JP2020021395A - Management server, telework management support system, telework management support method and program - Google Patents

Abstract

To prevent an authentication face image of a PC for telework from increasing of a data capacity or from increasing of a load of face authentication processing by selecting the authentication face image according to a working condition at telework working time depending on needs.SOLUTION: A management server that acquires a face image imaged by an imaging apparatus, that performs authentication processing by comparing a first face image acquired for the authentication processing with a third face image selected among a pre-registered plurality of second face images, and that can be connected to an information processing terminal which detects a labor event or a security incident on the basis of the performed authentication processing, groups the plurality of second face images to manage, and selects at least one of a plurality of groups being managed. And the management server transmits the face image in the selected group as the third face image to an information processing apparatus, as the face image performing the authentication processing.SELECTED DRAWING: Figure 3

Description

  The present invention relates to management of telework users in telework (remote work).

  In recent years, the number of companies performing telework (remote work) has increased due to the realization of work style reforms, business continuity during disasters, and attention to power saving measures. Bases include the spread of broadband and the development of information security technology.

  When performing telework, it may be necessary to monitor a remote location in order to manage the work status of a telework user (remote worker) and prevent leakage of confidential information by operating the information processing device of the impersonating user. It is extremely difficult for an administrator to constantly monitor telework users (remote workers) and remote locations. For this reason, some telework systems have introduced a function of periodically transmitting and monitoring information on telework users and remote locations to an administrator.

  In Patent Literature 1, a face area in a video captured by a camera device is detected, and when the number of the relevant face areas is 0 or 2 or more, an authentication error is determined. A mechanism for performing user authentication when the number of relevant face areas is one is described.

JP 2009-213381 A

  Telework is a flexible working style that makes effective use of place and time. The appearance of the telework user's (teleworker) face depends on the work location, the lighting environment of the day, the camera installation location, the face orientation with respect to the camera, etc. (hereinafter collectively referred to as telework work conditions). Significantly impact results.

  When using the mechanism provided in Patent Document 1, it is possible to detect the absence of a person or peeping by a third party, but when the number of relevant face areas is one, the difference in how the user is reflected depending on the teleworking work conditions. Therefore, there is a possibility that the personal authentication is erroneously recognized. If the accuracy of the face recognition technology that can be used is low, the information processing terminal cannot be frequently used, even though the user is the person himself.

  Further, in order to prevent the erroneous recognition and increase the accuracy of personal authentication under a plurality of working conditions of telework, it is conceivable to register a large number of face images for authentication and perform personal authentication. However, the load on the information processing terminal (telework PC) used by the teleworker increases, such as a processing load caused by performing authentication processing from a large number of authentication face images and an increase in the data capacity of the authentication face images. .

  Therefore, the present invention allows a face image for authentication to be selected as required according to the working conditions at the time of teleworking, and increases the data capacity of the face image for authentication of the teleworking PC and the reaction due to an increase in the load of face authentication processing. The purpose is to prevent delays.

  The management server of the present invention includes: an acquiring unit that acquires a face image photographed by an imaging device; a first face image acquired for authentication processing by the acquiring unit; and a plurality of second faces registered in advance. By comparing the third face image selected from the images with the first face image, a first authentication unit for executing the authentication process and a labor event or a security incident based on the authentication process by the first authentication unit are determined. A management server connectable to an information processing terminal having an event detection unit for detecting, wherein the group management unit groups and manages the plurality of second face images; and a plurality of groups managed by the group management unit. Selecting means for selecting at least one of the groups from the group consisting of: and a face image to be subjected to authentication processing by the first authentication means. And transmitting means for transmitting to the information processing apparatus a face image in the group as the third face image, characterized by having a.

  ADVANTAGE OF THE INVENTION According to this invention, the face image for authentication according to the working conditions at the time of teleworking is made to be selected as needed, and the data capacity of the authentication face image of the teleworking PC and the load of face authentication processing are increased. Can be prevented.

FIG. 1 is a diagram illustrating an example of a system configuration of a telework management support system according to an embodiment of the present invention. FIG. 3 is a block diagram illustrating an example of a hardware configuration of an information processing apparatus applicable to the management server 101, the teleworker PC 111, and the administrator PC 121 according to the embodiment of this invention. FIG. 1 is a diagram illustrating an example of a functional configuration of a telework management support system according to an embodiment of the present invention. It is a flowchart in the embodiment of this invention which shows an example of the telework work whole process of selection of the face image for authentication according to the work conditions of a telework management support system, and trail data transmission. It is a flowchart in the embodiment of this invention which shows an example of the selection process of the face image for authentication according to the working conditions of the telework management support system. 9 is a flowchart illustrating an example of registration processing of trail data and a usable authentication face image of the telework management support system according to the embodiment of the present invention. It is a flowchart which shows an example of the update process of the face image for authentication of a favorite work condition in the telework management support system of embodiment of this invention. FIG. 9 is a diagram illustrating an example of a screen on which a user specifies working conditions in a teleworking PC according to the embodiment of the present invention. It is a figure in the telework management support system of an embodiment of the present invention which shows an example of a screen which starts telework after the update of the face image for authentication according to work conditions is completed. It is a figure in the telework management support system of embodiment of this invention which shows an example of the screen of the image image | photographed during telework. It is a figure in the telework management support system of embodiment of this invention which shows an example of the screen of the image image | photographed during telework. It is a figure in the telework management support system of embodiment of this invention which shows an example of the screen of the image image | photographed during telework. FIG. 4 is a diagram illustrating an example of a data table in which user information is registered in the telework management support system according to the embodiment of the present invention. It is a figure in the telework management support system of an embodiment of the present invention which shows an example of a data table in which favorite work condition information was registered. FIG. 7 is a diagram illustrating an example of a data table in which face image list information for authentication of favorite work conditions is registered in the telework management support system according to the embodiment of the present invention. It is a figure in the telework management support system of an embodiment of the present invention which shows an example of a data table in which trail data information was registered. FIG. 4 is a diagram illustrating an example of a data table in which available authentication face image information is registered in the telework management support system according to the embodiment of the present invention. It is a figure in the telework management support system of an embodiment of the present invention which shows an example of data of face image information for attestation filtered by some work conditions (work place and lighting environment). FIG. 19 is a diagram showing an example of authentication face image information data grouped according to the face direction with respect to the data example in FIG. 18 in the telework management support system according to the embodiment of the present invention. FIG. 20 is a diagram illustrating an example of data after the reliability of each authentication face image information for each group is calculated for the data example of FIG. 19 in the telework management support system according to the embodiment of this invention. 21 is a diagram illustrating an example of data after the data example in FIG. 20 is sorted in descending order according to the reliability of each authentication face image information for each group in the telework management support system according to the embodiment of this invention. FIG. It is a screen image figure for explaining registration processing of a work place and an authentication face image in a telework management support system of an embodiment of the present invention. It is a flowchart in the telework management support system of embodiment of this invention which shows an example of a process which changes a telework working condition during use of a telework system.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

  FIG. 1 is a diagram showing an example of a system configuration of a telework management support system according to the present invention.

  The telework management support system 100 is configured such that one or a plurality of management servers 101, one or a plurality of PCs for a teleworker 111, and one or a plurality of PCs for a manager 121 are connected via the Internet 130.

  The management server 101 is a server that centrally manages information on the seating / leaving status of teleworkers, information on working hours, and the like as telework information, and is constructed on the service environment network 104.

  When the teleworker's PC 111 and the administrator's PC 121 are connected to the management server 101 by an authentication process using a user ID and a password, when the management server 101 receives the telework information from the teleworker's PC 111, the management server 101 Store in database. When there is a request for obtaining telework information from the administrator's PC 121, necessary telework information is extracted from the database of the management server 101.

