JP2020190993A - On-vehicle unit and operation management system - Google Patents

Abstract

To provide an on-vehicle unit and an operation management system that suppresses spoofing when leaving a garage and authenticates a correct driver regardless of which vehicle a driver gets on.SOLUTION: A digital tachograph 10 acquires a crew code from a wearable terminal and determines whether the acquired crew code matches any of crew codes registered in advance in a crew information DB 55. The digital tachograph 10 retrieves a crew member who matches a face image taken by a camera 23B from a face recognition data DB 58, and determines whether the crew member of the acquired crew member code matches the retrieved crew member. The digital tachograph 10 performs a process of leaving a garage for this crew member if they match, and issues an alarm if they do not match.SELECTED DRAWING: Figure 1

Description

The present invention relates to an on-board unit and an operation management system.

When a crew member drives a vehicle, the digital tachograph records operation information such as entry / exit time, speed, and mileage, and the operation status of the vehicle is managed by a computer terminal (office PC) for the operator. (See, for example, Patent Document 1.). When processing the delivery of the digital tachograph, the crew members enter the crew code assigned to them by operating a button or by selecting one of a plurality of displayed crew codes. The digital tachograph accepts the input of the crew code, recognizes the crew, and starts the operation management for this crew.

Japanese Unexamined Patent Publication No. 2005-115625 JP-A-2018-278 JP-A-2010-191800

Although the crew code is different for each individual, there is a risk of input error or spoofing when entering the crew code.
As a countermeasure for this, for example, it is conceivable to store the crew code in a wearable terminal worn by the crew and read the crew code from the wearable terminal on the digital tachograph side. Patent Document 2 is, for example, a technique for using a wearable terminal to verify the identity of an employee. In the health condition management system described in Patent Document 2, the mobile communication terminal possessed by the employee has the employee number read from the employee's IC card employee ID card and the wearable terminal worn by the employee. The body temperature data measured by is transmitted to the safety confirmation system. Then, in the safety confirmation system, the received employee number and the employee DB are collated, the identity is confirmed, and the body temperature data is recorded. However, in Patent Document 2, even if a third party other than the person obtains the IC card employee ID card and impersonates the person, the person is confirmed as the person.

On the other hand, as a technique for preventing driver spoofing, for example, Patent Document 3 is provided. The security management system of Patent Document 3 includes a database that stores the registration number of the vehicle and the face image information of the regular driver, and images the license plate of the truck and the driver with a camera provided at the gate. Then, the security management system reads the face image information of the regular driver from the database based on the registration number of the truck read from the captured image, and collates it with the face image information of the driver extracted from the captured image. However, in Patent Document 3, it is necessary to associate the registration number of the vehicle with the driver.

The present invention has been made in view of the above circumstances, and an object of the present invention is to prevent spoofing at the time of leaving the garage and to authenticate the correct driver regardless of which vehicle the driver gets on. It is in.

In order to achieve the above-mentioned object, the on-board unit and the operation management system according to the present invention are characterized by the following (1) to (6).
(1) An on-board unit that is mounted on a vehicle and collects operation information of the vehicle.
An acquisition unit that acquires the identification information from an ID storage medium that stores the identification information that identifies the crew member, which is possessed by the driver of the vehicle.
The first authentication unit that determines whether or not the acquired identification information matches any of the identification information that identifies the crew members registered in advance in the first database.
The first extraction unit that extracts the driver's biological information and
A first search unit that searches for crew members that match the biometric information extracted by the first extraction unit from the biometric information of the crew members registered in advance in the second database.
A second authentication unit that determines whether or not the crew member whose identification information is determined to match by the first authentication unit and the crew member searched by the first search unit match.
The delivery processing department that performs the delivery processing for the crew members judged to match by the second certification department,
An on-board unit including an alarm unit that generates an alarm signal when it is determined that the second authentication unit does not match.
(2) A second extraction unit that extracts biometric information of the driver who is driving the vehicle after the delivery process is performed.
It is provided with a third authentication unit that determines whether or not the crew member to be processed by the delivery processing unit and the driver whose biometric information has been extracted by the second extraction unit match.
The vehicle-mounted device according to (1) above, wherein the alarm unit generates an alarm signal when it is determined that the third authentication unit does not match.
(3) The above-described (1) or (2), wherein the first extraction unit extracts recognition data as the biological information from an image obtained by photographing a part of the driver's body. In-vehicle device.
(4) The first extraction unit extracts face recognition data as the biometric information from an image of the driver's face.
The first search unit is characterized in that it searches for a crew member who matches the face recognition data extracted by the first extraction unit from the face recognition data of the crew member registered in advance in the second database. The in-vehicle device according to (3) above.
(5) A third extraction unit that extracts face recognition data as biometric information from an image of the driver's face performing an alcohol check.
A second search unit that searches for a crew member that matches the face recognition data extracted by the third extraction unit from the crew member's face recognition data registered in advance in the second database.
The above (4), characterized in that the crew members determined to match by the first certification unit and the fourth certification unit that determines whether or not the crew members searched by the second search unit match. ).
(6) The on-board unit according to any one of (1) to (5) above, and
A management device that can communicate with the on-board unit and manages the operation of the vehicle,
An operation management system including the first and second databases.
The on-board unit transmits the alarm signal to the management device, and the vehicle-mounted device transmits the alarm signal to the management device.
The management device is an operation management system characterized in that the received alarm signal is recorded together with the operation information.

