JP5000974B2 - Biometric authentication device - Google Patents

Description

  The present invention relates to a biometric authentication apparatus that performs personal authentication using information obtained by converting fingerprints, veins, retinas, irises, faces, and the like into data, or biometric information such as voice prints based on voices uttered by humans.

In this type of biometric authentication device, for example, collation between fingerprint data as an example of read biometric information and fingerprint data for collation as an example of registered biometric information is performed on what is generally known. If the user authentication is successful, the fingerprint data determined to be successful is registered as new verification fingerprint data and replaced with the old verification fingerprint data or a new verification without replacement. There is one configured to additionally register fingerprint data for use (for example, Patent Document 1).
Japanese Patent Laying-Open No. 2004-342073 (see paragraph 0019)

  In the prior art described in Patent Document 1, by using biometric information that has been successfully authenticated as biometric information for verification, the biometric information for verification that is to be verified can always be updated to a new one, Even if biometric information gradually changes due to human growth, seasonal fluctuations, etc., it is possible to cope with the change by constantly updating the biometric information for verification to a new one.

  However, in the case of a biometric collation device that performs biometric collation at least once per several days, such as an electronic lock in a house or office, a safe or vending machine in which banknotes are collected daily, Since the information does not change abruptly in such a short period of time, if the process of updating or additionally registering the successful read data as new collation biometric information every time the user authentication succeeds, useless update processing And additional registration is frequently performed, and there is a disadvantage that it is not a rational system.

  The present invention has been conceived in view of such circumstances, and its purpose is for re-registration on the condition that the biometric information used for personal authentication has truly changed to require re-registration. By performing this process, a biometric authentication device that can eliminate waste due to unnecessary re-registration is provided.

Specific examples of means for solving the problems and their effects

(1) A biometric authentication device that performs personal authentication using biometric information (for example, information obtained by converting fingerprints, veins, retinas, irises, faces, etc. into data, voiceprints, etc.)
Biometric information registration means for registering biometric information as biometric information for verification (for example, the storage unit 320 in FIGS. 2 and 16);
Biometric information acquisition means (for example, the biometric information acquisition unit 350 in FIGS. 2 and 16) for acquiring biometric information of the person to be authenticated;
Collation authentication means (for example, S412C in FIG. 7) that performs personal authentication based on the degree of matching of the biometric information acquired by the biometric information acquisition means with the verification biometric information registered in the biometric information registration means. , S430D),
Collation history storage means ( for example, S415 in FIG. 7) that stores history information that can identify the degree of matching of the results collated by the collation authentication means in correspondence with each biometric information for collation ;
When the matching authentication unit determines that the degree of matching is equal to or less than a predetermined value, the determination result is suddenly generated based on history information corresponding to the matching biometric information used for the determination. Event determining means (for example, S1452 and S1454 in FIG. 8) for determining whether the event is a trend event or a trend event;
Re-registration notification means for urging the re-registration of the biometric information of the determined biometric holder (for example, determined to be YES in S1454 of FIG. 8) when the event determination means determines that the tendency event is the tendency event . Sometimes performs re-registration notification in S1455 ) ,
The verification history storage unit does not store the history information when the event determination unit determines that the event is a sudden event .

According to such a configuration, depending on the degree of matching result of matching the acquired authentication biometric information and biometric information registered in the biometric information registration means is equal to or less than a predetermined value Since the determination made by the event determination means is a trending event, re-registration notification is performed to prompt re-registration of the determined biometric information of the biometric holder, so that the degree of coincidence is a predetermined value or less. The re-registration notification will be made on the condition that the biometric information of the person to be authenticated has changed so that re-registration is truly necessary, and there is no need for re-registration yet. It is possible to prevent waste, and a rational system is obtained. In addition, when it is determined that the degree of coincidence of the biometric information of the person to be authenticated is equal to or less than a predetermined value, the determination result is suddenly generated based on the history information corresponding to the biometric information for verification used in the determination. The change in biometric information has not changed so much that it must be re-registered because it is determined whether the event is a trending event or a trending event, and re-registration of the biometric information is promoted by determining that it is a trending event Regardless of this, for example, when the coincidence degree of biometric information suddenly falls below a predetermined value due to an error at the time of biometric information acquisition, such as a shift in the reading position of biometric information, the biometric information is re-registered. This can prevent a wasteful re-registration notification that prompts the user, and makes the system even more rational.

( 2 ) The verification unit authenticates the identity of the person when the matching level is equal to or greater than a predetermined threshold (for example, an authentication success threshold of 90%) as a result of verification ( For example, S412C and S430D in FIG.
The re-registration notification means prompts re-registration on the condition that the degree of coincidence is equal to or greater than the threshold value and a difference from the threshold value is equal to or less than a predetermined value (for example, 3) (for example, (S428D is executed on the condition that YES is determined in S416D of FIG. 7).

  According to such a configuration, re-registration is urged on the condition that the degree of coincidence of the collation result is equal to or greater than a threshold value for successful personal authentication and the difference from the threshold value is equal to or less than a predetermined value. Therefore, it is possible to limit the target person who prompts the re-registration to those who have succeeded in the personal authentication, and it is possible to prevent as much as possible the inconvenience of re-registering the biometric information of a person whose identity is unknown.

( 3 ) A biometric authentication device that performs personal authentication using biometric information (for example, information obtained by converting fingerprints, veins, retinas, irises, faces, etc. into data, voiceprints, etc.)
Biometric information registration means (for example, the storage unit 320 in FIGS. 2 and 16) that registers biometric information for verification to be verified with the biometric information of the person to be authenticated;
Biometric information acquisition means (for example, the biometric information acquisition unit 350 in FIGS. 2 and 16) for acquiring biometric information of the person to be authenticated;
Collation authentication means (for example, S412C in FIG. 12) that performs personal authentication based on the degree of matching of the biometric information acquired by the biometric information acquisition means with the verification biometric information registered in the biometric information registration means. , S430D),
Collation history storage means (for example, S415 in FIG. 12) that stores history information that can specify the degree of coincidence of the results collated by the collation authentication means in correspondence with each biometric information for collation,
When the matching authentication unit determines that the degree of coincidence is equal to or less than a predetermined value, the determination result is based on the history information corresponding to each biometric information for matching used in the determination. Event determining means (for example, S1452 and S1454 in FIG. 13) for determining whether the event is a sudden event or a trending event;
Re-registration means (for example, re-registering the biometric information for collation for the determined biometric holder in the biometric information registration means when the event determination means determines that the trending event is the trending event) When the determination in S1454 of FIG. 13 is YES, a re-registration process is performed in S1455E ) .
The verification history storage unit does not store the history information when the event determination unit determines that the event is a sudden event .

According to such a configuration, depending on the degree of matching result of matching the acquired authentication biometric information and biometric information registered in the biometric information registration means is equal to or less than a predetermined value Since the determination performed by the event determination means is a trending event, the new biometric information for collation for the determined biometric holder is re-registered, so that the degree of coincidence falls below a predetermined value. Re-registration will be done on the condition that the biometric information of the person to be authenticated has changed so that it really needs to be re-registered, and there is no need for re-registration yet, and there is no need to re-register. It can be prevented and the system becomes rational. In addition, when it is determined that the degree of coincidence of the biometric information of the person to be authenticated is equal to or less than a predetermined value, the determination result is suddenly generated based on the history information corresponding to the biometric information for verification used in the determination. Because the biometric information for verification is re-registered when it is determined that the event is a trending event and a trending event, the change in the biometric information has changed so that it must be re-registered. For example, biometric information for verification when the degree of coincidence of biometric information suddenly falls below a predetermined value due to an error at the time of biometric information acquisition, such as a shift in the reading position of biometric information. It is possible to prevent wasteful re-registration, and the system becomes even more rational.

( 4 ) The collation history storage means stores a plurality of pieces of collated biometric information (for example, five pieces) in the past when it is authenticated that the person who has been authenticated as a result of the collation authentication means. Each history information is stored (for example, S415 in FIG. 12, history data table D1200 in FIG. 10, history data table D1200A in FIG. 11),
The re-registration unit re-registers one of the plurality of collated biometric information stored in the collation history storage unit as new collation biometric information (for example, the plurality of biometric information stored in S415 of FIG. 12). The registered biometric information (for example, the latest history data) is registered).

  According to such a configuration, one of the past collated biometric information stored in the collation history storage means to re-register as new biometric information for collation to determine whether it is a sudden event or a trending event. Therefore, re-registration using stored biometric information that has been stored is performed, and wasteful re-registration can be prevented even though there is no need for re-registration yet. It becomes.

( 5 ) The collation authentication means authenticates the identity of the person when the degree of matching is equal to or greater than a predetermined threshold (for example, an authentication success threshold of 90%) as a result of the collation ( For example, S412C and S430D in FIG.
The re-registration means performs re-registration on the condition that the degree of coincidence is equal to or greater than the threshold value and a difference from the threshold value is equal to or less than a predetermined value (for example, 3) (for example, FIG. (S428E is executed on the condition that YES is determined in S416D of 12).

