input by the first input device. A reading step for reading a photo;
The output device includes an output step of outputting a photograph read by the processing device for collation of the photograph printed on the document by the printing device.

The authentication program according to the present embodiment is
A first storage process in which the first storage device stores information indicating a prescribed condition including at least one of a prescribed time and position;
A second storage process in which the second storage device stores a photograph of the subject in association with certification information that certifies shooting conditions including at least one of the time and position at which the photograph was taken;
A printing process in which the printing apparatus prints the photograph and the certification information on a document for authenticating the subject;
A first input process in which a first input device inputs certification information printed on the document by the printing device;
An indexing process in which the processing device determines a photographing condition proved by the certification information input by the first input device;
A determination process in which the processing device determines whether the photographing condition determined by the indexing process satisfies a specified condition indicated by information stored in the first storage device;
When the processing device determines that the prescribed condition is satisfied by the determination processing, the processing device is stored in the second storage device in association with the certification information input by the first input device. A reading process to read a photo;
The output device causes the computer to execute an output process for outputting the photograph read by the processing device for collation of the photograph printed on the document by the printing device.

Embodiment 2. FIG.
FIG. 6 is a diagram showing a configuration of the authentication system according to the present embodiment.

  In the present embodiment, the authentication system 100 includes a terminal 200, a certification code issuing server 300, an archive server 500 (an example of a first storage device), and a portable terminal 600.

  The terminal 200 and the certification code issuing server 300 are the same as those described in the first embodiment. The camera 101, the GPS satellite 102, the weather satellite 103, the printer 104, and the introductory certificate 105 are the same as those described in the first embodiment.

  In this embodiment, the certification code 108 generated by the certification code issuing server 300 is registered in the archive server 500 in advance, and further linked with various information such as personal information input separately and the photograph 107. An administrator (such as a guard) who confirms the identity of the user 106 (or a suspicious person) holds the portable terminal 600 in a company premises that restricts entry and exit of the user 106. The administrator reads the certification code 108 and the two-dimensional barcode 109 printed on the introductory certificate 105 by the printer 104 with a camera or barcode reader equipped in the portable terminal 600, queries the archive server 500 for the certification code 108, Download various information and photos 107. By checking various downloaded information and photographs 107, it is possible to easily confirm the person who has the introductory certificate 105.

  In the present embodiment, the authentication system 100 may include the entrance / exit management server 400 described in the first embodiment. In this case, various information registered in the entrance / exit management server 400, photos 107, and the like are stored in the archive server 500 instead, and the load is reduced by dividing the apparatus into functions for entrance / exit management and archive. It becomes possible to disperse.

  In the present embodiment, the certification code issuing server 300 is managed in another company (an example of a person other than the organization to which the user 106 belongs), and the archive server 500 is managed in the company (an example of the organization to which the user 106 belongs). The archive server 500 issues a certification code for only the certification code 108, various information, and the photograph 107 stored in the certification code issuing server 300 (or the terminal 200) in the first embodiment, related to the user 106 of the company. Received from the server 300 via a network such as the Internet and stored. Here, the certification code issuing server 300 may delete the certification code 108, various information, and the photograph 107 from the database after transmitting them to the archive server 500. Thereby, storage of information can be separated from the certification code issuing server 300, and security can be improved.

  FIG. 7 is a block diagram showing a configuration of portable terminal 600 in the present embodiment.

  The mobile terminal 600 includes a third storage device 601, a processing device 602, a camera 603 (an example of a first input device), an LCD (liquid crystal display) 604 (an example of an output device), and a communication device 605. The operation of each device will be described later together with a flowchart.

  The processing device 602 includes an indexing unit 606, a determination unit 607, and a reading unit 608. The operation of each part will be described later together with a flowchart.

  The operation of the authentication system according to the present embodiment when the user 106 prints the introductory certificate 105 is the same as that described in the first embodiment.

  FIG. 8 is a flowchart showing the operation of the authentication system according to the present embodiment when an administrator such as a guard confirms the user 106 in the company premises where entry / exit is restricted.

  As shown in FIG. 5, the archive server 500 stores information indicating a specified condition including a specified time and position (step S201: first storage step (process)), and the second of the certification code issuing server 300. The storage device 301 (which may be the second storage device 201 of the terminal 200) reads and stores the photograph 107 and the certification code 108 corresponding to the photograph 107 (step S202: first storage step (processing) (Continued)). In the present embodiment, archive server 500 simultaneously reads and stores weather information, time information, position information, and the like stored in second storage device 301 of certification code issuing server 300.