  The teleworker's PC 111 is a terminal that receives an application (declaration) from the teleworker as to whether the teleworker is working or not working, and detects the seating / leaving state of the teleworker from the video captured by the connected imaging device. Information existing on the home / in-house network 110 and indicating whether the user is working or not working and information indicating the seating / leaving status are created by a dedicated application, and are managed by the management server 101 via the router 112, the Internet 130, and the router 103. Sent to

  The administrator PC 121 is a terminal for confirming telework information, exists on the in-house network 120, and uses a web management console (operating on a web browser) for confirming telework information. 130 and the management server 101 via the router 103.

  FIG. 2 is a block diagram illustrating an example of a hardware configuration of an information processing apparatus applicable to the management server 101, the teleworker PC 111, and the administrator PC 121 in the embodiment of the present invention. Since each device has the same configuration, the same reference numerals are used for the description.

  As shown in FIG. 2, the information processing apparatus includes a CPU (Central Processing Unit) 201, a ROM (Read Only Memory) 202, a RAM (Random Access Memory) 203, a storage device 204, an input controller 205, The audio input controller 206, the video controller 207, the memory controller 208, and the communication I / F controller 209 are connected.

  The CPU 201 generally controls each device and controller connected to the system bus 200.

  The ROM 202 or the storage device 204 includes a basic input / output system (BIOS) and an operating system (OS), which are control programs executed by the CPU 201, a computer-readable program for implementing the information processing method, and various necessary programs. Holds data (including data tables).

  The RAM 203 functions as a main memory, a work area, and the like for the CPU 201. The CPU 201 loads various programs and the like necessary for executing processing from the ROM 202 or the storage device 204 to the RAM 203, and realizes various operations by executing the loaded programs.

  The input controller 205 controls an input from the input device 210. Examples of the input device 210 include a keyboard, a touch panel, a pointing device such as a mouse, and the like.

  When the input device 210 is a touch panel, various instructions can be given by the user pressing (touching with a finger or the like) in accordance with an icon, cursor, or button displayed on the touch panel.

  Further, the touch panel may be a touch panel that can detect a position touched by a plurality of fingers, such as a multi-touch screen.

  When the microphone / speaker 211 operates as a microphone function, the voice input controller 206 can control the voice input from the microphone / speaker 211 and recognize the voice input from the microphone / speaker 211. When the microphone / speaker 211 operates as a speaker function, the audio input controller 206 can control the sound output to the microphone / speaker 211 and output the sound to the microphone / speaker 211.

  The video controller 207 controls display on an external output device such as the display 212. The display shall include a notebook computer display integrated with the main unit. The external output device is not limited to a display, but may be, for example, a projector. In addition, an input device 210 is provided for a device that can receive the above-described touch operation.

  Note that the video controller 207 can control a video memory (VRAM) for performing display control, can use a part of the RAM 203 as a video memory area, or can provide a dedicated video memory separately. It is possible.

  In the present invention, the first video memory area used for display when the user normally uses the information processing apparatus and the display content of the first video memory area when a predetermined screen is displayed are displayed. It has a second video memory area used for display. The number of video memory areas is not limited to two, and a plurality of video memory areas can be provided as long as the resources of the information processing apparatus permit.

  The memory controller 208 controls access to the external memory 213. As an external memory, it is connected via an adapter to an external storage device (hard disk), a flexible disk (FD), or a PCMCIA card slot for storing a boot program, various applications, font data, user files, editing files, and various data. For example, a compact flash (registered trademark) memory or the like can be used.

  The communication I / F controller 209 connects and communicates with external devices via the network 214, and executes communication control processing on the network. For example, communication using TCP / IP, a telephone line such as ISDN, and communication using a 3G line of a mobile phone are possible.

  Note that the storage device 204 is a medium for permanently storing information, and its form is not limited to a storage device such as a hard disk. For example, a medium such as SSD (Solid State Drive) may be used.

  Further, it can be used as a temporary memory area at the time of various processes performed by the communication terminal in the present embodiment.

  Note that the CPU 201 enables display on the display 212 by executing, for example, developing (rasterizing) an outline font in a display information area in the RAM 203. Further, the CPU 201 enables a user instruction with a mouse cursor or the like (not shown) on the display 212.

  Next, an example of a functional configuration of various devices according to the embodiment of the present invention will be described with reference to FIG.

  The teleworker PC 111 includes an acquisition unit 311 of an acquisition unit that acquires a face image, a first authentication unit 312 that performs face authentication, and an event detection unit 313 that detects an event based on the authentication result.

  The acquisition unit 311 acquires an image of a face image of the teleworker or an image of a situation around the telework from an imaging device provided or connected to the PC 111 for the teleworker.

  The first authentication unit 312 compares the face image selected from the pre-registered face images managed by the management server 101 with the face image acquired by the acquisition unit 311, and executes a teleworker authentication process. I do.

  The event detection unit 313 detects an event such as a labor event (separation or seating) or a security incident (spoofing or peeping) based on the result of the authentication processing by the first authentication unit 312.

  The management server 101 includes a group management unit 301 that groups and manages face images, a selection unit 302 that selects one from the grouped groups, and a transmission unit 303 that transmits the face images of the selected group to the PC 111 for teleworker. A face orientation ratio acquisition unit 304 that acquires the ratio of the orientation of the face image, a second authentication unit 305 that performs face authentication processing in the management server 101, and a probability change unit that changes the accuracy of the face image selected based on the event detection result. 306 is provided.

  The group management unit 301 groups the face images for authentication registered in advance based on the work place where the telework is performed, the lighting conditions, the ratio of the face direction, the accuracy of the face image (the reliability of detection), and the like. .

  The selection unit 302 receives at least one selection from a plurality of groups grouped by the group management unit 301.

  The transmitting unit 303 transmits the group of face images of the group selected by the selecting unit 302 to the PC 111 for teleworker.

  The face orientation ratio acquisition unit 304 acquires the ratio of the face orientation of the face image acquired from the acquisition unit 311 of the teleworker PC 111. Note that the face orientation ratio may be obtained from a past teleworker face orientation ratio, or may be input by a user (804) described later with reference to FIG.

  If the first authentication unit 312 of the teleworker PC 111 fails to authenticate, the second authentication unit 305 acquires the face image acquired by the acquisition unit 311 of the teleworker PC 111, and stores the face image registered in advance. The authentication process is executed by comparing with the face image.

  The certainty changing unit 306 receives the face image of the group selected by the selection unit 302 based on the result of the event detection detected by the authentication processing by the second authentication unit 305 or the result from the authentication result transmission unit 323 of the administrator PC 121. Change the accuracy (reliability) of. The changed likelihood is considered when the group management unit 301 regroups the face images for authentication.

  The administrator PC 121 includes a face image receiving unit 321 for receiving a face image, a face authentication input receiving unit 322, and an authentication result transmitting unit 323.

  The face image receiving unit 321 receives the face image acquired by the acquiring unit 311 of the teleworker PC 111 by the administrator PC 121.

  The face authentication input receiving unit 322 presents the face image received by the face image receiving unit 321 to the administrator who operates the administrator PC, and receives an input of authentication confirmation as to whether or not the teleworker is from the administrator.

  The authentication result transmitting unit 323 transmits the authentication result received by the face authentication input receiving unit 322 to the management server 101.

  With these configurations, when authenticating whether the user of the teleworker PC 111 is the teleworker himself or herself, by selecting an authentication face image according to the working conditions at the time of teleworking, the load of the face authentication processing of the teleworking PC is reduced. The delay of the reaction due to the increase can be prevented.

  In the present embodiment, the functions of the group management unit 301 to the accuracy changing unit 306 are provided in the management server 101. However, for example, these configurations may be configured to be provided in the administrator PC 121. .

  Next, referring to the flowchart of FIG. 4, the entire teleworking work of selecting a face image for authentication and transmitting trail data in the telework management support system according to the embodiment of the present invention will be described.

