JP2017219934A - Identity determination system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To determine identity of photographed measurement equipment and measurement equipment which has transmitted a measurement result.SOLUTION: Measurement equipment 300 comprises: a biological information measurement part 320 for measuring biological information of a measured subject, and for outputting a measurement result; a communication part 110 for transmitting an equipment ID and time information together with the measurement result to a confirmation device 100; and an equipment ID light emission part 330 which blinks with a blinking pattern corresponding to the equipment ID after the transmission of the measurement result. The confirmation device 100 comprises: a communication part 110 for receiving the measurement result, the equipment ID and the time information; a photographing part 120 for photographing the measurement equipment 300 and pattern blinking; and an equipment ID analysis part 140 for specifying the equipment ID on the basis of the blinking pattern, and for, when the equipment ID matches the equipment ID received by the communication part 110, and a different between time represented by the time information and time when the pattern blinking starts is smaller than a predetermined threshold, determining that the measurement result has been measured by the measurement equipment 300 photographed by the photographing part 120.SELECTED DRAWING: Figure 1

Description

  The present invention relates to an identity determination system including a measurement device and a confirmation device that transmit and receive information to and from each other via a communication network.

  For patients with hypertension and chronic diseases, measure vital information such as blood pressure, pulse, blood glucose level, weight, and exercise information such as the number of steps on a daily basis. It is important to do. Therefore, a PHR (Personal Health Record) system for measuring and recording these vital information and exercise information has been proposed.

  In the PHR system, in order to prevent false biometric information and exercise information from being registered by a third party, when a measured person registers vital information and exercise information, authentication by ID (Identification) and password, device authentication In some cases, identity verification may be performed. The PHR system may also perform identity verification by biometric authentication, knowledge authentication, property authentication, or the like. However, these authentications are intended to prevent acts that a third party impersonates against the intentions of the principal, and the intentional intention is that the principal will conspire by passing the information used for authentication to another person. It may not be possible to prevent a third party from standing up.

  In telemedicine, fraudulent acts such as sending biometric information of a third party who is not a patient as the biometric information of a patient, even in a situation where a doctor refers to the state of measurement based on video transmitted via a communication network There are cases where it cannot be prevented. For example, as shown in FIG. 6, Mr. A who is a patient measures biological information using a measuring device within the imaging range of the camera, while Mr. B uses another measuring device outside the imaging range of the camera. Measure biological information. Then, Mr. B's biological information measured by another measuring device may be transmitted as Mr. A's biological information.

  In order to prevent the above fraud, it is necessary to identify a measuring device that measures the patient's biological information captured by the camera. Therefore, in the technology described in Non-Patent Document 1, the device of the device using a beacon that transmits a device ID for uniquely identifying the device by blinking on the device and a high-functional camera that captures the beacon. Specify the ID. By applying this technique to the above-described measuring device, it is possible to identify the measuring device that measures the patient's biological information captured by the camera.

Nobuyuki Matsushita and 4 others, “ID Cam: Image sensor that can acquire scene and ID simultaneously”, IEICE technical report. ISEC, Information Security 101 (728), 105-110, March 12, 2002

  However, when trying to identify the measuring device using the technique described in Non-Patent Document 1, the measuring device photographed by the camera blinks in the same blinking pattern as the blinking pattern of another measuring device. The device ID of the measurement device being photographed can be specified as the device ID of another measurement device.

  Here, with reference to FIG. 7, description will be given with respect to a case where impersonation is performed by a television examination system that identifies a measuring device that measures a patient's biological information and transmits the biological information and the device ID to a doctor's videophone terminal. To do.

  When the television examination system is used correctly, the measuring device 61 and the videophone terminal 62 are paired, the measuring device 61 measures the biological information of the patient A, and the biological information and the device ID of the measuring device 61 are obtained. The data is transmitted to the videophone terminal 64 used by the doctor via the videophone terminal 62 and the videophone server 63.

  On the other hand, a light emitter (for example, an LED (light emitting diode)) 611 attached to the measuring device 61 blinks in a blinking pattern corresponding to the device ID. Then, the video phone terminal 62 specifies the device ID of the measurement device 61 taken based on the blinking of the measurement device 61 in the video obtained by photographing the measurement device 61 with the camera 621, and sends the device ID together with the video to the video phone terminal 64. Send.

  When such a television examination system is used illegally, a different measurement device 71 and information processing apparatus (for example, a PC (Personal Computer)) 72 are further provided together with the measurement device 61 and the videophone terminal 62 paired as described above. Used.