  The camera 603 of the portable terminal 600 reads the two-dimensional barcode 109 printed on the introductory certificate 105, extracts the certification code 108, and inputs the extracted certification code 108 (step S203: first input step (processing) ). The indexing unit 606 of the portable terminal 600 calculates the photographing condition proved by the certification code 108 input by the camera 603 (step S204: indexing step (processing)). In the present embodiment, the indexing unit 606 of the portable terminal 600 transmits the certification code 108 input by the camera 603 to the archive server 500 wirelessly (performs wireless communication via an antenna provided in the communication device 605). Then, meteorological information, time information, position information, and the like corresponding to the transmitted certification code 108 are received from the archive server 500 wirelessly, and imaging conditions are determined based on the received information.

  The determination unit 607 of the portable terminal 600 determines whether the shooting condition determined by the indexing unit 606 satisfies the specified condition indicated by the information stored in the archive server 500 (the photograph 107 is specified at a predetermined time). It is determined whether or not the image is photographed at a place (step S205: determination step (process)).

  When the prescribed conditions are satisfied (step S206: continuation of the determination step (process)), the reading unit 608 of the portable terminal 600 transmits the certification code 108 input by the camera 603 to the archive server 500 wirelessly, and transmits it. The photograph 107 corresponding to the certification code 108 received is wirelessly received from the archive server 500 and read (step S207: reading step (processing)). The LCD 604 of the portable terminal 600 outputs the photograph 107 read for collation of the photograph 107 printed on the introductory certificate 105 (step S208: output step (process)). If the photograph 107 printed on the introductory certificate 105 matches the photograph 107 output by the LCD 604 of the portable terminal 600, the user 106 has been confirmed.

  In step S202, the archive server 500 further reads and stores various types of information. In step S207, the reading unit 608 of the portable terminal 600 reads the various types of information. In step S208, the LCD 604 of the portable terminal 600 outputs the various types of information. Also good.

As described above, the authentication system according to the present embodiment has the features of the authentication system according to the first embodiment,
The subject is a user;
The second storage device is installed in a place managed by a person other than the organization to which the user belongs,
The first storage device is installed in a place managed by the organization to which the user belongs, stores information indicating the prescribed condition, and corresponds to a photograph stored in the second storage device and the photograph Read and store the proof information,
When the determination unit determines that the specified condition is satisfied, the reading unit of the processing device associates with the proof information input by the first input device in the first storage device. It is characterized by reading a stored photograph.

  With such a feature, certification information and photographs can be managed by themselves, and efficiency and safety are further improved. For example, in the present embodiment, it is more efficient to acquire the photograph 107 and various information from the in-house archive server 500 than to acquire from the external certification code issuing server 300. Similarly, it is safer to manage the photograph 107 and various types of information by the in-house archive server 500, rather than the outside certification code issuing server 300.

  The reading unit of the processing device transmits the certification information input by the first input device to the first storage device (by wireless), and a photo corresponding to the transmitted certification information is transmitted to the first storage device. It is characterized by receiving (by radio) and reading.

  With such a feature, it is possible to perform photo collation not only at a fixed point but also at a destination, and even during movement.

Embodiment 3 FIG.
The configuration of the authentication system according to the present embodiment is the same as that described in the first embodiment.

  FIG. 9 is a flowchart showing the operation of the authentication system according to the present embodiment when the user 106 prints the introductory certificate 105.

  As shown in FIG. 9, the generating device 302 of the certification code issuing server 300 synthesizes the photograph 107 of the user 106 together with the weather information received from the weather satellite 103, the time information and the position information received by the communication device 303. Thus, the certification code 108 for certifying the photographing condition including the time and position at which the photograph 107 was photographed is generated (step S301: generation step (process)).

  The operations in steps S302 and S303 are the same as those in steps S102 and S103 in FIG. 4 described in the first embodiment.

  The operation of the authentication system according to the present embodiment when the user 106 enters and leaves the company premises where entry / exit is restricted is the same as that of FIG. 5 described in the first embodiment.

As described above, the authentication system according to the present embodiment has the features of the authentication system according to the first embodiment,
The generation device can obtain only a combination of time information indicating the time when the photograph was taken and unique data that can be obtained only at the time, position information indicating the position where the photograph was taken, and the position. The certification information is generated by combining at least one combination of unique data and the photograph with the photograph.

  Due to such a feature, the correlation between the certification information and the photo becomes strong, so that the photo can be more reliably collated.

