JP6160401B2 - Entrance / exit management device, entrance / exit management method, and program - Google Patents

Description

  The present invention relates to a technical field for managing entry / exit.

  2. Description of the Related Art Conventionally, a technique for managing entry / exit of a room or area to be managed based on authentication processing has been proposed. For example, Patent Document 1 describes a technique that uses biometric information such as a face, fingerprint, voice, and eyes for authentication as an authentication method. For example, Patent Document 2 describes a technique for performing authentication using a card reader, a fingerprint collation unit, a camera, an infrared sensor, or the like.

JP-A-2005-36523 Japanese Patent No. 5167308

  By the way, in the conventional technique, when a plurality of authentication methods (for example, fingerprint authentication and password) are used in combination, a plurality of authentication devices such as a camera and a fingerprint reading device are installed on a door for performing entrance / exit management. For this reason, the level of security level of a room to be managed tends to be identified by an external person depending on the number and type of authentication devices installed. Also, with the conventional technology, it has been difficult to appropriately respond to changes in the security level of a room to be managed. For example, when the security level is increased, it is necessary to install a new authentication device.

  Therefore, the present invention provides an entrance / exit management device and the like that can appropriately cope with various security levels with a simple configuration while suppressing the level of security level from being identified by an external person. The main purpose is to do.

  In one aspect of the present invention, an entrance / exit management device capable of communicating with a mobile terminal device and managing entrance / exit of a predetermined room or area is based on a security level of the room or area. As the authentication method to be executed, first determination means for determining one authentication method or a combination of two or more authentication methods, and authentication method information corresponding to the authentication method determined by the first determination means, the portable terminal Transmitting means for transmitting to a device; receiving means for receiving authentication information acquired from a user when the mobile terminal device executes an authentication method corresponding to the authentication method information; from the mobile terminal device; and the authentication information Second determining means for determining whether to permit entry / exit of the room or the area according to the verified result.

  In the above entrance / exit management device, the first determination means uses one authentication method or two or more authentication methods as an authentication method to be executed by the mobile terminal device based on the security level of the room or area to be managed. Determine the combination. The transmitting means transmits authentication method information corresponding to the determined authentication method to the portable terminal device, and the receiving means is a user of the portable terminal device when the portable terminal device executes the authentication method corresponding to the authentication method information. Receive authentication information obtained from. When two or more authentication methods are used, the receiving unit receives authentication information for each of the two or more authentication methods. The second determining means verifies the received authentication information, and determines whether to permit entry / exit of the room or area according to the verification result.

  According to said entrance / exit management apparatus, a mobile terminal device is made to perform an authentication system, and the authentication information input into the mobile terminal device is acquired. Therefore, one authentication method or a combination of two or more authentication methods can be appropriately realized with a simple configuration. Therefore, it is possible to appropriately cope with rooms or areas of various security levels. Further, even when the security level is changed, it is possible to easily cope with the changed security level without removing the already installed authentication device or installing a new authentication device. Furthermore, according to the above-mentioned entrance / exit management device, since it is not necessary to install a plurality of authentication devices in one room or area, it is possible to appropriately suppress the level of security level being identified by an external person. Can do.

  In one aspect of the entry / exit management device, a plurality of authentication method candidates indicating one authentication method or a combination of two or more authentication methods to be executed by the mobile terminal device are associated with each of a plurality of security levels. Storage means for storing, the first determination means selects one authentication method candidate from a plurality of authentication method candidates associated with the security level of the room or the area, and the one authentication method One authentication method or a combination of two or more authentication methods indicated by the method candidates may be determined. Thereby, various authentication methods can be applied to one security level.

  In another aspect of the entrance / exit management device, when the first determination unit determines a combination of the two or more authentication methods, the order in which the portable terminal device executes the two or more authentication methods is determined. It is better to further determine. Preferably, the second determining means verifies the authentication information and permits the mobile terminal device to enter or leave the room or the area by verifying the order in which the two or more authentication methods are executed. It is good to decide whether or not to do so.

  According to the entrance / exit management device described above, the order in which the mobile terminal device executes two or more authentication methods is also used as a requirement for permitting entrance / exit of a room or area. As a result, the security level can be increased as compared with the case where the order of executing two or more authentication methods is not used as the requirement.

  In another aspect of the entry / exit management device, the first determination means may determine the one authentication method or a combination of the two or more authentication methods based on a selection of the user of the mobile terminal device. . Thereby, the authentication method selected by the user of the mobile terminal device can be appropriately applied.

