JP2021149812A - Authentication device, computer program, and authentication system - Google Patents

Abstract

To improve convenience of an authentication system.SOLUTION: A first authentication device 121 performs first authentication processing involving a first processing load for authenticating a person to be authenticated as a user of an object. A second authentication device 122 performs second authentication processing involving a second processing load higher than the first processing load for authenticating the person to be authenticated as the user of the object. A control device 13 executes operation control of a device to be controlled 40 mounted on the object based on at least one of a result of the first authentication processing and a result of the second authentication processing. The control device 13 causes the first authentication device 121 to repeatedly execute the first authentication processing until the result of the second authentication processing is received.SELECTED DRAWING: Figure 1

Description

The present invention relates to an authentication device that performs an authentication process that authenticates a person to be authenticated as a user of an object. The present invention also relates to a computer program that can be executed by the processing unit of the authentication device. The present invention is also related to an authentication system including the authentication device.

Patent Document 1 discloses an authentication system applied to a vehicle as an example of an object. In the system, authentication is performed through communication by radio waves between a control device that controls the operation of a locking device as an example of a controlled device and a key as an example of a mobile device possessed by a person to be authenticated. If the authentication is successful, the door of the vehicle will be unlocked.

Japanese Unexamined Patent Publication No. 2016-21334

An object of the present invention is to enhance the convenience of the authentication system.

The first aspect for achieving the above objectives is an authentication system.
A first authentication device that performs a first authentication process with a first processing load to authenticate the person to be authenticated as a user of the object,
A second authentication device that performs a second authentication process with a second processing load higher than the first processing load in order to authenticate the person to be authenticated as a user of the object.
A control device that executes operation control of the controlled device mounted on the object based on at least one of the result of the first authentication process and the result of the second authentication process.
Is equipped with
The control device causes the first authentication device to repeatedly execute the first authentication process until the result of the second authentication process is received.

The second aspect for achieving the above object is an authentication device.
The result of the first authentication process can be accepted from the first authentication device that performs the first authentication process with the first processing load in order to authenticate the person to be authenticated as the user of the object, and the person to be authenticated can be received. A reception unit that can accept the result of the second authentication process from a second authentication device that performs a second authentication process with a second processing load higher than the first processing load in order to authenticate as a user of the object. When,
A processing unit that executes operation control of the controlled device mounted on the object based on at least one of the result of the first authentication process and the result of the second authentication process.
Is equipped with
The processing unit causes the first authentication device to repeatedly execute the first authentication process until the receiving unit receives the result of the second authentication process.

A third aspect for achieving the above object is a computer program that can be executed by the processing unit of the control device.
By being executed, the control device
In order to authenticate the person to be authenticated as the user of the object, the first authentication process involving the first processing load is executed by the first authentication device.
The result of the second authentication process is obtained from the second authentication device that performs the second authentication process with the second processing load higher than the first processing load in order to authenticate the person to be authenticated as the user of the object. Until it is accepted, the result of the first authentication process is accepted.
Based on at least one of the result of the first authentication process and the result of the second authentication process, the operation control of the controlled device mounted on the object is executed.

It is considered that the result obtained by the second authentication process having a higher processing load provides a more accurate judgment as to whether the person to be authenticated is a user of the object. According to the configurations according to each of the first to third aspects described above, the result of the second authentication process is preferentially referred to regardless of the result of the first authentication process, and it is determined whether or not the operation control of the controlled device is possible. It is reflected in. As a result, it is possible to improve the robustness of the authentication system by using different authentication processes in combination, and to suppress a decrease in the accuracy of the authentication process. Therefore, the convenience of the authentication system can be enhanced.

A fourth aspect for achieving the above objectives is an authentication system.
A first authentication device that performs a first authentication process with a first processing load to authenticate the person to be authenticated as a user of the object,
A second authentication device that performs a second authentication process with a second processing load higher than the first processing load in order to authenticate the person to be authenticated as a user of the object.
A control device that executes operation control of the controlled device mounted on the object based on at least one of the result of the first authentication process and the result of the second authentication process.
Is equipped with
The control device determines whether to activate the second authentication device according to the result of having the first authentication device repeatedly execute the first authentication process.

