JP2010196436A - Locker device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a locker device having both high adaptability and security. <P>SOLUTION: This locker device which authenticates the user according to the information on the fingerprint of the user for unlocking, includes a fingerprint reader 4 for reading the information on the fingerprint of the user, a touch panel 6 for accepting the input of a password by the user, and a control part 5 which pre-registers the input password and the information on the read fingerprint, authenticates that the person who uses the locker device is the user by comparing the registered information on the fingerprint with the information on the fingerprint read after the registration, and determines whether the fingerprint reader 4 correctly reads the information on the fingerprint or not. Only when the information on the fingerprint is determined to be not read correctly, the password can be registered. Only when the password is pre-registered, it is authenticated that the person who uses the locking device is the user by comparing the registered password with the password input by the user after the registration. <P>COPYRIGHT: (C)2010,JPO&amp;INPIT

Description

  The present invention relates to a locker device that authenticates a user himself / herself based on information on the user's physical characteristics such as a fingerprint and unlocks the user.

  2. Description of the Related Art Conventionally, a biometric authentication device that authenticates a user himself / herself based on information on a user's physical characteristics such as a fingerprint, a vein, and a voiceprint is known. The biometric authentication device pre-registers physical feature information such as a user's fingerprint, vein, and voiceprint, and collates the registered physical feature information with the newly input physical feature information after registration. To authenticate the user. Compared to physical keys and passwords, theft, snooping, loss, forgetfulness, etc. are suppressed and security is improved.

  And an electric lock device that locks and unlocks based on personal authentication by the biometric authentication device described above, and a locker device that temporarily stores articles owned by the user using the electric lock device described above have been proposed. (For example, refer to Patent Document 1).

  For example, a collective valuable storage device having a plurality of storage boxes described in Patent Document 1 reads ID data stored in an RFID tag and human body characteristic data such as a fingerprint and an iris pattern, and the ID data and human body The electromagnetic lock is locked / unlocked by the personal authentication used for the feature data (see paragraph 0010 of Patent Document 1).

JP 2007-107325 A

  The above-described locker device registers physical feature information when depositing an article, that is, “when storing”, and collates physical feature information when removing an already stored article, that is, when “taking out”. And authenticate the identity of the user.

  In a locker device used by an unspecified number of people, it may be difficult to instruct all users on how to correctly read information on physical characteristics. Therefore, a user who is unfamiliar with the biometric authentication device may not be able to use the locker device because his / her physical feature information cannot be correctly registered. Further, although the article can be stored, if the physical feature information cannot be read correctly at the time of taking out the article, even the user himself / herself cannot take out the article.

  In addition, for example, a person who cannot input fingerprint information because his / her finger is injured cannot use a locker device for performing personal authentication using a fingerprint. In addition, there is an individual difference in the amount of physical feature information, and those who do not have sufficient information for biometric authentication cannot use the above-described locker device.

  Thus, not all users can use the biometric authentication device regardless of the user's familiarity and experience, and the correspondence rate of the locker device described above is not high.

  The present invention has been made in view of such a conventional problem, and an object of the present invention is to provide a locker device having a high response rate and high security.

  A first feature of the present invention is a locker device that authenticates the user himself / herself based on information on the user's physical characteristics and unlocks the information, and the locker device reads information on the physical characteristics of the user. A biometric information reading unit, a password input unit that accepts a password input by a user, a password input from the password input unit, and an identification information registration unit that pre-registers physical feature information read by the biometric information reading unit A personal authentication unit that authenticates the identity of the user by comparing the physical feature information registered by the identification information registration unit with the physical feature information read by the biometric information reading unit after registration And a reading success / failure determination unit that determines whether or not the biological information reading unit has correctly read the physical feature information, and the identification information registration unit, the biological information reading unit is the physical feature information. The password can be registered only when the reading success / failure determination unit determines that the password has not been read correctly, and the personal authentication unit is registered in the identification information registration unit only when the identification information registration unit registers the password in advance. The gist is to authenticate the identity of the user by checking each password that has been registered and the password entered by the user after registration.

  Only when the reading success / failure determination unit determines that the biometric information reading unit has not correctly read the physical feature information, the identification information registration unit can register the password, and the biometric information reading unit stores the physical feature information. If the reading success / failure determination unit determines that the reading is correct, the identification information registration unit does not register the password. And only when the identification information registration unit has registered the password in advance, the personal authentication unit verifies the password registered by the identification information registration unit with the password entered by the user. Authenticate that there is. If the password is not registered in advance, the user can collate the physical feature information registered by the identification information registration unit with the physical feature information read by the biometric information reading unit after registration. Authenticate yourself.

  As a result, even if the physical feature information cannot be read correctly, the password can be entered and registered, and identity authentication can be performed with the password, so the physical feature information cannot be entered correctly. Even a person can use a locker device. Therefore, the correspondence rate of the locker device can be improved. In addition, the burden on the administrator of the locker device, such as guidance for the user to correctly read the physical feature information, can be reduced.

  On the other hand, if the physical feature information can be read correctly, identity authentication is performed using the physical features of the user who are less likely to be stolen (spy) or lost (forgotten) than passwords. Since it can be performed, the risk of unauthorized use by a third party can be avoided and the security of the locker device can be improved.

  Here, when “the biological information reading unit does not read the physical feature information correctly”, the information read by the biological information reading unit is inappropriate as the physical feature information, and the read physical feature Information amount does not have a sufficient amount of information for personal authentication. When the information read by the biological information reading unit is inappropriate as the physical feature information, for example, when the physical feature is a fingerprint, other than a fingerprint (for example, a finger, a palm vein, a human body, etc.) This includes cases where information is read. The amount of physical feature information includes the amount of physical feature image data read by the biological information reading unit and the number of feature points.

  “Physical features” include features of human organs such as fingerprints (including patterns formed on the epidermis and dermis of skin), veins of fingers and palms, irises, and retinas.

  The “password” is an enumeration of symbols such as a plurality of numbers and characters, and includes a character string consisting only of numbers, such as a personal identification number or PIN (Personal Identification Number).

  In the first aspect of the present invention, when the reading success / failure determination unit determines that the locker device does not correctly read the physical feature information, the biometric information reading unit registers the password or the physical feature A registration method selection unit that accepts selection by the user as to whether to register information may be further provided, and the identification information registration unit may register the password only when the registration method selection unit accepts the password selection. Thereby, the user can select whether to improve the response rate of the locker device or improve the security of the locker device, and the convenience of the locker device can be improved.