  The measuring device 71 and the information processing device 72 are paired, and the measuring device 61 measures biological information of a third party outside the imaging range of the camera 621 of the videophone terminal 62. Then, the measuring device 61 transmits the measured biological information to the videophone terminal 64 via the videophone terminal 62 and the videophone server 63. That is, the measuring device 61 transmits the biometric information of Mr. B who is a third party to the videophone terminal 64 together with the device ID of the measuring device 61.

  On the other hand, the information processing device 72 detects a blinking pattern based on the blinking of the light emitter 611 of the measuring device 61 photographed by the mounted camera 721. Then, the information processing device 72 transmits a blinking pattern of the light emitter 611 to the measuring device 71 and transmits a light emission instruction. Then, the measuring device 71 blinks with the transmitted blinking pattern, that is, the blinking pattern of the measuring device 61. In this case, since the videophone terminal 62 captures the measurement device 71 blinking in the blinking pattern corresponding to the device ID of the measurement device 61, the device ID of the measurement device 71 being photographed is used as the device ID of the measurement device 61. To be identified.

  Accordingly, a doctor using the videophone terminal 64 that receives information and video from the videophone terminal 62 via the videophone server 63 assigns the device ID of the measurement device 71 being photographed to the measurement device 61. Misidentified as device ID. Furthermore, the video phone terminal 64 receives the biometric information of Mr. B, who is a third party, together with the device ID of the measuring device 61. Therefore, since the device ID of the measuring device 61 specified as the device ID of the photographed measuring device 71 received by the videophone terminal 64 matches the device ID received together with the biological information, the doctor captures the biological information. Misunderstood that it is related to Mr. A, and allowed fraud.

  Accordingly, an object of the present invention made in view of such a point is to make it possible to determine the identity between a measuring device photographed by a videophone terminal and a measuring device that has transmitted a measurement result.

  In order to solve the above-described problem, an identity determination system according to the present invention is an identity determination system including a measurement device and a confirmation device that transmit and receive information to and from each other via a communication network, and the measurement device includes a device under measurement. The biological information measuring unit that measures the biological information of the person and outputs the measurement result, the device ID that uniquely identifies the measurement device, and the time information that indicates the time at which the measurement result is transmitted together with the measurement result A communication unit that transmits to the device, and a device ID light-emitting unit that flashes in a flashing pattern corresponding to the device ID after transmission of the measurement result, and the confirmation device is transmitted by the communication unit of the measurement device In addition, a communication unit that receives the measurement result, the device ID, and the time information, a measurement device, and pattern blinking in a predetermined blink pattern in the measurement device are captured. The device ID of the measuring device photographed by the photographing unit based on the blinking pattern and the device ID received by the communication unit of the confirmation device match the identified device ID, And when the difference between the time indicated by the time information and the time when the pattern blinking starts in the video imaged by the imaging unit is smaller than a predetermined threshold, the measurement result is obtained by the measuring device imaged by the imaging unit. A device ID analysis unit that determines that the measurement has been made.

  ADVANTAGE OF THE INVENTION According to this invention, it becomes possible to determine the identity of the measuring device image | photographed with the video telephone terminal, and the measuring device which transmitted the measurement result.

It is a functional block diagram of the identity determination system concerning a 1st embodiment. It is a conceptual diagram which shows information, such as a determination result memorize | stored in the memory | storage part shown in FIG. It is a sequence diagram which shows operation | movement of the identity determination system which concerns on this embodiment. It is a flowchart which shows the detail of the process of identity determination of the apparatus shown in FIG. It is a functional block diagram of the identity determination system which concerns on 2nd Embodiment. It is a conceptual diagram for demonstrating the apparatus ID recognition method in a prior art. It is a conceptual diagram for demonstrating the detail of the apparatus ID recognition method shown in FIG.

<< First Embodiment >>
Hereinafter, a first embodiment of the present invention will be described with reference to the drawings.

<Functional configuration of identity determination system>
First, the overall configuration of the present embodiment will be described with reference to FIG.

  As shown in FIG. 1, the identity determination system 1 includes a first videophone terminal (confirmation device) 100, a second videophone terminal 200, a measuring device 300, and a videophone server (management server) 500. The first videophone terminal 100, the second videophone terminal 200, and the videophone server 500 are connected via a communication network and transmit / receive information to / from each other. Further, the first videophone terminal 100 and the measuring device 300 are connected via a communication network such as Bluetooth (registered trademark), and transmit / receive information to / from each other. Further, the time of the first videophone terminal 100 and the time of the measuring device 300 are synchronized.