According to the in-vehicle device having the configuration of (1) above, spoofing is suppressed and the driver is authenticated as the correct crew member by performing authentication in two steps of identification information authentication and biometric authentication at the time of delivery processing. it can. In addition, if the driver (the person who intends to process the warehousing) is the correct crew member who has been authenticated in two steps, the warehousing process (start process of operation management) is performed. Appropriate operation management becomes possible. In addition, by searching for a person who matches the driver's biometric information from the crew members registered in advance in the database, the person who tried to impersonate can be identified, and that person is registered as a person in the company. It is possible to determine whether or not the person is a person. Further, by issuing an alarm from the vehicle-mounted device based on the alarm signal, it is possible to make the driver aware that spoofing has been detected. Further, by sending the generated alarm signal to the office PC and storing it, it is possible to notify the operation manager of the occurrence of spoofing.

According to the in-vehicle device having the configuration of (2) above, by performing authentication during driving, it is possible to prevent the driver from being replaced after leaving the garage and driving by a person other than the authenticated crew member.

According to the in-vehicle device having the configuration of (3) above, biometric authentication is possible with a simple configuration having an imaging function and an image recognition function.

According to the in-vehicle device having the configuration of (4) above, face authentication is performed without performing a special operation for biometric authentication, so that the burden on the user regarding authentication can be reduced.

According to the on-board unit having the configuration of (5) above, by determining whether or not the certified crew member and the crew member performing the alcohol check match, for example, when the certified crew member is drinking alcohol. , It is possible to deter fraud such as having another person perform an alcohol check and pass it.

According to the operation management system of the above configuration (6), in addition to the effect of the above configurations (1) to (5), the delivery process is performed by the correct authenticated crew member, so that the correct operation management can be performed for the correct crew member. It has the effect of being able to do it. In addition, an alarm signal transmitted from the on-board unit in the case of spoofing or the like is recorded together with the operation information. Therefore, it is possible to prevent fraud such as spoofing by reflecting the presence or absence of spoofing or the like in the driving evaluation of the crew members or by using it for guidance to both the side who requested the spoofing and the side who requested the spoofing.

According to the present invention, regardless of which vehicle the driver gets on, spoofing at the time of leaving the vehicle can be suppressed and the correct driver can be authenticated.

The present invention has been briefly described above. Further, the details of the present invention will be further clarified by reading through the embodiments for carrying out the invention described below (hereinafter, referred to as "embodiments") with reference to the accompanying drawings. ..

FIG. 1 is a diagram showing a configuration of an operation management system of the present embodiment. FIG. 2 is a flowchart showing the two-step verification process of the present embodiment. FIG. 3 is a diagram for explaining the two-step verification process of the present embodiment. FIG. 4 is a flowchart showing an authentication process at the time of alcohol check of the present embodiment. FIG. 5 is a flowchart showing the authentication process during operation of the present embodiment.

Specific embodiments of the present invention will be described below with reference to the respective figures.
FIG. 1 is a diagram showing a configuration of an operation management system 5 of the present embodiment. The operation management system 5 includes an operation recording device (hereinafter referred to as a digital tachograph) 10 which is an on-board unit and is connected via a network 70, and an office PC 30 to manage the operation status of the vehicle. The office PC may be configured to read a memory card that records operation record data measured by the on-board unit. Further, the on-board unit may be a drive recorder or the like.