  The processes in steps S401 to S403, S411 to S416, and S419 shown in FIG. 4 are processes in which the CPU 201 of the teleworker PC 111 reads and executes a predetermined control program.

  The processing in steps S404 to S410, S417 to S418, and S420 is processing in which the CPU 201 of the management server 101 reads and executes a predetermined control program.

  The flowchart of FIG. 4 is a flow of a process started when a teleworker operating at a remote place connects from the teleworker PC 111 to an in-house network or the like. For example, the process is executed after the teleworker starts the telework application on the teleworker PC 111. In the following flowchart, the application to be started is described as a client / server application for telework, but may be a web application for telework. Alternatively, the teleworker PC 111 may be started as a resident application, and may perform subsequent processing in the background.

  First, in step S401, the teleworker PC 111 accepts the login of the teleworker after the activation of the telework application. The teleworker PC 111 accepts login using the teleworker's user ID and password. The accepted user ID and password are transmitted to the management server 101 by communication (not shown in FIG. 4), and are compared with the teleworker information (FIG. 13) stored in the management server. If they match, login is permitted. The user ID and the password may be set by the teleworker when the resident application is started for the first time, and the set values may be used thereafter.

  Here, an example of the user information management table in the telework management support system of the present invention will be described with reference to FIG.

  A user information management table 1300 in FIG. 13 is a table for managing user information of a user who uses the telework management support system according to the present invention, and includes a user ID 1301, a name 1302, a password 1303, an administrator flag 1304, an administrator ID 1305, The date and time 1306, the last login date and time 1307, and the like are included.

  The user ID 1301 is an item for identifying a user who uses the telework management support system according to the present invention, and an alphanumeric string is registered.

  The name 1302 is an item for recording the name of the user, and the name of the user is registered.

  The password 1303 is an item for user authentication, and the password of the user is registered.

  The administrator flag 1304 is an item indicating whether the user is an administrator. If the user is an administrator, “T (True)” is registered. If the user is not an administrator, “F (False)” is registered.

  The administrator ID 1305 is an item for indicating the administrator of the user, and the user ID of the administrator of the user is registered. This item can be used only when the administrator flag 1304 is “F (False)”.

  The registration date and time 1306 is an item for recording the date and time when the user was registered, and the time when the user was registered is registered.

  The last login date and time 1307 is an item for recording the date and time of the last login, and the time of the last login of the user is registered.

  As described above, when the teleworker logs in, the management server performs user authentication by checking the user ID 1301 and the password 1303 in the user information management table 1300. After the user is authenticated, the last login date and time 1307 item is updated. Returning to the description of FIG.

  In the next step S402, the teleworker PC 111 receives input of teleworking work conditions from the teleworker. The teleworker can specify conditions on the teleworking work condition specification screen illustrated in FIG. With reference to FIG. 8, an example of a telework work condition designation screen on the teleworker PC 111 of the telework management support system according to the present invention will be described.

  FIG. 8 is a schematic diagram illustrating an example of a screen image for receiving a designation of a teleworking work condition from a user in the teleworker PC 111 in the embodiment of the present invention.

  The teleworking work condition designation screen includes a favorite condition designation 801, a work place designation 802, a lighting environment designation 803, a face orientation pattern designation 804, an OK button 805, and a cancel button 806.

  The favorite condition designation 801 is a part for designating whether to use the favorite work condition (FIG. 14) registered in the management server 101 or the PC 111 for the teleworker. The favorite work condition information management table in FIG. 14 will be described.

  FIG. 14 is an example of a favorite work condition information management table included in the management server or the teleworker PC 111 in the embodiment of the present invention. The favorite work condition ID 1401, the user ID 1402, the work place 1403, the lighting environment 1404, the left-facing face (of the Probability) 1405, front face (probability) 1406, and right-facing face (probability) 1407.

  The favorite work condition ID 1401 is a unique item for identifying favorite work condition information in the telework management support system of the present invention.

  In the user ID 1402, the user ID (1301 in FIG. 13) of the teleworker who has set the favorite work condition ID 1401 is registered.

  In the work place 1403, work place information input in 2201 in FIG. 22 described later is registered. The teleworker selects favorite work conditions using the work place information as a key.

  The lighting environment 1404 stores the lighting environment at the work place, and holds values such as “with sunshine” and “without sunshine”.

  1405 to 1407, the probabilities of the face direction at each work place are registered.

  Referring to FIG. 10 to FIG. 12, a “face direction pattern” which is one of the telework work conditions during telework of the telework management support system according to the present invention and a face image captured by a camera in the telework management support system are shown. An example of the display screen will be described.

  FIG. 10 shows a case of a left-facing face. It comprises a display 1010 showing the positional relationship between the teleworker and the camera, and a display screen 1020 of a face image taken by the camera in the corresponding telework management support system.

  Reference numeral 1010 denotes a pattern in which the face direction of the teleworker 1011 is slightly leftward with respect to the camera 1014. The camera 1014 is installed on the monitor 1013, and such a situation occurs when the teleworker 1011 is looking at another monitor 1012.

  On a display screen 1020 showing a face image captured by the camera in a situation corresponding to 1010, a teleworker with a left-facing face is captured.

  FIG. 11 shows a case with a front-facing face. It comprises a position 1110 indicating the positional relationship between the teleworker and the camera, and a display screen 1120 of a face image taken by the camera in the corresponding telework management support system.

  Reference numeral 1110 denotes a pattern in which the direction of the face of the teleworker 1111 faces the front of the camera 1114. In this case, the teleworker 1111 is looking at the monitor 1113 on the front where the camera 1114 is installed.

  On a display screen 1120 showing a face image captured by the camera in a situation corresponding to 1110, a teleworker with a front-facing face is captured.

  FIG. 12 shows a case of a right-pointing face. A display screen 1220 shows a positional relationship 1210 between the teleworker and the camera, and a face image captured by the camera in the corresponding telework management support system.

  Reference numeral 1220 denotes a pattern in which the direction of the face of the teleworker 1211 is slightly rightward with respect to the camera 1214. The camera 1214 is installed on the monitor 1213, and such a situation may occur when the teleworker 1211 checks, for example, a document (not shown) placed rightward.

A display screen 1220 showing a face image captured by the camera in a situation corresponding to 1210 includes
A teleworker with a right-facing face is being shot. Returning to the description of the table in FIG.

  The face orientation probabilities 1405 to 1407 in FIGS. 10 to 12 may be input by a teleworker 804 in FIG. 8 described later, or the ratio of past face orientations at the same work place is measured, and the probability is applied. You may do it.

  As described above, the "favorite work conditions" (FIG. 14) registered in the management server 101 and the PC 111 for the teleworker can be used by the favorite work condition information management table 1400 as shown in FIG. Returning to the description of the screen image in FIG.

  As shown in FIG. 8, a favorite work condition can be selected from a drop-down list. When the teleworker designates the favorite condition designation 801, the details of the favorite work condition are automatically set in the work place designation 802, the lighting environment designation 803, and the face direction pattern designation 804. When the favorite work condition is not used, the teleworker individually specifies the following work place designation 802, lighting environment designation 803, and face direction pattern designation 804.

  The work place designation 802 is a place for designating a work place. As shown in FIG. 8, available work locations can be selected from a drop-down list. The screen image of the work place registration process will be described later with reference to FIG.

  The lighting environment designation 803 is a place for designating the lighting environment of the work place on the work day. As shown in FIG. 8, a check box of "sunshine" can be entered.

  The face direction pattern designation 804 is a place for designating a pattern of the face direction photographed by the web camera. As shown in FIG. 8, the composition ratio of the face direction can be selected from each of the drop-down lists of “left direction”, “front direction”, and “right direction”.

  An OK button 805 is a button for receiving designation completion of teleworking work conditions from the teleworker.

  A cancel button 806 is a button for accepting the designation cancellation of the teleworking work condition from the teleworker.