  In the first feature of the present invention, when the reading success / failure determination unit determines that the locker device does not correctly read the physical feature information by the biometric information reading unit, the locker device selects the password registration to the user. It may further comprise a notifying means for notifying a prompt to prompt. For example, a display device that displays a guidance screen that prompts the user to select password registration, and a speaker that outputs voice guidance that prompts the user to select password registration may be provided. Thereby, the user can select the registration of the password and can achieve the original purpose of the locker device, ie, storage of the article, so that the response rate of the locker device can be improved.

  In the first feature of the present invention, the identification information registering unit has the biological information at a timing different from the reading of the first physical feature information read by the biological information reading unit and the reading of the first physical feature information. The second physical feature information read by the reading unit is registered in advance, and the personal authentication unit registers the first physical feature information and the second physical feature information registered by the identification information registration unit. If at least one of these matches the physical feature information read by the biometric information reading unit after registration, the identity of the user may be authenticated.

  The physical feature information is read twice at different timings to register the first and second physical feature information, and the personal authentication unit registers the registered first and second physical feature information. If at least one of these matches the physical feature information read after registration, the user is authenticated. This increases the probability that the physical feature information matches, so that the physical feature can be correctly read and registered, but authentication is not successful, and the response rate of the locker device can be improved. it can. For example, if the first and second physical features are different finger features of the user, even if one finger is injured after registration and before authentication, the other finger can be read. It is possible to succeed in authentication with the features of The number of physical feature information is not limited to two and may be three or more. That is, the third physical feature, the fourth physical feature, and so on may be registered and authenticated.

  In the first feature of the present invention, after the biological information reading unit reads the information on the first physical feature, the body part related to the first physical feature is read from the reading position of the biological information reading unit. A feature monitoring unit for monitoring the separation may further be provided, and the biological information reading unit may read the second physical feature information after the feature monitoring unit confirms that the body part has been separated. Thereby, it is possible to perform a process of confirming that the body part related to the first physical feature is separated between the reading of the information of the first physical feature and the reading of the information of the second physical feature. it can. Therefore, it is possible to read information on physical characteristics that are different between the first time and the second time.

  In the first feature of the present invention, the locker device further includes an ID reading unit that reads ID information stored in an ID medium, the identification information registration unit registers ID information in advance, and the personal authentication unit includes identification information. The user collates the ID information and physical feature information registered by the registration unit with the ID information read by the ID reading unit and the physical feature information read by the biometric information reading unit after registration. The ID information and password registered by the identification information registration unit, the ID information read by the ID reading unit and after registration only when the identity is authenticated and the identification information registration unit registers the password in advance. The identity of the user may be authenticated by checking each password entered by the user.

  Thereby, unless the ID information of the ID medium and the physical feature information are collated together, the personal authentication is not successful, so that the security of the locker device can be further improved. Further, even if the identification information registration unit registers the password in advance, since the personal authentication is not successful unless the ID information and the password of the ID medium are collated together, the security of the locker device can be improved.

  Here, the “ID medium” is an object or device used for recording, transmitting, storing, or the like of various types of information including ID information, and includes an IC chip embedded card (IC card), wristband and tag, and magnetic Includes cards.

  The second feature of the present invention is a locker device that authenticates the user himself / herself based on information on the user's physical characteristics and unlocks the information, and this locker device reads information on the physical characteristics of the user. Biometric information reading unit, display unit for displaying a password input screen for accepting a password input by the user, password input from the password input screen, and physical feature information read by the biometric information reading unit are registered in advance The identification information registration unit, the physical feature information registered by the identification information registration unit, and the physical feature information read by the biometric information reading unit after registration A personal authentication unit for authenticating; and a reading success / failure determining unit for determining whether the biometric information reading unit has correctly read the physical feature information. Only when the reading success / failure determination unit determines that the information has not been read correctly, the display unit displays the password input screen, the identification information registration unit registers the password input from the password input screen, and the identification information registration unit Only when the password is registered in advance, the display unit displays the password input screen, and the personal authentication unit verifies the password registered by the identification information registration unit with the password entered by the user after registration. The gist is to authenticate the identity of the user.

  According to the second aspect of the present invention, the display unit displays the password input screen only when the reading success / failure determination unit determines that the biological information reading unit does not correctly read the physical feature information, and the identification information The registration unit registers the password input from the password input screen. Therefore, when the reading success / failure determination unit determines that the biological information reading unit correctly reads the physical feature information, the display unit does not display the password input screen. Therefore, the user cannot input the password, and the identification information registration unit does not register the password. And only when the identification information registration unit has registered the password in advance, the display unit displays a password input screen, and the personal authentication unit is entered by the user after registration and the password registered by the identification information registration unit The user is authenticated by verifying each password. Therefore, when the password is not registered in advance, the display unit does not display the password input screen.

  As described above, when the reading success / failure determination unit determines that the biological information reading unit has correctly read the physical feature information, and when the password is not registered in advance, the password input screen is not displayed on the display unit, and the password Displayed only when input is required. Therefore, as long as the biometric information reading unit correctly reads the physical feature information, there is no way to detect that the locker device has a personal authentication function using a password, thus suppressing password snooping etc. Can do. Therefore, the risk of unauthorized use by a third party can be avoided and the security of the locker device can be improved.

  According to the present invention, it is possible to provide a locker device that has both a high response rate and high security.

FIG. 1A is a front view showing an external configuration of a rocker device 1 according to the embodiment of the present invention, and FIG. 1B is a cross-sectional view of the rocker device 1. 2A is an enlarged front view showing the user interface unit of FIG. 1A, and FIG. 2B is a cross-sectional view of the user interface unit. It is a block diagram which shows the control structure of the rocker apparatus 1 shown to Fig.1 (a). It is a block diagram which shows the detailed structure of the control part 5 of FIG. 5 is a flowchart showing an example of a control operation of the microcomputer 21 shown in FIG. FIG. 5 is a flowchart illustrating an example of a control operation of the microcomputer 21 illustrated in FIG. 4, and illustrates a processing flow of “at the time of extraction”. It is a flowchart which shows the detail of the fingerprint registration processing flow of S13 stage of FIG. FIG. 8A shows an example of a registration method selection screen for accepting a user's selection of whether to register a password or to continue registering fingerprint information. FIG. 8B shows how to register a password. FIG. 8C shows an example of a password recommendation screen that prompts the user to make a selection, and FIG. 8C shows a message “Please enter a password with 4 digits.” And buttons with numbers 0-9. An example of the password input screen written together is shown.