  In another aspect of the entrance / exit management device, the first determination unit may determine the one authentication method or a combination of the two or more authentication methods based on a function of the portable terminal device. Thereby, it is possible to cause the mobile terminal device to execute an appropriate authentication method according to the function of the mobile terminal device. That is, an appropriate authentication method can be executed for each mobile terminal device.

  In another aspect of the present invention, an entrance / exit management method executed by an entrance / exit management device capable of communicating with a mobile terminal device and managing entrance / exit of a predetermined room or area is a security level of the room or area. Based on the above, as the authentication method to be executed by the mobile terminal device, corresponding to the first determination step of determining one authentication method or a combination of two or more authentication methods, and the authentication method determined in the first determination step Transmitting the authentication method information to be transmitted to the mobile terminal device, and receiving the authentication information acquired from the user when the mobile terminal device executes the authentication method corresponding to the authentication method information from the mobile terminal device And a second determination step of determining whether to permit entry / exit of the room or the area according to a result of verifying the authentication information.

  In still another aspect of the present invention, a program executed by an entrance / exit management device having a computer that can communicate with a mobile terminal device and manages entrance / exit of a predetermined room or area includes the computer, Or, based on the security level of the area, as an authentication method to be executed by the mobile terminal device, a first determination unit that determines one authentication method or a combination of two or more authentication methods, the first determination unit determines Transmitting means for transmitting authentication method information corresponding to an authentication method to the mobile terminal device, authentication information acquired from a user when the mobile terminal device executes an authentication method corresponding to the authentication method information, Whether to permit entry / exit of the room or the area according to the result of verifying the authentication information, receiving means for receiving from the device Second determining means for a constant, to function as a.

  According to the present invention, it is possible to appropriately cope with various security levels with a simple configuration while suppressing the level of security level from being identified by an external person.

1 shows a schematic configuration of a system to which an entrance / exit management device according to the present embodiment is applied. It is a block diagram which shows schematic structure of a portable terminal device, an authentication apparatus, and a server apparatus. An example of the database for authentication is shown. The figure for demonstrating an example of the process which a portable terminal device, an authentication apparatus, and a server apparatus perform is shown. The processing flow performed by a portable terminal device, an authentication device, and a server device is shown. The figure for demonstrating an example of the authentication system which concerns on the modification 1 is shown. The specific example of the some authentication method candidate which concerns on the modification 2 is shown. An example of the authentication method selection screen which concerns on the modification 3 is shown.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

[System configuration]
FIG. 1 is a diagram showing a schematic configuration of a system to which an entrance / exit management device according to the present embodiment is applied. As shown in FIG. 1, the system mainly includes a mobile terminal device 1, an authentication device 2, and a server device 3.

  The mobile terminal device 1 is a mobile phone such as a smartphone, and is configured to be able to communicate with the authentication device 2. The authentication device 2 is provided near the door 6 of the room 5 to be managed, and has a function of unlocking the door 6. The authentication device 2 is configured to be able to communicate with the mobile terminal device 1 and the server device 3. The server device 3 is configured to be able to communicate with the authentication device 2.

  Here, functions of the mobile terminal device 1, the authentication device 2, and the server device 3 in the present embodiment will be briefly described. First, the server device 3 generates authentication method information indicating an authentication method to be executed by the mobile terminal device 1 based on the security level of the room 5 to be managed, and the authentication method information via the authentication device 2. Is transmitted to the mobile terminal device 1. The mobile terminal device 1 executes an authentication method corresponding to the received authentication method information, and corresponds to a user (a user of the mobile terminal device 1 who wants to enter the room 5 or to leave the room 5). Authentication information (for example, a password, a fingerprint, a face image, etc.) corresponding to the authentication method is acquired. Then, the mobile terminal device 1 transmits the acquired authentication information to the server device 3 via the authentication device 2. The server device 3 refers to the stored information, verifies the received authentication information, and transmits the verification result to the authentication device 2. And the authentication apparatus 2 performs control which cancels | releases the lock | rock of the door 6 according to the received verification result.

  With reference to FIG. 2, each component in the portable terminal device 1, the authentication apparatus 2, and the server apparatus 3 is demonstrated. FIG. 2 is a block diagram illustrating a schematic configuration of the mobile terminal device 1, the authentication device 2, and the server device 3.

  First, the mobile terminal device 1 mainly includes a control unit 11, a storage unit 12, a communication unit 13, an input unit 14, a display unit 15, a camera 16, a fingerprint reading unit 17, a microphone 18, Have

  The control unit 11 includes a CPU (Central Processing Unit) (not shown) and the like, and controls the entire mobile terminal device 1. The storage unit 12 includes various memories such as a ROM (Read Only Memory) and a RAM (Random Access Memory) not shown, and stores various control programs for controlling the mobile terminal device 1. The working area is provided to the control unit 11.

