JP2015141510A - Authentication support method, authentication support terminal, and authentication support system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a method for reducing a burden on a user in creating information for authentication.SOLUTION: An authentication support method includes the steps of: receiving the selection of information on a user; displaying a screen including the selected information; acquiring an image for authentication by photographing the user while the information has been selected through the reception of the selection in the receiving step; and associating the acquired image for authentication with the selected information.

Description

  The present invention relates to an authentication support method, an authentication support terminal, and an authentication support system.

  ID cards such as employee ID cards, student ID cards, and admission cards are popular. Generally, information used for identity verification (hereinafter referred to as “authentication information”) is recorded and printed on this type of ID card (for example, Patent Document 1). This authentication information includes information about the user (hereinafter referred to as “user information”) such as the user name and the affiliated organization, and facial photo data of the user.

JP 2006-212831 A

  Conventionally, when creating an ID card, authentication information is created by manually associating the user information of the user who is the owner of the card with the face photo data of the user, and this is recorded and printed on the card. It was. When many ID cards are created at once, the creation of authentication information is a heavy burden on the person in charge.

  Such a problem may occur not only when creating an ID card, but also when creating authentication information for other purposes.

  The present invention has been made in view of these problems, and an object of the present invention is to provide a technique for reducing the burden on the person in charge of creating authentication information.

  In order to solve the above problems, an authentication support method according to an aspect of the present invention captures a user in a step of accepting selection of information related to the user, and in a state where information is selected by accepting selection in the accepting step. Acquiring an authentication image and associating the acquired authentication image with the selected information.

  Another aspect of the present invention is an authentication support terminal. The authentication support terminal includes a reception unit that receives selection of information about the user, a shooting unit that captures the user and acquires an authentication image in a state in which the reception unit receives the selection and information is selected. An associating unit that associates the authentication image with the selected information.

  Yet another embodiment of the present invention is an authentication support system. The authentication support system includes a receiving unit that receives selection of information about the user, and a shooting unit that acquires the authentication image by shooting the user in a state where the information is selected by the receiving unit receiving the selection. An associating unit that associates the acquired authentication image with the selected information.

  It should be noted that any combination of the above-described constituent elements, or those obtained by replacing the constituent elements and expressions of the present invention with each other between apparatuses, methods, systems, computer programs, recording media storing computer programs, and the like are also included in the present invention. It is effective as an embodiment of

  According to the present invention, it is possible to reduce a user's burden on creation of authentication information.

It is a figure which shows the structure of the authentication assistance system of 1st Embodiment. It is a figure which shows the data structure of the application information holding part of FIG. It is a figure which shows the data structure of the information holding part for authentication of FIG. It is a figure which shows a user information selection screen. It is a figure which shows the information creation screen for authentication. It is a figure which shows the information creation screen for authentication. It is a figure which shows a mode that it displays on a touchscreen at the time of imaging | photography. It is a flowchart which shows the information creation process for authentication. It is a flowchart which shows a collation process. It is a figure which shows the structure of the authentication assistance system of 2nd Embodiment.

  The present invention will be described below based on preferred embodiments with reference to the drawings. The same or equivalent components, members, and processes shown in the drawings are denoted by the same reference numerals, and repeated descriptions are omitted as appropriate.

(First embodiment)
The outline of the authentication support system according to the present embodiment is as follows.
The authentication support system according to the present embodiment supports creation of information (hereinafter referred to as “authentication information”) used for user identification. This authentication information includes information related to the user such as the user name and affiliation (hereinafter referred to as “user information”) and the face photo data of the user.

  Conventionally, a person in charge of managing authentication information (hereinafter simply referred to as “person in charge”) creates authentication information by manually associating the user's face photo data with the user information received from the user. It was. For example, authentication information of several hundred users per day may be created by several persons in charge, and the burden on the persons in charge is relatively high. In addition, since the association is made manually, there is a case where different user face photo data is associated with the user information due to a mistake of the person in charge.

