JP2023127173A - Authentication apparatus, authentication system, authentication method, and authentication program - Google Patents

Abstract

To provide an authentication apparatus, an authentication system, an authentication method, and an authentication program which have a low possibility of being fraudulently authenticated by using a password obtained by a suspicious person even if the password being input is intercepted by the suspicious person.SOLUTION: An authentication apparatus 1 is provided with a first authentication unit 14 that determines that the authentication is successful when the degree of similarity of input biometric identification data input from an imaging unit 11 to registered biometric identification data registered in advance is greater than or equal to a first threshold value; and a second authentication unit 16 that determines the authentication success or failure by comparing the input password input from an input unit 15 with the first password when the degree of similarity is equal to or less than a second threshold value smaller than the first threshold value, and determines the authentication success or failure by comparing the input password with the second password different from the first password when the similarity is greater than or equal to the second threshold value and less than or equal to the first threshold value.SELECTED DRAWING: Figure 2

Description

The present disclosure relates to an authentication device, an authentication system, an authentication method, and an authentication program.

In the conventional authentication system described in Patent Document 1, when the face image of the photographed person photographed by the photographing unit is a face image of the photographed person wearing a mask, the difference detection unit detects whether or not the person is wearing a mask as a difference. Detect as a candidate. When the difference detection section detects a difference candidate, the display section displays a message such as "Please remove the mask." Thereby, the person to be photographed may realize that he or she should remove the mask. By removing the mask from the person to be photographed, it is possible to reduce the possibility that the facial recognition performed by the authentication system will fail.

Japanese Patent Application Publication No. 2020-170569 (Paragraph [0032])

When using the authentication system described in Patent Document 1, it may be difficult to remove the mask, such as in a public area. In this case, the authentication system may perform authentication by inputting a password from the terminal device. Authentication by entering a password is often performed when authenticating with a mobile terminal such as a smartphone. However, authentication by entering a password is often performed in public areas. In that case, there is a possibility that a suspicious person may be able to see the password you are entering.

The present disclosure solves the above problems, and aims to provide an authentication device, an authentication system, an authentication method, and an authentication program with higher security.

The authentication device according to the present disclosure determines that authentication is successful when the degree of similarity of input biometric identification data input from the biometric identification data input unit to registered biometric identification data registered in advance is equal to or higher than a first threshold value. 1 authentication section, if the degree of similarity is equal to or less than a second threshold smaller than the first threshold, determines whether the authentication is successful or failed by comparing the input password input from the password input section with the first password, a second authentication unit that determines authentication success or failure by comparing the input password with a second password different from the first password when the degree of similarity is greater than or equal to the second threshold and less than or equal to the first threshold; ing.

Further, the authentication system according to the present disclosure includes a biometric identification data input device, a password input section, and a similarity degree of input biometric identification data input from the biometric identification data input device to registered biometric identification data registered in advance. If the degree of similarity is greater than or equal to the first threshold, the first authentication unit determines that the authentication is successful; if the degree of similarity is less than or equal to the second threshold, which is smaller than the first threshold, the input password input from the password input device is used as the first password. Authentication success or failure is determined by comparing the input password with the first password, and if the similarity is greater than or equal to the second threshold and less than the first threshold, authentication is successful by comparing the input password with a second password different from the first password. Alternatively, the authentication device includes a second authentication unit that determines authentication failure.

Further, the authentication method according to the present disclosure determines that authentication is successful when the degree of similarity of input biometric identification data input from the biometric identification data input unit to registered biometric identification data registered in advance is greater than or equal to a first threshold value. If the similarity is less than or equal to a second threshold, which is smaller than the first threshold, the input password input from the password input section is compared with the first password to determine authentication success or authentication failure, and If the degree is greater than or equal to the second threshold and less than or equal to the first threshold, the input password is compared with a second password different from the first password to determine whether the authentication is successful or unsuccessful.

Further, the authentication program according to the present disclosure allows the computer to perform authentication when the degree of similarity of the input biometric identification data inputted from the biometric identification data input unit to registered biometric identification data registered in advance is equal to or higher than a first threshold value. If the step of determining success and the degree of similarity are equal to or less than a second threshold smaller than the first threshold, determine authentication success or failure by comparing the input password input from the password input section with the first password. and, if the degree of similarity is greater than or equal to the second threshold and less than or equal to the first threshold, the step of determining authentication success or failure by comparing the input password with a second password different from the first password is executed. .

An authentication device, an authentication system, an authentication method, and an authentication program according to the present disclosure are provided such that the degree of similarity of input biometric identification data input from a biometric identification data input device to registered biometric identification data registered in advance is equal to or greater than a first threshold. If so, it is determined that the authentication was successful. If the similarity is less than or equal to a second threshold that is smaller than the first threshold, success or failure of authentication is determined by comparing the input password input from the password input section with the first password. If the degree of similarity is greater than or equal to the second threshold and less than or equal to the first threshold, success or failure of authentication is determined by comparing the input password with a second password different from the first password. Therefore, even if a suspicious person steals a glance at the second password that the user is inputting into the password input section, there is a low possibility that the authentication device will be fraudulently authenticated using the second password stolen by the suspicious person. That is, an authentication device, an authentication system, an authentication method, and an authentication program with higher security can be obtained.