Embodiment 4 FIG.
The configuration of the authentication system according to the present embodiment is the same as that described in the second embodiment. Also in the present embodiment, when the user 106 prints the introductory certificate 105, the authentication system 100 can be operated in the same manner as described in the third embodiment. The operation of the authentication system according to the present embodiment when an administrator such as a guard confirms the user 106 within the company premises where entry / exit is restricted is the same as that described in the second embodiment.

Embodiment 5. FIG.
FIG. 10 is a diagram showing a configuration of the authentication system according to the present embodiment.

  In the present embodiment, the authentication system 100 includes a terminal 200, a certification code issuing server 300, and an entrance / exit management server 400.

  The terminal 200 and the certification code issuing server 300 are the same as those described in the first embodiment. The camera 101, the GPS satellite 102, the meteorological satellite 103, the printer 104, the entrance certificate 105, the certification code input barcode reader 110, the entry barcode reader 111, and the exit barcode reader 112 are also described in the first embodiment. It is the same as what I did.

  In the present embodiment, when the user 106 enters, the administrator reads the two-dimensional barcode 109 printed on the entrance certificate 105 with the entrance barcode reader 111 connected to the entrance / exit management server 400 and also scans the scanner 113. The photograph 107 printed on the introductory certificate 105 is read by (an example of a second input device). Then, the entrance / exit management server 400 checks the photograph 107 corresponding to the certification code 108 extracted from the two-dimensional barcode 109 and the photograph 107 read by the scanner 113. Similarly, when the user 106 goes to the entrance, the entrance barcode reader 112 reads the two-dimensional barcode 109 printed on the entrance certificate 105, and the scanner 113 reads the photograph 107 printed on the entrance certificate 105. The entrance / exit management server 400 is checked for the photograph 107 to be entered.

  FIG. 11 is a block diagram showing the configuration of the entrance / exit management server 400 in the present embodiment.

  The entrance / exit management server 400 includes a first storage device 401, a third storage device 402, a processing device 403, a keyboard 404, a CRT 405, and a communication device 406. The operation of each device will be described later together with a flowchart.

  The processing device 403 includes an indexing unit 407, a determination unit 408, a reading unit 409, and a collation unit 411. The operation of each part will be described later together with a flowchart.

  The operation of the authentication system according to the present embodiment when the user 106 prints the introductory certificate 105 is the same as that in FIG. 4 described in the first embodiment.

  FIG. 12 is a flowchart showing the operation of the authentication system according to the present embodiment when the user 106 enters and leaves the company premises where entry / exit is restricted.

  The operations from step S501 to S506 are the same as steps S104 to S109 in FIG. 5 described in the first embodiment.

  The scanner 113 scans and inputs the photograph 107 printed on the introductory certificate 105 (step S507: second input step (process)). The collation unit 411 of the entrance / exit management server 400 collates the photograph 107 input by the scanner 113 with the photograph 107 read by the reading unit 409 in step S506 (step S508: collation step (process)). The CRT 405 of the entrance / exit management server 400 outputs information indicating the result of collation of the photos 107 (for example, a message indicating that the two photos 107 match) (step S509: output step (process)). Based on the result of collation of the photograph 107 output by the CRT 405 of the entrance / exit management server 400, whether the user 106 is allowed to enter or leave can be determined. Here, the entrance / exit management server 400 includes an entrance / exit management unit 410 as in the first embodiment, and the entrance / exit management unit 410 applies to the site of the company based on the result of collation of the photo 107 by the collation unit 411. The user 106 may be permitted to enter or leave.

As described above, in addition to the features of the authentication system according to the first embodiment, the authentication system according to the present embodiment further includes:
A second input device for scanning and inputting a photograph printed by the printing device;
The processing apparatus further includes a collation unit that collates a photograph input by the second input device with a photograph read by the reading unit,
The output device outputs information indicating a result of collation by a collation unit of the processing device.

  Due to such a feature, even photo collation can be automatically performed, and convenience is further improved.

Embodiment 6 FIG.
The configuration of the authentication system according to the present embodiment is the same as that described in the first embodiment.

  The operation of the authentication system according to the present embodiment when the user 106 prints the introductory certificate 105 is the same as that in FIG. 4 described in the first embodiment.

  FIG. 13 is a flowchart showing the operation of the authentication system according to the present embodiment when the user 106 enters and leaves the company premises where entry and exit are restricted.

  The operations from step S601 to S603 are the same as steps S104 to S106 in FIG. 5 described in the first embodiment.

