JP6880295B2 - Authentication systems, servers, authentication methods, and programs - Google Patents

Description

The present invention relates to wireless communication systems, user terminals, wireless communication methods, and programs.

Conventionally, a technique for reducing power consumption in wireless communication has been studied. For example, Non-Patent Document 1 describes a communication standard that shifts to an idle state when a predetermined connection interval elapses after exchanging data to save power consumption. Non-Patent Document 1 also describes that when an advertisement packet is received in an idle state, the connection is restarted and the mode returns to the mode of exchanging data.

Let's get started with Bluetooth Low Energy, Author: Kevin Townsend, Carles Cufi, Akiba, Robert Davidson, Publisher: Tim O'Reilly, Publisher: O'Reilly Japan, Inc.

However, in the technique of Non-Patent Document 1, even if the state is idle, power is consumed to periodically monitor whether or not the advertisement packet is received, so that even when there is no user in the place where wireless communication is used. Power is consumed. In this regard, it is conceivable to turn off the wireless communication function when there is no user in the place where wireless communication is used, but in this case, the advertisement packet cannot be received as in the idle state, and the user cannot receive the advertisement packet. , It takes time and effort because it is necessary to manually switch the wireless communication function to the on state when moving to a place where wireless communication is used.

The present invention has been made in view of the above problems, and an object of the present invention is to provide a wireless communication system, a user terminal, a wireless communication method, and a program capable of reducing power consumption without the trouble of a user. That is.

In order to solve the above problems, the wireless communication system according to the present invention is a place for switching between a wireless communication means, a position information acquisition means for acquiring position information regarding the position of the wireless communication means, and an energized state of the wireless communication means. It is characterized by including a place information acquisition means for acquiring the place information relating to the wireless communication means, and a switching means for switching the energized state of the wireless communication means based on the position information and the place information.

The user terminal according to the present invention includes a position information acquisition means for acquiring position information regarding the position of the wireless communication means, a location information acquisition means for acquiring location information regarding a location for switching the energized state of the wireless communication means, and the location information. It is characterized by including a switching means for switching the energized state of the wireless communication means based on the above-mentioned location information.

The wireless communication method according to the present invention includes a position information acquisition step for acquiring position information regarding the position of the wireless communication means, a location information acquisition step for acquiring location information regarding a location for switching the energized state of the wireless communication means, and the position. It is characterized by including a switching step of switching the energized state of the wireless communication means based on the information and the location information.

The program according to the present invention includes a position information acquisition means for acquiring position information regarding the position of the wireless communication means, a location information acquisition means for acquiring location information regarding a location for switching the energized state of the wireless communication means, the location information and the location. Based on the information, the computer functions as a switching means for switching the energized state of the wireless communication means.

According to one aspect of the present invention, the wireless communication system further includes a user terminal including the wireless communication means and a receiving means for receiving a signal from a satellite, and the position information acquiring means is the receiving means. It is characterized in that the position information is acquired based on the signal received by.

According to one aspect of the present invention, the wireless communication system further includes a user terminal including the wireless communication means and another wireless communication means different from the wireless communication means, and the position information acquisition means includes the position information acquisition means. It is characterized in that the position information is acquired based on the communication content of the other wireless communication means.

According to one aspect of the present invention, the location information indicates the position of the location, and the switching means has the distance between the position indicated by the location information and the position indicated by the location information being less than the threshold value. It is characterized in that it is determined whether or not, and when it is determined that the distance is less than the threshold value, the energized state of the wireless communication means is switched.

According to one aspect of the present invention, the location information indicates a region of the location, and the switching means determines whether or not the position indicated by the location information is included in the region indicated by the location information. When it is determined that the position indicated by the location information is included in the region indicated by the location information, the energized state of the wireless communication means is switched.

According to one aspect of the present invention, when the wireless communication means is on, the wireless communication means can shift to an idle state different from the off state, and the switching means is based on the position information and the location information. , The wireless communication means is switched from an off state to an on state.

According to one aspect of the present invention, the switching means switches the wireless communication means from an off state to an on state when the wireless communication means approaches the place, and the wireless communication means moves away from the place. In that case, the wireless communication means is switched from the on state to the off state, or when the wireless communication means approaches the place, the wireless communication means is switched from the on state to the off state, and the wireless communication means is switched. Is characterized in that the wireless communication means is switched from an off state to an on state when the user moves away from the place.