  Embodiments of the present invention will be described below with reference to the drawings. In the description of the drawings, the same parts are denoted by the same reference numerals.

  With reference to Fig.1 (a) and FIG.1 (b), the external appearance structure of the locker apparatus 1 in connection with embodiment of this invention is demonstrated. The locker device 1 includes a housing that forms the main body of the rocker device 1, a plurality of lockers that are partitioned by partitioning the upper half of the housing into a plurality of independent chambers, and a lower half of the housing. A device installation unit including the power supply unit 2 and the control unit 5 and a user interface unit for exchanging information between the user and the control unit 5 are provided.

  Each locker is provided with a box having a door 7 and an electric lock used for locking the door 7, and the user opens the door 7 to store articles on the shelf board 16 in the box, and By locking the door by operation, the article can be stored. Each locker door 7 has a handle 8 that is used when the door 7 is opened, a number sticker 9 on which a locker number for identifying the locker is printed, and whether the locker is in use or empty. And a display lamp 10 for displaying. For example, the display lamp 10 is turned on when the locker is in use, the display lamp 10 is turned off when the locker is empty, and the display lamp 10 is blinked when the locker is in an error state.

  The user interface unit includes a touch panel 6 combining a display device such as a liquid crystal panel and a position input device such as a touch pad, and an IC card reader as an example of an ID reading unit that reads ID information stored in an ID medium. 17, a fingerprint reader 4 as an example of a biometric information reading unit that reads information on a user's physical characteristics, and an administrator operation lock 14 are provided. For example, by releasing the administrator operation lock 14, it is possible to shift to an administrator operation mode in which an operation by the administrator is possible.

  A control unit door 11 is provided on the front surface of the device installation unit, and a control unit door lock 12 that locks the control unit door 11 is provided on the outer surface of the control unit door 11. By releasing the control part door lock 12, the control part door 11 can be opened and the power supply part 2 and the control part 5 can be accessed.

  With reference to FIG. 2A and FIG. 2B, the configuration of the user interface unit in FIG. 1A will be described. The touch panel 6 is installed with its display / input surface facing diagonally upward. An IC card reader 17 is installed under the touch panel 6, and a speaker 15 is provided adjacent to the left side of the IC card reader 17. As shown in FIG. 2B, a recess is formed under the IC card reader 17, and the administrator operation lock 14 and the fingerprint reader 4 are installed in the recess. The fingerprint reader 4 has a reading surface on which the user's finger is placed when reading the user's fingerprint. By slightly tilting the reading surface to the front side rather than the horizontal, it is easy for the user to see the reading surface, giving a sense of security to the fingerprint reader 4 and making it easier for the user to put his finger on the reading surface. As a result, the fingerprint reader 4 can correctly read the fingerprint information of the user.

With reference to FIG. 3, the control structure of the rocker apparatus 1 shown to Fig.1 (a) is demonstrated. Rocker apparatus 1, as described above, IC card as an example of the electric lock E ₁ to E _n used for locking the door 7 of the rocker, a fingerprint reader 4 for reading the information of the user's fingerprint, ID medium An IC card reader 17 that reads ID information stored in the touch panel 6, a touch panel 6 as an example of a display unit that accepts input of information by the user and displays various screens for presenting information to the user, The speaker 15 which outputs the audio | voice for presenting the information with respect to a user, and the control part 5 which controls the locker apparatus 1 whole are provided.

Control unit 5, unlocking-locking operation and the electric lock E ₁ to E _n, the read operation of the fingerprint reader 4 and the IC card reader 17, input reception operation and the display operation of the touch panel 6, and an audio output operation of the loudspeaker 15 Control.

  For example, the control unit 5 displays on the touch panel 6 a password input screen for accepting input of a password by the user. Thereby, the touch panel 6 functions as a personal identification number input unit that accepts input of a personal identification number by the user or a display unit that displays a personal identification number input screen that accepts input of the personal identification number by the user.

  With reference to FIG. 4, the detailed structure of the control part 5 of FIG. 3 is demonstrated. The control unit 5 includes a microcomputer 21 having an information processing operation function and a memory 22 for storing information. The memory 22 includes an identification information storage unit 29 that stores information on a personal identification number input from the touch panel 6, information on a fingerprint read by the fingerprint reader 4, and ID information read by the IC card reader 17, and a predetermined application A program storage unit 30 for storing the program. The microcomputer 21 reads and executes a predetermined application program stored in the program storage unit 30 to execute information processing defined in the application program.

  Specifically, in accordance with the above-described application program, the microcomputer 21 includes an identification information registration unit 25 that pre-registers fingerprint information read by the fingerprint reader 4, and ID information and fingerprint information registered by the identification information registration unit 25. And a personal authentication unit 26 for authenticating the identity of the user by collating ID information read by the IC card reader 17 after registration and fingerprint information read by the fingerprint reader 4 after registration, and a fingerprint The reader 4 functions as a reading success / failure determination unit 27 that determines whether or not the fingerprint information is correctly read.

  The identification information registration unit 25 registers fingerprint information by causing the identification information storage unit 29 to store the fingerprint information read by the fingerprint reader 4. The personal authentication unit 26 calculates the degree of coincidence between the fingerprint registered by the identification information registration unit 25 and the fingerprint read by the fingerprint reader 4 after registration, and whether the calculated degree of coincidence is equal to or greater than a predetermined threshold value. Judge whether or not. Further, it is determined whether or not the ID information registered by the identification information registration unit 25 matches the ID information read by the IC card reader 17 after registration.

  Only when the calculated degree of matching is equal to or greater than a predetermined threshold and the ID information registered by the identification information registration unit 25 matches the ID information read by the IC card reader 17 after registration. The unit 26 authenticates the identity of the user. Otherwise, that is, when the calculated degree of matching is less than a predetermined threshold value, or the ID information registered by the identification information registration unit 25 does not match the ID information read by the IC card reader 17 after registration. In this case, the personal authentication unit 26 does not authenticate the user.