  As described above, the teleworker can use the screen shown in FIG. 8 to specify the teleworking work conditions. Next, a screen image of a process of first registering a work place will be described with reference to FIG.

  FIG. 22 is a screen image diagram for explaining a registration process of a work place and an authentication face image in the embodiment of the present invention. Note that the registration process performed in the screen image of FIG. 22 is a process performed before the teleworker starts telework, and FIG. 22 illustrates a process in which the telework work condition is first registered in a work place where “favorite work condition” is not set. It is a screen image displayed when performing.

  At 2201 in FIG. 22, an input field for inputting a work place is displayed. In the case of 2201, since the work place is home, the teleworker inputs “home”. In addition, for example, in the case of a satellite office, "Office A" can be input. If the PC 111 for the teleworker has a position information detecting function (for example, the position information is detected from the GPS function, the position information of the mobile phone base station, the position information of the Wi-Fi base station, etc.), the default detected position is displayed in the 2201 column. An input value associated with the may be input.

  Reference numeral 2202 denotes a place for designating a certification environment at a work place. As shown at 2202, for example, a "sunlit" checkbox can be entered.

  In 2203, a face image to be photographed first to register an authentication face image is displayed. As the authentication face image, an image 2203 which is captured at the timing when the shooting button 2204 is pressed may be registered. For example, the face may be freely moved for 5 seconds after the shooting button is pressed, and the face may be registered during the movement. An image may be taken periodically, and only a face image usable for authentication may be picked up and registered.

  With the above, the description of the registration process of the work place and the face image for authentication is first completed with the screen image of FIG. 22, and the description returns to the flowchart of FIG.

  Next, in step S403, when the OK button 805 from the teleworker is pressed, the teleworker PC 111 accepts the processing for specifying the telework work conditions, and transmits the telework work conditions to the management server 101.

  Next, in step S404, the management server 101 receives the teleworking work condition transmitted from the teleworker PC 111 in step S403.

  Next, in step S405, the management server 101 determines whether the teleworking work condition received in step S404 matches the "favorite work condition" of the management server 101. If the "favorite work condition" of the management server 101 matches the telework work condition received from the teleworker PC 111, the process proceeds to step S406. If the two work conditions do not match, the process proceeds to step S409. Transition processing.

  When the process proceeds to step S406, the management server 101 refers to the authentication face image update necessity flag 1503 item of the authentication face image information management table 1500 (FIG. 15) of the favorite work condition, and It is determined whether or not the authentication face image needs to be updated.

  Here, an example of the face image information management table for authentication of favorite work conditions in the telework management support system of the present invention will be described with reference to FIG.

  The face image information management table 1500 for authentication of favorite work conditions in FIG. 15 is a table for managing favorite work condition information of the telework management support system according to the present invention, and includes a favorite work condition ID 1501, a face image list for authentication 1502, and a face image for authentication. The face image update necessity flag 1503 is included.

  The favorite work condition ID 1501 is an item for identifying favorite work condition information in the telework management support system of the present invention, and the favorite work condition ID 1401 item of the favorite work condition information management table 1400 is registered.

  The authentication face image list 1502 is an item indicating the authentication face image list selected according to the favorite work condition, and the designated number of available authentication face image information management tables 1700 (FIG. 17). The face image ID 1701 item in is registered.

  An example of a face image information management table for authentication that can be used in the telework management support system of the present invention will be described with reference to FIG.

  The available authentication face image information management table 1700 in FIG. 17 is a table for managing information of face photograph data (authentication face image) used for the teleworker's face recognition of the telework management support system according to the present invention. The items include face image ID 1701, user ID 1702, pass 1703, shooting time 1704, shooting location 1705, lighting environment 1706, face direction 1707, number of uses 1708, number of misrecognitions 1709, and reliability 1710.

  The face image ID 1701 is an item having a unique value for identifying an authentication face image in the telework management support system of the present invention, and an alphanumeric string is registered.

  The user ID 1702 is an item indicating the user ID of the teleworker corresponding to the authentication face image, and a user ID 1301 item of the user information management table 1300 is registered.

  The path 1703 is an item indicating the storage location of the authentication face image, and indicates a folder path name and a file name. Actual face image data is stored in the location specified by this item.

  The shooting time 1704 is an item for recording the time at which the authentication face image was shot, and the time at which the authentication face image was shot is registered.

  The shooting location 1705 is an item for recording the location where the authentication face image was captured, and the location where the authentication face image was captured is registered.

  The illumination environment 1706 is an item for recording the illumination environment when the authentication face image was captured, and one of “with illumination” and “without illumination” is set.

  The face direction 1707 is an item for recording the face direction of the authentication face image, and one of “left direction”, “front direction”, and “right direction” is set. The face direction can be detected by, for example, a technique disclosed in JP-A-2009-151394.

  The number of uses 1708 is an item for recording the number of times the authentication face image has been used for the face recognition of the teleworker, and a numeric string is registered.

  The misrecognition number 1709 is an item for recording the number of times of misrecognition when the authentication face image is used for the face recognition of the teleworker, and a numeric string is registered.

  The reliability 1710 is an item for recording the reliability at which the authentication face image can be used for the face recognition of the teleworker, and a numeric string is registered. The value of the reliability 1710 item of the authentication face image differs depending on the value of the number of uses 1708 item, the value of the misrecognition number 1709 item, and the setting of the teleworking work condition group.

  As described above, an appropriate authentication face image can be selected from the available authentication face image information management table 1700 according to various teleworking work information. After the description of the table in FIG. 17 is completed, the description returns to the table in FIG.

  The authentication face image update necessity flag 1503 in FIG. 15 is an item indicating whether or not it is necessary to update the authentication face image of the teleworker PC 111 the next time the favorite work condition is used. Necessary ”or“ No ”is registered. The values of “necessary” and “no” of the authentication face image update necessity flag 1503 are values set as a result of the determination branch of step S703 in FIG. The description of the table in FIG. 15 is completed, and the description returns to the flowchart in FIG.

  In step S406 in FIG. 4, the management server 101 refers to the authentication face image update necessity flag 1503 in FIG. 15 and determines whether it is necessary to update the authentication face image of the favorite work condition. I do. If 1503 is "necessary", it is necessary to update the authentication face image used in the favorite work condition to a new one. If the face image for authentication of the favorite work condition needs to be updated, the process proceeds to step S408. If it is not necessary to update the authentication face image of the favorite work condition, the process proceeds to step S407.

  When transitioning to the process of step S407, the management server 101 does not need to update the teleworking work condition received in step S404 to the “favorite working condition” (that is, the data held on the teleworker PC 111 side remains unchanged). Therefore, the authentication face image transmitted from the management server 101 to the teleworker PC 111 is set to Null (that is, nothing is transmitted).

  On the other hand, when the process transitions to step S408, the management server 101 acquires the authentication face image list 1502 item of the favorite work condition from the authentication face image information management table 1500 (FIG. 15) of the favorite work condition. The authentication face image list 1502 of the favorite work condition is set by the process of step S704 in FIG. 7 which is the process in step S420 described below. That is, the set authentication face image is set by referring to the authentication face image information management table 1500 of the favorite work condition set after the previous teleworking has been performed. After the process of step S408 is completed, the authentication face image update necessity flag 1503 is set to “No”, and the flag is reset.

  Also, in step S405, if the teleworking work condition received in step S404 does not match the “favorite work condition” of the management server 101, the process transitions to step S409, and in step S409, the management server 101 performs the processing in step S404. An appropriate authentication face image is selected based on the received teleworking work conditions. Details of step S409 will be described with reference to FIG.

  FIG. 5 is an example of a flowchart illustrating a process of selecting a face image for authentication according to working conditions of the telework management support system according to the embodiment of the present invention.

  5 is a process in which the CPU 201 of the management server 101 reads and executes a predetermined control program.

  The flowchart in FIG. 5 is a process that is started when the process in step S409 in FIG. 4 or the process in step S702 in FIG. 7 is executed.