<Functional Configuration of Measuring Device 300>
The measuring device 300 includes a communication unit 310, a biological information measurement unit 320, a device ID (Identification) light emitting unit 330, a time synchronization unit 340, and a device ID storage unit 350.

  The communication unit 310 transmits / receives information to / from the first videophone terminal 100 via the communication network.

  The biological information measuring unit 320 measures biological information of the measurement subject. The biological information is information specific to the human body of the measurement subject, for example, blood pressure value (including systolic blood pressure and diastolic blood pressure), pulse, blood oxygen concentration, body temperature, bone conduction sound, body weight, heart sound. , Airway sounds, etc. In the present embodiment, the biological information is described as a blood pressure value and a pulse, and the biological information measurement unit 320 is described as a sphygmomanometer. However, the present invention is not limited to this.

  In addition, the biological information measuring unit 320 outputs a measurement result obtained by measuring the biological information, and transmits the measurement result and the device ID to the first videophone terminal 100 via the communication unit 310. The measurement result includes a measurement type, a measurement value, a transmission date and time, and the like. In the case of this embodiment, the measurement type is any one of systolic blood pressure, diastolic blood pressure, and pulse. In addition, the biological information measuring unit 320 transmits time information indicating the time T1 at which the measurement result is transmitted to the first videophone terminal 100 via the communication unit 310.

  The device ID light emitting unit 330 blinks when the light emitter is turned on or off. Specifically, when the biometric information measurement unit 320 starts measuring biometric information, the device ID light emitting unit 330 repeatedly flashes a predetermined number of times at regular intervals (this flashing is referred to as “constant flashing”). . In addition, the device ID light emitting unit 330, after the transmission of the biological information and time information by the communication unit 310, that is, simultaneously with the transmission of the biological information and time information by the communication unit 310, or after a predetermined time has elapsed from the transmission, It blinks with a blinking pattern corresponding to the device ID for uniquely identifying the measuring device 300 (this blinking is referred to as “pattern blinking”). As will be described in detail later, the latest device ID and flashing pattern among the device IDs and flashing patterns generated at a predetermined frequency or at a predetermined timing by the management server 500 are stored in association with the device ID storage unit 350. . The device ID light emitting unit 330 blinks with the blinking pattern stored in the device ID storage unit 350.

  The time synchronization unit 340 synchronizes the time of the measuring device 300 with the time of the first videophone terminal 100.

  The device ID storage unit 350 stores the device ID of the measuring device 300 and the blinking pattern corresponding to the device ID in association with each other. In addition, when the communication unit 310 receives the device ID newly generated by the videophone server 500 and the corresponding blinking pattern, the device ID storage unit 350 displays the received device ID and the blinking pattern with the device ID and the already stored device ID. Overwrite the flashing pattern and store it.

<Functional configuration of first videophone terminal>
As shown in FIG. 1, the first videophone terminal 100 includes a communication unit 110, a photographing unit 120, an identity confirmation unit 130, a device ID analysis unit 140, a device ID storage unit 150, a video display unit 160, and a time synchronization unit. 170.

  Communication unit 110 transmits / receives information to / from videophone server 500 via a communication network. The communication unit 110 receives the measurement result and time information indicating the time T1 when the measurement device 300 transmits the measurement result from the measurement device 300 via the communication network.

  The photographing unit 120 is arranged at a position including the subject who is the user of the first videophone terminal 100 and the device ID light emitting unit 330 of the measuring device 300 in the photographing range. Then, the photographing unit 120 photographs the subject and the device ID light emitting unit 330 blinking.

  The identity verification unit 130 identifies the patient ID by performing identity verification of the person to be measured of the measuring device 300, which is a patient, through authentication processing. The authentication method used for the authentication process of the identity verification unit 130 may be a basic authentication method using a user ID (identification) and a password (PW: Password), or a biometric authentication method such as vein authentication or fingerprint authentication, and any authentication method. It can be a method. In addition, the person confirmation unit 130 also identifies the person confirmation date and time when the person confirmation process was performed.

  In addition, the person confirmation unit 130 transmits the identified patient ID and the person confirmation date as the person confirmation result to the videophone server 500 via the communication unit 110.

  The device ID analysis unit 140 analyzes the device ID based on the video obtained by photographing the blinking of the device ID light emitting unit 330. The process of analyzing the device ID includes a process of specifying the device ID and a process of determining the identity of the photographed measurement device 300 and the measurement device 300 that has transmitted the measurement result.

