JP2021143513A - Key management system - Google Patents

Abstract

To provide a key management system that can prevent identity theft.SOLUTION: A key management system is provided with: a key management unit 13 that manages the key medium extraction; a first acquisition unit 14 that acquires biometric information of a user; a second acquisition unit 15 that acquires information different from the biometric information acquired by the first acquisition unit 14 regarding the user; a determination unit that determines whether or not the biometric information acquired by the first acquisition unit 14 and the information about the user acquired by the second acquisition unit 15 belong to the same user; and a permission unit that permits extraction of the key medium managed by the key management unit 13 if the determination unit has determined that it is the same user.SELECTED DRAWING: Figure 1

Description

The present invention relates to a key management system that manages a key medium.

Conventionally, for example, in an accommodation facility, the user may settle the accommodation fee with an automatic settlement machine at the time of check-in. In this case, the user pays the accommodation fee with an automatic payment machine, so that the key medium for unlocking the door of the room in which the user stays is handed over as usable.

Japanese Unexamined Patent Publication No. 2002-13324

However, it is difficult to prevent spoofing because the identity of the user cannot be confirmed when the key medium is handed over as usable by the automatic payment machine.

An object of the present invention is to provide a key management system capable of preventing spoofing.

The key management system of the present invention includes a key management unit that manages extraction of a key medium, a first acquisition unit that acquires biometric information of a user, and the living body acquired by the first acquisition unit relating to the user. The second acquisition unit that acquires information different from the information, the biometric information acquired by the first acquisition unit, and the information about the user acquired by the second acquisition unit are used in the same manner. A judgment unit that determines whether or not the user belongs to a person, and a permission unit that permits extraction of the key medium managed by the key management unit when the judgment unit determines that the user is the same user. , Is provided.

In addition, the first acquisition unit is configured by an imaging device that acquires a user's face image.

In addition, the second acquisition unit is configured by a reading device that acquires a face image from an identity verification document.

Further, the reading device is composed of a scanner that reads the face image described in the identity verification document or a reader that reads the face image stored in the IC of the identity verification document.

Further, a first storage unit for storing a face image provided by the user in advance is further provided, and the second acquisition unit acquires a face image previously provided by the user from the first storage unit. Is what you do.

In addition, the determination unit extracts elements from the user's face image acquired by the first acquisition unit and the face image acquired by the second acquisition unit, and the extracted elements are obtained from each of the extracted elements. It determines whether or not they match.

In addition, the determination unit identifies each user from the biometric information of the user acquired by the first acquisition unit and the information about the user acquired by the second acquisition unit, and each of them is identified. It determines whether or not the users match.

Further, the payment unit is further provided, and the permission unit is a key medium managed by the key management unit when the determination unit determines that the user is the same user and the payment unit completes the payment. It allows extraction.

Further, a second storage unit is further provided, the second acquisition unit acquires information identifying a user, and the second storage unit is the user acquired by the second acquisition unit. The information for specifying the keyed medium is stored in association with the information regarding the key medium for which extraction is permitted by the permission unit.

According to the key management system according to claim 1, the key medium can be handed over after confirming the identity, and spoofing can be prevented.

It is the schematic of the key management system which shows one Embodiment of this invention. It is a block diagram of the key management system of the same as above. Same as above It is a sequence diagram which shows the processing procedure of a key management system.

Hereinafter, an embodiment of the present invention will be described with reference to the drawings.

FIG. 1 shows a schematic diagram of the key management system 10. The key management system 10 shown in the present embodiment is used for a private lodging check-in system in which the key medium is handed over to the guest who is the guest after confirming the identity at the time of checking in the private lodging.

The key management system 10 is installed in an automatic payment machine 12, a key management unit 13, a first acquisition unit 14 and a second acquisition unit 15, installed in a predetermined store 11, and a management company that manages private lodging. It is equipped with a server 16 which is a management device. At least the automatic checkout machine 12 installed in the store 11 and the server 16 can communicate with each other via the network.

The store 11 is a place where the user performs the procedure, for example, a partner hotel, a convenience store, a train station, an airport, or the like.