The office PC 30 is composed of a general-purpose computer device installed in the office and manages the operation status of the vehicle. The network 70 is a packet communication network such as the Internet to which a radio base station 8 and an office PC 30 that perform wide area communication with the digital tachograph 10 are connected, and relays data communication performed between the digital tachograph 10 and the office PC 30. .. Communication between the digital tachograph 10 and the wireless base station 8 may be performed by a mobile communication network (mobile line network) such as LTE (Long Term Evolution) / 4G ((4th Generation)), or a wireless LAN (Local). Area Network) may be used.

The digital tachograph 10 is mounted on the vehicle and performs warehousing processing for the driver of the vehicle, warehousing / leaving time, mileage, running time, running speed, speed over, engine speed over, sudden start, sudden acceleration, sudden deceleration, etc. Record the operation data of. The digital tachograph 10 includes a CPU 11 (acquisition unit, first to third authentication units, first to third extraction units, first to second search units, alarm unit), non-volatile memory 26A, volatile memory 26B, recording unit 17, It has a card I / F18, a voice I / F19, an RTC (clock IC) 21, a SW input unit 22, a display unit 27, an alcohol tester 60, and a reader 61.

The CPU 11 comprehensively controls each part of the digital tachograph 10. The non-volatile memory 26A stores an operation program or the like executed by the CPU 11. The volatile memory 26B is a semiconductor memory device capable of reading and writing data by the access of the CPU 11. The volatile memory 26B is used to temporarily hold various data handled by the CPU 11.

The recording unit 17 records data such as operation data and video. A memory card 65 owned by the driver is freely inserted and removed from the card I / F18. The CPU 11 writes the operation information (including data such as operation data and video) and the warning event recorded by the recording unit 17 to the memory card 65 connected to the card I / F18. A built-in speaker 20 is connected to the voice I / F19. The built-in speaker 20 emits a voice such as an alarm based on the alarm signal generated by the CPU 11.

The RTC21 (timekeeping unit) measures the current time. ON / OFF signals of various buttons such as a warehousing button and a warehousing button for starting the warehousing process are input to the SW input unit 22. The display unit 27 is composed of an LCD (liquid crystal display) and displays not only communication and operation status but also alarms and the like.

The alcohol tester 60 detects the presence or absence of alcohol consumption from the exhaled breath, and the crew measures the alcohol concentration by blowing on the sensor unit, and the alcohol concentration is equal to or higher than the threshold value (for example, 0.15 mg / L). Inspect whether or not. That is, the alcohol inspector 60 performs an alcohol check at the time of delivery processing (before the start of operation) and during operation. The reader 61 acquires the crew code from an ID storage medium such as a wearable terminal, an IC (Integrated Circuit) card, or a driver's license, which stores the crew code (identification information) that uniquely identifies the crew. The reader 61 may acquire a crew code from a device such as an RFID (Radio Frequency IDentifier) tag. Further, the wearable terminal is a terminal worn by a crew member on the body such as an arm or a head, and a wristband type or a wristwatch type device is preferable, but a glasses type or a ring type may be used. .. The alcohol tester 60 and the reader 61 may be portable ones that are detachably mounted on the digital tachograph 10.

Further, the digital tachograph 10 includes speed I / F12A, engine rotation I / F12B, external input I / F13, sensor input I / F14, analog input I / F29, GPS receiving unit 15, camera I / F16, communication unit 24, and the like. It has a power supply unit 25.

A vehicle speed sensor 51 that detects the speed of the vehicle is connected to the speed I / F 12A, and a speed pulse from the vehicle speed sensor 51 is input. The vehicle speed sensor 51 may be provided as an option on the digital tachograph 10, or may be provided as a device separate from the digital tachograph 10. A rotation pulse from an engine speed sensor (not shown) is input to the engine speed I / F12B. An external device (not shown) is connected to the external input I / F13, and indicates an IGN (ignition) signal indicating ON / OFF of the ignition switch and ON / OFF of the left or right direction indicator (winker). A blinker signal is input. Further, a portable alcohol tester or a reader may be connected to the external input I / F13.