  Here, the process of specifying the device ID will be specifically described. First, the device ID analysis unit 140 detects the blinking position of the device ID light emitting unit 330 in the video obtained by photographing the constant blinking of the device ID light emitting unit 330 by the photographing unit 120. Here, the device ID analysis unit 140 determines that the pixel is blinking when the change in luminance is equal to or greater than a predetermined value in a plurality of consecutive images that form the video. The method is not limited to this, and any method may be used.

  Then, the device ID analysis unit 140 extracts a blinking pattern that blinks at the blinking position of the image captured by the image capturing unit 120. Furthermore, the device ID analysis unit 140 specifies the device ID stored in the device ID storage unit 150 in association with the same blinking pattern as the extracted blinking pattern as the device ID of the measurement device 300.

  Next, a process for determining the identity of the measured measuring device 300 and the measuring device 300 that has transmitted the measurement result will be described. First, the device ID analysis unit 140 specifies a time T2 at which the pattern blinking starts at the blinking position in the video photographed by the photographing unit 120.

  In addition, the device ID analysis unit 140 performs a videophone call on the flashing analysis result including the device ID specified based on the video and the blinking start date and time indicating the time T2 at which the blinking of the device ID starts, via the communication unit 110. Send to server 500.

  In addition, the device ID analysis unit 140 determines whether the device ID specified based on the video in this way matches the device ID received together with the measurement result from the measurement device 300 by the communication unit 110.

  In addition, the device ID analysis unit 140, based on the time T1 at which the measurement result is transmitted and the time T2 at which the blinking starts in the video, the measurement device 300 that has transmitted the measurement result and the measurement device 300 that has been photographed by the photographing unit 120. That is, the device ID analysis unit 140 determines whether or not the measurement result received by the communication unit 110 is measured by the measurement device 300 captured by the imaging unit 120. I do. Device ID analysis unit 140 then transmits the identity determination result to videophone server 500 via communication unit 110.

  Specifically, when the communication unit 110 receives time information representing the time T1 from the measuring device 300, the device ID analysis unit 140 calculates a difference | T1-T2 | between the time T2 and the time T1. When another measuring device impersonates the measuring device 300, the camera captures the blinking of the other measuring device, and the information processing apparatus detects the blinking pattern of the other measuring device 300 based on the blinking. Furthermore, the device ID analysis unit 140 transmits a blinking pattern to the measurement device 300 via the communication unit 110. Therefore, these processes require time, and the time from time T1 to time T2 is longer than when the measuring device 300 that transmitted the measurement result starts blinking.

  Therefore, the device ID analysis unit 140 matches the device ID specified based on the video and the device ID received together with the measurement result, and the difference | T1-T2 | is smaller than a predetermined threshold value Tth set in advance. The measurement result received by the communication unit 110 is determined to be measured by the measuring device 300 photographed by the photographing unit 120, and the identity determination result “OK” indicating that there is no possibility of impersonation is transmitted to the videophone server 500. . In addition, the device ID analysis unit 140 determines that the device ID specified based on the video does not match the device ID received together with the measurement result from the measurement device 300 by the communication unit 110, or the difference | T1-T2 | When it is equal to or greater than the threshold value Tth, it is determined that the measurement result received by the communication unit 110 is not measured by the measurement device 300 photographed by the photographing unit 120, and the identity determination result “NG” indicating that there is a possibility of impersonation. Is transmitted to the videophone server 500.

  Note that the predetermined threshold value Tth may be determined based on a result obtained by measuring, by experiment or the like, a time when the blinking start is delayed due to impersonation. Further, the predetermined threshold value Tth is a correct measurement under the presence of the staff who manages the identity determination system 1 when the first videophone terminal 100 and the measuring device 300 are installed in the user's home as a patient. The device 300 may be operated on a trial basis to calculate the difference | T1-T2 |, and may be determined based on the calculated difference | T1-T2 |.

  The device ID storage unit 150 stores a device ID for uniquely identifying the measuring device 300 and a light emission pattern corresponding to the device ID in association with each other. In addition, when the communication unit 310 receives a newly generated device ID and a corresponding blinking pattern from the videophone server 500, the device ID storage unit 350 newly stores the received device ID and the corresponding blinking pattern.

  The video display unit 160 captures the doctor by the imaging unit 220 of the second videophone terminal 200 and displays the video received by the communication unit 110. At the same time, the image display unit 160 displays an image obtained by photographing the subject by the photographing unit 120.

  The time synchronization unit 170 synchronizes the time of the first videophone terminal 100 with the time of the measuring device 300.

<Functional configuration of second videophone terminal>
As shown in FIG. 1, the second videophone terminal 200 includes a communication unit 210, a photographing unit 220, a person confirmation unit 230, a video display unit 240, and a data display unit 250.