FIG. 1 is an external view of an authentication device according to Embodiment 1 of the present disclosure. 1 is a functional configuration diagram of an authentication device according to Embodiment 1 of the present disclosure. FIG. 3 is a flowchart showing the operation of the authentication device according to Embodiment 1 of the present disclosure. 1 is an external view of an authentication device when the authentication device according to Embodiment 1 of the present disclosure is used. FIG. 1 is an external view of an authentication device when the authentication device according to Embodiment 1 of the present disclosure is used. FIG. 1 is an external view of an authentication device when the authentication device according to Embodiment 1 of the present disclosure is used. FIG. 1 is an external view of an authentication device when the authentication device according to Embodiment 1 of the present disclosure is used. FIG. FIG. 1 is a hardware configuration diagram of an authentication device according to Embodiment 1 of the present disclosure. FIG. 2 is a functional configuration diagram of an authentication device according to Embodiment 2 of the present disclosure. 12 is a flowchart showing the operation of the authentication device according to Embodiment 2 of the present disclosure. FIG. 7 is a schematic diagram showing a similarity correspondence database of a portion of a password character string with respect to a matching rate of the authentication device according to Embodiment 2 of the present disclosure.

Embodiment 1
FIG. 1 is an external view of an authentication device according to this embodiment. As shown in FIG. 1, the authentication device 1 includes an imaging section 11, which is a biometric identification data input section, and a display section 18. The authentication device 1 is, for example, a mobile terminal such as a smartphone owned by the user 20. The imaging unit 11 is, for example, a CCD (Charge Coupled Device) camera provided on the top of the authentication device 1. The imaging unit 11 images the face of the user 20, which is biometric information. The display unit 18 is, for example, a liquid crystal screen provided in the authentication device 1. An input section 15, which is a password input section, is displayed within the dotted line of the display section 18. The input unit 15 is, for example, a 10-key key for the user 20 to input a password. Further, the display unit 18 displays the face image of the user 20 captured by the imaging unit 11. Further, the display unit 18 displays character information or graphic information notified by the authentication device 1.

The authentication device 1 performs authentication based on input facial image data that is input biometric identification data of the user 20 captured by the imaging unit 11 . If there is any facial image data similar to the input facial image data of the user 20 captured by the imaging unit 11 among the registered facial image data registered in advance in the authentication device 1, the authentication device 1 determines that the authentication is successful. If there is no registered face image data, which is registered biometric identification data registered in advance in the authentication device 1, that is similar to the input facial image data of the user 20 captured by the imaging unit 11, the authentication device 1 does not use the registered face image data. It is determined whether the authentication is successful or unsuccessful based on the password input by the person 20 from the input unit 15. Authentication by entering a password into the authentication device 1 is often used as a substitute when face authentication is omitted. Authentication by entering a password into the authentication device 1 is often used as a substitute when face authentication is impossible due to a malfunction in the imaging unit 11 or the like. Authentication by entering a password in the authentication device 1 may be substituted in cases where the biometric data input section is a fingerprint and the contact of the finger against the biometric data input section is insufficient and the predetermined number of authentications has been exceeded. There are many.

Note that input biometric identification data and registered biometric identification data are collectively referred to simply as biometric identification data. In addition, input face image data and registered face image data will be collectively referred to simply as face image data. Details of the operation of the authentication device 1 will be described later.

Note that the authentication device 1 can also be used for authentication to permit or restrict entry and exit from a management area (not shown). In this case, the authentication device 11 may be installed near the entrance to the management area (not shown). When the authentication device 1 determines that the authentication of the user 20 is successful, it unlocks the electronic lock (not shown) of the door (not shown) provided at the entrance. When the authentication device 11 determines that the authentication of the user 20 has failed, the electronic lock (not shown) of the door (not shown) provided at the entrance is kept locked.

As shown in FIG. 1, the imaging unit 11 is provided in the authentication device 1. The imaging unit 11 may be a biometric identification data input device installed in a building. For example, the biometric identification data input device may be a surveillance camera that images the vicinity of the authentication device 1.

Biometric identification data is not limited to facial image data. Other types of biometric identification data such as fingerprint data or vein pattern data may also be used. In that case, the biometric identification data input section may read other types of biometric identification data. Of course, a building may be equipped with a biometric identification data input device that reads other types of biometric identification data.

As shown in FIG. 1, an input section 15 that is a password input section is provided in the authentication device 1. The input unit 15 is a 10 key displayed on the display unit 18. For example, the input unit 15 may be configured with a physically pressable push button provided on the authentication device 1 instead of the 10 keys displayed on the display unit 18. Furthermore, the input unit 15 may be, for example, a password input device installed in a building. In that case, the password input device may be a push button device provided separately from the authentication device 1, or may be a touch panel on which 10-key buttons are displayed. Further, the password input unit and the password input device do not need to be 10-key buttons, but may be buttons that can input characters.

In FIG. 1, the display unit 18 is provided in the authentication device 1. The display unit 18 may be, for example, a display device installed in a building. In that case, the display device may be a liquid crystal screen or a touch panel provided separately from the authentication device 1.

When the imaging unit 11 , input unit 15 , and display unit 18 are provided outside the authentication device 1 , the imaging unit 11 is the biometric identification data input device, the input unit 15 is the password input device, and the display unit 18 is An authentication system including a display device and an authentication device 1 is configured.