  The determination unit 408 of the entrance / exit management server 400 includes a time (for example, 9:58:54 am on June 8, 2005) and a current time (for example, 2005) included in the shooting conditions determined by the indexing unit 407. Compared with September 13, 2013 4:14:10), and the current time is included in the specified condition indicated by the information stored in the second storage device 301 of the certification code issuing server 300 (for example, 3 months or 1 year) is determined (step S604: determination step (process)). Here, in the step S604, the entry / exit management server 400 determines whether the prescribed conditions include the relationship with the place where the photograph 107 was taken (for example, the positional relationship such as distance and direction) (hereinafter referred to as the effective range). The unit 408 compares the position (position where the photograph 107 was photographed) included in the photographing condition calculated by the indexing unit 407 with the current position (for example, the gate), and the current position is the certification code issuing server 300. It may be determined whether or not the effective range (for example, within a radius of 1 km) included in the specified condition indicated by the information stored in the second storage device 301 is included.

  When the current time is within the valid period (in the above example, the valid period is one year) (continuation of step S605: determination step (process)), the reading unit 409 of the entrance / exit management server 400 uses the entry bar. The photograph 107 stored in the second storage device 301 of the certification code issuing server 300 in association with the certification code 108 input by the code reader 111 is read (step S606: reading step (processing)).

  The operations from step S607 to S612 are the same as steps S110 to S115 in FIG. 5 described in the first embodiment.

As described above, the authentication system according to the present embodiment has the features of the authentication system according to the first embodiment,
The prescribed condition includes a validity period indicating a length of a period during which the photograph is regarded as valid,
The determination unit of the processing device compares the time included in the imaging condition calculated by the indexing unit with the current time, and the specified condition indicated by the information stored in the first storage device is the current time To determine if it falls within the validity period included in the
When the determination unit determines that the current time is within the valid period included in the specified condition, the reading unit of the processing device associates with the proof information input by the first input device. The photo stored in the second storage device is read.

  Because of these features, photos can be set effectively for a certain period of time. For example, temporary (for example, several months) entry of a contractor within the company's premises can be managed. It becomes easy.

  FIG. 14 is a diagram showing an example of the external appearance of each device constituting the authentication system in the above embodiment.

  In FIG. 14, a terminal 200, a certification code issuing server 300, an entrance / exit management server 400, and an archive server 500 are a system unit 910, a CRT (Cathode Ray Tube) display device 901, a keyboard (K / B) 902, a mouse 903, and a compact. A disk device (CDD) 905, a printer device 906, and a scanner device 907 are provided, and these are connected by a cable. Further, the authentication system 100 is connected to a FAX machine 932 and a telephone 931 by a cable, and is connected to the Internet 940 via a local area network (LAN) 942 and a gateway 941.

  FIG. 15 is a diagram illustrating an example of a hardware configuration of each device configuring the authentication system in the above embodiment.

  In FIG. 15, a terminal 200, a certification code issuing server 300, an entrance / exit management server 400, and an archive server 500 include a CPU (Central Processing Unit) 911 that executes a program. The CPU 911 includes a ROM 913, a RAM 914, a communication board 915, a CRT display device 901, a K / B 902, a mouse 903, an FDD (Flexible Disk Drive) 904, a magnetic disk device 920, a CDD 905, a printer device 906, and a scanner device 907 via a bus 912. And connected.

  The RAM 914 is an example of a volatile memory. The ROM 913, the FDD 904, the CDD 905, and the magnetic disk device 920 are examples of nonvolatile memories. These are examples of a storage device or a storage unit.

  The communication board 915 is connected to a FAX machine 932, a telephone 931, a LAN 942, and the like. The communication board 915 is an example of a communication device, a communication unit, an input device, an input unit, an output device, or an output unit.

  For example, the K / B 902, the scanner device 907, the FDD 904, and the like are examples of an input device or an input unit. For example, the CRT display device 901 is an example of an output device or an output unit.

  Here, the communication board 915 is not limited to the LAN 942 but may be directly connected to the Internet 940 or a WAN (Wide Area Network) such as ISDN (Integrated Services Digital Network). When directly connected to a WAN such as the Internet 940 or ISDN, the authentication system 100 is connected to a WAN such as the Internet 940 or ISDN, and the gateway 941 is unnecessary.

  The magnetic disk device 920 stores an operating system (OS) 921, a window system 922, a program group 923, and a file group 924. The program group 923 is executed by the CPU 911, the OS 921, and the window system 922.