  Communication unit 210 transmits / receives information to / from videophone server 500 via a communication network.

  The imaging unit 220 images a doctor included in the imaging range.

  The identity verification unit 230 identifies the doctor by authenticating the doctor imaged by the imaging unit 220, that is, identifies the doctor ID. The authentication method used by the identity verification unit 230 may be a basic authentication method or a biometric authentication method, and can be any authentication method.

  The video display unit 240 displays the video captured by the imaging unit 120 of the first videophone terminal 100 received by the communication unit 210. At the same time, the video display unit 160 displays a video image of the doctor taken by the imaging unit 220.

  The data display unit 250 is stored in the storage unit 530 of the videophone server 500, and the measurement result received via the communication unit 210 and the patient medical information of the subject stored in the storage unit (not shown) ( Patient information, electronic medical records, etc.).

<Functional configuration of videophone server>
The video phone server 500 includes a communication unit 510, a call control unit 520, and a storage unit 530. In addition, the video phone server 500 may include a data processing unit 540.

  Communication unit 510 receives the result of identity verification from each of first videophone terminal 100 and second videophone terminal 200 and starts a videophone call. In addition, communication unit 510 receives the measurement result, the blinking analysis result, and the identity determination result from first videophone terminal 100 via the communication network.

  The call control unit 520 controls a call between the first videophone terminal 100 and the second videophone terminal 200, thereby establishing a call session and starting a call, or disconnecting the call session. End the call. Specifically, the first videophone terminal 100 that is transmitted from the first videophone terminal 100 and includes an identifier (for example, a telephone number) for specifying the second videophone terminal 200 that is the other party of the call is provided. Based on the request from, a call session with the second videophone terminal 200 is established. Similarly, based on the request transmitted from the second videophone terminal 200 and transmitted from the second videophone terminal 200 with the identifier for identifying the first videophone terminal 100 that is the other party, A call session with one videophone terminal 100 may be established.

  In addition, when a videophone call is started, the call control unit 520 transmits a state notification indicating a call state to each of the first videophone terminal 100 and the second videophone terminal 200. The call state is, for example, “busy” indicating that a videophone call is being made, “hold” indicating that a videophone call is on hold, and “disconnected” indicating that no videophone call is being made And the like.

  The storage unit 530 stores the identity verification result, measurement result, blinking analysis result, and identity determination result received by the communication unit 510. Specifically, as illustrated in FIG. 2, the storage unit 530 includes “patient ID”, “identification date and time” and “doctor ID” which are identification results, and “measurement type” and “measurement results”. “Measured value” and “transmission date / time”, “flashing start date / time” and “apparatus ID” as flashing analysis results, and identity determination result are stored in association with each other. Depending on the use of the identity determination system 1, the measurement result may not be stored when the determination result is “NG”.

  Each time biometric information is measured, the data processing unit 540 randomly generates a device ID and a blinking pattern corresponding to the device ID using a predetermined algorithm. Then, the data processing unit 540 transmits the generated device ID and the blinking pattern corresponding to the device ID to the first videophone terminal 100 via the communication unit 510. In addition, the data processing unit 540 transmits the device ID and the blinking pattern corresponding to the device ID to the measuring device 300 via the first videophone terminal 100. Note that the data processing unit 540 changes the blinking pattern for each measurement. However, the present invention is not limited to this, and the blinking pattern may be changed at an arbitrary frequency and an arbitrary timing.

<Operation of identity determination system>
Subsequently, an identity determination method executed by the identity determination system 1 according to the present embodiment will be described with reference to the drawings.

  As shown in FIG. 3, first, the second videophone terminal 200 confirms the identity of a doctor who uses the second videophone terminal 200 (step S11). Specifically, when the doctor stays within the imaging range of the imaging unit 220 and activates the second videophone terminal 200, the identity verification unit 230 identifies the doctor ID of the doctor using an arbitrary authentication method.

  When the doctor ID is specified in step S11, the communication unit 210 transmits the doctor ID to the videophone server 500 (step S12).

  When the doctor ID is transmitted in step S12, the storage unit 530 of the videophone server 500 stores the doctor ID received by the communication unit 510 as the identity confirmation result (step S13).

  In addition, when the doctor ID is specified in step S11, the imaging unit 220 starts imaging of the doctor (step S14).