The fifth aspect for achieving the above object is an authentication device.
The result of the first authentication process can be accepted from the first authentication device that performs the first authentication process with the first processing load in order to authenticate the person to be authenticated as the user of the object, and the person to be authenticated can be received. A reception unit that can accept the result of the second authentication process from a second authentication device that performs a second authentication process with a second processing load higher than the first processing load in order to authenticate as a user of the object. When,
A processing unit that executes operation control of the controlled device mounted on the object based on at least one of the result of the first authentication process and the result of the second authentication process.
Is equipped with
The processing unit determines whether to start the second authentication device according to the result of having the first authentication device repeatedly execute the first authentication process.

The sixth aspect for achieving the above object is a computer program that can be executed by the processing unit of the authentication device.
By being executed, the control device
In order to authenticate the person to be authenticated as the user of the object, the first authentication process involving the first processing load is executed by the first authentication device.
The first authentication device is made to accept the result of repeatedly executing the first authentication process.
According to the result, in order to authenticate the person to be authenticated as a user of the object, a second authentication device that performs a second authentication process with a second processing load higher than the first processing load is started. Let me decide.

For example, when it is not possible to confirm that the person to be authenticated is the user of the object as a result of the first authentication process, the second authentication process having a higher processing load is executed as a backup, and the result is controlled. It can be reflected in the judgment of whether or not the operation control of the device is possible. It is considered that the result obtained by the second authentication process having a higher processing load provides a more accurate judgment as to whether the person to be authenticated is a user of the object. As a result, it is possible to suppress an increase in the processing load of the entire authentication system and also suppress a decrease in the accuracy of the authentication process. Therefore, the convenience of the authentication system can be enhanced.

The functional configuration of the authentication system according to one embodiment is illustrated. The vehicle to which the authentication system of FIG. 1 is applied is illustrated. An example of the flow of processing executed by the control device of FIG. 1 is shown. Another example of the flow of processing executed by the control device of FIG. 1 is shown.

An example of the embodiment will be described in detail below with reference to the accompanying drawings. FIG. 1 illustrates the functional configuration of the authentication system 10 according to the embodiment. The authentication system 10 is a system for executing an authentication process for authenticating the person to be authenticated 20 illustrated in FIG. 2 as a user of the vehicle 30. The vehicle 30 is an example of an object.

As illustrated in FIG. 1, the authentication system 10 includes an imaging device 11. The image pickup device 11 is mounted at an appropriate position on the vehicle 30. The image pickup device 11 is configured to acquire an image in which the person to be authenticated 20 is reflected and output image information I corresponding to the image. The image information I may be in the form of analog data or digital data.

The authentication system 10 includes a first authentication device 121. The first authentication device 121 is configured to receive image information I from the image pickup device 11. When the image information I is in the form of analog data, the first authentication device 121 may include an appropriate conversion circuit including an A / D converter. The first authentication device 121 processes image information I, which is a form of digital data.

The first authentication device 121 is configured to execute the first face authentication process based on the image information I. The first face recognition process is performed based on the template matching method. The first face recognition process is an example of the first face recognition process. Since the template matching method itself is well known, detailed description thereof will be omitted.

As a result of the first face recognition process, when it is determined that the person to be authenticated 20 reflected in the image corresponding to the image information I is a user of the vehicle 30 registered in advance, the first authentication device 121 uses the image. The first face authentication process based on the information I is established. When it is determined that the person to be authenticated 20 reflected in the image corresponding to the image information I is not a user of the vehicle 30 registered in advance, the first authentication device 121 performs the first face recognition process based on the image information I. Not established.

The first authentication device 121 is configured to output the first result information R1 corresponding to the result of the first face authentication process in the form of digital data. The first result information R1 may be binary information indicating the success or failure of the first face recognition process, or numerical information indicating the degree of matching between the face image corresponding to the image information I and the face image corresponding to the template. It may be.