  The communication unit 13 is configured to be able to perform wireless communication with the authentication device 2. For example, the communication unit 13 communicates with the authentication device 2 by a wireless communication method such as NFC (Near Field Communication).

  The input unit 14 is used for inputting a password or the like by the user, and for example, a touch panel provided on the display screen of the display unit 15 corresponds to this. In addition to the touch panel, keys, switches, buttons, and the like may be used as the input unit 14. The display unit 15 is configured by a liquid crystal display, for example, and displays characters and images to the user.

  The camera 16 is used for photographing a user's face and the like. The fingerprint reading unit 17 is configured to be able to read a user's fingerprint. For example, a fingerprint sensor that detects a change in the charge of the electrode when a finger is placed on the sensor is applied to the fingerprint reading unit 17. The microphone 18 is configured to collect user's voice.

  Note that when the mobile terminal device 1 is executing the authentication method, the password input by the user using the input unit 14, the face image captured by the user using the camera 16, or the user enters the fingerprint reading unit 17. The read fingerprint or the voice collected by the user on the microphone 18 corresponds to the authentication information described above.

  Next, the authentication device 2 mainly includes a control unit 21, a storage unit 22, and communication units 23 and 24.

  The control unit 21 includes a CPU (not shown) and the like, and controls the authentication device 2 as a whole. For example, the control unit 21 performs control for releasing the lock of the door 6. The storage unit 22 includes various types of memories such as a ROM and a RAM (not shown), stores various control programs for controlling the authentication device 2, and provides a working area for the control unit 21. To do.

  The communication unit 23 is configured to be able to perform wireless communication with the mobile terminal device 1. For example, the communication unit 23 communicates with the mobile terminal device 1 by a wireless communication method such as NFC. The communication unit 24 is configured to be able to communicate with the server device 3. The communication method between the authentication device 2 and the server device 3 may be a wireless communication method or a wired communication method.

  Next, the server device 3 mainly includes a control unit 31, a storage unit 32, and a communication unit 34.

  The control unit 31 includes a CPU (not shown) and the like, and controls the entire server device 3. The storage unit 32 includes various memories such as a ROM, a RAM, and a hard disk (not shown), stores various control programs for controlling the server device 3, and the working area for the control unit 31. I will provide a. The communication unit 34 is configured to be able to communicate with the authentication device 2.

  In order to ensure the safety of communication between the authentication device 2 and the server device 3, information exchanged between the authentication device 2 and the server device 3 may be encrypted. In that case, it is preferable to store information (encryption key or the like) necessary for encryption in the storage unit 32 of the server device 3 and encrypt using such information.

  In the system shown in FIGS. 1 and 2, the authentication device 2 and the server device 3 correspond to an example of the “entrance / exit management device” in the present invention. Specifically, the control unit 31 of the server device 3 corresponds to an example of “first determination unit” and “second determination unit” in the present invention, and the communication units 23 and 24 of the authentication device 2 and the communication of the server device 3. The unit 34 corresponds to an example of “transmission unit” and “reception unit” in the present invention, and the storage unit 32 of the server device 3 corresponds to an example of “storage unit” in the present invention.

[Process overview]
Next, a specific example of processing performed by the mobile terminal device 1, the authentication device 2, and the server device 3 in the present embodiment will be described.

  First, when the user enters the room 5 or leaves the room 5, the user holds the mobile terminal device 1 over the authentication device 2, and at this time, the mobile terminal device 1 uses the user identification information ( For example, the user ID, information such as the ID of the portable terminal device 1 or an employee number and other information that can identify the user) is transmitted to the authentication device 2. Then, the authentication device 2 sends the received user identification information to the server device 3, thereby issuing a verification request for the user identification information to the server device 3.

  Next, the server device 3 verifies the user identification information received from the authentication device 2 to determine whether or not the user of the mobile terminal device 1 has the authority to enter and leave the room 5. When the server device 3 determines that the user has authority to enter and leave the room 5, the server device 3 determines an authentication method to be executed by the mobile terminal device 1, and sends authentication method information indicating the authentication method to the authentication device 2. Send. Specifically, the server device 3 determines one authentication method or a combination of two or more authentication methods as an authentication method to be executed by the mobile terminal device 1 based on the security level of the room 5 and the like. For example, the server device 3 applies any one or a combination of two or more of 4-character password authentication, 8-character password authentication, face authentication, fingerprint authentication, and voice authentication to the mobile terminal device 1. It is determined as an authentication method to be executed. In this case, as the security level of the room 5 becomes higher, the server device 3 decides to adopt many kinds of authentication methods or decide to adopt password authentication that allows a large number of characters to be input.