  On the other hand, the first videophone terminal 100 confirms the identity of the subject who uses the first videophone terminal 100 (step S15). Specifically, when the subject stays in the photographing range of the photographing unit 120 and activates the first videophone terminal 100, the identity verification unit 130 uses the arbitrary authentication method to determine the patient ID of the subject. Identify. At this time, the person confirmation unit 130 also identifies the person confirmation date and time when the person confirmation process was performed.

  When the patient ID and the person confirmation date / time are specified in step S15, the communication unit 110 transmits the patient ID and the person confirmation date / time to the videophone server 500 (step S16).

  When the patient ID and the person confirmation date are transmitted in step S16, the storage unit 530 of the videophone server 500 stores the patient ID and the person confirmation date received by the communication unit 510 as the person confirmation result (step S17).

  When the patient ID is specified in step S17, the imaging unit 220 starts imaging of the imaging subject 220 who is a patient and the device ID light emitting unit 330 (step S18).

  When the storage unit 530 stores the doctor ID in step S13 and the storage unit 530 stores the patient ID and the person confirmation date and time in step S17, the call control unit 520 includes the first videophone terminal 100 and the second videophone terminal. A communication session with 200 is established and a videophone call is started (step S19).

  When the videophone is started in step S19, the call control unit 520 transmits a status notification indicating the call status to the first videophone terminal 100 via the communication unit 510 (step S20), and the second videophone. It transmits to the terminal 200 (step S21).

  When the state notification is transmitted in step S20, the biological information measuring unit 320 of the measuring device 300 starts measuring biological information (step S22).

  When measurement of the biological information of the measurement subject is started in step S22, the communication unit 310 transmits a measurement start notification indicating the start of measurement to the first videophone terminal 100 (step S23).

  Further, when the measurement of the biological information is started in step S22, the device ID light emitting unit 330 starts constant blinking (step S24). At this time, the measurement of the biological information started in step S22 is continuously performed.

  When the blinking started in step S24 is repeated a predetermined number of times, the device ID light emitting unit 330 ends the constant blinking (step S25).

  When the constant blinking is completed in step S25, the photographing unit 120 of the first videophone terminal 100 detects the blinking position in the video obtained by photographing the constant blinking by the device ID light emitting unit 330 from step S24 to step S25 (step S26). ).

  On the other hand, after the measurement of the biological information is started in step S22, the measurement ends (step S27), and the biological information measurement unit 320 outputs the measurement result (step S28).

  When the measurement result is output in step S28, communication unit 310 transmits the measurement result and time information to first videophone terminal 100 (step S29).

  Moreover, if a measurement result and time information are transmitted by step S27, the apparatus ID light emission part 330 will start the blink by the blink pattern corresponding to apparatus ID (step S30).

  Since step S18, the photographing unit 120 of the first videophone terminal 100 is photographing the device ID light emitting unit 330. Therefore, when pattern blinking is started in step S30, the photographing unit 120 pattern blinking is photographed. Then, the device ID analysis unit 140 analyzes the measurement device 300 represented in the video based on the blinking pattern related to the pattern blinking photographed by the photographing unit 120 (step S31).

  Here, the analysis of the measuring device 300 performed in step S31 will be described in detail with reference to FIG.

  First, the device ID analysis unit 140 inputs a blinking image of the device ID light emitting unit 330 that has been captured after the start of blinking in step S30 (step S311).

  When the video is input in step S311, the device ID analysis unit 140 detects the flashing pattern at the flashing position detected in step S26 in the input video (step S312).

  When the blink pattern is detected in step S312, the device ID analysis unit 140 uses the device ID stored in the device ID storage unit 150 in association with the blink pattern as the device ID of the measurement device 300 shown in the video. The blinking analysis result is output (step S313).

  When the device ID is specified in step S313, the device ID analysis unit 140 calculates a difference between the time T1 represented by the time information received in step S29 and the time T2 at which blinking starts in the video imaged by the imaging unit 120. It is determined whether or not | T1-T2 | is smaller than a predetermined threshold Tth (step S314).

  If it is determined in step S314 that the difference | T1-T2 | is smaller than the predetermined threshold Tth, the device ID analysis unit 140 uses the measurement device 300 obtained by the photographing unit 120 as the measurement result received by the communication unit 110. The identity determination result “OK” is output (step S315).

  When it is determined in step S314 that the difference | T1-T2 | is equal to or greater than the predetermined threshold Tth, the device ID analysis unit 140 uses the measurement device received by the communication unit 110 as a measurement device photographed by the photographing unit 120. It is determined that it is not measured by 300, and the identity determination “NG” is output (step S316).

  When the blinking analysis result and the identity determination result are output by the analysis by the device ID analysis unit 140 in step S31 in this manner, the communication unit 110 performs the blinking analysis result, the identity determination result, and the step. The measurement result transmitted in S29 is transmitted to the videophone server 500 (step S32).