FIG. 2 is a functional configuration diagram of the authentication device 1 according to the present embodiment. As shown in FIG. 2, the authentication device 1 includes an imaging section 11, a storage section 12, a similarity calculation section 13, a first authentication section 14, an input section 15, a second authentication section 16, a display control section 17, and a display section 18. It consists of

The imaging unit 11 images the user's 20 face. The storage unit 12 stores in advance registered facial image data to be authenticated as registered biometric identification data. Furthermore, the storage unit 12 stores in advance a registered password to be authenticated. The similarity calculating section 13 calculates the degree of similarity of the input facial image data input from the imaging section 11 with respect to registered facial image data registered in advance.

The first authentication unit 14 compares the degree of similarity with a first threshold. If the degree of similarity is greater than or equal to the first threshold, the first authentication unit 14 determines that face authentication has been successful, and therefore the first authentication unit 14 determines that authentication of the user 20 has been successful. If the degree of similarity is less than or equal to the first threshold, the first authentication unit 14 determines that face authentication has failed, so the second authentication unit 16 authenticates the user 20.

The second authentication unit 16 compares the degree of similarity with a second threshold. The second threshold is a value smaller than the first threshold. If the similarity is less than or equal to the second threshold, the second authentication unit 16 compares the input password input from the input unit 15 with the first password, which is a registered password registered in advance in the storage unit 12. It is determined whether the user 20 has been successfully authenticated or failed. Note that the first threshold value and the second threshold value are set as appropriate.

If the similarity is greater than or equal to the second threshold, that is, greater than or equal to the second threshold and less than or equal to the first threshold, the second authentication section 16 converts the input password input from the input section 15 into the password registered in advance in the storage section 12. 2 password, it is determined whether the user 20 has been successfully authenticated or failed. The second password is a different password from the first password. Note that the second password may be a password different from the first password, and may be a part of the character string of the first password. In this case, the storage unit 12 does not need to store the second password. In this case, the storage unit 12 may store data indicating a portion of the character string of the first password. This embodiment will be described on the premise that the second password is part of the character string of the first password.

The display control unit 17 causes the display unit 18 to display the processing content of the authentication device 1. The display control unit 17 causes the display unit 18 to display input facial image data of the user 20 input from the imaging unit 11, for example. The display control unit 17 causes the display unit 18 to display the authentication results determined by the first authentication unit 14 and the second authentication unit 16, for example. The display control unit 17 causes the display unit 18 to display a message prompting the user to enter a password from the input unit 15, for example.

Next, the operation of the authentication device 1 will be explained. FIG. 3 is a flowchart showing the operation of the authentication device according to this embodiment.

First, the similarity calculation unit 13 calculates the similarity between the input facial image data of the user 20 captured by the imaging unit 11 and the registered facial image data stored in the storage unit 12 (S101). Thereafter, the process advances to S102.

Next, the first authentication unit 14 compares the degree of similarity calculated in S101 with a first threshold (S102). If the degree of similarity is greater than the first threshold (YES in S102), the first authentication unit 14 determines that the user 20 has been successfully authenticated. After that, the process advances to S109. If the similarity is not greater than the first threshold (NO in S102), the process proceeds to S104.

Next, the second authentication unit 16 compares the degree of similarity calculated in S101 with a second threshold (S104). If the similarity is greater than the second threshold (YES in S104), the process proceeds to S106. Next, the user 20 inputs a password using the input section 15. The second authentication unit 16 performs authentication by comparing the input password with the second password (S106). After that, the process advances to S108.

On the other hand, if the degree of similarity is not greater than the second threshold in the process of S104 (NO in S104), the process proceeds to S105. Next, the user 20 inputs a password using the input section 15. The second authentication unit 16 performs authentication by comparing the input password with the first password (S105). After that, the process advances to S108.

Next, the second authentication unit 16 determines whether the user 20 has succeeded or failed in authentication based on the input password input by the user 20 (S108). If the second authentication unit 16 determines that the user 20 has been successfully authenticated (YES in S108), the process proceeds to S109. Next, the display control unit 17 causes the display unit 18 to display that the authentication has been successful (S109). After that, the process ends.

On the other hand, in the process of S108, if the second authentication unit 16 determines that the authentication of the user 20 has failed (NO in S108), the process proceeds to S110. Next, the display control unit 17 causes the display unit 18 to display that authentication has failed (S110). After that, the process ends.

Next, the operation and display of the authentication device 1 when the user 20 uses the authentication device 1 will be described. 4 to 7 are external views of the authentication device when the authentication device according to the present embodiment is used.

FIG. 4 shows how the imaging unit 11 built into the authentication device 1 images the face of the user 20, and input facial image data of the user 20 is input into the authentication device 1. As shown in FIG. 4, a face image 23 of the user 20 is displayed on the display unit 18. The authentication device 1 may automatically determine that input of the user's 20 facial image data is completed. Further, the authentication device 1 may determine that the input of the user's 20 face image data is completed based on a predetermined operation of the user 20 on the input unit 15.

FIG. 5 shows the situation when the first authentication unit 14 determines that the face authentication of the user 20 is successful. In this case, the degree of similarity of the input facial image data input from the imaging unit 11 to the registered facial image data registered in advance in the storage unit 12 is equal to or higher than the first threshold value. In this case, as shown in FIG. 5, the display unit 18 may display a message indicating that face authentication has been successful, such as "Face authentication OK." The user 20 can recognize from the message that the authentication of the authentication device 1 has been successful.