  Next, the authentication device 2 sends the authentication method information received from the server device 3 to the mobile terminal device 1, thereby issuing an authentication method execution request corresponding to the authentication method information to the mobile terminal device 1. And the portable terminal device 1 performs the authentication method corresponding to the received authentication method information, and acquires the authentication information according to the authentication method from the user. In this case, the mobile terminal device 1 prompts the user to input authentication information by causing the display unit 15 to display a screen corresponding to the authentication method. The portable terminal device 1 acquires the password input to the input unit 14 as authentication information when password authentication is performed as the authentication method, and the face photographed by the camera 16 when face authentication is performed as the authentication method. When an image is acquired as authentication information and fingerprint authentication is performed as an authentication method, a fingerprint read by the fingerprint reading unit 17 is acquired as authentication information. When voice authentication is performed as an authentication method, the image is collected by a microphone 18. Acquired sound as authentication information. The mobile terminal device 1 transmits the authentication information acquired in this way to the authentication device 2, and the authentication device 2 transmits the received authentication information to the server device 3, thereby sending a verification request for the authentication information to the server device. Take out to 3. When the received authentication method information includes two or more authentication methods (that is, when the server device 3 determines a combination of two or more authentication methods), the mobile terminal device 1 has two or more authentication methods. Two or more pieces of authentication information input from the user for each of the methods are acquired, and the two or more pieces of authentication information are transmitted to the authentication device 2.

  Next, the server device 3 verifies the authentication information received from the authentication device 2. Specifically, the server device 3 stores a database (hereinafter referred to as “authentication database”) in which passwords, face images, fingerprints, and the like registered in advance are associated with each of a plurality of users in the storage unit 32. The authentication information is verified with reference to such an authentication database. FIG. 3 shows an example of the authentication database. FIG. 3 shows an example of an authentication database in which a password, a face image, a fingerprint, and the like are associated with each user's user ID (corresponding to user identification information). Note that the authentication database may be encrypted and stored.

  The server device 3 compares the authentication information received from the authentication device 2 with information corresponding to the authentication information associated with the user of the mobile terminal device 1 included in the authentication database as described above. Then, if these pieces of information match, the server device 3 transmits a verification result indicating that the authentication information is correct to the authentication device 2, and if these pieces of information do not match, the authentication information The verification result indicating that is incorrect is transmitted to the authentication device 2. It should be noted that if the face images and fingerprints do not exactly match but match to some extent, it is determined that the authentication information is correct (the same applies hereinafter).

  Next, the authentication device 2 performs control to release the lock of the door 6 based on the verification result received from the server device 3. Specifically, when the verification result indicates that the authentication information is correct, the authentication device 2 unlocks the door 6 and the verification result indicates that the authentication information is incorrect. Does not unlock the door 6 (in other words, keeps the door 6 locked).

  Here, an example of processing performed by the mobile terminal device 1, the authentication device 2, and the server device 3 will be described with reference to FIG. Here, a case where two authentication methods of password authentication and fingerprint authentication are used will be described as an example.

  First, the server device 3 transmits authentication method information corresponding to password authentication to be executed first to the mobile terminal device 1 via the authentication device 2, and the mobile terminal device 1 executes password authentication. In this case, the mobile terminal device 1 displays a screen corresponding to the password authentication on the display unit 15 and acquires the password that the user has input using the input unit 14. Then, the mobile terminal device 1 transmits the acquired password to the authentication device 2, and the authentication device 2 transmits the received password to the server device 3.

  Next, when the password received from the authentication device 2 matches the corresponding password stored in the authentication database, the server device 3 verifies that the received password is correct, and the fingerprint to be executed next. Authentication method information corresponding to authentication is transmitted to the authentication device 2. Then, the authentication device 2 transmits authentication method information corresponding to fingerprint authentication to the mobile terminal device 1, and the mobile terminal device 1 executes fingerprint authentication. In this case, the mobile terminal device 1 displays a screen corresponding to fingerprint authentication on the display unit 15 and acquires the fingerprint that the user has read by the fingerprint reading unit 17. Then, the mobile terminal device 1 transmits the acquired fingerprint to the authentication device 2, and the authentication device 2 transmits the received fingerprint to the server device 3. When the received fingerprint matches the corresponding fingerprint stored in the authentication database, the server device 3 transmits a verification result indicating that the received fingerprint is correct to the authentication device 2. In this case, the authentication device 2 unlocks the door 6.