In addition, the automatic settlement machine 12 is operated by the user and is used for inputting the user's information and pre-paying the accommodation fee. The automatic checkout machine 12 has a display operation unit 18 such as a touch panel display and a speaker, and in addition to inputting user information for procedures, displays procedure guidance or outputs voice.

In addition, the key management unit 13 manages the extraction of a plurality of key media for locking and unlocking the doors of accommodation facilities such as rooms of private houses and apartment houses used for private lodging. The key management unit 13 locks a plurality of key media so that they cannot be removed, and when the user completes a predetermined procedure, the predetermined key medium can be unlocked and the user can remove the key medium. And. The key management unit 13 has a display unit 24 or the like that displays a key number or the like that can be extracted. The key medium includes a physical key for physically operating the lock and an electronic key such as an RFID (radio frequency identifier), an IC chip, or a card key having a one-dimensional or two-dimensional barcode.

In addition, the first acquisition unit 14 acquires the biometric information of the user. The biometric information of the user includes a face image, a voiceprint, a fingerprint, a vein, an iris and the like. The first acquisition unit 14 of the present embodiment is composed of an image pickup device 20 that acquires a face image of a user. The image pickup apparatus 20 (first acquisition unit 14) may be placed separately from the automatic settlement machine 12, or may be provided in the automatic settlement machine 12.

In addition, the second acquisition unit 15 acquires information different from the biometric information acquired by the first acquisition unit 14 regarding the user. The second acquisition unit 15 of the present embodiment is composed of a reading device 21 that reads a face image and personal information such as a name and an address from a personal identification document possessed by the user.

Identity verification documents include media such as passports, driver's licenses, My Number cards, health insurance cards, and various cards in which user's personal information is described, stored, and linked. The passport, driver's license, my number card, etc. have personal information such as a face image and name and address, and also have an IC chip, and this IC chip also has personal information such as a face image, name and address. Is remembered.

As the reading device 21 of the present embodiment, a scanner 22 that reads and acquires the face image and the personal information described in the personal identification document possessed by the user is used.

The reading device 21 may use a reader (IC reader) that reads a face image and personal information from an IC chip such as a passport, a driver's license, and an Individual Number Card. Further, the reading device 21 (second acquisition unit 15) may be separately placed with respect to the automatic settlement machine 12, or may be provided in the automatic settlement machine 12. Further, the second acquisition unit 15 may also be used as the image pickup device 20 of the first acquisition unit 14, and the image pickup device 20 may read and acquire the face image and the person information described in the identity verification document. In this case, the automatic checkout machine 12 may guide the identity verification document to be held over the image pickup device 20.

In addition, the server 16 manages information related to accommodation and controls the lending procedure of key media.

Next, FIG. 2 shows a block diagram of the key management system 10.

In the key management system 10, the automatic settlement machine 12, the key management unit 13, the first acquisition unit 14, the second acquisition unit 15, and the server 16 are connected to each other so as to be able to communicate with each other via a network. At least a part of the key management unit 13, the first acquisition unit 14, and the second acquisition unit 15 may be communicably connected to the automatic settlement machine 12.

The automatic payment machine 12 has a payment unit 30 in which the user pays the accommodation expenses by cash, credit card, or the like.

Further, the server 16 includes a determination unit 31, a permission unit 32, and a storage unit 33.

The determination unit 31 determines whether or not the biometric information acquired by the first acquisition unit 14 and the information about the user acquired by the second acquisition unit 15 belong to the same user. .. The determination unit 31 of the present embodiment extracts each element from the face image of the user acquired by the first acquisition unit 14 and the face image acquired by the second acquisition unit 15, respectively. By determining whether or not the extracted elements match, it is determined whether or not they belong to the same user.

The permission unit 32 permits the extraction of a predetermined key medium managed by the key management unit 13 when the determination unit 31 determines that the user is the same user. Specifically, the permission unit 32 extracts a predetermined key medium managed by the key management unit 13 when the determination unit 31 determines that the user is the same user and the settlement unit 30 completes the payment. to approve.