To perform the first face recognition process, the first authentication device 121 may include a general purpose microprocessor that operates in cooperation with a general purpose memory. Examples of general-purpose microprocessors include CPUs, MPUs, and GPUs. A ROM or RAM can be exemplified as a general-purpose memory. In this case, the ROM may store a computer program that executes the first face recognition process. The ROM is an example of a storage medium that stores a computer program. The processor specifies at least a part of the computer program stored in the ROM, expands it on the RAM, and executes the first face authentication process in cooperation with the RAM. The above computer program may be pre-installed in the general-purpose memory, or may be downloaded from an external server via a communication network and installed in the general-purpose memory. In this case, the external server is an example of a storage medium that stores a computer program.

In order to execute the first face authentication process, the first authentication device 121 may include a dedicated integrated circuit capable of executing the above-mentioned computer program such as a microcontroller, ASIC, and FPGA. In this case, the above computer program is pre-installed in the storage element included in the dedicated integrated circuit. The storage element is an example of a storage medium that stores a computer program. The first authentication process can also be performed by a combination of a general purpose microprocessor and a dedicated integrated circuit.

The authentication system 10 includes a second authentication device 122. The second authentication device 122 is also configured to receive image information I from the image pickup device 11. When the image information I is in the form of analog data, the second authentication device 122 may include an appropriate conversion circuit including an A / D converter. The second authentication device 122 processes the image information I, which is in the form of digital data.

The second authentication device 122 is configured to execute the second face authentication process based on the image information I. The second face recognition process is performed using deep learning. The face recognition process using deep learning is a face recognition process having a higher processing load than the template matching method. The second face recognition process is an example of the second face recognition process. Since the face recognition process itself using deep learning is well known, detailed description thereof will be omitted.

As a result of the second face recognition process, when it is determined that the person to be authenticated 20 reflected in the image corresponding to the image information I is a user of the vehicle 30 registered in advance, the second authentication device 122 uses the image. The second face authentication process based on the information I is established. When it is determined that the person to be authenticated 20 reflected in the image corresponding to the image information I is not a user of the vehicle 30 registered in advance, the second authentication device 122 performs the second face authentication process based on the image information I. Not established.

The second authentication device 122 is configured to output the second result information R2 corresponding to the result of the second face authentication process in the form of digital data. The second result information R2 is binary information indicating the success or failure of the second face recognition process.

To perform the second face recognition process, the second authentication device 122 may include a general purpose microprocessor that operates in cooperation with the general purpose memory. Examples of general-purpose microprocessors include CPUs, MPUs, and GPUs. A ROM or RAM can be exemplified as a general-purpose memory. In this case, the ROM may store a computer program that executes the second face recognition process. The ROM is an example of a storage medium that stores a computer program. The processor specifies at least a part of the computer program stored in the ROM, expands it on the RAM, and executes the second face recognition process in cooperation with the RAM. The above computer program may be pre-installed in the general-purpose memory, or may be downloaded from an external server via a communication network and installed in the general-purpose memory. In this case, the external server is an example of a storage medium that stores a computer program.

In order to execute the second face authentication process, the second authentication device 122 may include a dedicated integrated circuit capable of executing the above-mentioned computer program such as a microcontroller, ASIC, and FPGA. In this case, the above computer program is pre-installed in the storage element included in the dedicated integrated circuit. The storage element is an example of a storage medium that stores a computer program. The second authentication process can also be performed by a combination of a general purpose microprocessor and a dedicated integrated circuit.

The authentication system 10 includes a control device 13. The control device 13 is mounted at an appropriate position on the vehicle 30.

The control device 13 includes a reception unit 131. The reception unit 131 is configured to receive the first result information R1 from the first authentication device 121. The reception unit 131 is configured to receive the second result information R2 from the second authentication device 122.

The control device 13 includes a processing unit 132 and an output unit 133. The processing unit 132 is configured to output the first control information C1 and the second control information C2 from the output unit 133 in the form of digital data. The first control information C1 is information for causing the first authentication device 121 to execute or stop the first face authentication process. The second control information C2 is information for causing the second authentication device 122 to execute or stop the second face authentication process.