  First, in step S501, the management server 101 matches the two items “workplace” and “lighting environment” of the teleworking work conditions received in step S404 from the available authentication face image information management table 1700. Filter data.

  Here, the teleworking work conditions specified as shown in FIG. 8 will be described as an example. The “work place” of the teleworking work conditions shown in FIG. 8 is “home”, and the “lighting environment” is “no sunshine”. Therefore, from the available authentication face image information management table 1700, data in which the “workplace” item is “home” and the “lighting environment” item is “no sunshine” are filtered. An example of the resulting data is as shown in FIG.

  In step S502, the management server 101 groups the available authentication face images filtered in step S501 according to the face direction.

  Here, the teleworking work condition “face direction pattern” specified as shown in FIG. 8 will be described as an example. As specified in FIG. 8, it is necessary to divide into three grooves of "leftward", "frontal", and "rightward". As a result, as shown in FIG. 19, the “leftward” group is 1901, and there are a total of nine data. The “front-facing” group is 1902, and there are a total of 18 data. The “rightward” group is 1903, and there are a total of three data.

  In step S503, the management server 101 repeats the process from here on for each group.

  In step S504, the management server 101 calculates the total number of times of use and the total number of misrecognitions of all available authentication face images of the group.

For example, as shown in FIG. 19, in the case of the “leftward” group 1901,
Total number of uses: 20 + 12 + 14 + 25 + 9 + 15 + 30 + 11 + 28 = 164
Total number of misrecognitions: 10 + 1 + 7 + 8 + 1 + 3 + 7 + 2 + 4 = 43
In step S505, the management server 101 determines an erroneous recognition order of each authentication face image with respect to all available authentication face images of the group. If the number of misrecognitions is the same, the one with the smaller number of uses is ranked higher.

  For example, as shown in FIG. 19, when the data is sorted in descending order by the number of misrecognitions in the “leftward” group 1901, the result becomes 2001 in FIG. Among them, the data whose “face image ID” item is “F001” has “misrecognition number” of “10”, so the misrecognition rank is set to “1”. In the data in which the “face image ID” item is “F014”, the “number of erroneous recognitions” is “8”, and thus the erroneous recognition order is “2”. Since the “number of false recognitions” is the same “8” for the data with the “face image ID” item “F028” and the data with the “face image ID” item “F010”, the number of times of use is also checked. Since the number of uses of “F028” is “9” and the number of uses of “F010” is “12”, the erroneous recognition order of “F028” is “8” and the erroneous recognition order of “F010” is “9”.

  In addition, the erroneous recognition order of data is determined for other groups by the same rule. The result of the “front-facing” group is as shown in 2002 in FIG. The result of the “rightward” group is as shown in 2003 in FIG. Thereby, the erroneous recognition order of each authentication face image is determined.

  In step S506, the management server 101 repeats the process from here for each available authentication face image in the group.

  In step S507, the management server 101 calculates the usage rate, the individual correct rate, and the overall correct rate of the available authentication face images in the group.

For example, as shown in FIG. 20, in the case of the “leftward” group 2001, “F001”
Usage rate: the number of times the applicable authentication face image is used / the total number of times that the group is used = 20 ÷ 164 = 0.121951
Individual correct answer rate: (the number of times the available authentication face image is used-the number of times the available authentication face image is misrecognized) ÷ the number of times the available authentication face image is used = (20−10) ÷ 20 = 0.5
Overall correct answer rate: Number of times the usable authentication face image was used-Number of times the applicable authentication face image was misrecognized) ÷ (Total number of times the group was used-Total number of times the group was incorrectly recognized) = ( 20-10) ÷ (164-43) = 0.082645
In step S508, the management server 101 calculates and updates the reliability of the usable authentication face image from the calculation result in step S507.

  An example of a representative reliability calculation method is shown below. There are other methods other than the method described here, and the reliability may be calculated using another method.

Reliability of available authentication face images = utilization rate of applicable authentication face images x
Individual correct rate of the available authentication face images x Overall correct rate of the available authentication face images x False recognition rank of the available authentication face images x 100
For example, as shown in FIG. 20, in the case of “F001” in the “left in the morning” group 2001,
Reliability of “F001”: 0.121915 × 0.5 × 0.082645 × 1 × 100
= 0.503931
The above result is rounded off to the fourth decimal place, and “0.504” is registered in the “reliability” item of “F001” in the “left in the morning” group 2001 in FIG. The other available face image data for authentication (the other data in the “leftward” group 2001, or the data in the “frontward” group 2002 and the data in the “rightward” group 2003) are used in a similar manner. , Individual correct rate, total correct rate and reliability are calculated. The final calculation results of all data of all groups are shown in FIG.

  Step S509 is the end of the repetitive processing of step S506. If the next data exists in the group, the data is moved to the next data, and the process returns to step S506. When there is no next data of the group, the repetition processing is completed. Proceed to step S510.

  In step S510, the management server 101 sorts the grooves in descending order based on the degree of reliability, and according to the set value of the “facial orientation pattern” of the teleworking work condition, the top several cards can be used based on the selection ratio of the group. Select the appropriate authentication face image.

  For example, when the data in the group are sorted in descending order from the reliability calculation result as shown in FIG. 20, the result is shown in FIG.

Here, the teleworking work conditions specified as shown in FIG. 8 will be described as an example. The setting values of the “face direction pattern” item of the teleworking work conditions shown in FIG. 8 are “leftward: 0.3”, “frontward: 0.6”, and “rightward: 0.1”. Therefore, the selection ratio of the face direction for each time zone is as follows.
Left: 1 × 0.3 = 0.3
Front facing: 1 × 0.6 = 0.6
Rightward: 1 x 0.1 = 0.1

  Further, it is assumed that “10 necessary authentication face images”. In the case of the “leftward” group 2101, since the selection ratio is 0.3, the top 3 (10 × 0.3) available authentication face images “F081”, “F081”, F051 "and" F032 "are selected. When the same calculation method is performed for the “front” group 2102 and the “right” group 2103, the top 6 (10 × 0.6) available authentication face images from the “front” group 2102 “F072”, “F056”, “F096”, “F052”, “F011”, and “F005” are selected. From the “rightward” group 2103, the top (10 × 0.1) available authentication face images, “F006”, are selected.

  Step S511 is the end of the repetitive processing of step S503. If there is a group next to the group, the group is moved to the next group, and the process returns to step S503. If there is no group next to the group, the repetition processing is completed, and all processing is completed.

  Up to this point, the teleworking work conditions shown in FIG. 8, “Working place” is “Home”, “Lighting environment” is “No sunshine”, “Face facing pattern” is “Left 0.3, Front 0.6, Right 0” .1 ”and“ 10 required authentication face images ”are data examples of the available authentication face image management table shown in FIG. 17, and an appropriate authentication face image list is selected. it can. The results are "F081," "F051," "F032," "F072," "F056," "F096," "F052," "F011," "F005," and "F006."

  As described in the flowchart of FIG. 5, even if acquisition of a predetermined number of face images is performed based on the “workplace”, “illumination environment”, or the ratio of the face orientation such as “face orientation pattern”,

  In the above, the procedure of the authentication face image selection process according to the working conditions in the telework management support system according to the embodiment of the present invention has been described with reference to FIG. Returning to the description of the flowchart of FIG.

  When the face image list for authentication selected in step S409 of FIG. 4 or the face image list for authentication of the favorite work condition set in step S408 (column 1502 in FIG. 15) is acquired, the management is performed in the next step S410. The server 101 transmits the acquired face image list for authentication to the PC 111 for teleworker. When the process proceeds to step S410 after the process of step S407, nothing is included in the face image list for authentication, and empty information (Null) is transmitted to the PC 111 for the teleworker.

  Next, in step S411, the teleworker PC 111 receives the authentication face image list transmitted from step S410.