  According to such a configuration, re-registration is performed on the condition that the degree of coincidence of the collation result is equal to or greater than a threshold value for successful personal authentication and the difference from the threshold value is equal to or less than a predetermined value. In addition, it is possible to limit the re-registration target person to those who have succeeded in the personal authentication, and to prevent as much as possible the inconvenience of re-registration for a person who is unknown whether or not he / she is.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. In the following description, the same parts are denoted by the same reference numerals. Their names and functions are also the same. Therefore, detailed description thereof will not be repeated.

  The process of performing personal authentication in the system of the present invention described below is a value determined on the basis of an individual rejection rate and an acceptable person rate that are common in authentication (biometric authentication) technology using human biometric information. (Hereinafter also referred to as an authentication success determination threshold).

  Here, the authentication success determination threshold value is a threshold value for determining whether or not the personal authentication is successful. Here, the principal rejection rate is a probability of misidentifying the person as being another person. The stranger acceptance rate is the probability of misidentifying someone else as the principal.

<First Embodiment>
(System configuration)
FIG. 1 is a diagram illustrating an example of a configuration of the biometric authentication apparatus 10000 in the present embodiment. This biometric information authentication device 10000 is used in a condominium 2 as an example of an apartment house. An electronic lock 3 a is provided at the entrance door 7 of the passage of the apartment 2. An apartment resident entering the lobby from the entrance door 6 of the apartment 2 can enter the passage of the apartment 2 by unlocking the electronic lock 3a. Moreover, the electronic lock 3b is each provided also in the entrance doors 8-11 from the passage of the apartment 2 to each residence AD. Furthermore, the same electronic lock 3b is provided also in the entrance door 12 of the manager room where the management apparatus 500 is installed. Each of the electronic locks 3a and 3b is connected to the management apparatus 500 by a communication cable. The communication cable is, for example, a cable conforming to RS-485 (Recommended Standard 485) for serially transferring data. The communication cable is not limited to a cable conforming to RS-485, and may be a cable of another standard as long as it can perform serial transfer or parallel transfer of data. The difference between the electronic lock 3a and the electronic lock 3b is that the electronic lock 3a is provided with an input unit 340 (see FIG. 2 and FIG. 3) for inputting a resident ID, while the electronic lock 3b is provided with the input part 340. Such an input unit is not provided.

  The residents (residents) of the condominium 2 input data necessary for authentication such as biometric information such as their own fingerprints and resident IDs from the management device 500. Then, the input data required for authentication is transmitted to the electronic lock 3a of the entrance door 7 of the passage and registered. The management apparatus 500 also transmits the input data required for authentication to the electronic lock 3b of the input resident's residence, and the transmitted data required for authentication is registered in the electronic lock 3b. . Data input and transmission (distribution) processing necessary for this authentication will be described later with reference to FIG. In this state, when a resident of the condominium 2 enters the condominium 2, first, after entering the lobby from the entrance door 6, a finger is inserted into the electronic lock 3a of the entrance door 7 of the aisle and the fingerprint information ( (Biological information) is read by the electronic lock 3a, and personal authentication is performed as a result of collation between the biological information and the registered biological information. When the personal authentication is confirmed, the electronic lock 3a is unlocked, the entrance door 7 is opened, and the passage can be entered. When a resident enters his own residence from the passage, his / her biological information is read by inserting a finger into the electronic lock 3b provided at the entrance door of the own residence, and registered as the biological information. As a result of collation with the biometric information, if the identity is confirmed, the entrance door of the residence is opened.

  FIG. 2 is a block diagram showing an example of the internal configuration of the electronic lock 3a. FIG. 3 is a diagram showing the external appearance of the electronic lock 3a from the front. In FIG. 2, the management device 500 is also shown for explanation. With reference to FIGS. 2 and 3, the electronic lock 3 a includes a display unit 330, an input unit 340, and a biological information acquisition unit 350.

  The display unit 330 has a function of displaying characters, images, and the like. The display unit 330 is an apparatus using any one of an LCD panel (Liquid Crystal Display Panel), an FED panel (Field Emission Display Panel), and an organic EL display panel (Organic Electroluminescence Display Panel). Note that the display unit 530 may be a device using a panel of a display method other than the above.

  Input unit 340 includes a plurality of buttons. The plurality of buttons are buttons for inputting numbers, characters, and the like. The plurality of buttons are provided outside the electronic lock 3a. When any one of the buttons is pressed, the input unit 340 transmits a button signal corresponding to the pressed button to the control unit 310 described later. Hereinafter, an operation of pressing a plurality of buttons included in the input unit 340 by an operator or the like is also referred to as an interface operation T.

  The biometric information acquisition unit 350 has a function of acquiring human biometric information, details of which will be described later. In the present embodiment, the biological information is information obtained by converting a fingerprint that is a part of a human body into data. In this case, the biometric information is fingerprint image data, data obtained by extracting a characteristic portion of the fingerprint, or the like. The biometric information is not limited to information obtained by converting fingerprints into data, but may be information obtained by converting veins, retinas, irises, faces, and the like into data. The biometric information may be a voiceprint based on a voice uttered by a human.

  When a part of the human body comes into contact, the biological information acquisition unit 350 transmits the biological information obtained by converting the part of the contacted body into data to the control unit 310 described later. When the biometric information acquisition unit 350 uses the transmitted biometric information and the verification process described later succeeds in authentication, the electronic locks 3a and 3b are unlocked and the entrance doors 6 to 12 can be opened.

  The biometric information acquisition unit 350 can acquire biometric information even when a part of the human body is not in contact. In this case, the biological information acquisition unit 350 includes, for example, a CCD (Charge Coupled Device). The biological information acquisition unit 350 acquires biological information by imaging a vein, a retina, an iris, a face, and the like with a CCD.

  The biometric information acquisition unit 350 can also acquire biometric information obtained by converting a voiceprint into data. In this case, the biological information acquisition unit 350 includes a microphone. Based on the voice collected by the microphone, the biometric information acquisition unit 350 acquires biometric information obtained by converting the voiceprint of the voice into data. Hereinafter, the electronic locks 3a and 3b are also referred to as “authentication terminals” or simply “terminals”.

  The electronic lock 3a further includes a control unit 310, a storage unit 320, and a communication unit 360. Control unit 310, storage unit 320, and communication unit 360 are arranged on control board CP320.

  The storage unit 320 has a function of storing data in a nonvolatile manner. The storage unit 320 is accessed by the control unit 310. The storage unit 320 is a medium (for example, a flash memory) that can hold data in a nonvolatile manner even when power is not supplied. The storage unit 320 stores data to be described later and other various data.

  The control unit 310 has a function of performing various types of processing on each unit in the electronic lock 3a, arithmetic processing, and the like. The control unit 310 may be any of a microprocessor, a field programmable gate array (FPGA), an application specific integrated circuit (ASIC), and a circuit having other arithmetic functions.

  The control unit 310 also performs processing for causing the display unit 330 to display the generated characters or images. In addition, the control unit 310 receives, from the input unit 340, a button signal corresponding to a button that has been pressed among the plurality of buttons included in the input unit 340. Control unit 310 performs processing according to the received button signal.

  The control unit 310 receives the biometric information transmitted from the biometric information acquisition unit 350 described above, and performs an authentication process and the like described later.

  Communication unit 360 exchanges data with control unit 310. The communication unit 360 also has a communication interface function for performing serial data communication. The communication unit 360 is connected to the management device 500 by a communication cable. Therefore, the control unit 310 can perform data communication with the management apparatus 500 using the communication unit 360. Note that the communication unit 360 may have a function of a communication interface that performs parallel data communication.

  Note that the communication unit 360 may have a function of performing data communication wirelessly. In this case, the communication unit 360 has a function of performing data communication using a wireless technology based on any of IEEE802.11a, IEEE802.11b, and IEEE802.11g, which are wireless LAN standards. Note that the radio technology is not limited to a technology based on any of IEEE 802.11a, IEEE 802.11b, and IEEE 802.11g, and may be other radio technologies. In this case, the communication unit 360 can perform data communication with the management apparatus 500 wirelessly.

  The electronic lock 3b is obtained by deleting the input unit 340 in the above-described electronic lock 3a, and the description thereof will not be repeated.

(Management device)
Next, the management apparatus 500 will be described in detail.

  FIG. 4 is a block diagram showing an example of the internal configuration of the management apparatus 500 in the present embodiment. 4 also shows the electronic locks 3a and 3b, the recording medium 555, and a biological information acquisition device 590 described later for the sake of explanation. A recording medium 555 stores a program 180 described later. That is, the program 180 is recorded on a medium or the like and distributed as a program product. The recording medium 555 is also distributed as a program product.

  With reference to FIG. 4, a mouse 542 and a keyboard 544 are connected to the management apparatus 500.

  The mouse 542 is an interface for the operator to operate the management apparatus 500. The keyboard 544 is an interface for an operator to operate the management apparatus 500. The keyboard 544 may be provided inside the management apparatus 500. Moreover, the structure provided in the inside of the management apparatus 500 may be sufficient as the mouse | mouth 542 as a touchpad etc., for example. In addition, a pen tablet may be connected to the management apparatus 500 as an input device.