  The program group 923 stores a program for executing a function described as “˜unit” in the description of the above-described embodiment. The program is read and executed by the CPU 911.

  For example, the CPU 911 is an example of a processing device or a processing unit.

  In the file group 924, what is described as “˜information”, “˜result”, and “˜condition” in the description of the above-described embodiment is stored as a file or a part thereof.

  In addition, the arrows in the flowchart described in the description of the above-described embodiment mainly indicate data input / output, and for the data input / output, data includes a magnetic disk device 920, an FD (Flexible Disk), an optical disk, It is recorded on other recording media such as CD (compact disc), MD (mini disc), DVD (Digital Versatile Disk). Alternatively, it is transmitted through a signal line or other transmission medium.

  In addition, what is described as “˜unit” in the description of the above-described embodiment may be realized by firmware stored in the ROM 913. Alternatively, it may be implemented by software alone, hardware alone, a combination of software and hardware, or a combination of firmware.

  Further, the program for implementing the above-described embodiment may be stored using a recording device using another recording medium such as the magnetic disk device 920, FD, optical disk, CD, MD, DVD, or the like.

1 is a diagram illustrating a configuration of an authentication system according to Embodiment 1. FIG. FIG. 3 is a block diagram showing a configuration of a terminal and a certification code issuing server in the first embodiment. 2 is a block diagram showing a configuration of an entrance / exit management server in Embodiment 1. FIG. FIG. 3 is a flowchart showing an operation of the authentication system according to the first embodiment. FIG. 3 is a flowchart showing an operation of the authentication system according to the first embodiment. It is a figure which shows the structure of the authentication system which concerns on Embodiment 2. FIG. 6 is a block diagram illustrating a configuration of a mobile terminal according to Embodiment 2. FIG. FIG. 10 is a flowchart showing an operation of the authentication system according to the second embodiment. FIG. 10 is a flowchart showing an operation of the authentication system according to the third embodiment. FIG. 10 is a diagram illustrating a configuration of an authentication system according to a fifth embodiment. FIG. 10 is a block diagram illustrating a configuration of an entrance / exit management server in a fifth embodiment. FIG. 10 is a flowchart showing the operation of the authentication system according to the fifth embodiment. FIG. 10 is a flowchart showing the operation of the authentication system according to the sixth embodiment. It is a figure which shows an example of the external appearance of each apparatus which comprises the authentication system in each embodiment. It is a figure which shows an example of the hardware constitutions of each apparatus which comprises the authentication system in each embodiment.

Explanation of symbols

  100 Authentication System, 101 Camera, 102 GPS Satellite, 103 Weather Satellite, 104 Printer, 105 Getting Started Certificate, 106 User, 107 Photo, 108 Certification Code, 109 Two-dimensional Barcode, 110 Certification Code Input Barcode Reader, 111 Getting Started Bar code reader, 112 Departure bar code reader, 113 scanner, 200 terminal, 201 second storage device, 202 processing device, 203 communication device, 300 certification code issuing server, 301 second storage device, 302 generation device, 303 Communication device, 400 entrance / exit management server, 401 first storage device, 402 third storage device, 403 processing device, 404 keyboard, 405 CRT, 406 communication device, 407 indexing unit, 408 determination unit, 409 reading unit, 410 Entrance / Exit Management Department 411 verification unit, 500 archive server, 600 portable terminal, 601 third storage device, 602 processing device, 603 camera, 604 LCD, 605 communication device, 606 indexing unit, 607 determination unit, 608 reading unit, 700 network, 901 CRT display device, 902 K / B, 903 mouse, 904 FDD, 905 CDD, 906 printer device, 907 scanner device, 910 system unit, 911 CPU, 912 bus, 913 ROM, 914 RAM, 915 communication board, 920 magnetic disk device , 921 OS, 922 window system, 923 program group, 924 file group, 931 telephone, 932 FAX machine, 940 Internet, 941 gateway, 942 LAN.