The processing unit 132 is configured to output the third control information C3 from the output unit 133 based on at least one of the first result information R1 and the second result information R2. The third control information C3 is information for controlling the operation of the controlled device 40 mounted on the vehicle 30. The third control information C3 may be in the form of digital data or analog data. When the third control information C3 is in the form of analog data, the output unit 133 may include an appropriate conversion circuit including a D / A converter. Examples of the controlled device 40 include a locking device for an opening / closing body such as a door or a window, an opening / closing device for the opening / closing body, an engine, an air conditioner, a lighting device, an audiovisual device, a seat position adjusting device, and the like.

FIG. 3 shows an example of a processing flow executed by the processing unit 132 of the control device 13 configured as described above.

In this example, the processing unit 132 causes the first authentication device 121 to execute the first face authentication process, the first control information C1, and the second authentication device 122 to execute the second face authentication process, the second control information C2. Is output from the output unit 133 (STEP 11). That is, in this example, the first face recognition process and the second face recognition process are executed at the same time.

As described above, the processing load of the first face authentication process is lower than the processing load of the second face authentication process. Therefore, the first face recognition process is usually completed before the second face recognition process. In this example, the first face authentication process is repeatedly executed unless the processing unit 132 actively outputs the first control information C1 that stops the first face authentication process. Every time the first face authentication process is completed, the first result information R1 is output from the first authentication device 121 and accepted by the reception unit 131.

Subsequently, the processing unit 132 determines whether or not the second result information R2 has been received from the second authentication device 122 (STEP 12). That is, it is determined whether the result of the second face recognition process is confirmed.

When it is determined that the second result information R2 has been received through the reception unit 131 (YES in STEP 12), the processing unit 132 determines whether the result indicated by the second result information R2 is successful or unsuccessful in the second face recognition process. (STEP 13).

When the second result information R2 indicates that the second face recognition process has been established (YES in STEP 13), the processing unit 132 sends the third control information C3 that causes the controlled device 40 to perform the specified operation. Output from the output unit 133 (STEP 14). That is, the operation control of the controlled device 40 is permitted based on the result that the second face recognition process is established.

When the second result information R2 indicates that the second face recognition process has not been established (NO in STEP 13), the processing unit 132 does not output the third control information C3 from the output unit 133 (STEP 15). That is, the operation control of the controlled device 40 is prohibited based on the result that the second face recognition process is not established.

It is considered that the result obtained by the second face recognition process having a higher processing load provides a more accurate judgment as to whether the person to be authenticated 20 is a user of the vehicle 30. Therefore, regardless of the result of the first face recognition process, the result of the second face recognition process is preferentially referred to and reflected in the determination of whether or not the operation control of the controlled device 40 is possible. As a result, it is possible to improve the robustness of the authentication system 10 by using different face recognition processes in combination, and to suppress a decrease in the accuracy of the authentication process. Therefore, the convenience of the authentication system 10 can be enhanced.

When it is determined that the second result information R2 is not received through the reception unit 131 (NO in STEP 12), the processing unit 132 is authenticated based on the first result information R1 received from the first authentication device 121. An index value indicating the certainty that the person 20 is a user of the vehicle 30 is specified (STEP 16).

Indicator values can be provided in various ways. For example, when the first result information R1 indicates only the success or failure of the first face authentication process, the index value can be the number of times the first face authentication process is continuously established. Alternatively, when the first result information R1 is numerical information indicating the degree of matching between the face image corresponding to the image information I and the face image corresponding to the template, the index value can be a representative value of a plurality of matching degrees. Examples of representative values include an average value, a maximum value, an intermediate value, and a mode value.

Subsequently, the processing unit 132 determines whether the specified index value exceeds the first threshold value (STEP 17). The first threshold value is defined as a value of the number of consecutive establishments and the degree of coincidence that can be clearly determined that the person to be authenticated 20 is a user of the vehicle 30 based on the first face recognition process.