An acceleration sensor (G sensor) 28 that detects an acceleration (G value) including a lateral acceleration (lateral G) generated at right angles to the traveling direction (impact) is connected to the sensor input I / F14, and is connected to the G sensor. The signal from 28 is input. The G sensor 28 can detect the magnitude (lateral G) of the acceleration applied in the left-right direction (vehicle width direction) of the own vehicle. Signals such as a temperature sensor (not shown) for detecting the engine temperature (cooling water temperature) and a fuel amount sensor (not shown) for detecting the fuel amount are input to the analog input I / F29. The CPU 11 detects various operating states based on the information input via these I / Fs.

The GPS receiving unit 15 is connected to the GPS antenna 15a, receives a signal transmitted from a GPS satellite, and acquires the current position information (GPS information).

A camera 23A and a camera 23B are connected to the camera I / F16. The camera 23A is installed in the vehicle and images the surroundings (outside the vehicle) of the vehicle to acquire image data. The camera 23B is an in-vehicle camera that is installed in front of a meter in the vehicle and captures the interior of the vehicle including the driver's face to acquire image data (image). The image data acquired by the camera 23B is also used when the crew performs the warehousing process and face recognition while driving. The cameras 23A and 23B have at least one image sensor in which, for example, 300,000 pixels, 1 million pixels, and 2 million pixels are arranged on the imaging surface, and can capture an image such as a stereo image. The image sensor may be composed of a CMOS (complementary metal oxide semiconductor) sensor or a CCD (charge-coupled device) sensor. The camera I / F16 may be connected to a camera that captures images of the side and rear of the vehicle. The images captured by the cameras 23A and 23B are recorded in the recording unit 17 in chronological order. In addition to capturing visible light, the camera may be equipped with an infrared camera so that it can capture images even at night.

When the communication unit 24 performs wide area communication and is connected to the wireless base station 8 via the mobile line network (mobile communication network), the communication unit 24 and the office PC 30 are connected to the office PC 30 via a network 70 such as the Internet connected to the wireless base station 8. Communicate. The power supply unit 25 supplies electric power to each unit of the digital tachograph 10 by turning on the ignition switch or the like.

When the digital tachograph 10 is delivered, the CPU 11 performs two-step verification of the crew as described later, instead of inputting the crew code using the conventional button. The two-step verification includes authentication by a crew code (identification information) acquired from a wearable terminal or an IC card and authentication by image recognition (face recognition) for an output image of the camera 23B for in-vehicle photography. In addition, the CPU 11 performs face recognition even when the driver is checking alcohol in the vehicle after the two-step verification. Further, the CPU 11 periodically performs face recognition of the driver after leaving the garage (during operation) to check spoofing during operation.

On the other hand, the office PC 30 is a PC that operates on a general-purpose operating system. The office PC 30 includes a CPU 31, a communication unit 32, a display unit 33, a storage unit 34, a card I / F35, an operation unit 36, an output unit 37, a voice I / F38, a device I / F47, and an external I / F48.

The CPU 31 comprehensively controls each part of the office PC 30. The communication unit 32 can communicate with the digital tachograph 10 via the network 70. In addition, the communication unit 32 can also connect to various databases (not shown) connected to the network 70, and can acquire necessary data.

The display unit 33 displays a screen or the like showing the operation status. The storage unit 34 stores a program or the like for managing the operation status based on the data measured by the digital tachograph 10.

A memory card 65 is freely inserted and removed from the card I / F35. The card I / F35 inputs the operation information measured by the digital tachograph 10 and stored in the memory card 65. The operation unit 36 has a keyboard, a mouse, and the like, and accepts operations by the administrator of the office PC 30. The output unit 37 outputs various data. A microphone 41 and a speaker 42 are connected to the voice I / F 38. The administrator can also make a voice call using the microphone 41 and the speaker 42. An alcohol tester 52 and an attendance management device (not shown) are connected to the device I / F47. Unlike the alcohol tester 60 mounted on the digital tachograph 10, the alcohol tester 52 is a stationary type installed near the office PC 30. The alcohol tester 52 measures the alcohol concentration of exhaled breath by blowing breath on the sensor unit when the crew goes to work, and inspects whether or not the alcohol concentration is equal to or higher than a threshold value (for example, 0.15 mg / L). The alcohol test (alcohol check) is performed by either the alcohol tester 52 installed in the office or the alcohol tester 60 mounted on the vehicle. Therefore, the alcohol test can be performed before, during, and after the operation, and the judgment such as drunk driving is performed.