  When the result including the measurement result, the blinking analysis result, and the identity determination result is transmitted in step S32, the storage unit 530 of the videophone server 500 stores these results in association with the identity verification result (step S33). .

  As described above, in the identity determination system 1 according to the first embodiment, based on the time T1 at which the biological information is transmitted by the communication unit 310 and the time T2 at which blinking starts in the video imaged by the imaging unit 120. Thus, it is determined whether or not the measurement result received by the communication unit 110 is measured by the measuring device 300 photographed by the photographing unit 120. Thereby, even when the measuring device 300 photographed by the photographing unit 120 blinks in the same pattern as other measuring devices, it is possible to prevent spoofing.

  In the identity determination system 1 of the first embodiment, the videophone server 500 generates a device ID and a blinking pattern corresponding to the device ID at a predetermined frequency or a predetermined timing, and the device ID light emitting unit 330 is , Blinks with the latest blinking pattern generated by the videophone server 500. As a result, the blinking pattern related to the blinking of the measuring device 300 is changed. If the blinking pattern in the measuring device 300 is not changed, another camera that is not the videophone terminal 100 can take an image of the blinking measuring device 300 and analyze and store the blinking pattern. Therefore, after the next medical examination using the videophone system, even if the measuring device 300 is not photographed, other measuring devices illegally blink with a blinking pattern corresponding to the device ID of the measuring device 300 and impersonate. Will be possible. For this reason, the time from when the fake measuring device transmits the measurement result until it starts blinking is shortened. Therefore, it becomes difficult to determine identity based on the difference | T1−T2 | as described above. Such a situation can be avoided by the measuring device 300 changing the device ID and the blinking pattern as described above, and impersonation can be reliably prevented.

  Further, in the identity determination system 1 of the first embodiment, the device ID analysis unit 140 detects the blinking position based on the constant blinking photographed by the photographing unit 120, and based on the change in the video at the blinking position. Detect blinking pattern. For this reason, it is not necessary for the device ID analysis unit 140 to detect the blink pattern based on a change in the entire image, and it is sufficient to detect the blink pattern based on a partial change in the image, thereby reducing the processing load. it can.

<Second Embodiment>
Hereinafter, a second embodiment of the present invention will be described with reference to the drawings.

  As shown in FIG. 5, the identity determination system 2 according to the second embodiment is the same as the identity determination system 1 according to the first embodiment, but does not include the second videophone terminal 200. Is different. Further, the first videophone terminal (confirmation device) 100 may not have a function for making a videophone. The communication device 110, the photographing unit 120, the person confirmation unit 130, and the device are simply used as the confirmation device 100. The ID analysis unit 140, the device ID storage unit 150, and the time synchronization unit 170 may be provided. Note that the same reference numerals are assigned to the same configuration blocks as those of the identity determination system 1 in the second embodiment, and the description thereof will be omitted as appropriate.

  The identity determination system 2 in the second embodiment includes a management server 500. The management server 500 includes a communication unit 510 and a storage unit 530 similarly to the video phone server 500 of the first embodiment. However, the communication unit 510 differs from the communication unit 510 of the first embodiment in that information is not transmitted to the second videophone terminal 200. Further, the storage unit 530 is different from the storage unit 530 of the first embodiment in that it does not store the identity confirmation result of the doctor who is the user of the second videophone terminal 200.

  In this way, in the second embodiment, even when other measuring devices photographed by the photographing unit 120 blink in the same pattern as the measuring device 300, spoofing can be prevented and communication can be prevented. The same effect as that of the first embodiment in which the determination of whether or not the measurement result received by the unit 110 is measured by the measuring device 300 photographed by the photographing unit 120 can be performed accurately.

  In the above embodiment, the first videophone terminal 100 includes the device ID analysis unit 140 and the device ID storage unit 150 and specifies the device ID of the measurement device 300, but this is not restrictive. For example, the video phone server 500 or the management server 500 may store the device ID and the blinking pattern in association with each other, receive the video captured by the imaging unit 120, and specify the device ID of the measurement device 300. As a result, the processing load on the first videophone terminal 100 can be reduced.

  In the above embodiment, the data processing unit 540 randomly generates the device ID and the blinking pattern corresponding to the device ID using a predetermined algorithm. For example, the first videophone terminal 100 may An ID and a blinking pattern corresponding to the device ID may be generated. Thereby, the processing load of the videophone server 500 or the management server 500 can be reduced.