FIG. 6 shows a situation when the first authentication unit 14 determines that the face authentication of the suspicious person 21 has failed. In this case, the degree of similarity of the input facial image data input from the imaging unit 11 to the registered facial image data registered in advance in the storage unit 12 is equal to or less than the second threshold value. In this case, as shown in FIG. 6, a message indicating that face authentication has failed is displayed on the display unit 18, such as "Face authentication failed." Furthermore, a message prompting the user to enter a password, such as "Please enter your password", is also displayed on the display unit 18. In this case, in order for the authentication device 1 to succeed in authentication, the suspicious person 21 needs to input the first password into the input unit 15.

FIG. 7 shows a situation when the first authentication unit 14 determines that face authentication has failed for the user 20 who is wearing the mask 22. If the user 20 is wearing a mask 22 and a part of the face is hidden, or if the imaging unit 11 is dirty and a part of the face cannot be captured properly, face authentication of the user 20 may be performed. This can be a disturbing disturbance. In this case, the degree of similarity of the input facial image data input from the imaging unit 11 to the registered facial image data registered in advance in the storage unit 12 is greater than or equal to the second threshold value and less than or equal to the first threshold value. Although the face image data of the user 20 is registered in advance in the storage unit 12 as registered face image data, it is highly likely that the condition that the degree of similarity is greater than or equal to the first threshold value is not satisfied due to some disturbance.

In this case, as shown in FIG. 5, a message indicating that face authentication has failed is displayed on the display unit 18, such as "Face authentication failed." Furthermore, a message prompting the user to enter a password, such as "Please enter part of your password," is also displayed on the display unit 18. Additionally, a portion corresponding to a portion of the password (the square portion in FIG. 7) is also displayed. In this case, in order for the authentication device 1 to succeed in authentication, it is sufficient to input a part of the first password, which is the second password.

Next, the effects of this embodiment will be explained.

As described above, the first authentication unit 14 of the authentication device 1 in this embodiment determines whether the degree of similarity of the input face image data input from the imaging unit 11 to the registered face image data registered in advance is equal to or higher than the first threshold value. If so, it is determined that the authentication was successful. On the other hand, if the similarity is less than or equal to the second threshold, which is smaller than the first threshold, the second authentication unit 16 determines whether the authentication is successful or failed by comparing the input password input from the input unit 15 with the first password. to judge. Additionally, if the similarity is greater than or equal to the second threshold and less than or equal to the first threshold, the second authentication unit 16 determines whether authentication is successful or unsuccessful by comparing the input password with a second password different from the first password. do.

If the degree of similarity is less than or equal to the second threshold, which is smaller than the first threshold, there is a high possibility that the face image input from the imaging unit 11 and the face image registered in advance are different people. On the other hand, when the degree of similarity is greater than or equal to the second threshold and less than or equal to the first threshold, a case may be considered, for example, where the user 20 images the face with part of the face hidden by wearing a mask 22 or the like. That is, compared to the case where the degree of similarity is less than or equal to the second threshold, it is possible that the input face image data input from the imaging unit 11 and the registered face image data registered in advance are face image data of the same person. Highly sexual.

Consider a case where the input password input when the degree of similarity is greater than or equal to the second threshold and less than or equal to the first threshold is the same first password as in the case where the degree of similarity is less than or equal to the second threshold. In that case, when the user 20 takes an image of his face with part of his face hidden by wearing the mask 22 or the like as described above, the authentication device 1 requests the user to input a password. In that case, the user 20 inputs the first password. When the suspicious person 21 looks at the user 20 inputting the password, the suspicious person 21 steals the first password.

Thereafter, the suspicious person 21 attempts authentication using the authentication device 1. In this case, the degree of similarity of the input facial image data of the suspicious person 21 inputted from the imaging unit 11 to the registered facial image data of the user 20 registered in advance is determined to be less than or equal to the second threshold value. The suspicious person 21 inputs the stolen first password through the input unit 15. The second authentication unit 16 determines that the suspicious person 21 has been successfully authenticated based on the input first password. That is, the suspicious person 21 will be fraudulently authenticated by the authentication device 1 using the stolen first password.

In the authentication device 1 of this embodiment, the password input when the degree of similarity is greater than or equal to the second threshold and less than or equal to the first threshold is a second password different from the first password. Consider a case where a suspicious person 21 stealthily watches the user 20 inputting the second password and steals the second password. Suppose that the suspicious person 21 attempts to fraudulently authenticate the authentication device 1 using the stolen second password. Based on the input face image data of the suspicious person 21 inputted from the imaging unit 11, the similarity calculation unit 13 determines that the similarity with respect to the registered face image data registered in advance in the storage unit 12 is less than or equal to the second threshold value. . In that case, authentication using the first password by the second authentication section 16 is required. As a result, it becomes impossible for the suspicious person 21 to fraudulently authenticate the authentication device 1 using the second password that has been fraudulently obtained. In other words, it is possible to obtain an authentication device with higher security.

Further, the second password is, for example, a part of the character string of the first password. In this case, the same effect as above can be obtained, and since the user 20 does not need to remember both the first password and the second password, the burden on the user 20 is small and the convenience is higher. This has the additional effect of providing an authentication device.

Note that in this embodiment, the second password may be a part of the character string of the first password. A portion of the character string of the first password may be fixed by the authentication device 1. The part of the character string of the first password may be changed and designated by the authentication device 1 each time the password is input.

Further, in the present embodiment, the display control section 17 of the authentication device 1 causes the display section 18 to display a portion of the character string of the first password. However, there is no need for the display control unit 17 of the authentication device 1 to display a part of the character string of the first password on the display unit 18. However, by causing the display control unit 17 to display a part of the character string of the first password on the display unit 18, the user 20 can easily grasp the part of the first password, thereby providing more convenient authentication. There is an additional effect that the device 1 can be obtained.