The storage unit 33 stores the biometric information and name of the user, information on accommodation such as accommodation date, accommodation location and accommodation expenses, and a guest list. The storage unit 33 includes functions of a first storage unit 34 for storing the biometric information of the user and a second storage unit 35 for storing the guest list.

The first storage unit 34 stores the user's biometric information in association with the user's personal information such as a name and an identification number (including an accommodation member number and an identity verification document number).

The second storage unit 35 contains information that identifies the user acquired by the second acquisition unit 15 (identity information such as an image of the identity verification document and the name and identity verification document number read from the image). The information about the key medium for which extraction is permitted by the permission unit 32 is stored in association with the information, that is, the guest list is stored.

Next, the processing procedure of the key management system 10 will be described with reference to the sequence diagram of FIG.

The user goes to the store 11 and inputs information about the user such as the user's name, address, and contact information into the automatic checkout machine 12 (step S1).

When the automatic checkout machine 12 receives the input of information about the user, the display operation unit 18 informs the display operation unit 18 that the user's face is to be photographed, and also instructs the image pickup device 20 to photograph the user's face image (step). S2).

When the user turns his face toward the image pickup device 20, the user's face is photographed by the image pickup device 20.

The automatic checkout machine 12 captures the user's face image taken by the image pickup device 20 (step S3).

When the automatic checkout machine 12 can correctly acquire the user's face image, the display operation unit 18 guides the scanner 22 to read the identity verification document, and instructs the scanner 22 to read the identity verification document (step). S4).

The user reads the identity verification document containing the face image with the scanner 22.

The automatic checkout machine 12 captures the identity verification document image read by the scanner 22 (step S5).

When the automatic checkout machine 12 can correctly acquire the identity verification document image, the face image of the user himself / herself taken by the imaging device 20 and the identity verification document image (face image) read from the identity verification document by the scanner 22 are displayed. It is transmitted to the server 16 (step S6).

The server 16 extracts elements from the face image of the user himself / herself and the face image of the identity verification document, and collates whether or not the extracted elements match, so that the server 16 belongs to the same user. It is determined whether or not it is (step S7).

As a result of the collation, the server 16 determines that the users belong to the same user, and transmits the collation result, the settlement amount of the accommodation fee, and the like to the automatic settlement machine 12 (step S8).

When the automatic settlement machine 12 receives the collation result, the settlement amount of the accommodation fee, and the like from the server 16, the display operation unit 18 displays the settlement amount (step S9).

The user confirms the settlement amount displayed on the display operation unit 18 of the automatic settlement machine 12, and inserts cash or a credit card into the automatic settlement machine 12 to settle the accommodation expenses (step S10).

When the settlement of the accommodation fee is completed, the automatic settlement machine 12 transmits a settlement completion notification to the server 16 (step S11).

When the server 16 receives the settlement completion notification from the automatic settlement machine 12, the server 16 permits the extraction of the key medium of the accommodation facility where the user stays among the key media managed by the key management unit 13. Then, the automatic settlement machine 12 is notified of the key number of the key medium for which extraction is permitted (step S12).

When the automatic checkout machine 12 receives the key number notification from the server 16, it transmits the key number notification to the key management unit 13 (step S13).

Then, when the key management unit 13 receives the key number, the key medium of the key number is unlocked, and the key number of the key medium that can be extracted is displayed on the display unit 24. Further, also in the automatic settlement machine 12, the key number of the key medium that can be extracted is displayed on the display operation unit 18 (step S14).

The user confirms the key number displayed on the automatic settlement machine 12 or the key management unit 13, and extracts the key medium of the key number from the key management unit 13 (step S15).

When the key medium is extracted, the key management unit 13 transmits the extraction information of the key medium to the server 16 (step S16).

When the server 16 receives the extraction information of the key medium, the server 16 receives the personal information such as the name and identification number (identity verification document number) that identifies the user acquired by the second acquisition unit 15, and the key medium that permits the extraction. The guest list is created by storing the information in the storage unit 33 (second storage unit 35) in association with the information related to the information (step S17).