  The management device 500 includes a display unit 530, a control unit 510, a storage unit 520, and a temporary storage unit 522.

  The storage unit 520 has a function of storing data in a nonvolatile manner. The storage unit 520 is accessed by the control unit 510. The storage unit 520 is a hard disk capable of storing a large amount of data. Note that the storage unit 520 is not limited to a hard disk, and may be any medium (for example, a flash memory) that can hold data in a nonvolatile manner even when power is not supplied. The storage unit 520 stores a program 180 and other various data.

  The display unit 530 has a function of displaying characters, images, and the like. The display unit 530 is a device using any one of an LCD panel, a CRT (Cathode Ray Tube), an FED panel, a PDP (Plasma Display Panel), and an organic EL display panel. Note that the display unit 530 may be a device using a panel of a display method other than the above. The display unit 530 may be a display device provided outside the management device 500.

  Control unit 510 has a function of performing various types of processing, arithmetic processing, and the like for each unit in management device 500 in accordance with program 180 stored in storage unit 520. The control unit 510 may be any of a microprocessor, FPGA, ASIC, DSP, and other circuits having arithmetic functions.

  Temporary storage unit 522 is accessed as data by control unit 510 and used as a work memory for temporarily storing data. The temporary storage unit 522 volatilizes data such as RAM (Random Access Memory), SRAM (Static Random Access Memory), DRAM (Dynamic Random Access Memory), SDRAM (Synchronous DRAM), DDR-SDRAM (Double Data Rate SDRAM), and others. Any circuit having a configuration capable of storing and storing data can be used.

  The management device 500 further includes a VDP 532 and a VRAM (Video Random Access Memory) 536.

The VRAM 536 has a function of temporarily storing image data.
Control unit 510 issues a drawing instruction to VDP 532 according to program 180 stored in storage unit 520. The drawing instruction is an instruction for generating an image and causing the display unit 530 to display the image.

  The VDP 532 is connected to the display unit 530. The VDP 532 reads font data, graphic data, and the like from a program 180 (to be described later) in the storage unit 520 in response to a drawing instruction from the control unit 510 and generates an image using the VRAM 536. The VDP 532 reads out the image data stored in the VRAM 536 and causes the display unit 530 to display an image based on the image data.

The management device 500 further includes an input unit 540 and a recording medium access unit 550.
A mouse 542 and a keyboard 544 are connected to the input unit 540. The operator gives an instruction to the management apparatus 500 using the mouse 542 or the keyboard 544. An input instruction from the mouse 542 or the keyboard 544 is transmitted to the control unit 510 via the input unit 540. Control unit 510 performs predetermined processing based on an input instruction from input unit 540. Hereinafter, an operation of the mouse 542 or the keyboard 544 by an operator or the like is also referred to as an interface operation P.

  The recording medium access unit 550 has a function of reading data and programs stored in the recording medium 555. The program 180 stored in the recording medium 555 is read by the recording medium access unit 550 by the installation process of the control unit 510, and the control unit 510 stores the program 180 in the storage unit 520. The installation processing program is stored in advance in the storage unit 520, and the installation processing is performed by the control unit 510 based on the installation processing program.

  Note that the program 180 may not be installed in the storage unit 520. In this case, control unit 510 uses recording medium access unit 550 to read program 180 stored in recording medium 555 and perform predetermined processing based on program 180.

  The recording medium 555 includes Blu-ray Disc (registered trademark), HD-DVD (High-Definition Digital Versatile Disc) (registered trademark), DVD-ROM (Digital Versatile Disk Read Only Memory), and DVD-R (Digital Versatile Disk Recordable). ), DVD-RAM (Digital Versatile Disk Random Access Memory), DVD + RW (Digital Versatile Disk Re-Writable), DVD-RW, CD-ROM (Compact Disk Read Only Memory), MO (Magneto Optical Disk), floppy (registered trademark) ) Disk, CF card (registered trademark), SM (Smart Media (registered trademark)), MMC (registered trademark), SD memory card (registered trademark), Memory Stick (registered trademark), xD picture card, USB memory, magnetic tape and Any non-volatile memory other than those described above may be used.

The management device 500 further includes a communication unit 560 and a communication unit 562.
Communication unit 560 exchanges data with control unit 510. Communication unit 560 has the same configuration and function as communication unit 360 described above, and therefore detailed description will not be repeated. That is, the communication unit 560 has a function of transmitting and receiving data to and from the electronic locks 3a and 3b in a wired or wireless manner.

  Communication unit 562 exchanges data with control unit 510. The communication unit 562 has a function of a communication interface for performing serial transfer based on the USB (Universal Serial Bus) 1.1 or USB 2.0 standard. Note that the standard of the communication interface for performing serial transfer is not limited to USB 1.1 or USB 2.0, but may be another standard.

  Note that the communication unit 562 may have a function of a communication interface that performs parallel transfer. The communication interface that performs parallel transfer is, for example, an interface that conforms to a Centronics standard or an IEEE 1284 (Institute of Electrical and Electronic Engineers 1284) standard. The communication unit 562 may have a communication interface function based on IEEE1394.

  A biometric information acquisition device 590 is connected to the communication unit 562. The biometric information acquisition device 590 has the same function as the biometric information acquisition unit 350 of the electronic locks 3a and 3b, and thus detailed description will not be repeated. That is, the biological information acquisition device 590 has a function of acquiring human biological information. The biometric information acquisition device 590 is provided with a biometric information acquisition unit 592 for acquiring biometric information. The biological information acquisition device 590 transmits the biological information acquired by the biological information acquisition unit 592 to the control unit 510 via the communication unit 562.

  The biometric information acquisition device 590 may be configured to be provided inside the management device 500. In this case, the biological information acquired by the biological information acquisition device 590 is transmitted to the control unit 510.

  The management device 500 further includes an audio output unit 572, an audio input unit 574, and an LED 576.

  The audio output unit 572 has a function of outputting audio corresponding to processing performed by the control unit 510. The sound output unit 572 includes a speaker that outputs sound. Control unit 510 performs data communication with audio output unit 572. When control unit 510 transmits audio data to audio output unit 572, audio output unit 572 outputs audio based on the audio data received from control unit 510 from the speaker.

  The voice input unit 574 has a function of inputting voice. The voice input unit 574 includes a microphone for inputting voice. The voice input unit 574 converts voice acquired by the microphone into voice data, and transmits the voice data to the control unit 510. Control unit 510 performs data communication with voice input unit 574.

  When the operator utters voice to the microphone included in the voice input unit 574, the voice input unit 574 converts voice acquired by the microphone into voice data, and transmits the voice data to the control unit 510.

  The LED 576 performs light notification according to processing performed in the management device 500. The LED 576 emits light based on a control instruction from the control unit 510.

  FIG. 5 is a flowchart showing a biometric information input / delivery process executed by the management apparatus 500. This biometric information input distribution process is a process for distributing and registering biometric information of a person who has newly become a resident of the apartment 2 to the electronic locks 3b and 3a. Referring to FIG. 5, first, control unit 510 of management device 500 performs step S (hereinafter simply referred to as “S”) 1 to specify the resident ID, name, finger type for registering biometric information, and own residence. It is determined whether or not the ID (terminal ID) of the electronic lock 3b and biometric information have been input, and waits until the input. If there is an input, the information input to the electronic lock 3a at the entrance of the passage is transmitted in S2. In the electronic lock 3a, the transmitted information is registered in the storage unit 320 as a registered biometric information management table D600A (see FIG. 6).

  Further, the management device 500 stores the information (specifically, the name and the type of finger for registering the biometric information) in the electronic lock 3b of the input terminal ID, that is, the electronic lock 3b of the input resident's residence. , Biometric information). In the electronic lock 3b, the transmitted information is registered in the storage unit 320 as a registered biometric information management table (not shown).

  FIG. 6 is a diagram showing the registered biometric information management table D600A described above. Referring to FIG. 6, biometric information (fingerprints, etc.) can be registered up to a total of four items including a right index finger, a left index finger, a right middle finger, and a left middle finger. Referring to FIG. 6, in the registered biometric information management table D600A, the “resident ID” row stores the data of the resident ID input by the resident of the apartment 2 and the “name” row stores the apartment 2. Is stored in correspondence with the resident ID, and the row of “biometric information name” includes a biometric information name indicating the type of the input fingerprint information (type of each finger input). Data is stored corresponding to the resident ID.

  The “biological information ID” is an ID (ID corresponding to each finger) for specifying the biological information stored in the storage unit 520 in association with the biological information name. The “number of verifications” is data on the number of times of use for each finger used by the resident for authentication with the electronic lock 3a, which will be described in detail later. In the “registered terminal ID” area, data of the input terminal ID is stored in correspondence with the resident ID. This terminal ID is allocated in advance to the electronic lock 3b of the resident's residence.

  The resident of the residence where the electronic lock 3b with the terminal ID MB001 is provided is a family of four whose names are H.K, Y.K, M.K, and S.K. ID 1101 is assigned. Moreover, the resident of the residence in which the electronic lock 3b whose terminal ID is MB002 is provided is a family of three.