According to one aspect of the present invention, an authentication terminal is arranged at the place, and the switching means turns the wireless communication means from an off state to an on state when the wireless communication means approaches the place. The wireless communication system further includes an authentication means that performs authentication based on the communication content between the wireless communication means and the authentication terminal that has been switched from the off state to the on state by the switching means. To do.

According to the present invention, it is possible to reduce power consumption without taking the trouble of the user.

It is a figure which shows the whole structure of the authentication system which concerns on Embodiment 1. It is a figure which shows an example of the scene where an authentication system is used. It is a figure which shows a mode that a user approaches an authentication terminal. It is a figure which shows the state which the authentication by an authentication terminal succeeds. It is a figure which shows the case where a plurality of users having similar faces are in the authenticable area. It is a figure which shows the case where a plurality of users who are dissimilar to each other are in the authenticable area. It is a functional block diagram which shows an example of the function realized in Embodiment 1. FIG. It is a figure which shows the data storage example of a user database. It is a figure which shows the data storage example of the authentication terminal list. It is a figure which shows the data storage example of the approaching user list. It is a figure which shows the data storage example of the communication partner list. It is a flow chart which shows the process executed in Embodiment 1. FIG. It is a flow chart which shows the process executed in Embodiment 1. FIG. It is a functional block diagram of Embodiment 2. It is a flow chart which shows the process executed in Embodiment 2. It is a flow chart when the 2nd wireless communication part is Wi-Fi. It is a flow chart when the 2nd wireless communication part is Wi-Fi.

[1. Embodiment 1]
Hereinafter, an example of the first embodiment of the authentication system according to the present invention (hereinafter, the first embodiment) will be described.

[1-1. Overall configuration of authentication system]
FIG. 1 is a diagram showing an overall configuration of an authentication system according to the first embodiment. As shown in FIG. 1, the authentication system S includes a server 10, a user terminal 20, and an authentication terminal 30, which can be connected to a network N such as the Internet.

In FIG. 1, for the sake of simplification of the drawings, one server 10, one user terminal 20, and one authentication terminal 30 are shown, but there may be a plurality of these. In the present embodiment, each of the plurality of users uses the user terminal 20, and there are a plurality of user terminals 20. Further, the authentication terminal 30 is arranged in each of the plurality of places, and there are a plurality of authentication terminals 30.

The server 10 is a server computer. The server 10 includes a control unit 11, a storage unit 12, and a communication unit 13. The control unit 11 includes at least one processor. The control unit 11 executes processing according to the programs and data stored in the storage unit 12. The storage unit 12 includes a main storage unit and an auxiliary storage unit. For example, the main storage unit is a volatile memory such as RAM, and the auxiliary storage unit is a non-volatile memory such as ROM, EEPROM, flash memory, or hard disk. The communication unit 13 is a communication interface for wired communication or wireless communication, and performs data communication via the network N.

The user terminal 20 is a computer operated by the user. The user terminal 20 is a portable terminal, for example, a mobile phone (including a smartphone), a mobile information terminal (including a tablet computer and a wearable terminal), a personal computer, or the like. In the present embodiment, the user terminal 20 includes a control unit 21, a storage unit 22, a communication unit 23, an operation unit 24, a display unit 25, and a GPS receiving unit 26. The physical configurations of the control unit 21, the storage unit 22, and the communication unit 23 may be the same as those of the control unit 11, the storage unit 12, and the communication unit 13, respectively.

In the present embodiment, the communication unit 23 includes a plurality of communication interfaces, and includes, for example, a first wireless communication unit 23A and a second wireless communication unit 23B. Each of the first wireless communication unit 23A and the second wireless communication unit 23B is a communication interface having different communication standards. The communication standard itself may be any communication standard, for example, a communication standard for mobile phones, Bluetooth (registered trademark), Wi-Fi (an example of so-called wireless LAN), Wi-Fi Direct (registered trademark), or Infrared communication etc. can be used.