[Processing flow]
Next, a processing flow executed by the mobile terminal device 1, the authentication device 2, and the server device 3 in the present embodiment will be described with reference to FIG. This processing flow is started when the user holds the portable terminal device 1 over the authentication device 2 in order to enter or leave the room 5 to be managed.

  First, the control unit 11 of the mobile terminal device 1 sends the user identification information (for example, the user ID, the ID of the mobile terminal device 1 or the employee number) stored in the storage unit 12 to the authentication device 2 via the communication unit 13. Transmit (step S11). Then, the control device 21 of the authentication device 2 transmits the user identification information received from the mobile terminal device 1 via the communication unit 23 to the server device 3 via the communication unit 24, thereby verifying the user identification information. A request is issued to the server device 3 (step S21).

  Subsequently, the control unit 31 of the server device 3 verifies the user identification information received from the authentication device 2 via the communication unit 34, whereby the user of the mobile terminal device 1 has the authority to enter and leave the room 5. It is determined whether it has (step S31). In one example, the control unit 31 determines whether or not the user ID corresponding to the user identification information is registered in the authentication database. When the control unit 31 determines that the user of the mobile terminal device 1 has the authority to enter and leave the room 5, the control unit 31 determines an authentication method to be executed by the mobile terminal device 1, and authentication indicating the authentication method. The method information is transmitted to the authentication device 2 via the communication unit 34 (step S32). In this case, the control unit 31 determines one authentication method or a combination of two or more authentication methods as an authentication method to be executed by the mobile terminal device 1 based on the security level of the room 5 or the like. In FIG. 5, an example is given in which the control unit 31 determines two authentication methods, password authentication and fingerprint authentication, as authentication methods to be executed by the mobile terminal device 1.

  Subsequently, the control unit 21 of the authentication device 2 transmits the authentication method information corresponding to the password authentication received from the server device 3 via the communication unit 24 to the mobile terminal device 1 via the communication unit 23. Then, a request for executing password authentication is issued to the mobile terminal device 1 (step S22). And the control part 11 of the portable terminal device 1 performs the password authentication corresponding to the said authentication method information based on the authentication method information received from the authentication apparatus 2 via the communication part 13 (step 12). In this case, the control unit 11 causes the display unit 15 to display a screen corresponding to password authentication. And the control part 11 acquires the password which the user input using the input part 14 with reference to the said screen, and transmits the acquired password to the authentication apparatus 2 via the communication part 13 (step S13). .

  Subsequently, the control unit 21 of the authentication device 2 sends authentication method information corresponding to fingerprint authentication to the mobile terminal device 1 via the communication unit 23, thereby issuing a request for executing fingerprint authentication to the mobile terminal device 1. (Step S23). And the control part 11 of the portable terminal device 1 performs the fingerprint authentication corresponding to the said authentication method information based on the authentication method information received from the authentication apparatus 2 via the communication part 13 (step 14). In this case, the control unit 11 causes the display unit 15 to display a screen corresponding to fingerprint authentication. And the control part 11 acquires the fingerprint which the user made the fingerprint reading part 17 read by referring the said screen, and transmits the acquired fingerprint to the authentication apparatus 2 via the communication part 13 (step S15). .

  Subsequently, the control unit 21 of the authentication device 2 transmits the password and the fingerprint received from the mobile terminal device 1 via the communication unit 23 to the server device 3 via the communication unit 24, so that a password as authentication information is obtained. Then, a fingerprint verification request is issued to the server device 3 (step 24). And the control part 31 of the server apparatus 3 verifies the password and fingerprint as authentication information which were received from the authentication apparatus 2 via the communication part 34 (step S33). Specifically, the control unit 31 associates each received password and fingerprint with the corresponding password and fingerprint stored in the authentication database (specifically, the user identification information (user ID, etc.) acquired in step S31). It is determined whether or not it matches the password and fingerprint). When the received password and fingerprint match the password and fingerprint stored in the authentication database, the control unit 31 generates a verification result indicating that the received authentication information is correct. In contrast, when the received password and fingerprint do not match the password and fingerprint stored in the authentication database, the control unit 31 generates a verification result indicating that the received authentication information is incorrect. The control unit 31 transmits the verification result generated in this way to the authentication device 2 via the communication unit 34 (step S34).