  The reading success / failure determination unit 27 at least when the information read by the fingerprint reader 4 is inappropriate as the fingerprint information and when the information amount of the read fingerprint does not have a sufficient amount of information for personal authentication, It is determined that the fingerprint reader 4 has not read the fingerprint information correctly. The case where the information read by the fingerprint reader 4 is inappropriate as fingerprint information includes, for example, the case where information other than a human fingerprint (for example, a finger, a palm vein, a human body, etc.) is read.

  The identification information registration unit 25 can register the password only when the reading success / failure determination unit 27 determines that the fingerprint reader 4 has not read the fingerprint information correctly. For example, only when the reading success / failure determination unit 27 determines that the fingerprint reader 4 has not read the fingerprint information correctly, the password input screen is displayed on the touch panel 6 and the password input from the password input screen is displayed. The identification information is stored in the identification information storage unit 29. On the other hand, when the reading success / failure determination unit 27 determines that the fingerprint reader 4 has read the fingerprint information correctly, the identification information registration unit 25 does not register the password. For example, in this case, the password input screen is not displayed on the touch panel 6. Therefore, the personal identification number is not input and is not stored in the identification information storage unit 29.

  Only when the identification information registration unit 25 has previously registered the personal identification number, the personal authentication unit 26 identifies the ID information and personal identification number registered by the identification information registration unit 25 and the ID information read by the IC card reader 17 after registration. And authenticating the identity of the user by checking the password entered by the user after registration.

  As described above, only when the reading success / failure determination unit 27 determines that the fingerprint reader 4 has not read the fingerprint information correctly, the identification information registration unit 25 can register the personal identification number instead of the fingerprint information. Only when the information registration unit 25 registers the password in advance, the personal authentication unit 26 performs personal authentication using the password instead of the fingerprint information.

  When the reading success / failure determination unit 27 determines that the fingerprint reader 4 has not read the fingerprint information correctly, the user may be allowed to select whether to register the personal identification number or to continue registering the fingerprint information. . For example, as shown in FIG. 8A, a registration method selection screen for accepting a user's selection of whether to register a password or to continue registering fingerprint information may be displayed on the touch panel 6. In this case, the touch panel 6 functions as a registration method selection unit that accepts a user's selection of whether to register a personal identification number or to continue registering fingerprint information. Then, the identification information registration unit 25 registers the personal identification number only when the touch panel 6 accepts the selection of the personal identification number. That is, for example, as shown in FIG. Is displayed, and the personal identification number input from the personal identification number input screen is stored in the identification information storage unit 29.

  Further, when the reading success / failure determination unit 27 determines that the fingerprint reader 4 has not read the fingerprint information correctly, for example, as shown in FIG. May be displayed on the touch panel 6. In this case, the touch panel 6 functions as an informing means for informing a user to select a password for registration. Here, the password recommendation screen described above is displayed simultaneously with the registration method selection screen or before the registration method selection screen.

  An example of the control operation of the microcomputer 21 shown in FIG. 4 will be described with reference to FIGS. The control operations shown in FIGS. 5 to 7 are executed according to a predetermined application program stored in the program storage unit 30 of FIG.

  First, with reference to FIG. 5, the processing flow of “at the time of storage” will be described.

(A) When the main power of the locker device is turned on and the activation of the control unit 5 is completed, for example, “Please bring the IC card closer to the IC card reader (17)” on the touch panel 6 in step S01 of FIG. A guidance screen is displayed, and the locker device is set in a predetermined standby state. When the user brings the IC card close to the IC card reader 17 in the standby state, the IC card reader 17 reads the ID information stored in the IC card, and proceeds to step S03, and receives the ID information read by the IC card reader 17. To do. Incidentally, the rocker device, in its standby state, waiting to lock the electric lock E ₁ to E _n attached to the door 7 of the rocker. This is called “lock waiting”.

  (B) Proceeding to step S05, whether the ID information read by the IC card reader 17 is the same as the ID information already registered by the identification information registration unit 25, specifically, the identification information storage unit 29 It is determined whether or not the ID information is the same as the ID information stored in. If the ID information is not the same as the ID information already registered by the identification information registration unit 25 (NO in S05), the process proceeds to step S07 in order to execute the processing flow when the user deposits the article, that is, “in storage”. On the other hand, when the ID information is the same as the ID information already registered by the identification information registration unit 25 (YES in S05), the processing flow shown in FIG. Proceed to step S41.

  (C) The processing flow at “storage” will be described. In step S07, a box number input screen is displayed on the touch panel 6 together with, for example, a guidance “Please enter the 3 digits of the door number” and buttons of numbers 0 to 9. When the touch panel 6 accepts an input of a box number by the user, in step S09, information on the box number input by the user is received and it is determined whether or not the box number input by the user is correct. For example, when a box number that does not exist, a box number that is being used by another user, a box number that is in an error state, etc. is entered, it is determined that the box number entered by the user is incorrect, and other box numbers Can be determined to be correct. When a predetermined time has elapsed since the box number input screen was displayed (timeout), the process returns to step S01 and the locker device is set in a standby state.

  (D) If it is determined that the box number input by the user is not correct (NO in S09), the process proceeds to step S11, and the touch panel 6 displays, for example, “The input door number does not exist. Please try again from the beginning. "The entered door number is currently in use. Please select the door number where the indicator lamp (10) is off." Or "Cannot be used. Select the door number where the indicator lamp (10) is off." Please display the guidance screen. Thereafter, the process returns to step S01 and the locker device is set in a standby state.

  (E) On the other hand, if it is determined that the box number input by the user is correct (YES in S09), the process proceeds to step S13, the fingerprint information of the user is read using the fingerprint reader 4, and the read fingerprint information is read. The fingerprint registration processing flow to be registered is executed. The fingerprint registration process flow will be described later with reference to FIG.

  (F) After registration of fingerprint information is completed, the process proceeds to step S15, where the electric lock E of the box number received in step S09 is unlocked and, for example, the door of “door number ***” is opened on the touch panel 6. Please display the guide and the animation and still screen showing how the door 7 opens. Then, it progresses to S17 stage and the state which the door 7 is open is detected using the opening-and-closing sensor attached to the opening part of the door 7 or the box. If it is detected that the door 7 is open (YES in S17), the process proceeds to step S25, and the touch panel 6 displays an animation or a static screen showing, for example, the state in which the luggage is put in the box with the door 7 open. indicate. Thereafter, the process proceeds to step S27.