  Specifically, the names of the fingers stored in the storage unit 520 in association with the biometric information name are the right index finger, the left index finger, the right middle finger, and the left middle finger, and are stored in association with the biometric information ID. Specifically, the ID corresponding to each finger is BM0101, BM0102, BM0103, BM0104, or the like. Further, the number of collations of each finger stored in association with the number of collations is 20, 15, 5, 3, etc., for example. As described above, the biometric information is information obtained by converting the fingerprint of the biometric information name (for example, the right person's finger) into data. For example, the biometric information ID “BM0103” is stored in the storage unit 520 in association with the biometric information name “right middle finger” and is information obtained by converting the right middle finger fingerprint into data (for example, image data of the right middle finger fingerprint). ).

  In the registered biometric information management table registered in the storage unit 320 of the electronic lock 3b, data of “resident ID” and “registered terminal ID” are deleted as compared with the registered biometric information management table D600A of FIG. Other data is stored for one family.

  FIG. 7 is a flowchart of the authentication process TD executed by the electronic lock 3a. Referring to FIG. 7, in S400, it is determined whether or not a resident ID is input, and waits until it is input. When the resident inputs the resident ID from the input unit 340, in S402, it is determined whether or not the control unit 510 has acquired the biometric information of the apartment resident. If NO in S402, it is determined whether or not a cancel operation has been performed in S401. If there is a cancel operation, the process returns to S400. If there is no cancel operation and YES in S402, the process proceeds to S403. If NO is determined in S402, control may be performed so as to return to S400 when a predetermined time (about 10 seconds) is elapsed by a timer instead of the cancel operation. In S403, with reference to the registered biometric information management table D600A, the biometric information (matching biometric information) corresponding to the input resident ID is read. For example, if the entered resident ID is “1101”, referring to FIG. 6, the right index finger, the left index finger, and the right index for four people H.K, Y.K, M.K, and S.K. Each biometric information of the middle finger and the left middle finger is read out. Next, the process proceeds to S412C.

  Here, it is assumed that the resident makes a part of the body corresponding to the biometric information for verification registered in advance in the management device 500 in contact with the biometric information acquisition unit 350. In this case, the biological information acquisition unit 350 transmits biological information obtained by converting a part of the contacted body into data to the control unit 310. Therefore, it is determined as YES in S402, and the process proceeds to S412C.

  In S412C, verification authentication process C is performed for authenticating the resident. In the verification authentication process C, the control unit 310 compares the biometric information received from the biometric information acquisition unit 350 with each of the plurality of biometric information for verification read out in S403, and determines the degree of match. .

  By this processing, the degree of coincidence is determined as a result of collating the biometric information received from the biometric information acquisition unit 350 with each of the plurality of collation biometric information.

  When the biological information is image data, the matching degree is determined by, for example, image matching processing. In addition, when the biological information is data obtained by extracting a characteristic part of a part of the body, the matching degree is determined by, for example, extraction data matching processing.

  When the degree of coincidence between the received biometric information and each of the plurality of pieces of biometric information for matching corresponding to the plurality of biometric information IDs is one, the control unit 310 has a degree of coincidence equal to or greater than the authentication success determination threshold. The authentication is determined to be successful. The authentication success determination threshold value is a threshold value for determining whether or not the resident identity authentication is successful. It is assumed that the authentication success determination threshold is 90%, for example. That is, it is determined that the authentication is successful when the personal authentication is determined to be successful.

  On the other hand, control unit 310 determines authentication failure when there is no matching degree equal to or higher than the authentication success determination threshold in the matching degree between the received biometric information and each of the plurality of pieces of biometric information for verification. That is, it is determined that the personal authentication has failed.

  Here, it is assumed that the biometric information received by the control unit 310 from the biometric information acquisition unit 350 is information obtained by converting the fingerprint of the resident's right index finger into data (for example, a fingerprint image). Therefore, in this verification authentication process C, the control unit 310 receives the received biometric information and a plurality of biometric information IDs “BM0101”, “BM0102”, “BM0103”, “BM0104”. The degree of coincidence with each piece of biometric information for verification is determined. When collating with each of this some biometric information for collation, it collates in an order from the biometric information for collation with many frequency | counts of collation (refer registration biometric information management table D600A of FIG. 6). A large number of collations means a finger that is frequently used for collation, and is biometric information for collation of a finger that has a high possibility of being used for this collation. Therefore, by collating preferentially from biometric information for collation that is frequently used, collation with biometric information for matching that matches early can be achieved, and the efficiency (speeding up) of collation processing can be achieved.

  Here, it is assumed that the determined degree of coincidence is 92%. Therefore, the resident's biometric information used to determine that the degree of coincidence is 92% is information (for example, a fingerprint image) obtained by converting the fingerprint of the resident's right index finger into data. The biometric information for matching used to determine that the degree of coincidence is 92% is biometric information for matching specified by the biometric information ID “BM0101” (name HK of the resident ID “1101”). Biometric information of the right index finger of the resident of In this case, it is assumed that the control unit 310 determines that the authentication is successful. When the control unit 510 determines the authentication result, the verification authentication process C ends, and the process proceeds to S414.

  In S414, a process of transmitting authentication result information (success or failure) to the management apparatus 500 is performed. The management device 500 receives this, totals the access history data to the electronic lock 3a, and displays or prints it out as necessary. The access history data is data in which the access date and time, the resident ID and name specifying the accessor, authentication result information (success or failure), etc. are listed.

  Next, in S415, the history data is stored as a history data table D1200 (see FIG. 10). The history data is determined in the verification authentication process C, the current date and time, the resident ID of the resident who is the subject of the authentication process, the biometric information ID that identifies the biometric information of the resident who is the subject of the authentication process, and the verification authentication process C And the degree of coincidence. In addition, biometric information collated this time (verified biometric information) corresponding to the biometric information ID is also stored. This collated biometric information is also referred to as “history data”. The control unit 310 stores only a predetermined number of history data in the storage unit 320 for each biometric information ID. The predetermined number is 5, for example. When more than a predetermined number of history data is stored in the storage unit 320 for one biometric information ID, the control unit 310 deletes the oldest history data and causes the storage unit 320 to store the latest history data. FIG. 11 shows a state where the oldest history data is deleted from the history data table D1200 shown in FIG. 10 and the latest history data is stored in the storage unit 320.

  The update control of the stored data (history data) of the history data table D1200 will be specifically described.

  First, in a predetermined period (for example, one week), a resident with the same resident ID (for example, “1101”) uses the biological information specified by the same biological information ID (for example, “BM0101”). Then, it is assumed that the same terminal ID (for example, “MB001” electronic lock 3a (authentication terminal) is operated a plurality of times. In this case, the electronic lock 3a (authentication terminal) performs authentication processing TD in FIG. As a result of this process, the history data table is stored in the storage unit 520 of the electronic lock 3a by repeatedly performing the process of S415 of Fig. 7. The history data table is the same. 10 includes a predetermined number of history data indicating the biometric information ID, for example, where the predetermined number is 5. Here, the history data table includes the history data shown in FIG. And is a table D1200.

  Next, a process when the authentication process TD of FIG. 7 is performed in the electronic lock 3a (authentication terminal) will be described. It is assumed that the resident ID of the resident who operates the electronic lock 3a (authentication terminal) with the terminal ID “MB001” is “1101”.

  In this state, when the authentication process TD in FIG. 7 is executed and the history data is stored in S415, the history data is as shown in FIG.

  Referring to FIG. 11, history data table D1200A has a history data table D1200 number “1” having no history data and history data table D1200 number “2” as compared to history data table D1200 of FIG. The difference is that the history data of “5” is the history data of the numbers “1” to “4” of the history data table D1200A and the history data of the number “5” is added. Other than that, it is the same as the history data table D1200, and the detailed description will not be repeated. The history data with the number “5” in the history data table D1200A is the history data D1100A of FIG. 11 stored in S415. That is, the oldest history data is deleted and the latest history data is added.

  Then, the processing of S1450 to S1454 of FIG. 8 is executed based on the history data table D1200A of FIG.

  Next, in S416D, control unit 310 determines whether or not the degree of matching determined in the above-described verification authentication process C is equal to or less than the re-registration determination threshold value. If YES in S416D, the process proceeds to S420D. On the other hand, if NO in S416D, the process proceeds to S430D described later.

  The re-registration determination threshold value is a process for notifying re-registration described later or automatically re-registering when the difference between the registration coincidence degree and the current coincidence degree is a predetermined value (for example, 3) or more. This is a threshold value for determining whether or not to execute the process. The re-registration is re-registration of the resident's current biometric information.

  Here, the degree of coincidence at the time of registration refers to the resident's biometric information for verification registered in advance in the electronic lock 3a (authentication terminal) (hereinafter also referred to as pre-registration biometric information) and the resident's at the time of registration. It is an average degree of coincidence with biometric information. Therefore, the degree of coincidence during registration is a value close to 100%. The current degree of coincidence is the degree of coincidence between the pre-registration matching biometric information and the current resident's biometric information.