  Subsequently, the control unit 21 of the authentication device 2 performs control to unlock the door 6 based on the verification result received from the server device 3 via the communication unit 24 (step S25). Specifically, when the verification result indicates that the authentication information is correct, the control unit 21 unlocks the door 6 and when the verification result indicates that the authentication information is incorrect. Does not unlock the door 6 (in other words, keeps the door 6 locked).

  In the processing flow shown in FIG. 5, fingerprint authentication is executed regardless of whether or not the password entered in the password authentication is correct, but only when the password entered in the password authentication is correct. It is also possible to execute fingerprint authentication. In that case, when the server apparatus 3 verifies the password input in the password authentication and the verification result indicating that the password is correct is transmitted from the server apparatus 3 to the authentication apparatus 2, the fingerprint authentication is performed on the mobile terminal apparatus 1. Should be executed.

  In the processing flow shown in FIG. 5, authentication is performed in the order of password authentication and fingerprint authentication. However, authentication may be performed in the order of fingerprint authentication and password authentication. In the processing flow shown in FIG. 5, two authentication methods, password authentication and fingerprint authentication, are used. However, one authentication method or three or more authentication methods may be used. In addition, face authentication and voice authentication may be used in addition to password authentication and fingerprint authentication. In that case, any one of password authentication, face authentication, fingerprint authentication, and voice authentication, or a combination of any two or more may be employed. When password authentication is used, 4-character password authentication, 8-character password authentication, 16-character password authentication, and the like may be applied as different password authentications.

[Operation and effect of this embodiment]
According to the present embodiment described above, by inputting authentication information using the mobile terminal device 1, only one authentication device 2 can appropriately realize one authentication method or a combination of two or more authentication methods. can do. Therefore, the single authentication device 2 can appropriately cope with the room 5 having various security levels. In addition, even when the security level of the room 5 is changed, it is possible to easily cope with the changed security level without removing the already installed authentication device or installing a new authentication device. Furthermore, according to the present embodiment, since only one authentication device 2 is applied to one room 5, it is possible to appropriately suppress the level of security level being identified by an external person.

[Modification]
Below, the modification of above-described embodiment is demonstrated. Note that the following modifications can be applied to the embodiment in any combination.

(Modification 1)
In the first modification, an authentication method to be executed by the mobile terminal device 1 is determined based on the function of the mobile terminal device 1 in addition to the security level of the room 5. In this case, the server device 3 can receive information related to the function of the mobile terminal device 1 (for example, information related to components included in the mobile terminal device 1) from the mobile terminal device 1, and can be realized with the functions of the mobile terminal device 1. One authentication method or a combination of two or more authentication methods is determined. In one example, when the mobile terminal device 1 does not have a function for fingerprint authentication (that is, when it does not have the fingerprint reading unit 17), the server device 3 determines to adopt an authentication method other than fingerprint authentication. When the mobile terminal device 1 does not have a function for face authentication (that is, when it does not have the camera 16), it is determined to employ an authentication method other than face authentication.

  FIG. 6 is a diagram for explaining an example of the authentication method according to the first modification. FIG. 6 shows a portable terminal device 1 used by two different users who want to enter or leave the same room 6 (hereinafter referred to as “mobile terminal device 1a” and “mobile terminal device 1b”, respectively). Shows the authentication method applied to. As shown in FIG. 6 (a), password authentication and face authentication are applied to the mobile terminal device 1a, and as shown in FIG. 6 (b), password authentication and fingerprint authentication are applied to the mobile terminal device 1b. Has been. Thus, in the first modification, even in the same room 6, different authentication methods are applied to the mobile terminal device 1a and the mobile terminal device 1b.

  According to the first modification described above, it is possible to cause the mobile terminal device 1 to execute an appropriate authentication method according to the function of the mobile terminal device 1. That is, an appropriate authentication method can be executed for each mobile terminal device 1.

  In addition, it is good to use the function which the portable terminal device 1 has at present as said "function which the portable terminal device 1 has". Specifically, the functions that the mobile terminal device 1 can use at the present time are applied, not the functions that the mobile terminal device 1 originally had, but the functions that can no longer be used for some reason (for example, failure). Good. In this case, for example, information regarding functions that can no longer be used in the mobile terminal device 1 may be transmitted from the mobile terminal device 1 to the server device 3. Then, the server device 3 determines an authentication method that replaces the authentication method corresponding to the function that cannot be used in the mobile terminal device 1. In one example, the server device 3 is relatively long as an alternative authentication method for face authentication in order to perform personal authentication equivalent to face authentication when the camera 16 for face authentication has failed. Determine password, fingerprint authentication, voice authentication, etc.