  (G) When the state in which the door 7 is open is not detected (NO in S17), the process proceeds to step S19, and it is determined whether or not the return button on the touch panel 6 has been pressed. If the return button is pressed (YES in S19), the process proceeds to step S23, the electric lock E of the box number received in step S09 is locked, and the process returns to step S01. If the return button cannot be pressed (NO in S19), the process proceeds to step S21, and it is determined whether a predetermined time (for example, 30 seconds) has elapsed since the electric lock E was unlocked. If the predetermined time has elapsed (YES in S21), the process proceeds to step S23, and if the predetermined time has not elapsed (NO in S21), the process returns to step S17.

  (H) When it is detected in step S27 that the door 7 is closed (YES in step S27), the process proceeds to step S33, the electric lock E of the box number received in step S09 is locked, and the process proceeds to step S35. The ID information received in step S03, the box number information received in step S09, and the fingerprint information registered in step S13 are linked and registered. That is, it is stored in the identification information storage unit 29. By executing step S35, the processing flow of “at the time of storage” ends.

  (L) On the other hand, when the closed state of the door 7 is not detected (NO in S27), the process proceeds to step S29, and it is determined whether or not a predetermined time (for example, 3 minutes) has elapsed since the door 7 was opened. If the predetermined time has elapsed (YES in S29), the process proceeds to step S31, where it is determined that the locker is in an error state and registered as an error box, and the process returns to step S01. If the predetermined time has not elapsed (NO in S29), the process returns to step S27.

  Here, the fingerprint registration processing flow in step S13 will be described with reference to FIG.

  (1) In step S301 in FIG. 7, for example, “Place a finger to be registered at the reading position of the fingerprint reader (4) according to the drawing” on the touch panel 6 and a state of placing the finger on the fingerprint reader 4. Display animation and still screen together. In step S303, it is determined whether or not the finger is placed at the reading position of the fingerprint reader 4. If the finger is placed at the reading position of the fingerprint reader 4 (YES in S303), the process proceeds to step S305, and fingerprint information is read.

  (2) Proceeding to step S307, it is determined whether the fingerprint reader 4 is correctly reading the fingerprint information. Specifically, at least whether the information read by the fingerprint reader 4 is inappropriate as fingerprint information, and whether the information amount of the read fingerprint has a sufficient amount of information for personal authentication, respectively. to decide. If it is determined that the fingerprint reader 4 is reading the fingerprint information correctly (YES in S307), the process proceeds to step S309, and if it is determined that the fingerprint reader 4 is not reading the fingerprint information correctly (NO in S307), S311 is performed. Go to the stage.

  (3) In step S309, the number of finger placements is confirmed. The number of finger placements corresponds to the number of times YES is determined in S307. One or two times can be preset as the number of finger placements. Here, a case where one is set as the number of finger placements will be described. Therefore, since YES is determined once in step S307, it is determined that the number of finger placements is one in step S309 (YES in step S309). The process proceeds to step S327, and the fingerprint information read by the fingerprint reader 4 is obtained. sign up. That is, the fingerprint information read by the fingerprint reader 4 is stored in the identification information storage unit 29. By executing step S327, the fingerprint registration processing flow ends.

  (4) If it is determined that the fingerprint reader 4 has not read the fingerprint information correctly (NO in S307), the process proceeds to step S311 to determine whether the number of retries is three. The number of retries corresponds to the number of times S303 to S307 are performed. If the number of retries is 3 (YES in S311), the process proceeds to step S313. If the number of retries is less than 3 (NO in S311), the process proceeds to step S315, and an NG screen such as “Fingerprint information could not be registered” is displayed on the touch panel 6, and the process returns to step S301.

  (5) In step S313, for example, as shown in FIG. 8A, a registration method selection screen for accepting a selection by the user as to whether to register a password or to continue to register fingerprint information is displayed on the touch panel 6. Display. Accordingly, the touch panel 6 can function as a registration method selection unit that accepts a user's selection of registering a password or registering fingerprint information.

  (6) In step S313, for example, as shown in FIG. 8B, a password recommendation screen for prompting the user to select registration of a password may be displayed on the touch panel 6. Thereby, the touch panel 6 can be functioned as an informing means for informing the user to select the registration of the personal identification number. In addition, voice guidance that prompts the user to select registration of a security code may be output from the speaker 15 at the same time as the security code recommendation screen or instead of the security code recommendation screen. Thereby, the speaker 15 can be made to function as an alerting | reporting means which alert | reports the guidance which encourages a user to select registration of a PIN code.

  (7) When the user selects registration of a personal identification number and the touch panel 6 accepts the selection of the personal identification number (YES in S317), the process proceeds to step S319, and the touch panel 6 is displayed, for example, as shown in FIG. In addition, a password input screen is displayed in which a message “Please enter a four-digit password” and a button for each number from 0 to 9 are written. Thereafter, the process proceeds to step S321. On the other hand, when the user selects registration of fingerprint information and the touch panel 6 accepts the fingerprint selection (NO in S317), the process returns to step S301.

  (8) When the touch panel 6 accepts the input of the personal identification number by the user, it is determined in step S321 whether or not the inputted personal identification number conforms to a predetermined rule. For example, if an input of a numerical sequence of 1 to 3 digits, 5 digits or more is accepted, it is determined that the specification does not conform to the rule (YES in S321), and the process proceeds to step S325. NG screen is displayed, and the process returns to step S301.

  (9) If it is determined that it conforms to the regulations (NO in S321), the process proceeds to S323, and the information on the password received by the touch panel 6 is registered. That is, the identification information received by the touch panel 6 is stored in the identification information storage unit 29. By executing step S323, the fingerprint registration process flow ends.

  Next, with reference to FIG. 6, the processing flow at the time of “extraction” will be described. The processing flow of “at the time of extraction” is started when it is the same as the ID information already registered by the identification information registration unit 25 (YES in S05).

  (I) First, in step S41 of FIG. 6, it is determined whether the information for personal authentication registered at the time of “storage” is fingerprint information or personal identification number information. That is, in the fingerprint registration processing flow of FIG. 7, it is determined whether fingerprint information has been registered (S327) or whether PIN information has been registered (S323). Specifically, it may be determined whether the information linked to the ID information received in S03 and stored in the identification information storage unit 29 is fingerprint information or personal identification number information.