  As described above, the human biological information generally changes slightly even due to the growth of the person, the change in season, and the like. Accordingly, the degree of coincidence at the time of registration increases as more time elapses since biometric information for preregistration verification is registered in advance in the electronic lock 3a (authentication terminal) (hereinafter also referred to as biometric information preregistration date and time) The difference from the current degree of coincidence may be large.

  The re-registration determination threshold is set to such a value that the personal authentication is successful depending on the current degree of matching even if a lot of time has elapsed from the biometric information pre-registration date and time. That is, the re-registration determination threshold value is set to a value that is equal to or greater than the authentication success determination threshold value and a predetermined value (eg, 3) is added to the authentication success determination threshold value. When the authentication success determination threshold is 90 (%), the re-registration determination threshold is set to 93 (%), for example. Here, it is assumed that the degree of coincidence determined in the above-described verification authentication process C is 92 (%). In this case, YES is determined in S416D, and the process proceeds to S420D.

  Note that the re-registration determination threshold value may be set to a value close to the authentication success determination threshold value, which is a value at which the identity authentication fails depending on the current matching degree. In this case, the re-registration determination threshold value is set to a value less than the authentication success determination threshold value and a predetermined value (eg, 3) subtracted from the authentication success determination threshold value. When the authentication success determination threshold is 90 (%), the re-registration determination threshold is set to 87 (%), for example.

  In S420D, control unit 310 determines whether or not the degree of matching determined in the above-described verification authentication process C is equal to or greater than the above-described biometric information acquisition site determination threshold value. If YES in S420D, the process proceeds to S421. On the other hand, if NO in S420D, the process proceeds to S430D described later. Here, it is assumed that the degree of coincidence determined in the above-described verification authentication process C is 92 (%). The biometric information acquisition site determination threshold is 80 (%). The biometric information acquisition site determination threshold value is a value for specifying the site of the resident's biometric information acquired by the biometric information acquisition unit 350, and is at least necessary for performing the matching number association process (described later). This is a threshold value for specifying a site for acquiring biometric information. If it is determined as YES in S420D, the process proceeds to S421.

  In S421, a collation count associating process is performed. In the collation count associating process, the control unit 310 uses the biometric information used this time among a plurality of resident biometric information IDs in the registered biometric information management table D600A (see FIG. 6) stored in the storage unit 320. "1" is added and updated to the number of verifications of the biometric information ID corresponding to the information.

  Here, the number of times of collation is the degree of coincidence with the resident's biometric information used for the above-mentioned collation among a plurality of pieces of biometric information for collation stored in the storage unit 320. This is information indicating the frequency of use of the biometric information for verification described above. That is, when the personal authentication is successful or when the biometric information used for the collation (for example, the biometric information of the right person's pointing finger) can be specified even if the personal authentication fails, the collation count associating process is performed. Note that the verification number association process may be performed only when the personal authentication is successful.

  In the registered biometric information management table D600A (see FIG. 6), when the number of collations is not associated with the biometric information ID corresponding to the biometric information used for collation among the plurality of biometric information IDs, the control unit 310 The number of collations associated with the biometric information ID corresponding to the biometric information used for the collation is one. When the number of matching times has already been associated, control unit 310 updates the number of matching times that is associated with each time the matching number associating process is performed. Then, the process of step S421 ends.

  In S422D, control unit 310 determines whether or not the degree of matching determined in the above-described verification authentication process C is equal to or greater than the authentication success determination threshold value. If YES in S422D, the process proceeds to S428D. On the other hand, if NO in S422D, the process proceeds to S430. Here, it is assumed that the degree of coincidence determined in the above-described verification authentication process C is 92 (%). The authentication success judgment threshold is assumed to be 90 (%). In this case, YES is determined in S422D, and the process proceeds to S428D.

  In S428D, control unit 310 performs re-registration notification processing. This re-registration notification process will be described later. After the process of S428D, the process of S430D described above is performed.

  In S430D, the control unit 310 determines whether or not it has been determined that the authentication has been successful in the verification authentication process C described above. If YES in S430D, the process proceeds to S438. On the other hand, if NO in S430D, the process proceeds to S439. Here, in the verification authentication process C, it is determined that the authentication is successful, and the process proceeds to S438.

In S438, the unlocking process of the electronic lock is performed, and the entrance door can be opened.
On the other hand, if NO is determined in S430D, the process proceeds to S439, and an authentication failure process is performed. In the authentication failure process, the control unit 310 causes the display unit 330 to display an error message. The error message is, for example, a message “authentication NG”.

  In S416D described above, if NO, the process proceeds to S430D. Here, it is assumed that the re-registration determination threshold is 93 (%). Further, it is assumed that the degree of coincidence determined in the above-described verification authentication process C is 95 (%). In this case, NO is determined in S416D, and the process proceeds to S430D.

  FIG. 8 is a flowchart showing specific control of the re-registration notification process shown in S428D described above. First, in S1430, the control unit 310 determines whether or not a predetermined number or more of history data is stored in the storage unit 320 for each biometric information ID. Here, it is assumed that the predetermined number is “5”, for example. If YES in S1430, the process proceeds to S1450. In S1450, control unit 310 determines whether or not the biometric information ID of the biometric information collated this time (history data stored in S415) matches the same biometric information ID indicated by a predetermined number or more of history data. judge. If YES in S1450, the process proceeds to S1452. On the other hand, if NO at S1450, the process returns. Here, it is assumed that the storage unit 320 stores a history data table D1200A shown in FIG. 11 composed of five pieces of history data. In this case, it is assumed that the same biometric information ID indicated by the five history data is “BM0101”. In this case, YES is determined in S1450, and the process proceeds to S1452.

  In S1452, event determination processing is performed to determine whether a phenomenon in which the degree of coincidence of authentication results of biometric information is equal to or less than the re-registration determination threshold (93%) is a sudden event or a trending event.

  As described above, human biological information generally tends to gradually change over time due to the growth of the human, changes in season, and the like. When the degree of coincidence falls below the re-registration determination threshold (93%) due to such a trending event that gradually changes over time, in order to enable authentication following the change, It is necessary to update the registered biometric information for verification with the changed biometric information. On the other hand, the change in the biometric information is a sudden change in the read biometric information due to, for example, a defect in the reading angle of the finger at the time of biometric information acquisition or a finger injury in addition to the above-described trending events. There is a case. In the case of biometric information that has changed due to such a sudden event, it is preferable not to update the registered biometric information for verification because it is not the correct biometric information. In view of such circumstances, in the present embodiment, it is determined whether the change in the read biometric information is caused by a sudden event or a trend event, and is caused by a trend event. The process for updating the biometric information is executed only for the patient.

  First, in the event determination process in S1452, the control unit 310 calculates an average value of a plurality of coincidence levels respectively indicated by a plurality of history data indicating the same biological information ID. Then, the control unit 310 determines whether or not the difference between the calculated average value and the degree of coincidence of the biometric information collated this time (history data stored in S415) is equal to or greater than the tendency event determination threshold value. To do. Here, the trending event determination threshold is set so that the biometric information corresponding to the plurality of history data indicating the same biometric information stored in the storage unit 320 does not change significantly due to the sudden event. It is a threshold value for determining an event.

  Here, as described above, the sudden event is an event in which the position where the resident's right index finger is brought into contact is slightly shifted from the correct position, an event in which the part from which the resident's biometric information is acquired is injured, or the like. . Therefore, when a sudden event occurs, the degree of matching determined is a value that is far from the average value of the plurality of matching degrees respectively indicated in the plurality of history data.

  When the control unit 310 determines that the difference between the calculated average value and the degree of coincidence of the biometric information collated this time (history data stored in S415) is within the trend event determination threshold, the control unit 310 Judged as an event. Further, when the control unit 310 determines that the difference between the calculated average value and the degree of coincidence of the biometric information collated this time (history data stored in S415) is larger than the tendency event determination threshold, Judged as a symptom event. The trend event determination threshold is assumed to be 2, for example.

  Here, it is assumed that the calculated average value is 94. Further, it is assumed that the history data stored in S415 is the history data D1100A in FIG. Therefore, the degree of coincidence indicated by the history data stored in S415 is 92 (%). In this case, the difference between the calculated average value and the degree of coincidence indicated by the history data stored in S415 is determined to be within the tendency event determination threshold, and is determined to be a trend event.

  In addition, the determination method of a trending event and a sudden event is not limited to the above method, and may be another method (described later as a modified example). Thereafter, the process proceeds to S1454.

  In S1454, control unit 510 determines whether or not it is determined as a trending event by the event determination process. If YES in S1454, the process proceeds to S1455. On the other hand, if NO in S1454, the process returns.

  As described above, either a trending event or a sudden event is determined from a plurality of history data based on the latest history data. Only when it is determined as a trending event, notification that prompts re-registration of biometric information is performed.

  Therefore, there is an effect that it is possible to eliminate a notification that prompts meaningless re-registration due to a sudden event. Here, as described above, the sudden event is, for example, an event in which the position where the right index finger of the resident is brought into contact is slightly shifted from the correct position, an event in which the part from which the resident's biometric information is acquired is injured, etc. It is.

  On the other hand, if NO at S1430, the process proceeds to S1455. In S1455, re-registration notification is performed.