Next, an example of the authentication device 1 will be described using FIG. 8. FIG. 8 is a hardware configuration diagram of the authentication device in this embodiment.

Each function of the authentication device 1 can be realized by a processing circuit. For example, the processing circuit comprises at least one processor 1001 and at least one memory 1002. For example, the processing circuitry comprises at least one dedicated hardware 2001.

When the processing circuit includes at least one processor 1001 and at least one memory 1002, each function of the authentication device 1 is realized by software, firmware, or a combination of software and firmware. At least one of the software and firmware is written as a program. Software and/or firmware are stored in at least one memory 1002. At least one processor 1001 implements each function of the authentication device 1 by reading and executing a program stored in at least one memory 1002. At least one processor 1002 may also be referred to as a central processing unit, processing unit, arithmetic unit, microprocessor, microcomputer, or DSP. For example, at least one memory 1002 is a non-volatile or volatile semiconductor memory such as RAM, ROM, flash memory, EPROM, EEPROM, magnetic disk, flexible disk, optical disk, compact disk, mini disk, DVD, etc.

If the processing circuit comprises at least one dedicated hardware 2001, the processing circuit may be implemented, for example, in a single circuit, a composite circuit, a programmed processor, a parallel programmed processor, an ASIC, an FPGA, or a combination thereof. Ru. For example, each function of the authentication device 9 is realized by a processing circuit. For example, each function of the authentication device 1 is realized by a processing circuit.

Regarding each function of the authentication device 1, a part may be realized by dedicated hardware 2001, and other parts may be realized by software or firmware. For example, the functions of the imaging section 11, the input section 15, and the display section 18 are realized by a processing circuit as dedicated hardware 2001, and the functions other than the imaging section 11, the input section 15, and the display section 18 are realized by at least one processor. 1001 may be realized by reading and executing a program stored in at least one memory 1002.

In this way, the processing circuit realizes each function of the authentication device 9 using the hardware 2001, software, firmware, or a combination thereof.

Although not illustrated, each function of the authentication device 10 described later is also realized by a processing circuit equivalent to a processing circuit that realizes each function of the authentication device 1.

Embodiment 2
FIG. 9 is a functional configuration diagram of the authentication device according to this embodiment. As shown in FIG. 9, the authentication device 10 includes a first authentication section 24 instead of the first authentication section 14 in the authentication device 1 of the first embodiment. As shown in FIG. 9, the authentication device 10 includes a second authentication section 26 instead of the second authentication section 16 in the authentication device 1 of the first embodiment. The rest is the same as the authentication device 1 of Embodiment 1, and detailed explanation will be omitted. Note that this embodiment will be described on the assumption that the second password is a part of the character string of the first password. The description will be made on the assumption that the third password is another part of the character string of the first password.

Similar to the first embodiment, the similarity calculating section 13 calculates the degree of similarity between the input facial image data inputted from the imaging section 11 and the registered facial image data registered in advance. The first authentication unit 24 compares the degree of similarity with a first threshold. If the degree of similarity is greater than or equal to the first threshold, the first authentication unit 24 determines that face authentication has been successful, and therefore the first authentication unit 24 determines that authentication of the user 20 has been successful. If the degree of similarity is less than or equal to the first threshold, the first authentication unit 24 determines that face authentication has failed, so the second authentication unit 26 authenticates the user 20.

The second authentication unit 26 compares the degree of similarity with a second threshold and a third threshold. As in the first embodiment, the second threshold is a value smaller than the first threshold. The third threshold is a value smaller than the first threshold and larger than the second threshold. If the similarity is less than or equal to the second threshold, the second authentication unit 26 compares the input password input from the input unit 15 with the first password, which is a registered password registered in advance in the storage unit 12. Determine authentication success or authentication failure. As a result, it is determined whether the user 20 has authentication authority for the authentication device 1 or not. Note that the first threshold, the second threshold, and the third threshold are set as appropriate.

If the similarity is greater than or equal to the third threshold, that is, greater than or equal to the third threshold and less than or equal to the first threshold, the second authentication section 26 converts the input password inputted from the input section 15 into the password registered in advance in the storage section 12. Authentication success or authentication failure is determined by comparing the part corresponding to a part (part A) of the character string of the first password, which is the second password.

If the similarity is greater than or equal to the second threshold and less than or equal to the third threshold, the second authentication unit 26 converts the input password input from the input unit 15 into the first password, which is the third password registered in advance in the storage unit 12. Authentication success or authentication failure is determined by comparing with a part corresponding to another part (part B) of the password character string. Note that part B of the first password has a larger amount of information than part A of the first password. That is, the second password and the third password have a larger amount of information than the first password. Further, the third password has a larger amount of information than the second password. Note that data indicating the location of each part (part A and part B) of the character string of the first password may be stored in the storage unit 12.

Next, the operation of the authentication device 10 will be explained. Regarding the operation of the authentication device 10, only the differences from the operation for the authentication device 1 shown in FIG. 3 will be explained.

First, the similarity calculation unit 13 calculates the similarity between the input facial image data of the user 20 captured by the imaging unit 11 and the registered facial image data stored in the storage unit 12 (S101). Thereafter, the process advances to S112.