  (B) If the fingerprint information is registered (YES in S41), the process proceeds to step S43, and on the touch panel 6, for example, “Place the registered finger at the reading position of the fingerprint reader (4) according to the drawing”. The guidance is displayed together with an animation showing how to place a finger on the fingerprint reader 4 and a still screen. In step S45, it is determined whether or not the finger is placed at the reading position of the fingerprint reader 4. If the finger is placed at the reading position of the fingerprint reader 4 (YES in S45), the fingerprint information is read and the process proceeds to step S47.

  (Ha) In step S47, the ID information and fingerprint information registered at the time of “storage” and the ID information read by the IC card reader 17 and the fingerprint information read by the fingerprint reader 4 at the time of “removal” Match each one. If both the ID information and the fingerprint information are collated (YES in S47), the identity of the user is authenticated, and the process proceeds to S63. If at least one of the ID information and the fingerprint information is not verified (NO in S47), the process proceeds to step S51 without authenticating the identity of the user.

  (Ii) In step S51, for example, the touch panel 6 displays, together with a re-authentication button and a guidance such as “Authentication failed. Fingerprint data is different. Please re-authenticate.” If a re-authentication button pressing operation by the user is accepted (YES in S49), the process returns to step S45. If a re-authentication button pressing operation by the user is not accepted (NO in S49), the process returns to step S01.

  (E) In step S63, the box number electric lock E linked to the ID information received in step S03 and stored in the identification information storage unit 29 is unlocked, and the touch panel 6 displays, for example, “door number *** Please open the door. ”, An animation showing how the door 7 opens, and a still screen are displayed together. Then, it progresses to S65 stage and the state which the door 7 is open is detected using the opening-and-closing sensor attached to the opening part of the door 7 or the box. When the state in which the door 7 is open is detected (YES in S65), the process proceeds to step S67, and for example, an animation or a static screen indicating that the luggage is being taken out from the box with the door 7 open is displayed on the touch panel 6. indicate. Thereafter, the process proceeds to step S75.

  (F) If the state in which the door 7 is open is not detected (NO in S65), the process proceeds to S69, and it is determined whether or not the return button on the touch panel 6 has been pressed. When the return button is pressed (YES in S69), the process proceeds to step S73, the electric lock E of the box number stored in the identification information storage unit 29 is linked to the ID information received in S03, and S01 is locked. Return to the stage. If the return button cannot be pressed (NO in S69), the process proceeds to step S71, and it is determined whether or not a predetermined time (for example, 30 seconds) has elapsed since the electric lock E was unlocked. If the predetermined time has elapsed (YES in S71), the process proceeds to step S73. If the predetermined time has not elapsed (NO in S71), the process returns to step S65.

  (And) When it is detected in step S75 that the door 7 is closed (YES in S75), the process proceeds to step S81, and the box stored in the identification information storage unit 29 is linked to the ID information received in S03. The numbered electric lock E is locked, and the ID information received in step S03, the box number information received in step S09, and the fingerprint information registered in step S13 are deleted. That is, these pieces of information are deleted from the identification information storage unit 29. By executing step S81, the “storage” processing flow ends.

  (C) On the other hand, when the closed state of the door 7 is not detected (NO in S75), the process proceeds to step S77, and it is determined whether or not a predetermined time (for example, 3 minutes) has elapsed since the door 7 was opened. If the predetermined time has elapsed (YES in S77), the process proceeds to step S79, where it is determined that the locker is in an error state and registered as an error box, and the process returns to step S01. If the predetermined time has not elapsed (NO in S77), the process returns to step S75.

  (Ri) In step S41 of FIG. 6, if the information for personal authentication registered at the time of “storage” is information of a personal identification number (NO in S41), the process proceeds to step S53, and the touch panel 6 is displayed on the touch panel 6, for example, as shown in FIG. As shown in FIG. 8 (c), a password input screen is displayed in which a guidance “Please enter a password of 4 digits” and buttons of numbers 0 to 9 are written. When the touch panel 6 accepts the input of the personal identification number by the user, in step S55, the ID information and personal identification number information registered at “at the time of storage”, the ID information read by the IC card reader 17 at the “at the time of removal”, and The identity of the user is authenticated by collating it with the password entered by the user.

  (Nu) If both the ID information and the password information are collated (YES in S55), the user is authenticated and the process proceeds to S63. If at least one of the ID information and the password information is not verified (NO in S55), the process proceeds to step S57 without authenticating the identity of the user. In step S57, the touch panel 6 displays, for example, a guidance “Authentication failed. ID information or PIN is different. Please re-enter.”

  (R) Proceed to step S59, and determine whether or not the number of times of reconciliation in S55 (number of retries) is a predetermined number (for example, 10 times). If the number of retries is less than 10 (NO in S59), the process returns to step S53 to display the password input screen and accept the input of the password. If the number of retries has reached 10 (YES in S59), it means that the verification of the PIN number and ID information has failed 10 times in succession, so the process proceeds to step S61, and the ID information received in S03 has a certain time ( For example, for 30 seconds, the user's operation is not accepted (system lock state), and the touch panel 6 displays, for example, a guidance “Operation stopped due to security reasons during system lock”. Then, after a predetermined time has passed, the process returns to the S01 stage.

  It should be noted that step S81 in the case where both the ID information and the personal identification number information are collated (YES in S55) may be implemented by replacing the above-mentioned “fingerprint information” with “personal identification number information”.

  Also, in step S81, the ID information received in step S03, the box number information received in step S09, the fingerprint information registered in step S13 or the PIN information is deleted. You can leave it to your choice. For example, in step S81, the touch panel 6 includes, for example, a guidance “Please select one of the following items” and two buttons, “Exit the package and exit” and “Continue to use”. And display. When the user presses the “Extract Package” button, the linked ID information, box number information, fingerprint information or PIN information may be deleted. On the other hand, when the “continue use” button is pressed, these pieces of information are not deleted.

  As described above, according to the embodiment of the present invention, the following operational effects can be obtained.