  As described above, in the case of an unexpected event, NO is determined in S1454, and re-registration notification is not performed, and only the unlocking process according to the determination of successful authentication is performed (S430D, S438). It is possible to eliminate the notification prompting the meaningless re-registration due to the target event.

  FIG. 9 is a diagram showing a re-registration notification image WG1300 displayed on the display unit 330. As shown in FIG. Referring to FIG. 9, in re-registration notification image WG1300, a message for prompting re-registration of biometric information of a resident who has been subject to authentication processing is displayed. The message is, for example, “Mr. HK, please re-register biometric information of the right index finger”.

  As described above, the average degree of coincidence between the resident's biometric information for verification registered in advance in the electronic lock 3a (authentication terminal) and the resident's biometric information at the time of registration is the threshold for determining the success of authentication. When the value is equal to or greater than the value and decreases to a value close to the authentication success determination threshold, a notification that prompts re-registration of biometric information is performed.

  Thereby, the resident who is the object of re-registration registers the biometric information for which the current re-registration is requested in the management device 500. Then, the management apparatus 500 transmits the registered biometric information as new biometric information for verification to the corresponding electronic lock 3a (authentication terminal) for re-registration. The corresponding electronic lock 3a searches the registered terminal ID corresponding to the resident ID with reference to a table (not shown) that associates the resident ID stored in the management device 500 with the registered terminal ID. Determine by. After the re-registration, the degree of coincidence by the authentication process of the resident who is the object of re-registration is improved.

  Human biological information does not change in a short period of time. Therefore, notification for prompting re-registration of biometric information is not performed every short period (for example, one week). Therefore, a rational biological information collation system can be provided.

  Regarding the authentication processing by the electronic lock 3b, the steps of S400 and S403 in FIG. 7 are deleted, and other controls are the same as those in FIGS. In the electronic lock 3b, since the biometric information to be collated is for one family, it is not necessary to narrow down the biometric information to be collated from the resident ID.

(Automatic registration of biometric information)
Next, in the above-described embodiment, when re-registration of biometric information is necessary, the notification is made to that effect, but in the following, the biometric information is automatically re-registered. Embodiments will be described. As described above, the human biological information generally changes slightly even due to the growth of the person, the change in season, and the like. Hereinafter, an authentication process (hereinafter, also referred to as an authentication process TE) for authenticating the resident is performed in each of the plurality of electronic locks 3a (authentication terminals) when the biometric information changes will be described. .

  It is assumed that biometric information for verification is stored in the storage unit 320 of the electronic lock 3a as the authentication terminal. The biometric information for verification stored in the storage unit 320 is all the biometric information specified by the “biometric information ID”.

  In addition, it is assumed that the registered biometric information management table D600A of FIG. 6 is stored in the storage unit 320 of the electronic lock 3a.

  FIG. 12 is a flowchart of the authentication process TE. Referring to FIG. 12, authentication process TE is different from authentication process TD in FIG. 7 in that the re-registration process of S428E is performed instead of S428D. Other than that, it is the same as the authentication process TD, and therefore detailed description will not be repeated. Hereinafter, processes different from the authentication process TD will be mainly described.

  FIG. 13 is a flowchart showing specific control contents of the re-registration process in S428E of FIG. This flowchart is similar to FIG. 8, and the difference is that the electronic lock 3a performs re-registration processing of biometric information in S1455A. In the re-registration process, the control unit 310 deletes the biometric information for collation to be collated from the storage unit 320, and the collated biometric information included in the history data stored in S415 is stored in the deleted biometric information for collation. Instead, it is stored in the storage unit 320 as new biometric information for verification. The new biometric information for verification stored in the storage unit 320 is biometric information (verified biometric information) specified by the biometric information ID included in the verified biometric information stored in S415. That is, the most recently stored biometric information stored at the present time is selected and registered as new biometric information for verification.

  More specifically, when the biometric information collated this time in the state of the history data table D1200 in FIG. 10 is newly registered as history data (including collated biometric information), the history data table D1200A in FIG. As described above, the oldest history data is deleted and the current history data is newly stored. The biometric information (verified biometric information) collated at the time of “06/09/28/10: 35” of number 5 which is the newly stored history data this time is registered as new biometric information for collation. It is. As a result, in the re-registration transition, the verification authentication using the latest verification biometric information is performed, and the verification authentication that follows the temporal change of the biometric information caused by the trending event becomes possible.

  In addition, collated biometric information is not limited to what is selected by said method, For example, the average biometric information of the said some collated biometric information may be sufficient. The collated biometric information may be, for example, collated biometric information that is closest to the average value of the corresponding matching degrees among the plurality of collated biometric information.

  As described above, the average degree of coincidence between the resident's biometric information for verification registered in advance in the electronic lock 3a (authentication terminal) and the resident's biometric information at the time of registration is the threshold for determining the success of authentication. When the value is equal to or greater than the value and decreases to a value close to the authentication success determination threshold, the biometric information of the current resident is used as new verification biometric information in a plurality of electronic locks 3a (authentication terminals). It will be automatically re-registered.

  Therefore, in the management apparatus 500, the matching degree by the authentication process of the resident who is the object of re-registration is improved without taking a wasteful effort such as performing the re-registration operation.

Human biological information does not change in a short period of time. Therefore, re-registration of biometric information is not performed every short period (for example, one week). Therefore, a rational biological information collation system can be provided.
Based on this, the processing of SD1450 to S1454 in FIG. 13 is executed.

  As described above, either a trending event or a sudden event is determined from a plurality of history data based on the latest history data. Only when it is determined as a trending event, re-registration of biometric information is automatically performed in each of the plurality of electronic locks 3a (authentication terminals).

  Therefore, there is an effect that meaningless re-registration due to a sudden event can be eliminated. Here, as described above, the sudden event is, for example, an event in which the position where the right index finger of the resident is brought into contact is slightly shifted from the correct position, an event in which the part from which the resident's biometric information is acquired is injured, etc. It is.

The biometric information that is automatically re-registered in each of the plurality of electronic locks 3a (authentication terminals) has the lowest degree of coincidence among the plurality of biometric information that has been successfully authenticated. Therefore, the biometric information for verification newly registered in each of the plurality of electronic locks 3a (authentication terminals) is highly reliable, and the degree of matching by the resident authentication process is improved.
<Second Embodiment>
(System configuration)
FIG. 14 is a diagram illustrating an example of the configuration of the biometric authentication device 10000 according to the second embodiment. The same devices as those in the first embodiment are denoted by the same reference numerals, and the description thereof will not be repeated here. The biometric authentication device 10000 in the second embodiment is used for a game arcade 4000. Referring to FIG. 14, management apparatus 500 is installed in management office 3000. The management device 500 is a PC (Personal Computer). The management apparatus 500 is not limited to a PC, and may be any apparatus as long as it has a communication function.

  As will be described in detail later, the game hall 4000 is in charge of areas AR1, AR2,..., ARn for collecting and collecting the money stored in the plurality of island safes 300 (see FIG. 15). Is stipulated.

  Each of the assigned areas AR1, AR2,..., ARn includes a plurality of gaming machine installation islands. Each of the assigned areas AR1, AR2,..., ARn is on the same floor of the game hall. Each of the assigned areas AR1, AR2,..., ARn may be on a different floor (eg, 1st floor, 2nd floor) of the game hall (eg, the 1st floor is assigned to the assigned areas AR1, 2nd floor). In charge area AR2).

  The management device 500 is connected to island safes 300 (see FIG. 15) of a plurality of gaming machine installation islands 1000 included in each of the assigned areas AR1, AR2,. The communication cable is, for example, a cable conforming to RS-485 (Recommended Standard 485) for serially transferring data. The communication cable is not limited to a cable conforming to RS-485, and may be a cable of another standard as long as it can perform serial transfer or parallel transfer of data.

  Moreover, the management apparatus 500 may perform data communication by radio with the island safes 300 of the plurality of gaming machine installation islands 1000 included in each of the assigned areas AR1, AR2,. In this case, wireless data communication is performed by a wireless technology based on any one of IEEE802.11a, IEEE802.11b, and IEEE802.11g, which are wireless LAN standards.

  Next, as an example, one of the plurality of gaming machine installation islands 1000 included in the assigned area AR1 will be described.

  FIG. 15 is a diagram illustrating an example of the configuration of the gaming machine installation island 1000. FIG. 15 also shows the management device 500 for the sake of explanation. Referring to FIG. 15, gaming machine installation island 1000 includes a plurality of gaming machines 200. A platform machine 210 is installed on the left side of each of the plurality of gaming machines 200. The gaming machine 200 may be any of a pachinko gaming machine, a slot machine, a coin gaming machine, and other gaming machines. That is, the gaming machine 200 may be any device as long as it can play a game using money. In the following, money is assumed to indicate a bill or a coin. Therefore, the money indicates, for example, a 1000 yen bill, a 500 yen coin, or the like.

The gaming machine installation island 1000 further includes an island safe 300 and a money transfer device 400.
The money transfer device 400 is connected to each of the plurality of inter-machines 210 via the money transfer path 410. The money transport path 410 is connected to the island safe 300.