Next, the first authentication unit 24 compares the degree of similarity calculated in S101 with a first threshold (S112). If the similarity is greater than the first threshold (YES in S112), the first authentication unit 24 determines that the user 20 has been successfully authenticated. After that, the process advances to S119. If the similarity is not greater than the first threshold (NO in S112), the process proceeds to S113.

Next, the second authentication unit 26 compares the degree of similarity calculated in S101 with a third threshold (S113). If the similarity is greater than the third threshold (YES in S113), the process proceeds to S116. Next, the user 20 inputs a password using the input section 15. The second authentication unit 26 performs authentication by comparing the input password with a portion corresponding to part A, which is a part of the first password (S116). After that, the process advances to S118.

On the other hand, if the similarity is not greater than the third threshold in the process of S113 (NO in S113), the process proceeds to S114. Next, the second authentication unit 26 compares the degree of similarity calculated in S101 with a second threshold (S114). If the similarity is greater than the second threshold (YES in S114), the process proceeds to S117. Next, the user 20 inputs a password using the input section 15. The second authentication unit 26 performs authentication by comparing the input password with a portion corresponding to part B, which is a part of the first password (S117). After that, the process advances to S118.

On the other hand, if the degree of similarity is not greater than the second threshold in the process of S114 (NO in S114), the process proceeds to S115. Next, the user 20 inputs a password using the input section 15. The second authentication unit 26 performs authentication by comparing the input password with the first password (S115). After that, the process advances to S118.

Next, the second authentication unit 26 determines whether the user 20 has succeeded or failed in authentication based on the password input by the user 20 (S118). If the second authentication unit 26 determines that the user 20 has been successfully authenticated (YES in S118), the process proceeds to S109. On the other hand, if the second authentication unit 26 determines that the authentication of the user 20 has failed (NO in S118), the process proceeds to S110. The operations other than S112 to S118 described above are the same as those of the authentication device 1, so a detailed explanation will be omitted.

Next, the effects of this embodiment will be explained.

As described above, the second authentication unit 26 of the authentication device 10 in this embodiment determines whether the degree of similarity of the face image data input from the imaging unit 11 to the registered face image data registered in advance is equal to or less than the second threshold. If the similarity is greater than the second threshold and less than the first threshold, the input password is another part of the first password character string and has more information than the second password. Authentication success or failure is determined by comparing the third password with a large number of passwords.

When the degree of similarity is greater than or equal to the second threshold and less than or equal to the third threshold, compared to the case where the degree of similarity is greater than or equal to the third threshold and less than or equal to the first threshold, the difference between the input facial image data input from the imaging unit 11 and the It is more likely that the registered face image data belongs to a different person. The amount of information in the input password can be increased or decreased depending on the degree of possibility. On the other hand, the higher the possibility that the input facial image data inputted from the imaging unit 11 and the registered facial image data registered in advance are the same person, the less the burden of password input becomes. In other words, an additional effect is obtained in that the authentication device 11 having both security and convenience can be obtained.

Note that in this embodiment, password input is performed in three stages by setting the first to third thresholds for the degree of similarity, but the number is not limited to three stages. As shown in FIG. 11, there may be four or more stages. FIG. 11 is a schematic diagram showing a similarity correspondence database of a part of the character string of the first password with respect to the matching rate of the authentication device according to the present embodiment. The correspondence database 19 is provided as stored data in the storage unit 12, for example.

As shown in FIG. 11, the correspondence database 19 stores portions of each part of the first password character string for each degree of similarity in association with each other. For example, if the similarity is between 100% and 90%, the first authentication unit 24 determines that face authentication has been successful.

If the degree of similarity is 90% to 80%, the portion D of the character string of the first password authenticated by the second authentication unit 26 is set as any one digit of the character string of the first password. has been done. If the degree of similarity is 80% to 70%, the part E of the character string of the first password authenticated by the second authentication unit 26 is set as any three-digit part of the character string of the first password. has been done. If the degree of similarity is 70% to 60%, the portion F of the character string of the first password authenticated by the second authentication unit 26 is set as any of the five digits of the character string of the first password. has been done. If the similarity is 60% or less, it is necessary to enter all digits (for example, 8 digits) of the first password. As shown in FIG. 11, the number of digits of the input password input by the user 20 may increase as the degree of similarity decreases.

In this case, the threshold values for each degree of similarity may be set to 90%, 80%, 70%, and 60%, respectively. The degree of similarity of the face image data input from the imaging unit 11 to the registered face image data registered in advance, and the degree of similarity of a part of the character string of the first password with respect to the degree of similarity of the corresponding database 19 stored in the storage unit 12. Depending on the location, the second authentication unit 26 may determine the location of a portion of the character string of the first password that the user 20 inputs into the authentication device 10 .

Note that, as described above, the first threshold, second threshold, and third threshold in Embodiment 1 and Embodiment 2 can be set as appropriate. For example, the first threshold value may be determined by summing up the degree of similarity of a plurality of biometric identification data of the same person. For example, the second threshold value first totals the degree of similarity A of biometric identification data of another person. Next, the degree of similarity B between the biometric identification data of a certain person and the biometric data of the same person in which some areas are missing is calculated. The value between the aggregate result of similarity A and the aggregate result of similarity B may be determined as the similarity. If the biometric identification data is face image data, it may be determined by, for example, summing up the degree of similarity between face image data when a certain person is wearing a mask and when the person is not wearing a mask.

For example, the third threshold may be determined in the same manner as the second threshold. At that time, the size of the partial area where the biometric identification data is missing may be made smaller than when determining the second threshold value. If the biometric identification data is face image data, it may be determined by summing up the degree of similarity of the face image data when a certain person wears and does not wear an eyepatch smaller than a mask, for example.