When it is determined that the specified index value does not exceed the first threshold value (NO in STEP 17), the processing unit 132 returns the processing to STEP 12. That is, while continuing the repetition of the first face recognition process, the result of the second face recognition process is awaited.

When it is determined that the specified index value exceeds the first threshold value (YES in STEP 17), the processing unit 132 sends the third control information C3 from the output unit 133 to the controlled device 40 to perform the specified operation. Output (STEP 14). That is, the operation control of the controlled device 40 is permitted based on the result that the first face recognition process is established. In this case, the processing unit 132 outputs the second control information C2 that causes the second authentication device 122 to stop the second face authentication process from the output unit 133.

That is, if it is determined that the person to be authenticated 20 is a user of the vehicle 30 based on the result of the first face recognition process while waiting for the result of the second face recognition process, the subject is to be authenticated. The result of the first face authentication process is referred to in the permission determination of the operation control of the control device 40, and the second face authentication process having a higher processing load is canceled. As a result, the time until the authentication process is completed can be shortened, and the increase in the processing load of the entire authentication system 10 can be suppressed.

As illustrated in FIG. 3, when it is determined that the specified index value does not exceed the first threshold value (NO in STEP 17), the processing unit 132 determines whether the index value is below the second threshold value. Uru (STEP 18). The second threshold is lower than the first threshold. The second threshold value is defined as a value of the number of consecutive failures and the degree of coincidence that can be clearly determined that the person to be authenticated 20 is not the user of the vehicle 30 based on the first face recognition process.

When it is determined that the specified index value does not fall below the second threshold value (NO in STEP 18), the processing unit 132 returns the processing to STEP 12. That is, while continuing the repetition of the first face recognition process, the result of the second face recognition process is awaited.

When it is determined that the specified index value is below the second threshold value (YES in STEP 18), the processing unit 132 second to the second authentication device 122 without outputting the third control information C3 from the output unit 133. The second control information C2 for stopping the face authentication process is output from the output unit 133 (STEP 15). That is, the operation control of the controlled device 40 is prohibited based on the result that the first face recognition process is not established.

That is, if it is determined that the person to be authenticated 20 is not a user of the vehicle 30 based on the result of the first face authentication process while waiting for the result of the second face authentication process, it is controlled. The result of the first face authentication process is referred to in the determination of prohibition of the operation control of the device 40, and the second face authentication process having a higher processing load is canceled. As a result, the time until the authentication process is completed can be shortened, and the increase in the processing load of the entire authentication system 10 can be suppressed.

FIG. 4 shows another example of the flow of processing executed by the processing unit 132 of the control device 13 configured as described above.

In this example, the processing unit 132 outputs the first control information C1 that causes the first authentication device 121 to execute the first face authentication process from the output unit 133 (STEP 21). That is, in this example, the execution of the first face recognition process is started first.

Similar to the example shown in FIG. 3, the first face recognition process is repeatedly executed. Every time the first face authentication process is completed, the first result information R1 is output from the first authentication device 121 and accepted by the reception unit 131.

Subsequently, the processing unit 132 specifies an index value indicating the certainty that the person to be authenticated 20 is a user of the vehicle 30 based on the first result information R1 received from the first authentication device 121 (STEP 22). .. As for the specification of the index value, the description given with reference to STEP 16 of FIG. 3 can be applied, and thus the repeated description will be omitted.

Subsequently, the processing unit 132 determines whether the specified index value exceeds the first threshold value (STEP23). The first threshold value is defined as a value of the number of consecutive establishments and the degree of coincidence that can be clearly determined that the person to be authenticated 20 is a user of the vehicle 30 based on the first face recognition process.

When it is determined that the specified index value does not exceed the first threshold value (NO in STEP 23), the processing unit 132 activates the second authentication device 122 to execute the second face authentication process. Is output from the output unit 133 (STEP24).

Subsequently, the processing unit 132 determines whether the result indicated by the second result information R2 received from the second authentication device 122 through the reception unit 131 is whether the second face authentication process is established or not (STEP 25). ..