  Therefore, in the authentication support system according to the present embodiment, in the state where user information is selected in the information processing terminal, the user of the user information is photographed to acquire face photo data, and the acquired face photo data and user Automatically associates information and creates authentication information. The created authentication information is printed on an ID card such as an employee ID card, an admission card, or a student ID card. The created authentication information is held in the information processing terminal and used to authenticate the user. For example, it is authenticated whether the user who came to receive the created ID card is the user of the ID card. The authentication support system will be specifically described below.

  FIG. 1 shows a configuration of an authentication support system 100 according to the first embodiment. The authentication support system 100 includes an authentication support server 10, an authentication support terminal 12, and an ID card printer 14. 1 are connected via wireless and wired communication networks including LAN, WAN, and the Internet.

  The user applies for creation of authentication information (or creation of an ID card) to the authentication support server 10 via a predetermined terminal. The person in charge who receives the user's request or another person may apply. The authentication support server 10 receives this application and manages the contents as application information. The authentication support server 10 sends application information to the authentication support terminal 12.

  The authentication support terminal 12 is an information processing terminal used by a person in charge. The authentication support terminal 12 of this embodiment is assumed to be a tablet terminal (tablet computer) having a photographing function. The authentication support terminal 12 may be a general PC terminal to which a smartphone having a shooting function or a device having a shooting function is connected. The authentication support terminal 12 is installed with an application for realizing authentication information creation processing.

  The person in charge uses the authentication support terminal 12 to create authentication information for the user who applied. Specifically, the person in charge selects the user information of the user who creates the authentication information, and in that state, takes a picture of the user with the shooting function of the authentication support terminal 12 and acquires a face photograph. The authentication support terminal 12 associates the selected user information with the acquired face photograph and holds them. In this way, authentication information in which the user information and the user's face photograph are associated is created.

  The authentication support terminal 12 outputs the created authentication information to the ID card printer 14. The ID card printer 14 prints the output authentication information on a predetermined card to create an ID card. The authentication support terminal 12 authenticates whether the user who has received the created ID card is the user of the ID card. Specifically, information including user information and face photo data (hereinafter referred to as “authenticated information”) is received from a user who has received the information. Authentication is performed by comparing the authentication target information with the authentication information. The person in charge delivers the ID card to the user thus authenticated.

  Next, the authentication support terminal 12 will be described in detail. FIG. 1 also shows functional blocks of the authentication support terminal 12. The authentication support terminal 12 includes a touch panel 20, an application information holding unit 22, an authentication information holding unit 24, and a control unit 26. The control unit 26 includes an operation detection unit 28, a display control unit 30, a communication processing unit 32, a photographing processing unit 34, and an authentication support unit 36.

  Each block shown here can be realized in hardware by an element and a mechanical device including a computer CPU and memory, and in software by a computer program or the like. It depicts the functional blocks that are realized. Therefore, those skilled in the art will understand that these functional blocks can be realized in various forms by a combination of hardware and software. The same applies to the subsequent block diagrams.

  For example, a program module corresponding to each functional block in the control unit 26 is stored in a storage such as a flash memory of the authentication support terminal 12, and the CPU of the authentication support terminal 12 reads the program module into the main memory and executes it. Thus, the function of the control unit 26 may be realized. Further, the control unit 26 may store various data in a storage area such as a storage or a main memory, and execute data processing related to each functional block with reference to the data. In addition, application software corresponding to the authentication support unit 36 may be distributed in a recording medium or a download format and installed in the authentication support terminal 12. The functions of the application information holding unit 22 and the authentication information holding unit 24 may be realized by a storage device such as a storage of the authentication support terminal 12 or a main memory.