  Only when the reading success / failure determination unit 27 determines that the fingerprint reader 4 has not read the fingerprint information correctly, the identification information registration unit 25 registers the password. When the reading success / failure determination unit 27 determines that the fingerprint reader 4 is correctly reading the fingerprint information, the identification information registration unit 25 does not register the password. Then, only when the identification information registration unit 25 registers the password in advance, the personal authentication unit 26 collates the password registered by the identification information registration unit 25 with the password entered by the user. To authenticate the identity of the user. If the password is not registered in advance, the user is identified by comparing the fingerprint information registered by the identification information registration unit 25 with the fingerprint information read by the fingerprint reader 4 after registration. Authenticate that.

  As a result, even if the fingerprint information cannot be read correctly, the password can be entered and registered, and the user can be authenticated by the password, so that the user who cannot correctly input the fingerprint information. Even if there is, the locker device can be used. Therefore, the correspondence rate of the locker device can be improved. Also, the burden on the administrator of the locker device, such as guidance for the user to correctly read the fingerprint information, can be reduced.

  On the other hand, if the fingerprint information can be read correctly, the user authentication can be performed using the fingerprint of the user who is less likely to be stolen (seen) or lost (forgotten) than the password. Therefore, the risk of unauthorized use by a third party can be avoided and the security of the locker device can be improved.

  If the reading success / failure determination unit 27 determines that the fingerprint reader 4 has not read the fingerprint information correctly, the user is allowed to select whether to register the password or the fingerprint information (S313). Only when the selection of the password is accepted (YES in S317), the password is registered (S323). Thereby, the user can select whether to improve the response rate of the locker device or improve the security of the locker device, and the convenience of the locker device can be improved.

  Also, when the reading success / failure determination unit 27 determines that the fingerprint reader 4 has not read the fingerprint information correctly (YES in S311), as shown in FIG. A guidance screen prompting the user is displayed on the touch panel 6. Thereby, since the user can achieve the original purpose of the locker device, ie, storage of articles, by selecting registration of a personal identification number, the response rate of the locker device can be improved. It is to be noted that the user is prompted to select the registration of the personal identification number using the speaker 15 simultaneously with the display of the guidance screen prompting the user to select the personal identification number or instead of the guidance screen. A guidance voice may be output.

  In addition, since the personal authentication is not successful unless the ID information and fingerprint information of the IC card are collated together in step S47, the security of the locker device can be further improved. Further, even if the identification information registration unit 25 registers the password in advance, the identity authentication is not successful unless the ID information of the IC card and the password are collated together, so that the security of the locker device can be improved. it can.

  Further, only when the reading success / failure determination unit 27 determines that the fingerprint reader 4 has not read the fingerprint information correctly, the touch panel 6 displays the personal identification number input screen shown in FIG. Registers the password entered from the password input screen. Therefore, when the reading success / failure determination unit 27 determines that the fingerprint reader 4 has read the fingerprint information correctly, the touch panel 6 does not display the password input screen. Accordingly, the user cannot input the password, and the identification information registration unit 25 does not register the password. Then, only when the identification information registration unit 25 registers the password in advance, the touch panel 6 displays a password input screen, and the personal authentication unit 26 confirms the password registered by the identification information registration unit 25 and after registration. The identity of the user is authenticated by collating it with the password entered by the user. Therefore, when the password is not registered in advance, the touch panel 6 does not display the password input screen.

  As described above, when the reading success / failure determination unit 27 determines that the fingerprint reader 4 has read the fingerprint information correctly, and when the personal identification number is not registered in advance, the personal identification number input screen is not displayed on the touch panel 6. Displayed only when input is required. Therefore, as long as the fingerprint reader 4 reads the fingerprint information correctly, there is no way to detect that the locker device has the personal identification function based on the personal identification number. it can. Therefore, the risk of unauthorized use by a third party can be avoided and the security of the locker device can be improved.

(Modification)
In the modification, a case where the number of finger placements in step S309 in FIG. 7 is set to 2 and information on two fingerprints is read correctly will be described. It is assumed that the fingerprint information read by the first finger placement is “first fingerprint information”, and the fingerprint information read by the second finger placement is “second fingerprint information”.

  In step S309, if the number of finger placements has not reached two (NO in step S309), the control unit 5 (feature monitoring unit 28) determines the body part related to the first fingerprint information from the reading position of the fingerprint reader 4. It is monitored that the first finger which is After confirming that the first finger is released, the process returns to step S301, and in step S303, it is determined whether or not the second finger is placed at the reading position of the fingerprint reader 4.

  If the number of finger placements reaches 2 (YES in S309), the process proceeds to step S327. In step S327, the control unit 5 (identification information registration unit 25) uses the first fingerprint information read in the first finger placement as the fingerprint information and the first fingerprint read in the second finger placement. The fingerprint information of 2 is individually registered.

  In step S47 of FIG. 6, the control unit 5 (person authentication unit 26) is read in step S45 and at least one of the first fingerprint information and the second fingerprint information registered in step S327. It is determined whether or not the fingerprint information matches. If it is determined that it matches at least one (YES in S47), the user is authenticated and the process proceeds to step S63. If it is determined that they do not match (NO in S47), the process proceeds to step S51 without authenticating the identity of the user.

  The body part related to the first fingerprint information (first finger) and the body part related to the second fingerprint information (second finger) are registered with the same finger (for example, the index finger of the right hand). It is also possible to register with different fingers.

  According to the modification, the following effects can be obtained.

  The fingerprint information is read twice at different timings and the first and second fingerprint information is registered, and the personal authentication unit 26 selects at least one of the registered first and second fingerprint information. If it matches the fingerprint information read at the time of “takeout”, the user is authenticated. This increases the probability that the fingerprint information matches, so that the fingerprint can be read and registered correctly but authentication is not successful, and the response rate of the locker device can be improved.

  For example, if the first and second fingerprints are characteristics of different fingers of the user, even if one finger is injured and cannot be read correctly after authentication and before authentication, the characteristics of the other finger Can succeed in authentication. Conversely, even if the first and second fingerprints have the same characteristics of the user's finger, the information of the fingerprint that is read varies depending on how the finger is placed. Accordingly, the width of the fingerprint feature for one finger is expanded, and the probability that the fingerprint information matches is increased. The number of fingerprint information is not limited to 2, and may be 3 or more. That is, information of the third fingerprint, the fourth fingerprint,... May be registered and authenticated.