When the second result information R2 indicates that the second face recognition process has been established (YES in STEP 25), the processing unit 132 sends the third control information C3 that causes the controlled device 40 to perform the specified operation. Output from the output unit 133 (STEP 26). That is, the operation control of the controlled device 40 is permitted based on the result that the second face recognition process is established.

When the second result information R2 indicates that the second face recognition process has not been established (NO in STEP 25), the processing unit 132 does not output the third control information C3 from the output unit 133 (STEP 27). That is, the operation control of the controlled device 40 is prohibited based on the result that the second face recognition process is not established.

That is, it is determined whether or not the second face authentication process is executed based on the result of the first face authentication process having a lower processing load. Specifically, when it is not possible to confirm that the person to be authenticated 20 is the user of the vehicle 30 as a result of the first face authentication process, the second face authentication process having a higher processing load is executed as a backup. The result is reflected in the determination of whether or not the operation of the controlled device 40 can be controlled. It is considered that the result obtained by the second face recognition process having a higher processing load provides a more accurate judgment as to whether the person to be authenticated 20 is a user of the vehicle 30. As a result, an increase in the processing load of the entire authentication system 10 can be suppressed, and a decrease in the accuracy of the authentication process can also be suppressed. Therefore, the convenience of the authentication system 10 can be enhanced.

On the other hand, when it is determined that the index value specified based on the first result information R1 exceeds the first threshold value (YES in STEP 23), the processing unit 132 causes the controlled device 40 to perform the specified operation. (3) The control information C3 is output from the output unit 133 (STEP 26). That is, the operation control of the controlled device 40 is permitted based on the result that the first face recognition process is established. In this case, the processing unit 132 does not output the second control information C2 from the output unit 133.

That is, when it is determined that it is sufficiently certain that the person to be authenticated 20 is the user of the vehicle 30 based on the result of the first face recognition processing having a lower processing load, the operation control of the controlled device 40 is performed. The result of the first face authentication process is referred to in the permission judgment, and the second face authentication process, which has a higher processing load, is not executed. As a result, the time until the authentication process is completed can be shortened, and the increase in the processing load of the entire authentication system 10 can be suppressed.

As illustrated in FIG. 4, when it is determined that the specified index value does not exceed the first threshold value (NO in STEP 23), the processing unit 132 determines whether the index value is below the second threshold value. Uru (STEP 28). The second threshold is lower than the first threshold. The second threshold value is defined as a value of the number of consecutive failures and the degree of coincidence that can be clearly determined that the person to be authenticated 20 is not the user of the vehicle 30 based on the first face recognition process.

If it is determined that the identified index value does not fall below the second threshold (NO in STEP 28), the process proceeds to STEP 24. That is, the second authentication device 122 is activated.

When it is determined that the specified index value is below the second threshold value (YES in STEP 28), the processing unit 132 does not output the second control information C2 and the third control information C3 from the output unit 133, but first. Based on the result that the face recognition process was unsuccessful, the operation control of the controlled device 40 is prohibited (STEP 27).

That is, when it is determined that it is sufficiently certain that the person to be authenticated 20 is not the user of the vehicle 30 based on the result of the first face recognition processing having a lower processing load, the operation control of the controlled device 40 is prohibited. The result of the first face authentication process is referred to in the judgment, and the second face authentication process, which has a higher processing load, is not executed. As a result, the time until the authentication process is completed can be shortened, and the increase in the processing load of the entire authentication system 10 can be suppressed.

The processing unit 132 having each of the functions described so far can be realized by a general-purpose microprocessor that operates in cooperation with a general-purpose memory. Examples of general-purpose microprocessors include CPUs, MPUs, and GPUs. A ROM or RAM can be exemplified as a general-purpose memory. In this case, the ROM may store a computer program that executes the above-described processing. The ROM is an example of a storage medium that stores a computer program. The processor specifies at least a part of the computer program stored in the ROM, expands it on the RAM, and performs the above-described processing in cooperation with the RAM. The above computer program may be pre-installed in the general-purpose memory, or may be downloaded from an external server via a communication network and installed in the general-purpose memory. In this case, the external server is an example of a storage medium that stores a computer program.