The present disclosure is not limited to Embodiments 1 and 2 and their combinations. It is possible to change, omit, etc. a part of it within the scope of the technical idea of the present invention.

1, 10 authentication device 11 imaging unit, 12 storage unit, 13 similarity calculation unit,
14, 24 first authentication section,
15 input section,
16, 26 second authentication section,
17 display control unit, 18 display unit, 19 compatible database,
20 User, 21 Suspicious person, 22 Mask, 23 Face image.

The authentication device according to the present disclosure determines that authentication is successful when the degree of similarity of input biometric identification data input from the biometric identification data input unit to registered biometric identification data registered in advance is greater than a first threshold value. an authentication section; and a second authentication section that determines authentication success or authentication failure based on the input password input from the password input section when the degree of similarity is less than or equal to a first threshold; , if the similarity is less than or equal to a second threshold, which is smaller than the first threshold, authentication success or failure is determined by comparing the input password with the first password; If it is less than or equal to one threshold, success or failure of authentication is determined by comparing the input password with a second password different from the first password. The first threshold is a value set based on the aggregated results of the similarity of multiple biometric identification data of the same person, and the second threshold is the value set based on the aggregated results of the similarity of biometric identification data of different people and the same person. This is the value between the summation result of the degree of similarity of the data in which some regions of the biometric identification data are missing.

Further, the authentication system according to the present disclosure includes a biometric identification data input device, a password input section, and a similarity degree of input biometric identification data input from the biometric identification data input device to registered biometric identification data registered in advance. If the degree of similarity is greater than the first threshold, the first authentication unit determines that the authentication is successful; if the degree of similarity is less than the first threshold, the first authentication unit determines whether the authentication is successful or failed based on the input password input from the password input unit. an authentication device having a second authentication unit; the second authentication unit is configured to compare the input password with the first password when the degree of similarity is less than or equal to a second threshold smaller than the first threshold; Authentication success or authentication failure is determined, and if the similarity is greater than the second threshold and less than the first threshold, authentication success or authentication failure is determined by comparing the input password with a second password different from the first password. judge . The first threshold is a value set based on the aggregated results of the similarity of multiple biometric identification data of the same person, and the second threshold is the value set based on the aggregated results of the similarity of biometric identification data of different people and the same person. This is the value between the summation result of the degree of similarity of the data in which some regions of the biometric identification data are missing.

Further, in the authentication method according to the present disclosure, if the degree of similarity of input biometric identification data input from the biometric identification data input unit to registered biometric identification data registered in advance is greater than a first threshold, it is determined that the authentication is successful. An authentication method that causes a computer to execute the following steps: and a step of determining authentication success or failure based on the input password input from the password input section when the degree of similarity is less than or equal to a first threshold, In the step of determining whether the authentication is successful or unsuccessful, if the degree of similarity is less than or equal to a second threshold that is smaller than the first threshold, the input password is compared with the first password to determine whether the authentication is successful or unsuccessful; If the similarity is greater than the second threshold and less than or equal to the first threshold, success or failure of authentication is determined by comparing the input password with a second password different from the first password. The first threshold is a value set based on the aggregated results of the similarity of multiple biometric identification data of the same person, and the second threshold is the value set based on the aggregated results of the similarity of biometric identification data of different people and the same person. This is the value between the summation result of the degree of similarity of the data in which some regions of the biometric identification data are missing.

Further, the authentication program according to the present disclosure allows the computer to succeed in authentication if the degree of similarity of the input biometric identification data inputted from the biometric identification data input unit to registered biometric identification data registered in advance is greater than a first threshold value. and a step of determining authentication success or failure based on the input password input from the password input section when the degree of similarity is less than or equal to a first threshold. In the step of determining whether authentication is successful or unsuccessful, if the degree of similarity is less than or equal to a second threshold, which is smaller than the first threshold, authentication is successful by comparing the input password input from the password input section with the first password. Alternatively, if authentication failure is determined and the degree of similarity is greater than the second threshold and less than the first threshold, authentication success or failure is determined by comparing the input password with a second password different from the first password. . The first threshold is a value set based on the aggregated results of the similarity of multiple biometric identification data of the same person, and the second threshold is the value set based on the aggregated results of the similarity of biometric identification data of different people and the same person. This is the value between the summation result of the degree of similarity of the data in which some regions of the biometric identification data are missing.

The authentication device according to the present disclosure determines that authentication is successful when the degree of similarity of input biometric identification data input from the biometric identification data input unit to registered biometric identification data registered in advance is greater than a first threshold value. an authentication section; and a second authentication section that determines authentication success or authentication failure based on the input password input from the password input section when the degree of similarity is less than or equal to a first threshold; , if the similarity is less than or equal to a second threshold, which is smaller than the first threshold, authentication success or failure is determined by comparing the input password with the first password, and if the similarity is larger than the second threshold and the first If the password is below the threshold, success or failure of authentication is determined by comparing the input password with a second password different from the first password. The first threshold is a value set based on the similarity of multiple biometric identification data of the same person, and the second threshold is a value set based on the similarity of biometric identification data between different people and the biometric identification data of a certain person. This value is set based on the degree of similarity between the certain person and the biometric identification data of the same person whose partial region is missing.