  In addition, after the fingerprint reader 4 reads the first fingerprint information, it monitors that the first finger has moved away from the reading position of the fingerprint reader 4, and the feature monitoring unit 28 confirms that the first finger has moved away. After that, the second fingerprint information is read. As a result, it is possible to perform processing for confirming that the first finger has been released between reading of the first fingerprint information and reading of the second fingerprint information. Therefore, it is possible to read different fingerprint information between the first time and the second time. For example, if the first and second fingerprints are features of the same finger of the user, the fingerprint information that is read changes depending on how the finger is placed. Can also read different fingerprint information.

(Other embodiments)
As mentioned above, although this invention was described by one embodiment and its modification, it should not be understood that the statement and drawing which form a part of this indication limit this invention. From this disclosure, various alternative embodiments, examples and operational techniques will be apparent to those skilled in the art.

  In the above-described embodiment and modification, a locker device that performs double authentication based on ID information and fingerprint information, and performs double authentication based on ID information and PIN information when fingerprint information cannot be read correctly Explained. However, the present invention is not limited to double authentication, and a locker device that performs personal authentication based only on fingerprint information and performs personal authentication based on personal identification number information when fingerprint information cannot be read correctly. It can also be applied to. Furthermore, it goes without saying that the present invention can also be applied to a locker device having third authentication means, fourth authentication means,.

  As an example of “physical features”, the features of fingerprints including patterns formed on the epidermis and dermis of the skin have been described. Instead of this, each organ of the human body such as finger veins, palm veins, iris, retina, etc. It may be a feature.

  As an example of the “password”, the personal identification number made up of a character string consisting only of numbers has been described, but instead of this, a PIN or a combination of a plurality of numbers and characters may be enumerated.

  As an example of the “ID medium”, an IC chip embedded card (IC card) has been described. Instead of this, various information including ID information such as a wristband and tag embedded with an IC chip or a magnetic card are used. Other objects and devices used for recording, transmission, storage, and the like may be used.

  In the above-described embodiment and modification, the locker device that authenticates the user himself / herself based on the information on the physical characteristics of the user and unlocks the user has been described, but the present invention is not limited to the locker device, and the user's body The present invention can also be applied to an electric lock device that authenticates and unlocks a user based on information on the physical characteristics, and a biometric authentication device that authenticates the user based on information on physical characteristics of the user.

  Thus, it should be understood that the present invention includes various embodiments and the like not described herein. Therefore, the present invention is limited only by the invention specifying matters according to the scope of claims reasonable from this disclosure.

1 Locker Device 2 Power Supply Unit 4 Fingerprint Reader (Biometric Information Reading Unit)
5 Control unit 6 Touch panel (password input unit, registration method selection unit, display unit, notification means)
7 Door 8 Handle 9 Number seal 10 Indicator lamp 11 Control unit door 12 Control unit door lock 14 Administrator operation lock 15 Speaker (notification means)
16 Shelf board 17 IC card reader (ID reader)
21 microcomputer 22 memory 25 the identification information registering unit 26 authentication unit 27 reading success determining unit 28, wherein the monitoring unit 29 the identification information storage unit 30 program storage unit E ₁ to E _n electric lock

Claims (6)

A locker device that authenticates the user himself / herself based on information on the physical characteristics of the user and unlocks the user,
A biological information reading unit that reads information on the physical characteristics of the user;
A password input unit that accepts password input by the user;
An identification information registration unit that pre-registers the password input from the password input unit and the physical feature information read by the biological information reading unit;
A personal authentication unit that authenticates the identity of the user by collating the physical feature information registered by the identification information registration unit with the physical feature information read by the biometric information reading unit after registration. When,
A reading success / failure determination unit that determines whether the biological information reading unit has correctly read physical feature information;
The identification information registration unit enables registration of a password only when the reading success / failure determination unit determines that the biological information reading unit does not correctly read physical feature information,
The identity authentication unit checks the password registered in the identification information registration unit and the password entered by the user after registration only when the identification information registration unit registers the password in advance. A locker device that authenticates the identity of the user. When the reading success / failure determination unit determines that the biometric information reading unit has not correctly read physical feature information, the user accepts a selection of whether to register a password or physical feature information A registration method selection unit;
The locker device according to claim 1, wherein the identification information registration unit registers a password only when the registration method selection unit accepts password selection. The identification information registration unit is read by the biological information reading unit at a timing different from the reading of the first physical feature information read by the biological information reading unit and the reading of the first physical feature information. Pre-registering information on the second physical feature,
The personal authentication unit is read by at least one of the first physical feature information and the second physical feature information registered by the identification information registration unit and by the biometric information reading unit after registration. The locker device according to claim 1 or 2, wherein the identity of the user is authenticated when the physical feature information matches.   The biometric information reading unit further includes a feature monitoring unit that monitors the separation of the body part related to the first physical feature from the reading position of the biometric information reading unit after reading the information of the first physical feature. 4. The rocker device according to claim 3, wherein the biological information reading unit reads information on a second physical feature after the feature monitoring unit confirms that the body part has been separated. An ID reader that reads ID information stored in the ID medium;
The identification information registration unit registers ID information in advance,
The identity authentication unit includes ID information and physical feature information registered by the identification information registration unit, ID information read by the ID reading unit, and physical feature read by the biometric information reading unit after registration. ID information and password registered by the identification information registration unit only when the identity of the user is verified by collating each of the information and the password is registered in advance by the identification information registration unit. 5. The identity of the user is authenticated by checking each of the ID information read by the ID reading unit and the password input by the user after registration. The locker device according to one item. A locker device that authenticates the user himself / herself based on information on the physical characteristics of the user and unlocks the user,
A biological information reading unit that reads information on the physical characteristics of the user;
A display unit for displaying a password input screen for accepting a password input by a user;
An identification information registration unit that pre-registers the password input from the password input screen and the physical feature information read by the biometric information reading unit;
A personal authentication unit that authenticates the identity of the user by collating the physical feature information registered by the identification information registration unit with the physical feature information read by the biometric information reading unit after registration. When,
A reading success / failure determination unit that determines whether the biological information reading unit has correctly read physical feature information;
Only when the reading success / failure determination unit determines that the biological information reading unit has not correctly read the physical feature information, the display unit displays the password input screen, and the identification information registration unit displays the password input screen. Register the password entered from
Only when the identification information registration unit has registered a password in advance, the display unit displays the password input screen, and the personal authentication unit is configured to use the password registered by the identification information registration unit and the user after registration. A locker device that authenticates the identity of the user by checking each entered password.

Images