An external storage device (storage memory) 54 is connected to the external I / F 48. The external storage device 54 holds the crew information database (DB) 55, the operation data DB 56, the alcohol test result DB 57, and the face recognition data DB 58. In the crew information DB 55, information such as a crew code (ID), name, gender, age, height, weight, years of service, family structure, medical history, etc. is recorded for each crew member. In addition, the crew information DB 55 also records information such as the presence or absence of drug use, which is being suspended. In the alcohol test result DB 57, the results of the tests performed by the alcohol testers 60 and 52 are recorded for each crew member. In the operation data DB 56, daily operation data measured by the digital tachograph 10 is recorded for each crew member. The operation data includes information such as warehousing / delivery time, speed, mileage, sudden acceleration / deceleration, sudden steering, speed over, engine speed over, warning signal, and the like.

Alcohol test result data is registered in the alcohol test result DB 57 for each crew member. The alcohol test result data is displayed on the display unit 33 as a table, for example. In this table, a list of data when the alcohol concentration is 0.15 mg / L (corresponding to drunk driving) or more as a result of measuring the alcohol concentration with the alcohol testers 60 and 52 is registered. The result of the alcohol concentration test is registered in the table regardless of whether it passes (OK) or fails (NG). Each record in this table contains data on crew name, measurement location (office, in-service, etc.), measurement date, measurement time, measurement result and measurement amount. When the measurement location is in operation, the result of the inspection by the crew in the passenger compartment is shown, and the result at the time of delivery processing (before the start of operation) is shown in addition to the result while the vehicle is running. In addition, data when the alcohol test result fails and data when it passes are registered in this table, but if the number of crew members is large, the number of registered data will increase, so in that case , It is also possible to register only rejected data. By looking at the list in this table, the operation manager can check the alcohol measurement results before and after the operation of all crew members.

In the face recognition data DB 58, face recognition data used for recognition / collation of face images is registered for each crew member. The face recognition data includes, for example, a face front image, a face side image, and the like.

Here, the recorded contents of the above-mentioned various databases are linked by the crew code. Therefore, when the operation manager inputs the crew code to the office PC 30, the office PC 30 can acquire the recorded contents of the various databases associated with the crew code.

Next, with reference to FIGS. 2 and 3, the crew authentication process when the digital tachograph 10 is delivered from the operation management system 5 having the above configuration will be described. FIG. 2 is a flowchart showing the two-step verification process of the present embodiment, and FIG. 3 is a diagram for explaining the two-step verification process of the present embodiment. The process described below is executed by operating each part of the digital tachograph 10 according to the instruction of the CPU 11.

As shown in FIG. 2, when the power of the digital tachograph 10 is turned on, the reader 61 is in the reading state (step S1), and waits until the wearable terminal or the IC card is touched (close). When the wearable terminal or IC card is touched (step S2), the reader 61 acquires an identification number (crew code) from the touched wearable terminal or IC card (step S3). Next, the CPU 11 compares the acquired crew code with the crew code registered in the crew information DB 55 (crew master) (step S4). Then, the CPU 11 determines whether or not the acquired crew code matches any of the crew codes in the crew information DB 55 (step S5: authentication 1). If it does not match any of the crew codes, the CPU 11 performs an unregistered person leaving process when the crew is not registered (step S6), and ends the crew authentication process (two-step verification process).

On the other hand, if it matches any of the crew codes, the CPU 11 acquires an image of the inside of the vehicle taken from the camera 23B (step S7), and performs face recognition processing on this image (step S8). Then, the CPU 11 searches for the face recognition data of the crew member registered in the face recognition data DB 58 via the network 70, and identifies the crew member whose face data matches the crew member in the image captured by the camera 23B. (Step S9). Next, the CPU 11 determines whether or not the crew member determined to match in the process (authentication 1) of step S5 and the crew member specified in the process of step S9 match (step S10: authentication 2). If they do not match, the CPU 11 generates a warning signal indicating that the crew members do not match, and issues an alarm from the speaker 20 (step S11). After issuing the alarm, the CPU 11 monitors whether the vehicle starts traveling (step S12), and when the vehicle starts traveling, generates an alarm signal indicating that the vehicle is impersonating, and causes the communication unit 24 to operate. A spoofing operation warning is transmitted to the office PC 30 via the above (step S13). Further, the CPU 11 outputs an operation stop signal instructing the vehicle to stop the operation (step S14), and ends this process. In step S12, if the vehicle does not start traveling within a certain period of time, the process returns to step S1. Further, in step S10 (authentication 2), processing when authentication is established, that is, when the crew member indicated by the crew member code acquired from the wearable terminal or the like matches the crew member indicated by the search result of the face image included in the in-vehicle image. Will be described later with reference to FIG.