  In the next step S412, the teleworker PC 111 updates the authentication face image list held by the teleworker PC 111 to the authentication face image list received in step S411. If the process proceeds to step S412 after the process in step S407, the authentication face image to be received is null information (Null), and thus the authentication face image list is not updated. That is, unless the face image list for authentication of favorite work conditions stored in the management server 101 is not changed, no extra load is applied to the network or the PC 111 for the teleworker.

  In the next step S413, the teleworker PC 111 displays a comment to the effect that the authentication face image has been updated, such as a message 901 in FIG. When the OK button 902 of the teleworker is pressed, telework processing is started, and acquisition of a captured image from a camera (for example, 1014 in FIG. 10) connected to or attached to the teleworker PC 111 is started.

  In the next step S414, the teleworker PC 111 monitors acceptance of whether or not the teleworker terminates the telework management process. If a request to end the telework has been received, the process proceeds to step S419. If a request to end the telework has not been received, the process proceeds to step S415.

  When the process shifts to step S415, the teleworker PC 111 periodically monitors the working state of the teleworker, and performs labor events such as “seating” and “leaving” during teleworking, and “spoofing” and “looking in”. Event such as a security incident. The event detection process is disclosed in, for example, Japanese Patent Application Laid-Open No. 2015-103198 filed by the Company in the past, and thus the description thereof is omitted.

  When detecting an event, a trail image of the user being photographed and a face image for authentication, which is used to determine whether the trail face image matches the teleworker, together with the detection result, are used as a trail. Save as data. An example of a trail data information management table generated when an event is detected will be described with reference to FIG.

  FIG. 16 is a diagram illustrating an example of a data table in which trail data information is registered in the telework management support system according to the embodiment of this invention.

  The trail data management table 1600 of FIG. 16 is a table for managing the trail data information of the telework management support system according to the present invention, and includes a trail ID 1601, a user ID 1602, a trail data storage destination 1603, an authentication face image 1604 used, and personal authentication. It consists of items such as the result 1605.

  The trail ID 1601 is an item for identifying trail data information in the telework management support system of the present invention, and an alphanumeric string is registered.

  The user ID 1602 is an item indicating the user ID of the user corresponding to the trail data information, and the user ID 1301 item of the user information management table 1300 is registered.

  The trail data storage destination 1603 is an item indicating a path of a place where a trail face image as trail data is stored, and a folder path is registered. This folder path is a path that can be accessed from both the teleworker PC 111 and the management server 101. The trail data storage destination 1603 is assumed to be a folder path of the trail face image. However, the trail face image file itself is stored in this table, and when the trail face image file is transmitted to the management server 101, the trail face image file may be transmitted as the trail face image. good.

  In the used authentication face image 1604, the face image ID used as the authentication face image is registered, and the face image ID 1701 item of the authentication face image information management table 1700 usable in the teleworker PC 111 is registered. ing.

  The personal authentication result 1605 is an item for recording an event detection result obtained by comparing the face image in the trail data with the face image for authentication, and includes any of “seated”, “separated”, “looking in”, and “spoofed”. Is registered.

  The data for one record of the above table is specified by the processing of step S415. Returning to the description of the flowchart of FIG.

  The event detection process in step S415 is executed in the background after starting in step S413 and ending in step S414.

  When an event is detected in step S415, the process proceeds to step S416, and the teleworker PC 111 transmits the event detection result and trail data (one record of the data in FIG. 16) detected in step S415 to the management server 101.

  In the next step S417, the management server 101 receives the event detection result and the trail data transmitted in step S416.

  In the next step S418, the management server 101 starts re-authentication of the trail face image and registration processing of the trail face image using the event detection result and the trail data received in step S417. The re-authentication and registration processing of the trail face image will be described with reference to FIG.

  FIG. 6 is a flowchart illustrating an example of registration processing of trail data and a usable authentication face image of the telework management support system according to the embodiment of this invention.

  The processes of steps S601 to S604 and steps S607 to S613 shown in the flowchart of FIG. 6 are processes in which the CPU 201 of the management server 101 reads and executes a predetermined control program. The processing in steps S605 to S606 is processing in which the CPU 201 of the administrator PC 121 reads and executes a predetermined control program.

  The flowchart in FIG. 6 is a process that is started when a transition is made to the process in step S418 in FIG.

  First, in step S601 in FIG. 6, the management server 101 performs a conditional branch process based on the event detection result received in step S417. If the received event detection result is “leaving”, the process proceeds to step S613, and information “leaving” and trail data at the time of leaving are registered as the trail data. An example of the registered data is an example of the second line in FIG.

  Also, in step S601, if the event detection result received in step S417 is “seated” or “looking in”, it is authenticated that the photographed user includes the teleworker himself. The process transitions to Step S610.

  In step S610, the management server 101 determines the number of uses 1708 of the authentication face image used for the event detection in step S414 from the authentication face images (for example, the plurality of face images in FIG. 21) of the teleworker PC 111. Increase by one. When the number of times of use is larger than the number of misrecognitions, the validity (reliability) of the face image for authentication increases.

  If it is determined in step S601 that the user is looking into the screen, in step S610, the PC 111 for the teleworker is notified of a warning such as a screen lock or an error sound, or the camera image is saved as a moving image. For example, an instruction to take security measures such as a security measure may be transmitted.

  After the process of step S610, in step S612, the management server 101 acquires an authenticated trail face image of the trail data, and stores the acquired trail face image in the management server 101 as an authentication face image. The saved new authentication face image is used as an authentication face image in step S602 described below.

  Next, in step S613, the management server stores, as trail data, a photographed image or the like at the time of teleworker authentication, together with information of “seated” or “looking in”. Examples of the stored data are the first and fourth lines in FIG.

  On the other hand, in step S601, if the event detection result received in step S417 is “spoofing”, the process transitions to step S602.

  In the process of step S602, the management server 101 acquires an image that cannot be authenticated by the teleworker PC 111, and performs a process of authenticating the image by the management server 101 as well.

  In step S602, the management server 101 extracts a face region from the captured image received in step S417, and performs personal authentication processing with the face image of the corresponding teleworker included in the management server 101 for authentication. The authentication face image performed in step S602 includes more authentication face images including the authentication face image of the teleworker PC 111. For example, the face image of the teleworker PC 111 in FIG. 21 is included. In addition, the face image stored in step S612, the face image not selected in FIG. 21 (not transmitted to the teleworker PC 111), and the like are also included.

  In step S602, the management server 101 performs an authentication process, and transmits the result of the authentication to the next step S603.

  In step S603, the management server divides the next process depending on whether the authentication result is “seated” or “spoofed”. If the authentication result is “seated”, the process proceeds to step S614. If the authentication result is “spoofing”, the process proceeds to step S604.

  If the process proceeds to step S614, that is, if the identity of the teleworker can be confirmed by re-authentication by the management server, and the authentication result is “seated”, the authentication face held by the teleworker PC 111 It means that it could not be detected in the image. Therefore, in step S614, if the result of the re-authentication for the predetermined number of times or more is “seated”, a warning is displayed as to whether there is an error in the teleworking work condition of the detected face image for authentication, and the teleworking work condition is displayed. A process for prompting the user to change is performed. With reference to FIG. 23, a process for prompting a change in the teleworking work conditions will be described.

  FIG. 23 is a flowchart illustrating an example of a process of changing a teleworking work condition of the telework management support system during use of the telework system in the embodiment of the present invention.

  The processes of steps S2301 to S2306 shown in the flowchart of FIG. 23 are processes in which the CPU 201 of the management server 101 reads out and executes a predetermined control program.

  The flowchart in FIG. 23 is a process that is started when the process transits to the process in step S614 in FIG.

  First, in step S2301 of FIG. 23, the management server 101 counts the number of times that the authentication result is “seated” in step S603, and determines whether the number has been counted a predetermined number of times (eg, 10 times). If the predetermined number of times has not been counted, the processing of the flowchart in FIG. 23 ends, and the process returns to the flowchart in FIG.