(Modification 2)
In the second modification, a plurality of authentication method candidates indicating a single authentication method to be executed by the mobile terminal device 1 or a combination of two or more authentication methods are prepared for each of a plurality of security levels.

  FIG. 7 shows a specific example of a plurality of authentication method candidates according to the second modification. In this example, two authentication method candidates 1 and 2 are prepared for security level 1, four authentication method candidates 1 to 4 are prepared for security level 2, and three authentication method candidates 1 to 4 are provided for security level 3. 3 is prepared. Specifically, for security level 1, one authentication method is applied to all authentication method candidates 1 and 2, and for security level 2, only one authentication method candidate 4 is a combination of two authentication methods. Is applied, and one authentication method is applied to the other authentication method candidates 1 to 3. For security level 3, a combination of two authentication methods is applied to all authentication method candidates 1 to 3. .

  A plurality of authentication method candidates as shown in FIG. 7 are stored in the storage unit 32 of the server device 3. The server device 3 refers to a plurality of authentication method candidates stored in the storage unit 32, and thereby selects one of the plurality of authentication method candidates associated with the security level of the room 5 to be managed. An authentication method candidate is selected, and an authentication method corresponding to the authentication method candidate is determined. For example, as shown in the first modification, the server device 3 selects one authentication method candidate from a plurality of authentication method candidates based on the function of the mobile terminal device 1 and the like.

  According to Modification 2 described above, various authentication methods can be applied to one security level.

(Modification 3)
In the third modification, an authentication method to be executed by the mobile terminal device 1 is determined based on the selection of the user of the mobile terminal device 1 in addition to the security level of the room 5. In this case, a screen for allowing the user to select an authentication method (hereinafter referred to as an “authentication method selection screen”) is displayed on the mobile terminal device 1, and the user authenticates using the input unit 14 with reference to the authentication method selection screen. Select a method. For example, a plurality of authentication methods that can be realized by the mobile terminal device 1 and satisfy the security level of the room 5 are displayed on the authentication method selection screen. Such an authentication method selection screen is displayed on the mobile terminal device 1 under the control of the server device 3. The server device 3 receives information on the authentication method selected by the user as described above from the mobile terminal device 1 and determines to adopt the authentication method selected by the user.

  FIG. 8 shows an example of an authentication method selection screen displayed on the display unit 15 of the mobile terminal device 1. As shown in FIG. 8, icons Ic1 to Ic5 indicating a plurality of authentication methods that can be selected by the user are displayed on the authentication method selection screen. The icon Ic1 indicates fingerprint authentication, the icon Ic2 indicates face authentication, the icon Ic3 indicates voice authentication, and the icons Ic4 and Ic5 indicate password authentication.

  According to the modification 3 demonstrated above, the authentication system which the user of the portable terminal device 1 selected can be applied appropriately.

(Modification 4)
Modification 4 defines the order of authentication methods to be executed by the mobile terminal device 1. In this case, when the server device 3 determines a combination of two or more authentication methods as the authentication method to be executed by the mobile terminal device 1, the server device 3 is configured to cause the mobile terminal device 1 to execute the two or more authentication methods. Further determine the order. Further, when verifying the authentication information from the mobile terminal device 1, the server device 3 also verifies the order in which the mobile terminal device 1 has executed two or more authentication methods. The server device 3 controls the authentication device 2 so that the door 6 is unlocked only when the authentication information is correct and two or more authentication methods are executed in the order determined as described above. To do.

  According to Modification 4 as described above, it is possible to raise the security level by setting the order in which the authentication methods are executed as the unlock requirement, as compared with the case where the order in which the authentication methods are executed is not the unlock requirement. .

(Modification 5)
In the above-described embodiment, the server device 3 verifies the authentication information. However, in another example, the mobile terminal device 1 may verify the authentication information instead of the server device 3. In that case, the mobile terminal device 1 can verify the authentication information by storing the authentication database in the mobile terminal device 1 (however, the security of the area storing the authentication database is ensured. Is desirable). The mobile terminal device 1 may perform control to unlock the door 6 by transmitting a verification result of the authentication information to the authentication device 2.

  In yet another example, the authentication device 2 may verify the authentication information. In this case, the server device 3 transmits information corresponding to the user of the mobile terminal device 1 stored in the authentication database to the authentication device 2, and the authentication device 2 verifies the authentication information based on such information. It can be carried out.