With reference to FIG. 3, an example of the two-step verification process of the driver X wearing the wearable terminal W is shown. When the issue button of the digital tachograph 10 is pressed, the issue process is started (FIG. 3 (a)). The driver X brings the wearable terminal W belonging to the crew member A close to the reader 61, and an image including the face of the driver X is taken by the camera 23B for in-vehicle photography (FIG. 3B). At this time, the digital tachograph 10 acquires the crew code of the crew member A from the wearable terminal W, and performs face recognition on the captured video data. The digital tachograph 10 searches the face recognition DB 58 for crew members that match the feature points of the video data (FIG. 3 (c)). If the searched crew member matches the crew member A, the driver X is authenticated as the crew member A, the correct crew member A performs the warehousing process (Fig. 3 (d)), and the operation management of the crew member A is appropriate. Will be done. On the other hand, if the face of the searched crew member matches crew member B and does not match crew member A indicated by the acquired crew member code, driver X is crew member B and may be impersonating crew member A (Fig. 3). (E)). In this case, the authentication of the driver X is not established, the digital tachograph 10 sounds an alarm, and if the vehicle runs as it is, an alarm is transmitted to the office (FIG. 3 (f)), and the office PC 30. , The spoofing alert signal is saved. As a result, the operation manager can grasp the possibility of spoofing. Further, the digital tachograph 10 can emit a control signal to the vehicle body to stop the movement.

An operation example of the digital tachograph 10 after the two-step verification process of FIG. 2 will be described with reference to FIG. FIG. 4 is a flowchart showing an authentication process at the time of alcohol check of the present embodiment. If the authentication is established in step S10 (authentication 2) of FIG. 2, the CPU 11 determines whether or not the alcohol check is set to be performed (step S21). When performing an alcohol check, the crew blows on the sensor unit of the alcohol tester 60. This situation is photographed by the camera 23B for in-vehicle photography, and an image including the face of the crew member during the alcohol check (in-vehicle image) is input to the CPU 11. The CPU 11 performs face recognition on the in-vehicle image input from the camera 23B, and starts face recognition of the crew member (step S22). The CPU 11 determines whether or not the crew member authenticated in step S10 (authentication 2) and the crew member who has performed the alcohol check match (step S23). If they do not match, the CPU 11 generates a warning signal indicating that the crew members do not match, and issues an alarm from the speaker 20 (step S24). Further, the CPU 11 generates an alarm signal indicating that the spoofing operation is performed, and transmits a spoofing operation alarm to the office PC 30 via the communication unit 24 (step S25). After the processing in step S25 and when the alcohol check is not performed in step S21, the CPU 11 completes the warehousing process and starts collecting and recording the operation information as the record of the crew member authenticated in step S10 (step S26: warehousing). ). If there is a discrepancy in step S23, the digital tachograph 10 may be delivered by a crew member who has performed an alcohol check. Further, the processes of steps S22 to S25 may be performed periodically during operation.

Next, an operation example of the digital tachograph 10 after delivery will be described with reference to FIG. The CPU 11 determines whether or not the spoofing check during operation is set (step S31). If there is a setting, the CPU 11 determines whether or not the goods are being delivered (step S32). When the goods are being delivered, the CPU 11 acquires an in-vehicle image from the camera 23B that captures the inside of the vehicle at regular intervals and starts face recognition (step S33). Then, the CPU 11 determines whether or not the driving crew member, that is, the crew member included in the in-vehicle image and the crew member recording on the digital tachograph 10 match (step S34). If they do not match, the CPU 11 generates a warning signal indicating that the crew members do not match, and issues an alarm from the speaker 20 (step S35). Further, the CPU 11 generates an alarm signal indicating that the spoofing operation is performed, and transmits a spoofing operation alarm to the office PC 30 via the communication unit 24 (step S36). On the other hand, in step S34, if the crew members match, the process returns to step S32. In step S32, if the goods are not being delivered, the CPU 11 ends this process. In this way, the digital tachograph 10 can suppress spoofing during operation (between delivery and receipt) by periodically repeating the processes of steps S32 to S36.