The processing unit 132 may be realized by a dedicated integrated circuit capable of executing the above-mentioned computer program such as a microprocessor, an ASIC, or an FPGA. In this case, the above computer program is pre-installed in the storage element included in the dedicated integrated circuit. The storage element is an example of a storage medium that stores a computer program. The processing unit 132 can also be realized by a combination of a general-purpose microprocessor and a dedicated integrated circuit.

The above embodiments are merely examples for facilitating the understanding of the present invention. The configuration according to the above embodiment may be appropriately changed or improved without departing from the spirit of the present invention.

The first authentication device 121 may be mounted on the vehicle 30 or may be mounted on an external device capable of communicating with the vehicle 30 via wireless communication based on an appropriate standard. Examples of such an external device include the mobile device 50 and the server device 60 illustrated in FIG. Examples of the mobile device 50 include a general-purpose smartphone and a dedicated smart key.

When the first authentication device 121 is mounted on the vehicle 30, the first face authentication process by the first authentication device 121 and the control process by the control device 13 may be performed by a common device or element. When the first authentication device 121 is mounted on the mobile device 50 or the server device 60 capable of communicating with the vehicle 30 via wireless communication, the first result information R1 output from the first authentication device 121 is transmitted via wireless communication. Is transmitted to the control device 13. The first control information C1 output from the control device 13 is transmitted to the first authentication device 121 via wireless communication.

The second authentication device 122 may be mounted on the vehicle 30 or may be mounted on an external device capable of communicating with the vehicle 30 via wireless communication based on an appropriate standard. Examples of such an external device include the mobile device 50 and the server device 60 illustrated in FIG. Examples of the mobile device 50 include a general-purpose smartphone and a dedicated smart key.

When the second authentication device 122 is mounted on the vehicle 30, the second face authentication process by the second authentication device 122 and the control process by the control device 13 may be performed by a common device or element. When the second authentication device 122 is mounted on the mobile device 50 or the server device 60 capable of communicating with the vehicle 30 via wireless communication, the second result information R2 output from the second authentication device 122 is transmitted via wireless communication. Is transmitted to the control device 13. The second control information C2 output from the control device 13 is transmitted to the second authentication device 122 via wireless communication.

The first authentication process performed by the first authentication device 121 and the second authentication process performed by the second authentication device 122 are not limited to the face authentication process using the template matching method and deep learning, respectively. If the processing load of the second authentication process is higher than the processing load of the first authentication process, each of the first authentication process and the second authentication process can be appropriately selected. For example, a face recognition process using rule-based machine learning can be adopted as the first authentication process, as opposed to a face recognition process using deep learning as the second authentication process.

The first authentication process performed by the first authentication device 121 and the second authentication process performed by the second authentication device 122 are not limited to the face authentication process. If the processing load of the second authentication process is higher than the processing load of the first authentication process, each of the first authentication process and the second authentication process can be appropriately selected. Examples of other authentication processes using the image pickup apparatus 11 include gesture authentication process, gait authentication process, and the like. Gesture authentication processing and gait authentication may be performed based on acceleration information corresponding to the acceleration applied to the mobile device 50 detected by the acceleration sensor mounted on the mobile device 50.

The authentication system 10 can be applied to a moving body other than the vehicle 30. Examples of other mobiles include railroads, aircraft, ships and the like. The moving body does not have to require a driver.

The authentication system 10 can be applied to objects other than mobile objects. Examples of other objects include houses, commercial facilities, school buildings, office buildings, factories, research facilities, and the like.