  In the above embodiment, the measuring device 300 includes one device ID light emitting unit 320, but may include a plurality of device ID light emitting units 320. In this case, the device ID corresponds to a combination of blinking patterns of each of the plurality of device ID light emitting units 320. In addition, the device ID storage unit 150 stores a device ID in association with a combination of a plurality of blink patterns, and the device ID analysis unit 140 identifies a plurality of blink patterns and stores the device ID in association with the combination. Is identified as the device ID of the measuring device 300 being photographed by the photographing unit 120. As a result, more time is required to detect the blinking pattern for impersonation, so the difference between time T1 and time T2 becomes larger. Therefore, the device ID analysis unit 140 can more reliably determine whether or not the measurement result received by the communication unit 110 has been measured by the measurement device 300 imaged by the imaging unit 120.

  Although the above-described embodiments and examples have been described as representative examples, it will be apparent to those skilled in the art that many changes and substitutions can be made within the spirit and scope of the invention. Therefore, the present invention should not be construed as being limited by the above-described embodiments and examples, and various modifications and changes can be made without departing from the scope of the claims. For example, a plurality of constituent blocks described in the embodiments and examples can be combined into one, or one constituent block can be divided.

1, 2 Identity determination system 100 First videophone terminal (confirmation device)
110 Communication Unit 120 Image Capture Unit 130 Identity Confirmation Unit 140 Device ID Analysis Unit 150 Device ID Storage Unit 160 Video Display Unit 170 Time Synchronization Unit 200 Second Videophone Terminal 210 Communication Unit 220 Image Capture Unit 230 Identity Confirmation Unit 240 Video Display Unit 250 Data display unit 300 Measuring device 310 Communication unit 320 Biological information measurement unit 330 Device ID light emitting unit 340 Time synchronization unit 350 Device ID storage unit 500 Videophone server (management server)
510 Communication Unit 520 Call Control Unit 530 Storage Unit 540 Data Processing Unit

Claims (5)

An identity determination system including a measuring device and a confirmation device that transmit and receive information to and from each other via a communication network,
The measuring instrument is
A biological information measuring unit that measures biological information of the measurement subject and outputs a measurement result;
A communication unit that transmits, together with the measurement result, a device ID that uniquely identifies the measurement device, and time information indicating a time at which the measurement result is transmitted to the confirmation device;
A device ID light-emitting unit that flashes in a flashing pattern corresponding to the device ID after transmission of the measurement result,
The confirmation device is
A communication unit that receives the measurement result, the device ID, and the time information transmitted by the communication unit of the measurement device;
A measurement device, and a photographing unit that photographs pattern blinking in a predetermined blinking pattern in the measurement device;
The device ID of the measuring device photographed by the photographing unit is identified based on the blinking pattern, and the identified device ID matches the device ID received by the communication unit of the confirmation device, and the time information is When the difference between the time to represent and the time at which the pattern blinking starts in the video captured by the imaging unit is smaller than a predetermined threshold, it is determined that the measurement result is measured by the measurement device captured by the imaging unit And a device ID analysis unit. A management server that transmits and receives information to and from the confirmation device via a communication network;
The management server includes a data processing unit that generates the device ID and a blinking pattern corresponding to the device ID at a predetermined frequency or a predetermined timing,
The confirmation device further includes a device ID storage unit that associates and stores the device ID generated by the data processing unit and a blinking pattern corresponding to the device ID,
The device ID light emitting unit blinks with the latest blinking pattern generated by the data processing unit,
The device ID analysis unit specifies, as a device ID of the measurement device, a device ID stored in the device ID storage unit in association with the same blink pattern as the blink pattern photographed by the photographing unit. The identity determination system according to claim 1. The device ID light emitting unit performs constant blinking that blinks a certain number of times at regular intervals,
The device ID analysis unit detects a blinking position in an image based on the constant blinking imaged by the imaging unit,
The communication unit transmits the time information after completion of the constant blinking,
The identity determination system according to claim 1, wherein the device ID analysis unit detects a blinking pattern based on a change in video at the blinking position. A management server that transmits and receives information to and from the confirmation device via a communication network;
The management server includes a storage unit that stores the identity determination result of the identity determination performed by the device ID analysis unit and the measurement result measured by the measurement device in association with each other. The identity determination system according to any one of claims 1 to 3. The confirmation device includes an identity confirmation unit that outputs an identity confirmation result that is a result of authenticating a person to be measured of the measurement device,
The identity determination system according to claim 4, wherein the storage unit of the management server further stores the identity confirmation result in association with the identity determination result and the measurement result.

Images