  The touch panel 20 is a display device (for example, a liquid crystal panel) integrally formed with an input device (for example, a touch pad). The operation detection unit 28 detects user operations input to various buttons arranged on the touch panel 20 and the authentication support terminal 12, and passes the operation contents to the authentication support unit 36. The display control unit 30 controls the display content of the touch panel 20 and causes the touch panel 20 to display text data and image data passed from the authentication support unit 36. The communication processing unit 32 controls communication with an external device. For example, the communication processing unit 32 receives data transmitted from the authentication support server 10 and passes the data to the authentication support unit 36. Further, for example, the communication processing unit 32 transmits the data passed from the authentication support unit 36 to the ID card printer 14. The photographing processing unit 34 photographs a subject to acquire photographic data, and passes the data to the authentication support unit 36.

  The application information holding unit 22 holds application information received from the authentication support server 10. FIG. 2 shows the data structure of the application information holding unit 22. The application information holding unit 22 holds an application ID 300, an application date 302, an applicant 304, and user information 306 in association with each other. The application ID 300 is an ID for uniquely identifying application information. The application date 302 is a date on which application for creation of authentication information is applied. The applicant 304 is an applicant who applied for the creation of authentication information, and the name of the user himself / herself who is to create the authentication information or the name of the person in charge who received the request from the user is indicated. The user information 306 is user information of a user who has created authentication information. That is, the application information includes user information. Here, the user information 306 includes the organization, name, and name (furigana). In addition, the application information holding unit 22 may include various information such as a person in charge of the user's affiliation, the title of the person in charge, and the address of the user's affiliation. That is, the application information transmitted from the authentication support server 10 may include such information. Returning to FIG.

  The authentication information holding unit 24 holds authentication information. FIG. 3 shows the data structure of the authentication information holding unit 24. The authentication information holding unit 24 holds a user ID 310, user information 312 and face photograph data 314 in association with each other. The user ID 310 is an ID for uniquely identifying the user. The user information 312 is user information, and here includes an organization, name, and name (furigana). The user information 312 corresponds to the user information 306 in FIG. The face photograph data 314 is face photograph data obtained by photographing the user. Note that the authentication information holding unit 24 includes an identification document indicating which document / card (license, passport, etc.) is used to identify the person when photographing a face, the location where the user was photographed, and other information. You may go out. Returning to FIG.

  The authentication support unit 36 provides a function for realizing a process for creating authentication information. The authentication support unit 36 includes an application information recording unit 38, an authentication support screen display unit 40, a selection receiving unit 42, a photographing unit 44, an association unit 52, an authentication information recording unit 54, and authenticated person information. A reception unit 56 and a verification unit 58 are included. The application information recording unit 38 receives application information from the authentication support server 10 and stores it in the application information holding unit 22.

  The authentication support screen display unit 40 displays various screens on the touch panel 20. For example, the authentication support screen display unit 40 receives a user selection screen 70 (to be described later with reference to FIG. 4) for accepting a selection of a user who creates authentication information, or an authentication information creation screen 80 (for creating authentication information). 5 is displayed on the touch panel 20.

  FIG. 4 shows a user selection screen 70. The user selection screen 70 includes a belonging organization information area 72 and a user information area 74. The affiliation organization information area 72 displays the affiliation organization to which the user belongs. This institution corresponds to the institution in FIG. In the user information area 74, user information of a user who has applied for creation of authentication information is displayed. In particular, the user information of the user of the affiliated organization selected in the affiliated organization information area 72 is displayed. This user information corresponds to the user information of FIG. The person in charge selects a user (user information) for creating authentication information on the user selection screen 70.

  5 and 6 show an authentication information creation screen 80. The authentication information creation screen 80 includes an application information area 82, a user information area 84, and a face photo area 86. In these areas, information about the user selected in FIG. 4 is displayed. Specifically, the application information area 82 displays information corresponding to the application ID, application date, and applicant in FIG. In the user information area 84, information corresponding to the organization, name, and name (furigana) shown in FIG. 2 is displayed. That is, in the user information area 84, user information of a user who has authentication information created is displayed. In the face photo area 86, a user's face photo is displayed. When a user is photographed and photographed as facial photographs and associated with user information, the facial photograph of the user is displayed in this facial photograph area 86. FIG. 5 shows a state where no face photograph is displayed, and FIG. 6 shows a state where a face photograph is displayed. Returning to FIG.