Further, the authentication system according to the present disclosure includes a biometric identification data input device, a password input section, and a similarity degree of input biometric identification data input from the biometric identification data input device to registered biometric identification data registered in advance. If the degree of similarity is greater than the first threshold, the first authentication unit determines that the authentication is successful; if the degree of similarity is less than the first threshold, the first authentication unit determines whether the authentication is successful or failed based on the input password input from the password input unit. an authentication device having a second authentication unit; the second authentication unit performs authentication by comparing the input password with the first password when the degree of similarity is less than or equal to a second threshold smaller than the first threshold; Determine success or failure of authentication, and if the degree of similarity is greater than a second threshold and less than the first threshold, determine success or failure of authentication by comparing the input password with a second password different from the first password. do. The first threshold is a value set based on the similarity of multiple biometric identification data of the same person, and the second threshold is a value set based on the similarity of biometric identification data between different people and the biometric identification data of a certain person. This value is set based on the degree of similarity between the certain person and the biometric identification data of the same person whose partial region is missing.

Further, in the authentication method according to the present disclosure, if the degree of similarity of input biometric identification data input from the biometric identification data input unit to registered biometric identification data registered in advance is greater than a first threshold, it is determined that the authentication is successful. An authentication method that causes a computer to execute the following steps: and a step of determining authentication success or failure based on the input password input from the password input section when the degree of similarity is less than or equal to a first threshold, In the step of determining authentication success or authentication failure, if the degree of similarity is less than or equal to a second threshold that is smaller than the first threshold, authentication success or failure is determined by comparing the input password with the first password. If the degree is greater than the second threshold and less than or equal to the first threshold, success or failure of authentication is determined by comparing the input password with a second password different from the first password. The first threshold is a value set based on the similarity of multiple biometric identification data of the same person, and the second threshold is a value set based on the similarity of biometric identification data between different people and the biometric identification data of a certain person. This value is set based on the degree of similarity between the certain person and the biometric identification data of the same person whose partial region is missing.

Further, the authentication program according to the present disclosure allows the computer to succeed in authentication if the degree of similarity of the input biometric identification data inputted from the biometric identification data input unit to registered biometric identification data registered in advance is greater than a first threshold value. and a step of determining authentication success or failure based on the input password input from the password input section when the degree of similarity is less than or equal to a first threshold. In the step of determining whether authentication is successful or unsuccessful, if the degree of similarity is less than or equal to a second threshold, which is smaller than the first threshold, authentication is successful by comparing the input password input from the password input section with the first password. Alternatively, if authentication failure is determined and the degree of similarity is greater than the second threshold and less than the first threshold, authentication success or failure is determined by comparing the input password with a second password different from the first password. . The first threshold is a value set based on the similarity of multiple biometric identification data of the same person, and the second threshold is a value set based on the similarity of biometric identification data between different people and the biometric identification data of a certain person. This value is set based on the degree of similarity between the certain person and the biometric identification data of the same person whose partial region is missing.

Claims (7)

a first authentication unit that determines that authentication is successful when the degree of similarity of input biometric identification data input from the biometric identification data input unit to registered biometric identification data registered in advance is a first threshold value or more;
If the similarity is less than or equal to a second threshold that is smaller than the first threshold, determining whether authentication is successful or unsuccessful by comparing the input password input from the password input section with the first password;
If the degree of similarity is greater than or equal to the second threshold and less than or equal to the first threshold, second authentication determines authentication success or failure by comparing the input password with a second password different from the first password. An authentication device comprising a section and. The authentication device according to claim 1, wherein the second password is a part of a character string of the first password. The authentication device according to claim 2, further comprising a display unit that displays a location corresponding to the part of the character string. The second authentication unit is configured to accept the input password when the similarity is greater than or equal to the second threshold, and the similarity is greater than or equal to a third threshold that is greater than the second threshold and smaller than the first threshold. 4. Authentication success or authentication failure is determined by comparing with a third password that is another part of the character string of the first password and has a larger amount of information than the second password. Authentication device. a biometric identification data input device;
a password input section;
a first authentication unit that determines that authentication is successful when the degree of similarity of input biometric identification data input from the biometric identification data input device to registered biometric identification data registered in advance is a first threshold value or more; If the degree is equal to or less than a second threshold smaller than the first threshold, determine whether the authentication is successful or failed by comparing the input password input from the password input device with the first password,
If the degree of similarity is greater than or equal to the second threshold and less than or equal to the first threshold, second authentication determines authentication success or failure by comparing the input password with a second password different from the first password. An authentication system comprising: an authentication device having a part; determining that authentication is successful when the degree of similarity of the input biometric identification data input from the biometric identification data input unit to registered biometric identification data registered in advance is equal to or greater than a first threshold;
If the similarity is less than or equal to a second threshold that is smaller than the first threshold, determining whether authentication is successful or unsuccessful by comparing the input password input from the password input section with the first password;
If the degree of similarity is greater than or equal to the second threshold and less than or equal to the first threshold, determining authentication success or failure by comparing the input password with a second password different from the first password; An authentication method that has to the computer,
determining that authentication is successful when the degree of similarity of the input biometric identification data input from the biometric identification data input unit to registered biometric identification data registered in advance is equal to or greater than a first threshold;
If the similarity is less than or equal to a second threshold that is smaller than the first threshold, determining whether authentication is successful or unsuccessful by comparing the input password input from the password input section with the first password;
If the degree of similarity is greater than or equal to the second threshold and less than or equal to the first threshold, determining authentication success or failure by comparing the input password with a second password different from the first password; Authentication program to run.

Images