  On the other hand, in step S2301, if the number of times "seats" has reached the predetermined number (for example, 10 times), the process transitions to step S2302. In step S2302, the management server 101 sends to the teleworker PC 111 the name of the favorite work condition (for example, “home” registered in 801) including the face image for authentication authenticated at the time of re-authentication in step S602. Send and send candidates who should change the teleworking conditions.

  When the management server 101 transmits the name of the favorite work condition including the face image for authentication authenticated at the time of re-authentication to the teleworker PC 111, the teleworker PC 111 receives from the teleworker whether or not to change the telework work condition ( (Not shown), and transmits the teleworking work condition change result to the management server 101.

  In the next step S2303, the management server 101 receives the teleworking work condition change result from the teleworker PC 111.

  Next, in step S2304, the management server 101 determines whether the teleworking work condition change result received in step S2303 is changed or not, and divides subsequent processing according to the determined result. If the teleworking work conditions are not changed, the flowchart in FIG. 23 ends, and the process returns to the flowchart in FIG. On the other hand, if it is determined that the teleworking work condition is to be changed, the flow shifts to the process of step S2305.

  When the process proceeds to step S2305, the management server 101 sets the favorite work condition changed in step S2304 as a face image list for authentication after this process. Then, the process proceeds to step S408 in FIG. 4 to select a face image for authentication, and performs the processes from step S409.

  According to the processing in FIG. 23 described above, when the accuracy of face authentication of the teleworking work condition set by the user at first or by default is poor, the management server 101 transmits a candidate to be changed to an appropriate favorite work condition, We can help you choose the best working conditions for teleworking. Returning to the description of the flowchart of FIG.

  When the process returns to FIG. 6 as a result of the process of step S614, the process transits to the process of step S609. If the process has proceeded to step S609, it means that all of the authentication face images transmitted to the teleworker PC 111 in step S410 have been erroneously recognized. In step S609, the management server determines in step S410 that the teleworker PC 111 (For example, in step S410, the data list transmitted to the teleworker PC 111 is "F081," "F051," "F032," "F072," "F056," "F096," and "F052." , “F011”, “F005”, and “F006”, the number of misrecognitions 1709 of all the 10 data is increased by one.

  Next, in step S611, the management server 101 also increases the number of times of use 1708 of all data in which the number of misrecognitions has been increased in step S609.

  As described above, when the PC 111 for the teleworker determines that the user is spoofing and cannot be authenticated, and the data on the management server 101 is authenticated as the teleworker himself, the recognition of the authentication facial image of the PC 111 for the teleworker is erroneous. By increasing the number and the number of times of use, the reliability of these authentication face images is reduced.

  Subsequent processing in step S612 and subsequent steps are the same as the above-described processing, and a description thereof will not be repeated. It returns to the flow of the conditional branch of step S603.

  In step S603, if the determination of the result of the re-authentication in step S602 is not "seated", that is, if it is determined that impersonation is performed again, information for prompting the teleworker administrator to determine whether or not "spoofing" is provided. The process of transmitting to the administrator PC 121 is performed.

  If the authentication result is not “seated” in step S603, the management server 101 transmits the trail face image of the trail data to the administrator PC 121 in the next step S604.

  In the next step S605, the administrator PC 121 receives and displays the trail face image from the management server 101, and displays a screen for prompting the teleworker administrator to input whether or not the user being photographed is the teleworker himself (not shown). Illustrated).

  Next, the teleworker manager checks the trail face image on the displayed screen, and inputs a notification to the manager PC 121 as to whether the teleworker himself is operating.

  In the next step S606, the administrator's PC 121 transmits to the management server 101 information indicating whether the trail face image input from the teleworker administrator is the teleworker “person” or not.

  Next, in step S607, the management server 101 receives the confirmation result of the trail face image transmitted from the administrator PC 121.

  Next, in step S608, the process is divided depending on whether the result received in step S607 is the teleworker "person".

  If the result received in step S607 is the teleworker “person”, the process proceeds to step S609. Subsequent processes are the same as those described above.

  On the other hand, if the result received in step S607 is not the teleworker "person", the process proceeds to step S611, and unlike the case of the teleworker "person", the process in step S609 is not executed and the process proceeds to step S611. Transitions. Since it is not an error that the face image for authentication authenticated on the teleworker PC 111 side does not include the teleworker himself, there is no need to increase the number of erroneous recognitions 1709 in step S609.

  If it is determined in step S608 that the teleworker is not the “person”, in step S611, the teleworker PC 111 is notified of a warning such as a screen lock or an error sound, or the camera image is saved as a moving image. For example, a command for performing security measures such as performing a security measure may be transmitted.

  In the next step S612, if it is determined from step S608 that the teleworker is not the "person", the trail face image is not an image of the person, so the processing is skipped and the process proceeds to step S613.

  In step S613, the management server stores the captured image at the time of the teleworker authentication together with the information of “spoofing” as the trail data. An example of the stored data is an example of the third line in FIG.

  As described above, the result of the teleworker identity authentication determined by the teleworker PC 111 is stored in the management server by the processing of the flowchart in FIG. Further, even if the PC 111 for the teleworker determines that the PC is "spoofing", re-authentication is performed by the management server, so that it is possible to prevent inquiries from being sent to the administrator of the teleworker one by one. The description of the flowchart of FIG. 6 is completed above, and the description returns to the flowchart of FIG.

  In the flowchart of FIG. 4, after a series of processing from step S415 to step S418 is completed, and in step S414, an input of the end of the telework is received from the teleworker (such as pressing the [Work End] button in FIGS. The PC 111 shifts the processing to the next step S419.

  In step S419, the teleworker PC 111 logs out the account logged in in step S401. After that, the processing makes a transition to Step S420.

  In step S420, the management server 101 performs a process of updating favorite work conditions (combinations of authentication face images) in the telework work conditions for which event detection was performed in steps S413 to S418. The authentication face image update process will be described with reference to FIG.

  FIG. 7 is a flowchart illustrating an example of an update process of a face image for authentication of favorite work conditions in the telework management support system according to the embodiment of this invention.

  7 is a process in which the CPU 201 of the management server 101 reads and executes a predetermined control program.

  The flowchart in FIG. 7 is a process that is started when a transition is made to the process in step S420 in FIG.

  First, in step S701, the management server 101 determines whether the current teleworking work condition is a favorite work condition (FIG. 14). If the current teleworking work condition is a favorite work condition, the process proceeds to step S702. If the current teleworking work condition is not the favorite work condition, this processing is ended. Whether it is the favorite work condition or not is determined in step S402 of the flowchart of FIG. 4 by whether the teleworker has designated the favorite work condition on the screen of the teleworker PC 111 (specifically, the favorite condition designation 801 in FIG. 8). .

  When the process proceeds to step S702, the management server 101 performs a process of selecting an authentication face image according to the current work condition. The details of this processing are the same as the selection processing described in FIG.

  In the next step S703, the management server 101 determines whether or not the authentication face image selected in step S702 matches the existing authentication face image of the favorite work condition (the data in FIG. 14). If the authentication face image selected in step S702 matches the existing authentication face image of the favorite work condition, the process proceeds to step S705, and the authentication face image selected in step S702 becomes the favorite face image. If there is a face image different from the existing authentication face image in the work condition, the process proceeds to step S704.

  When the process proceeds to step S704, the management server 101 performs a process of preparing to update the authentication face image of the favorite work condition with the authentication face image selected in step S702, and ends the process of this flowchart. I do. With reference to FIG. 15, a description will be given of a process for preparing to update the authentication face image.