10: Authentication system, 121: First authentication device, 122: Second authentication device, 13: Control device, 131: Reception unit, 132: Processing unit, 20: Certified person, 30: Vehicle, 40: Controlled device

Claims (12)

A first authentication device that performs a first authentication process with a first processing load to authenticate the person to be authenticated as a user of the object,
A second authentication device that performs a second authentication process with a second processing load higher than the first processing load in order to authenticate the person to be authenticated as a user of the object.
A control device that executes operation control of the controlled device mounted on the object based on at least one of the result of the first authentication process and the result of the second authentication process.
Is equipped with
The control device causes the first authentication device to repeatedly execute the first authentication process until the result of the second authentication process is received.
Authentication system. As a result of having the first authentication device repeatedly execute the first authentication process, when the index value indicating the certainty that the person to be authenticated is the user exceeds the first threshold value, the control device performs the second authentication. Cause the device to cancel the second authentication process.
The authentication system according to claim 1. As a result of having the first authentication device repeatedly execute the first authentication process, when the index value is lower than the second threshold value lower than the first threshold value, the control device causes the second authentication device to execute the second authentication process. Stop the authentication process,
The authentication system according to claim 2. A first authentication device that performs a first authentication process with a first processing load to authenticate the person to be authenticated as a user of the object,
A second authentication device that performs a second authentication process with a second processing load higher than the first processing load in order to authenticate the person to be authenticated as a user of the object.
A control device that executes operation control of the controlled device mounted on the object based on at least one of the result of the first authentication process and the result of the second authentication process.
Is equipped with
The control device determines whether to activate the second authentication device according to the result of repeatedly executing the first authentication process by the first authentication device.
Authentication system. As a result of having the first authentication device repeatedly execute the first authentication process, when the index value indicating the certainty that the person to be authenticated is the user is equal to or less than the first threshold value, the control device is said to be the second. Start the authentication device,
The authentication system according to claim 4. As a result of having the first authentication device repeatedly execute the first authentication process, when the index value is lower than the second threshold value lower than the first threshold value, the control device does not activate the second authentication device.
The authentication system according to claim 5. The first authentication device, the second authentication device, and the control device are configured to be mounted on the object.
The authentication system according to any one of claims 1 to 6. The object is a mobile body,
The authentication system according to any one of claims 1 to 7. The result of the first authentication process can be accepted from the first authentication device that performs the first authentication process with the first processing load in order to authenticate the person to be authenticated as the user of the object, and the person to be authenticated can be received. A reception unit that can accept the result of the second authentication process from a second authentication device that performs a second authentication process with a second processing load higher than the first processing load in order to authenticate as a user of the object. When,
A processing unit that executes operation control of the controlled device mounted on the object based on at least one of the result of the first authentication process and the result of the second authentication process.
Is equipped with
The processing unit causes the first authentication device to repeatedly execute the first authentication process until the receiving unit receives the result of the second authentication process.
Control device. The result of the first authentication process can be accepted from the first authentication device that performs the first authentication process with the first processing load in order to authenticate the person to be authenticated as the user of the object, and the person to be authenticated can be received. A reception unit that can accept the result of the second authentication process from a second authentication device that performs a second authentication process with a second processing load higher than the first processing load in order to authenticate as a user of the object. When,
A processing unit that executes operation control of the controlled device mounted on the object based on at least one of the result of the first authentication process and the result of the second authentication process.
Is equipped with
The processing unit determines whether to start the second authentication device according to the result of having the first authentication device repeatedly execute the first authentication process.
Control device. A computer program that can be executed by the processing unit of the control device.
By being executed, the control device
In order to authenticate the person to be authenticated as the user of the object, the first authentication process involving the first processing load is executed by the first authentication device.
The result of the second authentication process is obtained from the second authentication device that performs the second authentication process with the second processing load higher than the first processing load in order to authenticate the person to be authenticated as the user of the object. Until it is accepted, the result of the first authentication process is accepted.
Based on at least one of the result of the first authentication process and the result of the second authentication process, the operation control of the controlled device mounted on the object is executed.
Computer program. A computer program that can be executed by the processing unit of the control device.
By being executed, the control device
In order to authenticate the person to be authenticated as the user of the object, the first authentication process involving the first processing load is executed by the first authentication device.
The first authentication device is made to accept the result of repeatedly executing the first authentication process.
According to the result, in order to authenticate the person to be authenticated as a user of the object, a second authentication device that performs a second authentication process with a second processing load higher than the first processing load is started. Let me decide
Computer program.

Images