Then, the user who has extracted the key medium goes to the accommodation facility, unlocks the door using the key medium, and stays overnight (step S18).

Further, in step S7, if the determination unit 31 determines that the user does not belong to the same user as a result of the collation, the server 16 transmits the collation result to the automatic settlement machine 12. The automatic checkout machine 12 displays the collation result by the display operation unit 18 and guides the user to redo the procedure using his / her own identity verification document.

Then, according to the key management system 10 of the present embodiment, the biometric information acquired by the first acquisition unit 14 and the biometric information acquired by the first acquisition unit 14 are different from the second acquisition unit. In order to determine whether or not the information about the user acquired in 15 belongs to the same user, the key medium can be handed over to the user after confirming the identity, and spoofing can be prevented.

Further, since the image pickup device 20 of the first acquisition unit 14 acquires the face image of the user and the reading device 21 of the second acquisition unit 15 acquires the face image from the identity verification document, the same use is used from the face image. It is possible to accurately judge whether or not it belongs to a person. As the reading device 21, the user's face image can be acquired by using a scanner 22 that reads the face image described in the identity verification document or a reader that reads the stored face image on the IC chip of the identity verification document.

Further, the determination unit 31 extracts each element from the user's face image acquired by the first acquisition unit 14 and the face image acquired by the second acquisition unit 15, and the extracted elements are obtained. By determining whether or not they match, it is possible to accurately determine whether or not they belong to the same user.

Further, by storing the face image provided by the user in advance in the first storage unit 34, the second acquisition unit 15 is the face image previously provided by the user from the first storage unit 34. Therefore, it is possible to save the trouble of scanning the identity verification document with the scanner 22 or the reader at the time of the procedure, and the procedure can be simplified.

In the first storage unit 34, biometric information such as a user's face image, voiceprint, fingerprint, vein, and iris is stored in the user's name and identification number (including the accommodation member number and identity verification document number). It may be stored in advance in the first storage unit 34 in association with the personal information such as. Face images, voiceprints, irises, etc. can be obtained from smartphones, etc., so they can be provided by users when making reservations. Fingerprints, veins, etc. may be registered using the first acquisition unit 14 at the time of the previous accommodation use procedure.

In this case, the first acquisition unit 14 is not limited to the image pickup apparatus 20 described above, and may use an apparatus corresponding to acquiring biological information such as a face image, a voiceprint, a fingerprint, a vein, and an iris. In addition, the second acquisition unit 15 reads and acquires the biometric information for confirming the personal information of the corresponding user from the first storage unit 34 in response to the input of the user information at the time of the procedure. Then, the determination unit 31 stores the biometric information acquired by the first acquisition unit 14 and the biometric information stored in the first storage unit 34, which is the information about the user acquired by the second acquisition unit 15. Judges whether or not the information belongs to the same user.

In addition, the judgment unit 31 identifies each user by identifying the user from the biometric information of the user acquired by the first acquisition unit 14 and the information about the user acquired by the second acquisition unit 15. It may be judged whether or not the users who have been made match. In this case, as described above, the biometric information of the user is associated with the personal information such as the user's name and identification number (including the accommodation member number) and stored in advance in the first storage unit 34. , The user can be identified from the biometric information of the user acquired by the first acquisition unit 14 and the information about the user acquired by the second acquisition unit 15.

In this case, the judgment unit 31 identifies the user by performing face authentication from the user's face information acquired by the first acquisition unit 14 and the user's face image acquired by the second acquisition unit 15. You may.

In this case, the determination unit 31 identifies the user by performing face authentication from the user's face image acquired by the first acquisition unit 14 and the user's face image acquired by the second acquisition unit 15. However, it may be determined whether or not the identified users match each other.

Further, the image data of the identity verification document provided by the user in advance may be stored in the first storage unit 34. In this case, since the second acquisition unit 15 can acquire the image data of the identity verification document provided by the user in advance from the first storage unit 34, the identity verification document is scanned by the scanner 22 during the procedure. It is possible to save the trouble of reading with a reader or a reader, and simplify the procedure.