  The first line in FIG. 15 is an example of a table holding data for updating the authentication face image. The face image ID 1701 that is the ID of the face image for authentication selected in the process of step S702 is registered in the face image list for authentication 1502 on the first line. If the next teleworker designation is the same favorite work condition, the favorite work condition is updated to the face image for authentication in the face image list for authentication 1502 in step S408. To store that the authentication face image needs to be updated with the next setting, the authentication face image update necessity flag 1503 is set to “necessary”. If the authentication face image update necessity flag 1503 is set to "necessary", it is determined in step S406 that the favorite work condition needs to be updated. Returning to the description of the flowchart of FIG.

  In FIG. 7, when the process proceeds to step S705, the management server 101 performs a process for not updating the authentication face image of the favorite work condition, and ends the process of this flowchart. With reference to FIG. 15, a description will be given of a process when the authentication face image is not updated.

The second and third lines in FIG. 15 are examples of the authentication face image information management table when the authentication face image is not updated. By registering “No” in the authentication face image update necessity flag 1503 on the second or third line, it is indicated in step S406 that the favorite work condition does not need to be updated, and as a result, the process proceeds to step S407. The processing is transited and the authentication face image is not updated. As described above, the authentication face image list 1502 of the authentication face image information management table 1500 and the authentication face image update necessity flag 1503 determine the next favorite. It is possible to set whether or not to update the authentication face image at the time of working conditions.

  By the above processing, the face image of the teleworker, which changes according to the teleworking work conditions, is used to significantly select the authentication face image based on the teleworking work conditions. The present invention solves the problem that the teleworker cannot use the teleworker's PC 111 due to the mistake.

  Although one embodiment has been described above, the present invention can take an embodiment as, for example, a system, an apparatus, a method, a program, or a recording medium. Specifically, the present invention may be applied to a system including a plurality of devices, or may be applied to an apparatus including a single device.

  Further, the program according to the present invention is a program capable of executing the processing method of the flowcharts shown in FIGS. 4 to 7 by a computer, and the storage medium of the present invention is a program capable of executing the processing method of FIGS. Is stored. The program according to the present invention may be a program for each processing method of each device in FIGS.

  As described above, the recording medium storing the program for realizing the functions of the above-described embodiments is supplied to the system or the apparatus, and the computer (or CPU or MPU) of the system or the apparatus executes the program stored in the recording medium. Needless to say, the object of the present invention can be achieved by reading and executing.

  In this case, the program itself read from the recording medium implements the novel function of the present invention, and the recording medium on which the program is recorded constitutes the present invention.

  Examples of a recording medium for supplying the program include a flexible disk, a hard disk, an optical disk, a magneto-optical disk, a CD-ROM, a CD-R, a DVD-ROM, a magnetic tape, a nonvolatile memory card, a ROM, an EEPROM, and a silicon. A disk or the like can be used.

  When the computer executes the read program, not only the functions of the above-described embodiments are realized, but also an OS (operating system) or the like running on the computer based on the instructions of the program. It goes without saying that a part or all of the processing is performed, and the functions of the above-described embodiments are realized by the processing.

  Further, after the program read from the recording medium is written into the memory provided in the function expansion board inserted into the computer or the function expansion unit connected to the computer, the function expansion board is executed based on the instruction of the program code. It goes without saying that a CPU or the like provided in the function expansion unit performs part or all of the actual processing, and the processing realizes the functions of the above-described embodiments.

  Further, the present invention may be applied to a system constituted by a plurality of devices or to an apparatus constituted by a single device. Needless to say, the present invention can be applied to a case where the present invention is achieved by supplying a program to a system or an apparatus. In this case, by reading the recording medium storing the program for achieving the present invention into the system or the apparatus, the system or the apparatus can enjoy the effects of the present invention.

  Further, by downloading and reading out a program for achieving the present invention from a server, a database, or the like on a network by using a communication program, the system or device can enjoy the effects of the present invention. It should be noted that the present invention includes all configurations obtained by combining the above-described embodiments and their modifications.

101 management server 111 PC for teleworker
121 PC for administrator

Claims (9)

Acquiring means for acquiring a face image photographed by the imaging device; a first face image acquired for authentication processing by the acquiring means; and a plurality of second face images registered in advance. A first authentication unit that executes an authentication process by comparing with a third face image; and an event detection unit that detects a labor event or a security incident based on the authentication process by the first authentication unit. A management server connectable to an information processing terminal having
Group management means for grouping and managing the plurality of second face images;
Selecting means for selecting at least one from a plurality of groups managed by the group managing means;
Transmitting means for transmitting, as the third face image, a face image in the group selected by the selecting means to the information processing apparatus as a face image to be subjected to authentication processing by the first authenticating means;
A management server, comprising: The group management unit groups and manages the second face images for each peripheral situation of the information processing apparatus,
2. The management server according to claim 1, wherein the group selected by the selection unit is a group selected based on a surrounding situation of the information processing apparatus. The surrounding situation of the information processing device is location information of the information processing device,
The management server according to claim 2, wherein the selection unit selects a group based on location information of the information processing apparatus. A face orientation ratio acquisition unit that acquires a ratio of a face orientation of a face image acquired by the acquisition unit according to a peripheral situation of the information processing device;
The group management means may group the third face image based on the face orientation specified when registering the second face image, at a rate in accordance with the rate obtained by the face direction rate obtaining means. The management server according to claim 2, wherein the management server manages the management server. When the authentication process cannot be performed by the first authentication unit,
A second authentication unit that performs an authentication process by the management server acquiring the first face image acquired by the acquisition unit and comparing the first face image with the second face image;
An accuracy changing unit that changes the accuracy of the third face image based on an event detection result detected by an authentication process performed by the second authentication unit;
The said group management means regroups and manages a 3rd face image from the said several 2nd face image based on the certainty changed by the said certainty change means, The Claims 1 thru | or 4 characterized by the above-mentioned. The management server according to. When the number of times the authentication process cannot be performed by the first authentication unit reaches a predetermined number,
The said selection means selects the group containing the 2nd face image authenticated by the said 2nd authentication means instead of the group selected by the said selection means, The Claim 1 thru | or 5 characterized by the above-mentioned. Management server. Acquisition means for acquiring a face image captured by the imaging device,
The authentication process is performed by comparing the first face image acquired for the authentication process by the acquisition unit with a third face image selected from a plurality of second face images registered in advance. First authentication means to be executed;
An event detecting means for detecting a labor event or a security incident based on the authentication processing by the first authentication means;
Group management means for grouping and managing the plurality of second face images;
Selecting means for selecting at least one from a plurality of groups managed by the group managing means;
Transmitting means for transmitting, as the third face image, a face image in the group selected by the selecting means to the information processing apparatus as a face image to be subjected to authentication processing by the first authenticating means;
A telework management support system comprising: Acquiring means for acquiring a face image photographed by the imaging device; a first face image acquired for authentication processing by the acquiring means; and a plurality of second face images registered in advance. A first authentication unit that executes an authentication process by comparing with a third face image; and an event detection unit that detects a labor event or a security incident based on the authentication process by the first authentication unit. A telework management support method in a management server connectable to an information processing terminal having
A group management step of grouping and managing the plurality of second face images;
A selecting step of selecting at least one from a plurality of groups managed by the group managing step;
A transmitting step of transmitting, as the third face image, a face image in the group selected in the selecting step to the information processing apparatus as a face image to be subjected to an authentication process by the first authentication unit;
Telework management support method comprising: Acquiring means for acquiring a face image photographed by the imaging device; a first face image acquired for authentication processing by the acquiring means; and a plurality of second face images registered in advance. A first authentication unit that executes an authentication process by comparing with a third face image; and an event detection unit that detects a labor event or a security incident based on the authentication process by the first authentication unit. A management server connectable to an information processing terminal having
Group management means for grouping and managing the plurality of second face images;
Selecting means for selecting at least one from a plurality of groups managed by the group managing means;
A program for causing a face image in a group selected by the selection means to be transmitted to the information processing apparatus as the third face image as a face image to be subjected to authentication processing by the first authentication means. .

Images