  The selection receiving unit 42 receives selection of a user (user information) who creates authentication information via the user selection screen 70. The photographing unit 44 photographs the user and acquires a user's face photograph. The photographing unit 44 includes an authentication image photographing unit 46, an authenticated image photographing unit 48, and a trimming unit 50. The authentication image photographing unit 46 photographs the user and acquires face photo data to be registered as a part of the authentication information. In particular, the authentication image photographing unit 46 photographs when the photographing button 88 disposed on the authentication information creation screen 80 is pressed. Of course, the authentication image capturing unit 46 may be configured to capture images when a button arranged on the authentication support terminal 12 is pressed. When authenticating the user, the authenticated image photographing unit 48 photographs the user who is the authenticated person and obtains face photo data for authentication.

  Here, FIG. 7 shows a state displayed on the touch panel 20 when the user is photographed by the authentication image photographing unit 46 or the authenticated image photographing unit 48. As shown in FIG. 7, a trimming guideline 300 is displayed on the touch panel 20. When the authentication image capturing unit 46 or the authenticated image capturing unit 48 captures the user, the trimming unit 50 trims the face photo data along the trimming guidelines. Therefore, the person in charge may shoot in a state where the user's face is within the trimming guideline 300. Returning to FIG.

  The association unit 52 associates the trimmed face photo data with the user information. In the present embodiment, the face photo data is associated with the user information by using an ID (for example, application ID) uniquely identifying the user information as the file name of the photo data. For example, when the user information of the application ID “S001” is selected and this user is photographed, the acquired face photo data is given a file name “S001.jpg”. The authentication information recording unit 54 stores the face photo data in the authentication information holding unit 24 together with the corresponding user information. At this time, the authentication information recording unit 54 assigns a user ID for uniquely identifying the user (user information) and stores the user ID in the authentication information holding unit 24. In this way, authentication information is created and held in the authentication information holding unit 24.

  The person-to-be-authenticated information receiving unit 56 receives user information (for example, a user ID and a user name) of a user who is an authenticated person. The user information and the face photograph data acquired by the image capturing unit for authentication 48 constitute authentication information. The collation unit 58 collates this authentication target information with the authentication information held in the authentication information holding unit 24 to authenticate the user. Specifically, (1) user information of authentication information and user information of authentication information are collated, and (2) face photo data of authentication information and face photo data of authentication information are collated. To authenticate the user. For comparison of face photo data, for example, the degree of similarity may be calculated using a known face matching technique, and it may be determined that the person is the same person when the degree of similarity is a predetermined value or more.

  The operation of the authentication support system 100 having the above configuration will be described in two phases, that is, an authentication information creation phase and a verification phase.

(Authentication information creation phase)
FIG. 8 is a flowchart showing authentication information creation processing in the authentication support system 100. Here, consider the case of creating authentication information to create an employee ID.
The authentication support server 10 receives an application for creating authentication information (application for creating an employee ID card) from the user (S10). The authentication support server 10 manages the contents of this application as application information. The authentication support server 10 transmits the received application information to the authentication support terminal 12 (S12). The application information recording unit 38 of the authentication support terminal 12 stores the application information transmitted from the authentication support server 10 in the application information holding unit 22 (S14).

  When the person in charge starts the application on the authentication support terminal 12 in this state, the authentication support screen display unit 40 of the authentication support terminal 12 displays the user selection screen 70 (S16). When the user information of the user who creates the authentication information is selected on the user selection screen 70, the selection receiving unit 42 receives it (S18). Then, the authentication support screen display unit 40 displays an authentication information creation screen 80 including the selected user information (S20).