As described above, in the present embodiment, at the time of delivery processing, authentication is performed in two stages of authentication by crew code (identification information) and face authentication (biometric authentication). As a result, it is possible to prevent an incorrect crew code input and spoofing, generate an alarm signal in the case of an incorrect crew member, and perform a delivery process (operation management start process) in the case of a correct crew member. Therefore, the operation management of the crew can be appropriately performed. Further, by searching for a person who matches the face image of the driver (the person who intends to perform the warehousing process) from the crew members registered in advance in the crew member information DB 55, the person who tried to impersonate can be identified. Further, it can be determined whether or not the person is a registered person such as a person in the company.

Further, in the present embodiment, it is determined whether or not the two-step-certified crew member and the driver performing the alcohol check match. As a result, it is possible to prevent fraud such as, for example, when a two-step-certified crew member is drinking alcohol, another person performs an alcohol check and tries to pass the alcohol check. Furthermore, by periodically performing face recognition of the driver even while driving, it is possible to prevent fraud in which the driver is replaced by a person other than the crew member who was authenticated before leaving the car. Further, since the driver's face authentication is performed based on the output of the camera 23B for in-vehicle photography and no special operation by the driver is required, the burden of authentication can be reduced.

The present invention is not limited to the above-described embodiment, and can be appropriately modified, improved, and the like. In addition, the material, shape, size, numerical value, form, number, arrangement location, etc. of each component in the above-described embodiment are arbitrary and are not limited as long as the present invention can be achieved. For example, in the above-described embodiment, authentication is performed using face recognition for the output image of the camera 23B, but biometric authentication using biometric information such as fingerprints, voiceprints, glows, retinas, and veins other than face recognition is performed. You may. In this case, by providing a means for acquiring biometric information such as a fingerprint sensor on the steering wheel of the driver's seat, biometric authentication can be performed without burdening the crew.

Further, the authentication process at the time of alcohol check and the authentication process during operation described with reference to FIGS. 4 and 5 may be repeatedly executed at different frequencies. In addition, when multiple persons are confirmed in the in-vehicle video, if there is a crew member in the vehicle who is suspended or contains information such as the possibility of drug use in the crew information DB 55, It can be said that spoofing is likely to occur. In this case, by increasing the frequency of the authentication process repeated during operation, spoofing can be effectively suppressed even in a situation where spoofing is likely to occur.

Here, the features of the on-board unit and the operation management system according to the above-described embodiment of the present invention are briefly summarized and listed below in [1] to [6], respectively.
[1] An on-board unit (digital tachograph 10) mounted on a vehicle and collecting operation information of the vehicle.
An acquisition unit (reader 61, CPU 11) that acquires the identification information from an ID storage medium (wearable terminal W) that stores identification information that identifies a crew member, which is possessed by the driver of the vehicle.
The first authentication unit (CPU11) that determines whether or not the acquired identification information matches any of the identification information that identifies the crew member registered in advance in the first database (crew information DB55).
A first extraction unit (camera I / F16, CPU11) for extracting biological information of the driver, and
A first search unit (CPU11) that searches for a crew member that matches the biometric information extracted by the first extraction unit from the biometric information of the crew member registered in advance in the second database (face recognition data DB 58).
The second authentication unit (CPU11) that determines whether or not the crew member whose identification information is determined to match by the first authentication unit and the crew member searched by the first search unit match.
The delivery processing unit (CPU11) that performs the delivery processing for the crew members determined to match by the second authentication unit, and
An on-board unit including an alarm unit (CPU 11) that generates an alarm signal when it is determined that the second authentication unit does not match.
[2] A second extraction unit (camera I / F16, CPU11) that extracts biological information of the driver who is driving the vehicle after the warehousing process is performed.
It is provided with a third authentication unit (CPU11) for determining whether or not the crew member to be processed by the delivery processing unit and the driver whose biometric information has been extracted by the second extraction unit match.
The vehicle-mounted device according to the above [1], wherein the alarm unit generates an alarm signal when it is determined that the third authentication unit does not match.
[3] The first extraction unit according to the above [1] or [2], wherein the first extraction unit extracts recognition data as the biological information from an image obtained by photographing a part of the driver's body. In-vehicle device.
[4] The first extraction unit extracts face recognition data as the biometric information from an image of the driver's face.
The first search unit is characterized in that it searches for a crew member who matches the face recognition data extracted by the first extraction unit from the face recognition data of the crew member registered in advance in the second database. The in-vehicle device according to the above [3].
[5] A third extraction unit (camera I / F16, CPU11) that extracts face recognition data as biometric information from an image of the driver's face performing an alcohol check.
A second search unit (CPU11) that searches for a crew member that matches the face recognition data extracted by the third extraction unit from the crew member's face recognition data registered in advance in the second database.
It is characterized by including a fourth authentication unit (CPU11) for determining whether or not the crew member determined to match by the first authentication unit and the crew member searched by the second search unit match. The in-vehicle device according to the above [4].
[6] The on-board unit (digital tachograph 10) according to any one of the above [1] to [5].
A management device (office PC30) that can communicate with the on-board unit and manages the operation of the vehicle.
An operation management system (5) including the first and second databases (crew information DB55, face recognition data DB58).
The on-board unit transmits the alarm signal to the management device, and the vehicle-mounted device transmits the alarm signal to the management device.
The management device is an operation management system characterized in that the received alarm signal is recorded together with the operation information.