  In the embodiment described above, the mobile terminal device 1 and the server device 3 communicate with each other via the authentication device 2. However, in another example, the mobile terminal device 1 and the server device do not pass through the authentication device 2. 3 may communicate with each other. In that case, when the mobile terminal device 1 transmits information to the server device 3 for the first time, information for specifying the authentication device 2 (in other words, the room 5 to which the user of the mobile terminal device 1 intends to enter or leave the room is specified). For example, the position information detected by the GPS of the mobile terminal device 1 can be used).

(Modification 6)
In the above-described embodiment, password authentication, face authentication, fingerprint authentication, and voice authentication are used as authentication methods. However, other authentication methods may be used. For example, an iris or handwriting may be applied to the authentication method. Further, for example, it is generated from acceleration (a three-dimensional angle may be sufficient) when the user shakes the mobile terminal device 1 and a movement history of the user of the mobile terminal device 1 (position information detected by the GPS of the mobile terminal device 1). ) May be applied to the authentication method.

(Modification 7)
In the above-described embodiment, the present invention is applied to the room 5, but the present invention can be applied to various closed spaces other than the room 5.

DESCRIPTION OF SYMBOLS 1 Portable terminal device 2 Authentication apparatus 3 Server apparatus 11, 21, 31 Control part 12, 22, 32 Storage part 13, 23, 24, 34 Communication part 14 Input part 15 Display part 16 Camera 17 Fingerprint reading part 18 Microphone

Claims (8)

An entrance / exit management device that can communicate with a mobile terminal device and manages entrance / exit of a predetermined room or area,
Based on the security level of the room or the area, as an authentication method to be executed by the mobile terminal device, first determination means for determining one authentication method or a combination of two or more authentication methods;
Transmitting means for transmitting authentication method information corresponding to the authentication method determined by the first determining means to the mobile terminal device;
Receiving means for receiving, from the mobile terminal device, authentication information acquired from a user when the mobile terminal device executes an authentication method corresponding to the authentication method information;
A second determining means for determining whether to permit entry / exit of the room or the area according to a result of verifying the authentication information;
An entrance / exit management device comprising: For each of a plurality of security levels, further comprising storage means for storing a plurality of authentication method candidates indicating one authentication method or a combination of two or more authentication methods to be executed by the mobile terminal device,
The first determination unit selects one authentication method candidate from a plurality of authentication method candidates associated with the security level of the room or the area, and the one authentication method or the one indicated by the one authentication method candidate The entrance / exit management device according to claim 1, wherein a combination of two or more authentication methods is determined.   The said 1st determination means further determines the order at the time of making the said portable terminal device perform the said 2 or more authentication method, when the combination of the said 2 or more authentication method is determined, The said 1st determination means is further characterized by the above-mentioned. The entry / exit management device described.   Whether the second determining means verifies the authentication information and also verifies the order in which the mobile terminal device executes the two or more authentication methods, thereby permitting entry / exit of the room or the area. The entrance / exit management device according to claim 3, wherein:   2. The entrance / exit management according to claim 1, wherein the first determination unit determines the one authentication method or a combination of the two or more authentication methods based on a selection of a user of the portable terminal device. apparatus.   The entrance / exit management device according to claim 1, wherein the first determination unit determines the one authentication method or a combination of the two or more authentication methods based on a function of the portable terminal device. . An entrance / exit management method executed by an entrance / exit management device that can communicate with a mobile terminal device and manages entrance / exit of a predetermined room or area,
Based on the security level of the room or the area, as an authentication method to be executed by the mobile terminal device, a first determination step of determining one authentication method or a combination of two or more authentication methods;
A transmission step of transmitting authentication method information corresponding to the authentication method determined in the first determination step to the mobile terminal device;
A receiving step of receiving, from the mobile terminal device, authentication information acquired from a user when the mobile terminal device executes an authentication method corresponding to the authentication method information;
A second determination step for determining whether to permit entry / exit of the room or the area according to the verification result of the authentication information;
The entrance / exit management method characterized by comprising. A program executed by an entrance / exit management device having a computer that is communicable with a mobile terminal device and manages entrance / exit of a predetermined room or area,
The computer,
First determination means for determining one authentication method or a combination of two or more authentication methods as an authentication method to be executed by the mobile terminal device based on the security level of the room or the area,
Transmitting means for transmitting authentication method information corresponding to the authentication method determined by the first determining means to the portable terminal device;
Receiving means for receiving, from the portable terminal device, authentication information acquired from a user when the portable terminal device executes an authentication method corresponding to the authentication method information;
Second determining means for determining whether to permit entry / exit of the room or the area according to a result of verifying the authentication information;
A program characterized by functioning as

Images