  The person in charge and the user confirm whether the information displayed on the authentication information creation screen 80 is the user's own information. In the case of the user's own information, the person in charge presses the shooting button 88. Then, the authentication image photographing unit 46 acquires the user's face photo data (S22). The associating unit 52 associates the face photograph data with the user information (S24) and stores it in the authentication information holding unit 24. In this way, authentication information is created. Then, on the authentication information creation screen 80, face photo data is arranged as shown in FIG. The authentication support terminal 12 outputs the created authentication information to the ID card printer 14, and the ID card printer 14 records and prints it on a predetermined card. An employee ID is thus created.

(Verification phase)
FIG. 9 is a flowchart showing a verification phase in the authentication support system 100. Here, a case is considered in which it is authenticated whether or not the user who has received the employee ID is the user of the employee ID.
The authentication support terminal 12 acquires the authentication information of the user who came to receive the ID card (S30). Specifically, the to-be-authenticated image photographing unit 48 acquires the face photo data of the user who has come to receive. Further, the person-to-be-authenticated information receiving unit 56 receives input of user information by a user who has come to receive. The verification unit 58 authenticates whether or not the user who has received the information is the user of the employee ID card using the authentication target information and the authentication information held in the authentication information holding unit 24 (S32). In the case of the person himself, the person in charge hands over the ID card.

  The authentication support system 100 according to the first embodiment has been described above. According to the authentication support system 100 according to the present embodiment, face photo data is automatically associated with user information, and authentication information is created. This reduces the burden on the person in charge. In addition, the time required for creating authentication information is shortened. In addition, since the association is automatically performed, it is possible to prevent erroneous authentication information from being created by associating face image data of different users due to a mistake.

  In addition, according to the authentication support system 100 according to the present embodiment, the shooting button 88 for shooting the user is arranged on the authentication information creation screen 80 displayed by the selected user information. Thereby, user information and a user's face photograph can be matched more reliably.

(Second Embodiment)
In the authentication support system according to the second embodiment, authentication information is managed by a server.
FIG. 10 shows a configuration of an authentication support system 200 according to the second embodiment. The authentication support system 200 includes an authentication support server 110, an authentication support terminal 112, and an ID card printer 14. In the present embodiment, the authentication support server 110 includes an authentication information holding unit 24, an authentication information recording unit 54, and a verification unit 58. The authentication support server 110 also includes a server side application information holding unit 160 that holds application information. The data structure of the server-side application information holding unit 160 is the same as the data structure of the application information holding unit 22, and the data held in the server-side application information holding unit 160 is transmitted to the authentication support terminal 112 and the application information holding unit 22.

  In the present embodiment, the associating unit 52 transmits the face photo data acquired by the authentication image capturing unit 46 and trimmed by the trimming unit 50 to the authentication support server 110. The authentication information recording unit 54 of the authentication support server 110 stores the transmitted face photograph data in the authentication information holding unit 24 together with user information having the same application ID as the file name.

  In addition, when the user information receiving unit 56 receives user information (for example, a user ID or a user name) of the user who is the user to be authenticated, the user information receiving unit 56 transmits it to the authentication support server 110. Similarly, the to-be-authenticated image photographing unit 48 transmits the acquired face photo data to be authenticated to the authentication support server 10 after trimming by the trimming unit 50. In other words, in the present embodiment, when the authentication support terminal 112 acquires the information to be authenticated, it transmits it to the authentication support server 110. The verification unit 58 of the authentication support server 110 performs user authentication by comparing the authentication target information transmitted from the authentication support terminal 12 with the authentication information held in the authentication information holding unit 24.

  According to the authentication support system 200 according to the present embodiment, the same operational effects as the operational effects achieved by the authentication support system 100 according to the first embodiment are exhibited.