5 Operation management system 10 Digital tachograph 11 CPU (acquisition unit, first to third authentication units, first to third extraction units, first to second search units, alarm unit)
15 GPS receiver 17 Recording unit 20 Speaker 22 SW input unit 23A, 23B Camera 24 Communication unit 25 Power supply unit 26A Non-volatile memory 26B Volatile memory 52,60 Alcohol tester 54 External storage device 55 Crew information database (DB)
58 Face recognition data DB
61 Reader 65 Memory card

Claims (6)

An on-board unit that is mounted on a vehicle and collects operation information of the vehicle.
An acquisition unit that acquires the identification information from an ID storage medium that stores the identification information that identifies the crew member, which is possessed by the driver of the vehicle.
The first authentication unit that determines whether or not the acquired identification information matches any of the identification information that identifies the crew members registered in advance in the first database.
The first extraction unit that extracts the driver's biological information and
A first search unit that searches for crew members that match the biometric information extracted by the first extraction unit from the biometric information of the crew members registered in advance in the second database.
A second authentication unit that determines whether or not the crew member whose identification information is determined to match by the first authentication unit and the crew member searched by the first search unit match.
The delivery processing department that performs the delivery processing for the crew members judged to match by the second certification department,
An on-board unit including an alarm unit that generates an alarm signal when it is determined that the second authentication unit does not match. A second extraction unit that extracts the biometric information of the driver who is driving the vehicle after the delivery process is performed,
It is provided with a third authentication unit that determines whether or not the crew member to be processed by the delivery processing unit and the driver whose biometric information has been extracted by the second extraction unit match.
The vehicle-mounted device according to claim 1, wherein the alarm unit generates an alarm signal when it is determined that the third authentication unit does not match. The vehicle-mounted device according to claim 1 or 2, wherein the first extraction unit extracts recognition data as the biological information from an image obtained by photographing a part of the driver's body. The first extraction unit extracts face recognition data as the biometric information from an image of the driver's face.
The first search unit is characterized in that it searches for a crew member who matches the face recognition data extracted by the first extraction unit from the crew member's face recognition data registered in advance in the second database. The vehicle-mounted device according to claim 3. A third extraction unit that extracts face recognition data as biometric information from an image of the driver's face performing an alcohol check, and
A second search unit that searches for a crew member that matches the face recognition data extracted by the third extraction unit from the crew member's face recognition data registered in advance in the second database.
4. The claim 4 is characterized by comprising a crew member determined to match by the first certification unit and a fourth certification unit that determines whether or not the crew member searched by the second search unit matches. In-vehicle device described in. The on-board unit according to any one of claims 1 to 5.
A management device that can communicate with the on-board unit and manages the operation of the vehicle,
An operation management system including the first and second databases.
The on-board unit transmits the alarm signal to the management device, and the vehicle-mounted device transmits the alarm signal to the management device.
The management device is an operation management system characterized in that the received alarm signal is recorded together with the operation information.

Images