In addition, the user may settle the accommodation fee in advance using a credit card or the like at the time of booking the accommodation. By doing so, the permission unit 32 can permit the extraction of the predetermined key medium managed by the key management unit 13 when the determination unit 31 determines that the user is the same, and thus automatically. The settlement machine 12 does not require the settlement unit 30, and the procedure can be simplified.

Furthermore, the key management unit 13 has stated that the key number of the key medium that can be extracted is displayed on the display unit 24, but the display method is not limited to this. For example, a light emitting element such as an LED may be arranged in the vicinity of each key medium, and the light emitting element arranged in the vicinity of the removable key medium may be turned on or blinked to indicate that the key medium can be extracted. Alternatively, a key medium that can be extracted may be popped up so that it can be determined that the key medium can be extracted.

In addition, it is said that the guest list is created when the keyed medium extraction information is received, but the timing of creating the guest list is not limited to this. For example, a list is created when the user information is entered, and if the accommodation is not performed, such as when the identity verification is not performed correctly or the key medium is not extracted, the accommodation is concerned. The person information may be deleted. In addition, the guest list may be created when the payment by the user is completed by the automatic payment machine 12.

In addition, when renting out the key medium, the automatic payment machine 12 presents information such as restaurant information and shopping information near the accommodation facility from information such as the age and gender of the user, and from the automatic payment machine 12 as necessary. You may print it out.

Further, such a key management system can be applied not only to private lodgings but also to hotels with automatic check-in and, for example, car sharing using key media.

Although the embodiments of the present invention and modifications thereof have been described above, various combinations of configurations, some omissions, replacements, and changes are also possible.

10 Key management system
13 Key Management Department
14 First acquisition department
15 Second acquisition department
20 Imaging device
21 Reader
22 scanner
30 Payment Department
31 Judgment Department
32 Permit
34 First storage unit
35 Second memory

Claims (9)

The key management department that manages the extraction of key media,
The first acquisition unit that acquires the biometric information of the user,
A second acquisition unit that acquires information different from the biometric information acquired by the first acquisition unit regarding the user, and a second acquisition unit.
A determination unit that determines whether or not the biometric information acquired by the first acquisition unit and the information about the user acquired by the second acquisition unit belong to the same user.
When the determination unit determines that the user is the same, the permission unit that permits the extraction of the key medium managed by the key management unit and the permission unit.
A key management system characterized by being equipped with. The key management system according to claim 1, wherein the first acquisition unit is configured by an imaging device that acquires a user's face image. The key management system according to claim 2, wherein the second acquisition unit is configured by a reading device that acquires a face image from an identity verification document. The key management system according to claim 3, wherein the reading device includes a scanner that reads a face image described in an identity verification document or a reader that reads a face image stored in an IC included in the identity verification document. Further provided with a first storage unit for storing a face image provided by the user in advance,
The key management system according to claim 1 or 2, wherein the second acquisition unit acquires a face image previously provided by a user from the first storage unit. The determination unit extracts elements from the user's face image acquired by the first acquisition unit and the face image acquired by the second acquisition unit, and the extracted elements match each other. The key management system according to any one of claims 3 to 5, wherein it is determined whether or not the key management system is used. The determination unit identifies each user from the biometric information of the user acquired by the first acquisition unit and the information about the user acquired by the second acquisition unit, and each identified user. The key management system according to any one of claims 1 to 5, wherein it is determined whether or not the two match. With more payment department
The permission unit is characterized in that when the determination unit determines that the user is the same user and the settlement unit completes the payment, the permission unit permits the extraction of the key medium managed by the key management unit. The key management system according to any one of claims 1 to 7. With a second storage
The second acquisition unit acquires information that identifies the user, and obtains information that identifies the user.
The second storage unit is characterized in that the information for identifying the user acquired by the second acquisition unit and the information regarding the key medium for which extraction is permitted by the permission unit are associated and stored. The key management system according to any one of claims 1 to 8.

Images