  The present invention has been described based on the embodiments. This embodiment is an exemplification, and it will be understood by those skilled in the art that various modifications can be made to combinations of the respective constituent elements and processing processes, and such modifications are also within the scope of the present invention. is there. A modification is shown below.

(Modification 1)
In the first and second embodiments, a case has been described in which the created authentication information is printed on a predetermined card to create an ID card, and whether or not the user who has received this is the person himself / herself is authenticated. The technical idea of the first and second embodiments is not limited to this, and can be applied to various scenes. For example, authentication information may be printed on the prescription along with information about the medicine, and it may be confirmed whether or not the user who brought the prescription to the pharmacy is the user who issued the prescription. Further, for example, authentication information of the purchaser may be printed on a ticket for a concert or the like, and it may be confirmed whether or not the person who intends to enter the concert venue is the person who purchased the ticket.

(Modification 2)
In the first and second embodiments, the case has been described in which the user is photographed by the authentication support terminal 12 to acquire facial photograph data and associated with the user information. However, the present invention is not limited to this. An application for realizing the creation process of the authentication information may be installed in a terminal owned by the user, and the user terminal may be used to capture the face photo data and associate it with the user information. Then, the user may send this photo data to the authentication support terminal 12 or the authentication support server 10, and the received authentication support terminal 12 or the authentication support server 10 may hold the face photo data together with the user information. According to this modification, the user does not need to go to the person in charge (that is, the place where the authentication support terminal 12 is set) in order to take a facial photograph, and the burden on the user is reduced. Even in this case, when the ID card is delivered, it is authenticated whether the user who came to receive the card is the user of the ID card, so that the proof power of the ID card is secured.

  DESCRIPTION OF SYMBOLS 10 Authentication support server, 12 Authentication support terminal, 14 ID card printer, 20 Touch panel, 22 Application information holding part, 24 Authentication information holding part, 26 Control part, 28 Operation detection part, 30 Display control part, 32 Communication processing part, 34 imaging processing unit, 36 authentication support unit, 38 application information recording unit, 40 authentication support screen display unit, 42 selection receiving unit, 44 imaging unit, 46 authentication image capturing unit, 48 authenticated image capturing unit, 50 trimming unit , 52 association section, 54 authentication information recording section, 56 authenticated person information receiving section, 58 collation section, 70 user selection screen, 72 affiliated institution information area, 74 user information area, 80 authentication information creation screen, 100, 200 Authentication support system.

Claims (7)

Receiving a selection of information about the user;
In a state where information is selected by accepting selection in the accepting step, photographing the user and obtaining an authentication image;
Associating the acquired authentication image with the selected information;
An authentication support method comprising:   The authentication support method according to claim 1, further comprising a step of displaying a screen including the selected information between the receiving step and the acquiring step.   3. The authentication support method according to claim 2, wherein in the displaying step, an image including an icon for receiving an execution instruction of the acquiring step is displayed which is a screen including the selected information. Photographing a user to obtain an image for authentication;
Collating the image to be authenticated with the image for authentication to determine whether the user corresponding to the image to be authenticated and the user corresponding to the image for authentication are the same person;
The authentication support method according to claim 1, further comprising: A function to accept selection of information about the user,
In a state where information is selected by accepting selection by the accepting function, a function of photographing the user and acquiring an authentication image;
A function for associating the acquired authentication image with the selected information;
A computer program for causing a computer to realize the above. A reception unit that accepts selection of information about the user;
In a state where information is selected by receiving the selection by the reception unit, a shooting unit that captures the user and acquires an authentication image;
An association unit for associating the acquired authentication image with the selected information;
An authentication support terminal comprising: A reception unit that accepts selection of information about the user;
In a state where information is selected by receiving the selection by the reception unit, a photographing unit for photographing the user and obtaining an authentication image;
An association unit for associating the acquired authentication image with the selected information;
An authentication support system comprising:

Images