  The inter-machine 210 determines whether or not the money inserted from the money insertion port 212 is a true money. The money determined to be true money by the inter-machine 210 is discharged by the inter-machine 210 to the money transport path 410 connected to the inter-machine 210. The money transport path 410 is provided with a mechanism for transporting money to the island safe 300 by, for example, a belt conveyor.

  The money transport apparatus 400 causes the money transport path 410 to perform a process of transporting the money MN discharged from each of the plurality of inter-vehicle machines 210 to the money transport path 410 to the island safe 300.

  Although details will be described later, the island safe 300 accumulates the money conveyed by the money conveyance path 410. Note that an island safe 300 is installed on each of a plurality of gaming machine installation islands included in each of the assigned areas AR1, AR2,..., ARn of FIG. That is, a plurality of island safes 300 are installed in the game hall 4000.

  FIG. 16 is a block diagram illustrating an example of the internal configuration of the island safe 300. In FIG. 16, the management apparatus 500 is also shown for explanation. Referring to FIG. 16, island safe 300 has substantially the same circuit configuration and control function as electronic lock 3 b in the first embodiment, and is different in that it includes a money storage unit 390.

  The money accumulation unit 390 accumulates the money conveyed by the aforementioned money conveyance path 410. The money accumulation unit 390 transmits total amount information of accumulated money to the control unit 310 described later.

  FIG. 17 is a diagram showing the island safe 300 in an unlocked state. Referring to FIG. 17, island safe 300 includes a front door CP310, a control board CP320, and a money storage unit 390.

  The front door CP310 is provided with a control board CP320 described later. When the front door CP310 is in an openable / closable state, the money stored in the money storage unit 390 can be taken out.

  Hereinafter, a person who is permitted to collect the money stored in each of the plurality of island safes 300 included in the game arcade 4000 is also referred to as a money collection person in charge. The person in charge of collecting money can operate the island safe 300 to unlock the island safe 300. The person in charge of collecting money registers his / her fingerprint information in the management apparatus 500 in advance. Then, the person in charge of collecting money acquires his / her fingerprint information by the fingerprint information acquisition unit 350 of the island safe 300, and when the authentication is successful, the island safe 300 is unlocked and the money stored in the money storage unit 390 is collected. Can be recovered.

  Thus, in the second embodiment, the electronic lock 3b of the condominium 2 corresponds to the island safe 300, and the person in charge of money collection registers the fingerprint information in place of the resident of the condominium 2 to authenticate the person. The management apparatus 500 has the same control function (FIG. 5) as the management apparatus 500 described in the first embodiment, and the island safe 300 is the same as the electronic lock 3b described in the first embodiment. It has a control function (FIGS. 7, 8, 12, and 13). The difference is that the island safe 300 in which one person in charge of collecting money collects money is usually a plurality of island safes 300 belonging to any one of the plurality of assigned areas AR1 to ARn. Therefore, the “resident ID” in the registered biometric information management table D600A of FIG. 6 becomes “money collection person ID”, and only one piece of money collection person data is stored corresponding to one ID. In addition, the registered terminal ID is registered with the terminal IDs of the plurality of island safes 300 handled by the money collection staff, and the biometric information of the registered money collection staff is the island safes of the plurality of terminal IDs. It is a point to be delivered to 300 simultaneously. Then, the person in charge of collecting the money causes the biometric information to be read by the biometric information acquisition unit 350 of the island safe 300 in order to unlock the island safe 300 that he / she is in charge of, and compares the biometric information with the already registered biometric information. If successful, the island safe 300 is unlocked and money can be collected.

  It should be noted that the island safe 300 may be configured with the above-described electronic lock 3a type terminal, that is, an input unit 340 that can input a money collection person ID. In that case, at the time of biometric information verification authentication, the ID of the person in charge of collecting the money can be input and narrowed down to biometric information for verification corresponding to the ID, and verification with the read biometric information can be performed. (Control of S403 and S412C in FIG. 7 and FIG. 12), efficiency (speeding up) of collation authentication can be achieved.

Next, main effects obtained by the embodiment described above will be described.
(1) The determination is made on the condition that the degree of coincidence of the result obtained by comparing the acquired biometric information with the biometric information for authentication registered in the biometric information registering unit is equal to or less than a predetermined value. Since the re-registration notification that prompts re-registration of the biometric information of the biometric holder is performed, the biometric information of the person to be authenticated has changed so that the degree of coincidence falls below a predetermined value and re-registration is truly necessary. Therefore, re-registration notification is made on the condition that it is possible to prevent wasteful re-registration notification even though there is no need for re-registration.

  (2) When it is determined that the matching degree of the biometric information of the person to be authenticated is equal to or less than a predetermined value, the determination result is based on the history information corresponding to the biometric information for verification used in the determination. Whether it is a sudden event or a trending event, and because it is determined to be a trending event, re-registration of biometric information is prompted, so the change in biometric information has not changed so much that it must be re-registered Nevertheless, for example, when the degree of coincidence of biometric information suddenly falls below a predetermined value due to an error in obtaining biometric information such as a shift in the reading position of biometric information, the biometric information is re-established. It is possible to prevent useless re-registration notification that prompts registration, and the system becomes even more rational.

  (3) Re-registration is required because re-registration is urged on condition that the degree of coincidence of the collation result is equal to or greater than a threshold value for successful authentication and the difference from the threshold value is equal to or less than a predetermined value. Can be limited to those who have succeeded in personal authentication, and the inconvenience of re-registering the biometric information of a person whose identity is unknown can be prevented as much as possible.

  (4) The determination is made on the condition that the degree of coincidence of the result obtained by comparing the acquired biometric information with the biometric information for authentication registered in the biometric information registering unit is equal to or less than a predetermined value. Because the biometric information for biometric owners is re-registered, the degree of coincidence falls below a predetermined value and the biometric information of the person to be authenticated has changed so that re-registration is necessary. Therefore, re-registration is performed on the condition, and it is possible to prevent the waste of re-registration even though there is no need for re-registration, and a rational system is obtained.

  (5) When it is determined that the degree of coincidence of the biometric information of the person to be authenticated is equal to or less than a predetermined value, the determination result is based on the history information corresponding to the biometric information for verification used for the determination. Since it is determined whether it is a sudden event or a trending event, and the biometric information for verification is re-registered when it is determined to be a trending event, the change in the biometric information changes so that it must be re-registered. The biometric body for collation when the coincidence degree of the biometric information suddenly falls below a predetermined value due to an error at the time of biometric information acquisition such as a shift in the reading position of the biometric information. It is possible to prevent wasteful re-registration of information, and the system becomes even more rational.

  (6) Since one of the past collated biometric information stored in the collation history storage means to determine whether it is a sudden event or a trending event is re-registered as new biometric information for collation, Re-registration using stored collated biometric information is performed, and wasteful re-registration can be prevented even though there is no need for re-registration yet, and a rational system is obtained.

  (7) Re-registration is performed because re-registration is performed on condition that the degree of coincidence of the collation result is equal to or greater than a threshold value for successful authentication and the difference from the threshold value is equal to or less than a predetermined value. Target persons can be limited to those who have succeeded in authenticating the person, and the inconvenience of re-registration for those who are unknown whether or not the person is authentic can be prevented as much as possible.

Next, modifications and feature points in the embodiment described above are listed below.
(1) The re-registration notification (see FIG. 8S1448) in FIG. 8S1448 may be performed by both the management apparatus 500 and the terminals (electronic locks 3a and 3b, Shimano Bank 300). Further, when re-registration notification is performed on the terminal (electronic locks 3a, 3b, island safe 300) side, a speaker is provided on the terminal (electronic lock 3a, 3b, island safe 300), and re-registration notification can be performed by voice. You may do it.

  (2) In the embodiment described above, the biometric information ID for specifying the biometric information is stored in the registered biometric information management table D600A and the history data tables D1200, D120A. Instead, the corresponding biometric information may be stored in the history data table D1200. Further, in the history data table D1200, the date and time of collation are directly recorded, but instead, information specifying the order of whether the collation time is early or late may be stored.

  (3) In the above-described embodiment, the money inserted from the plurality of inter-vehicle machines 210 installed on the gaming machine installation island 1000 is shown to be collected in one place in the island safe 300. The machine 210 itself may be provided with a money storage unit (island safe), and a staff member (recovery person) may collect money from the money storage part (island safe) of each inter-vehicle machine 210.

  (4) When a plurality of surveillance cameras are installed in the amusement hall, if any abnormality is determined as a result of the identity authentication, the island safe 300 determined to be abnormal is zoomed in with the monitoring camera, and the image is taken. The image may be displayed on the display unit 530 of the management apparatus 500 and the image may be stored in the storage unit 520.

  (5) In the above-described embodiment, a plurality of devices such as the plurality of electronic locks 3a and 3b and the management device 500 of the apartment 2 and the plurality of island safes 300 and the management device 500 of the game arcade 4000 as the biometric information authentication device. In the above description, the system is configured by a system connected by wire connection. However, the present invention is not limited thereto, and may be used for a stand-alone type device such as a personal computer to authenticate a user (operator). . That is, the “biological information authentication device” of the present invention is a broad concept including both the system and the device itself.