Claims (11)

A first storage device for storing information indicating a prescribed condition including at least one of a prescribed time and position;
A second storage device that associates and stores a photograph of the subject and proof information that certifies shooting conditions including at least one of the time and position at which the photograph was taken;
A printing device for printing the photograph and the certification information on a document for authenticating the subject;
A first input device for inputting certification information printed on the document by the printing device;
An indexing unit for determining the imaging condition proved by the certification information input by the first input device, and a rule indicated by the information stored in the first storage device for the imaging condition determined by the indexing unit A determination unit that determines whether or not the condition is satisfied; and the second unit that associates with the proof information input by the first input device when the determination unit determines that the prescribed condition is satisfied. A processing device having a reading unit for reading a photograph stored in the storage device;
An authentication system comprising: an output device that outputs a photo read by a reading unit of the processing device for collation of a photo printed on the document by the printing device. The authentication system further includes:
A combination of time information indicating the time when the photograph was taken and unique data that can be obtained only at the time, position information indicating a position where the photograph was taken, and unique data that can be obtained only at the position The authentication system according to claim 1, further comprising: a generation device that generates the certification information by combining at least one combination.   The authentication system according to claim 2, wherein the generation device generates the certification information by combining the at least one combination with the photograph. The printing device prints the certification information as a barcode,
The authentication system according to claim 1, wherein the first input device reads the barcode printed by the printing device, extracts the certification information, and inputs the extracted certification information. The authentication system further includes:
A second input device for scanning and inputting a photograph printed by the printing device;
The processing apparatus further includes a collation unit that collates a photograph input by the second input device with a photograph read by the reading unit,
The authentication system according to claim 1, wherein the output device outputs information indicating a result of collation by a collation unit of the processing device. The processing device further determines whether the subject is allowed to enter or leave the restricted place based on a result of collating a photo printed on the document by the printing device with a photo read by the reading unit. Has an entrance / exit management department to judge,
The authentication system further includes:
A third storage device for storing information indicating a result of the determination by the entrance / exit management unit of the processing device and the subject and the entry / exit time of the subject;
The authentication system according to claim 1, wherein the output device further outputs information stored in the third storage device. The subject is a user;
The second storage device is installed in a place managed by a person other than the organization to which the user belongs,
The first storage device is installed in a place managed by the organization to which the user belongs, stores information indicating the prescribed condition, and corresponds to a photograph stored in the second storage device and the photograph Read and store the proof information,
When the determination unit determines that the specified condition is satisfied, the reading unit of the processing device associates with the proof information input by the first input device in the first storage device. The authentication system according to claim 1, wherein the stored photograph is read.   The reading unit of the processing device transmits certification information input by the first input device to the first storage device, and receives a photograph corresponding to the transmitted certification information from the first storage device. The authentication system according to claim 7, wherein the authentication system is read. The prescribed condition includes a validity period indicating a length of a period during which the photograph is regarded as valid,
The determination unit of the processing device compares the time included in the imaging condition calculated by the indexing unit with the current time, and the specified condition indicated by the information stored in the first storage device is the current time To determine if it falls within the validity period included in the
When the determination unit determines that the current time is within the valid period included in the specified condition, the reading unit of the processing device associates with the proof information input by the first input device. The authentication system according to claim 1, wherein a photograph stored in the second storage device is read. A first storage step in which the first storage device stores information indicating a specified condition including at least one of a specified time and position;
A second storage step in which the second storage device stores a photograph of the subject in association with certification information proving the photographing condition including at least one of the time and position at which the photograph was photographed;
A printing step in which a printing device prints the photograph and the certification information on a document for authenticating the subject;
A first input device for inputting certification information printed on the document by the printing device;
An indexing step in which the processing device determines a photographing condition proved by the certification information input by the first input device;
A determination step of determining whether or not the imaging condition determined by the indexing step satisfies a specified condition indicated by information stored in the first storage device;
When the processing device determines that the prescribed condition is satisfied by the determination step, the processing device is stored in the second storage device in association with the certification information input by the first input device. A reading step for reading a photo;
An output method, comprising: an output step of outputting a photograph read by the processing device for collation of a photograph printed on the document by the printing device. A first storage process in which the first storage device stores information indicating a prescribed condition including at least one of a prescribed time and position;
A second storage process in which the second storage device stores a photograph of the subject in association with certification information that certifies shooting conditions including at least one of the time and position at which the photograph was taken;
A printing process in which the printing apparatus prints the photograph and the certification information on a document for authenticating the subject;
A first input process in which a first input device inputs certification information printed on the document by the printing device;
An indexing process in which the processing device determines a photographing condition proved by the certification information input by the first input device;
A determination process in which the processing device determines whether the photographing condition determined by the indexing process satisfies a specified condition indicated by information stored in the first storage device;
When the processing device determines that the prescribed condition is satisfied by the determination processing, the processing device is stored in the second storage device in association with the certification information input by the first input device. A reading process to read a photo;
An authentication program that causes a computer to execute output processing for outputting a photograph read by the processing device for collation of a photograph printed on the document by the printing device.

Images