  (6) In the embodiment described above, the terminal (electronic locks 3a, 3b, island safe 300) is provided with a function for determining whether or not it is a trending event of S1450 to S1454 in FIGS. However, it may be provided in the management device 500 instead. In that case, instead of storing the history data in S415, the terminal (electronic locks 3a, 3b, island safe 300) transmits the history data to the management device 500, and the management device 500 stores the history data in FIG. The history data tables D1200 and D1200A shown in FIG. 11 are stored, and the history data tables D1200 and D1200A are used to determine whether the event is a trending event. In the case of a trending event, the fact is notified by itself, or it is returned to the terminal and notified on the terminal side, or new biometric information for verification is automatically registered.

  Furthermore, the biometric information read from the terminals (electronic locks 3a, 3b, island safe 300) is transmitted to the management apparatus 500, and the management apparatus 500 is used for the verification authentication process and re-registration shown in FIGS. Processing may be executed. In particular, in the first embodiment described above, the electronic lock 3a stores and collates the biometric information for collation of all the residents of the apartment 2, which increases the burden on the terminal. If so, the burden on the terminal side can be reduced.

  (7) In the above-described embodiment, on the condition that the matching result matching degree of biometric information is not more than the re-registration determination threshold (93%) and not less than the authentication success determination threshold (90%) (see FIG. 7, S422D in FIG. 12), the biometric information re-registration notification process (S428 </ b> D in FIG. 7) and the re-registration process (S <b> 428 </ b> D in FIG. 12) are shown, but the steps in S <b> 422 </ b> D in FIGS. 7 and 12 are performed. And the degree of coincidence is equal to or lower than the re-registration determination threshold (93%) and equal to or higher than the biometric information acquisition site determination threshold (80%) (S420D in FIG. 7 and FIG. 12). Notification processing (S428D in FIG. 7) and re-registration processing (S428D in FIG. 12) may be executed.

  (8) In the above-described embodiment, the determination of whether or not the event is a trending event (S1452 and S1454 in FIGS. 8 and 13) is performed by a plurality of matches indicated by a plurality of history data indicating the same biological information ID. The difference between the average value of the degree and the coincidence degree of the biometric information collated this time is obtained, and whether or not the difference is equal to or greater than the tendency event determination threshold value is determined. However, other methods may be as follows.

    (I) Instead of registering biometric information at the past several times (for example, five times) of authentication as history data, only one piece of biometric information at the time of previous authentication (reregistration determination threshold (93%) or more) History data is registered as history data, and the difference between the degree of coincidence of the latest biometric information (history data) and the degree of coincidence of the biometric information acquired this time is equal to or greater than the tendency event determination threshold It may be determined depending on whether or not.

    (Ii) A rate of change per unit time is obtained from a plurality of matching levels respectively shown in a plurality of history data and determination dates (see FIGS. 10 and 11) corresponding to them, and from the previous authentication to the current authentication. The degree of coincidence at the time of the current authentication is predicted from the product of the elapsed time and the change rate per unit time, and the difference between the degree of coincidence of the prediction and the degree of coincidence of the biometric information collated this time is a threshold for determining a trending event. You may make it determine by whether it is more than a value.

  (9) In the above-described embodiment, a plurality of history data used for the determination of whether or not the event is a trending event (S1452 and S1454 in FIGS. 8 and 13) are repeated due to a sudden event. Although there are cases where the registration judgment threshold value (93%) or less is included (S416), the history data is stored in the step (S415) before the judgment step of whether or not it is below the reregistration judgment threshold value (93%). Control may be performed so that data that falls below the re-registration determination threshold (93%) due to a sudden event is not stored as history data. In this way, it is determined whether or not the biometric information that has changed due to injuries or malfunctions at the time of reading is not included in the plurality of history data and is a trending event based on the original proper biometric information. Thus, the judgment system can be improved.

  Furthermore, regardless of whether or not it is a sudden event, it may be controlled not to store all the data that are equal to or lower than the re-registration determination threshold (93%) as history data.

  (10) In the first embodiment described above, a common resident ID is assigned to one family (see the registered biometric information management table D600A in FIG. 6). You may also divide different resident IDs. By doing so, when collating with priority from the biometric information for collation with a large number of collations, collation can be performed after narrowing down the biometric information for collation to one biometric information for collation (FIG. 7, (Control of S403 and S412C in FIG. 12), the efficiency (speeding up) of collation can be further improved.

  (11) The embodiment disclosed this time should be considered as illustrative in all points and not restrictive. The scope of the present invention is defined by the terms of the claims, rather than the description above, and is intended to include any modifications within the scope and meaning equivalent to the terms of the claims.

It is a figure which shows an example of a structure of the biometric information authentication apparatus in this Embodiment. It is a block diagram which shows an example of an internal structure of an electronic lock. It is the figure which showed the external appearance of the electronic lock from the front. It is a block diagram which shows an example of an internal structure of a management apparatus. It is a flowchart of the biometric information input delivery process of a management apparatus. It is a figure which shows the registration biometric information management table as an example. It is a flowchart of the authentication process TD. It is a flowchart of a re-registration alerting | reporting process. It is a figure which shows the re-registration alerting | reporting image as an example. It is a figure which shows the log | history data table as an example. It is a figure which shows the log | history data table as an example. It is a flowchart of authentication process TE. It is a flowchart of a re-registration process. It is a figure which shows an example of a structure of the biometric information authentication apparatus in 2nd Embodiment. It is a figure which shows an example of a structure of the gaming machine installation island in 2nd Embodiment. It is a block diagram which shows an example of the internal structure of the island safe in 2nd Embodiment. It is a figure which shows the island safe of the unlocked state in 2nd Embodiment.

Explanation of symbols

  200 gaming machine, 210 inter-bank machine, 300 Shima Bank, 310 control unit, 320 storage unit, 360 communication unit, 500 management device, 510 control unit, 530 display unit, 520 storage unit, 522 temporary storage unit, 600 decision to leave the company Equipment, 1000 gaming machine installation island, 3000 management office, 4000 amusement hall.

Claims (5)

A biometric authentication device for performing personal authentication using biometric information,
Biometric information registration means for registering biometric information as biometric information for verification;
Biometric information acquisition means for acquiring biometric information of the person to be authenticated;
Collation authentication means for performing personal authentication based on the degree of coincidence of the result of collation of the biometric information acquired by the biometric information acquisition means with the biometric information for verification registered in the biometric information registration means;
Collation history storage means for storing history information capable of specifying the degree of matching of the results collated by the collation authentication means in correspondence with each biometric information for collation;
When the matching authentication unit determines that the degree of matching is equal to or less than a predetermined value, the determination result is suddenly generated based on history information corresponding to the matching biometric information used for the determination. An event determination means for determining whether the event is a trend event or a trend event;
Re-registration notification means for urging re-registration of the biometric information of the determined biometric holder by determining that the event determination means is the trending event ,
The biometric authentication device, wherein the collation history storage unit does not store the history information when the event determination unit determines that the sudden event has occurred . The verification authentication means, as a result of verification, authenticates that the person is the identity when the degree of matching is equal to or greater than a predetermined threshold value.
The re-registration notification means, wherein the matching degree, it on condition that the difference between it and the threshold value is the threshold or more is less than a predetermined value, and wherein the urging re-registration, according to claim 1 Biometric authentication device. A biometric authentication device for performing personal authentication using biometric information,
Biometric information registration means for registering biometric information for verification to be verified with biometric information of the person to be authenticated;
Biometric information acquisition means for acquiring biometric information of the person to be authenticated;
Collation authentication means for performing personal authentication based on the degree of coincidence of the result of collation of the biometric information acquired by the biometric information acquisition means with the biometric information for verification registered in the biometric information registration means;
Collation history storage means for storing history information capable of specifying the degree of matching of the results collated by the collation authentication means in correspondence with each biometric information for collation;
When the matching authentication unit determines that the degree of coincidence is equal to or less than a predetermined value, the determination result is based on the history information corresponding to each biometric information for matching used in the determination. An event determination means for determining whether it is a sudden event or a trending event;
Re- registration means for re-registering the new biometric information for collation for the determined biometric holder in the biometric information registration means when the event determination means determines that the tendency event is the trending event. ,
The biometric authentication device, wherein the collation history storage unit does not store the history information when the event determination unit determines that the sudden event has occurred . The collation history storage means stores a plurality of pieces of collated biometric information when it is authenticated as an authentication result person by the collation authentication means, and stores history information of each of the collated biometric information,
The re-registration unit may re-register one of the plurality of the verified biometric information stored in the verification history storage unit as a new said verification biometric information, according to claim 3 Biometric authentication device. The verification authentication means, as a result of verification, authenticates that the person is the identity when the degree of matching is equal to or greater than a predetermined threshold value.
The re-registration means, the matching degree, it on condition that the difference between it and the threshold value is the threshold or more is less than a predetermined value, and performing re-registration, claim 3 or claim 4 The biometric authentication device according to 1.

Images