In the present embodiment, the case where the first wireless communication unit 23A is a communication standard for mobile phones or Wi-Fi and the second wireless communication unit 23B is Bluetooth (registered trademark) will be taken as an example. In addition, Bluetooth (registered trademark) shall include extended specifications such as BLE. Further, the number of communication interfaces included in the communication unit 23 is not limited to two, and may be only one or three or more.

The operation unit 24 is an input device, for example, a pointing device such as a touch panel or a mouse, a keyboard, a button, or the like. The operation unit 24 transmits the operation content to the control unit 21. The display unit 25 is, for example, a liquid crystal display unit, an organic EL display unit, or the like. The display unit 25 displays an image according to the instruction of the control unit 21.

The GPS receiving unit 26 is an example of a receiving unit that receives a signal from a satellite.
A GNSS other than GPS (for example, GLONASS, Galileo, or QZSS) may be used, and the receiving unit may include a receiver corresponding to the GNSS to be used. For example, the GPS receiving unit 26 includes an antenna that receives a signal, and detects position information, time information, and the like based on the received signal.

The authentication terminal 30 is a computer used for authentication. For example, the authentication terminal 30 is a mobile phone, a mobile information terminal, a personal computer, or the like. The authentication terminal 30 may be a portable terminal or a stationary terminal. In the present embodiment, the authentication terminal 30 includes a control unit 31, a storage unit 32, a communication unit 33, an operation unit 34, a display unit 35, and a photographing unit 36. The physical configurations of the control unit 31, the storage unit 32, the communication unit 33, the operation unit 34, and the display unit 35 are the same as those of the control unit 21, the storage unit 22, the communication unit 23, the operation unit 24, and the display unit 25, respectively. It may be there.

In the present embodiment, the communication unit 33 includes a first wireless communication unit 33A having the same communication standard as the first wireless communication unit 23A, and a second wireless communication unit 33B having the same communication standard as the second wireless communication unit 23B. The case will be described. The first wireless communication unit 33A may have a communication standard different from that of the first wireless communication unit 23A, and the second wireless communication unit 33B may have a communication standard different from that of the second wireless communication unit 23B. Further, the number of communication interfaces included in the communication unit 33 and the number of communication interfaces included in the communication unit 23 may be the same or different.

The photographing unit 36 includes at least one camera. For example, the photographing unit 36 includes an image pickup element such as a CCD image sensor or a CMOS image sensor, and records an image taken by the image pickup element as digital data. The image may be a still image or a moving image continuously shot at a predetermined frame rate.

The programs and data described as being stored in the storage units 12, 22 and 32 may be supplied via the network N. Further, the hardware configuration of each computer described above is not limited to the above example, and various hardware can be applied. For example, even if a reading unit for reading a computer-readable information storage medium (for example, an optical disk drive or a memory card slot) or an input / output unit for inputting / outputting data to / from an external device (for example, a USB port) is included. Good. For example, the program or data stored in the information storage medium may be supplied to each computer via the reading unit or the input / output unit.

[1-2. Authentication system overview]
The authentication system S executes authentication in order to confirm the validity of the user in any situation. Authentication is an act of confirming whether or not a user has a predetermined qualification, and is sometimes called partner authentication or personal authentication. The authentication system S can perform various types of authentication, for example, biometric authentication, passcode authentication, password authentication, electronic stamp authentication, or password authentication.

Biometrics is an authentication method that utilizes human physical or behavioral characteristics. For example, biometric authentication utilizing physical characteristics includes face authentication, fingerprint authentication, DNA authentication, palm shape authentication, retinal authentication, iris authentication, vein authentication, or voice authentication. Further, for example, biometric authentication utilizing behavioral characteristics includes handwriting authentication, keystroke authentication, lip movement authentication, blink authentication, or walking authentication.

In the present embodiment, the processing of the authentication system S will be described by taking as an example a scene in which a user passes through a security gate. The authentication system S can be applied to various situations as in the modified example described later, and the situation to which the authentication system S is applied is not limited to the example of the present embodiment.

FIG. 2 is a diagram showing an example of a situation in which the authentication system S is used. As shown in FIG. 2, the security gate SG includes a rotary door to which the authentication terminal 30 is connected. The door of the security gate SG is locked by a locking mechanism, and when the user is successfully authenticated, the lock is released. Once unlocked, the user can push through the door. The door is locked again after rotating by a predetermined angle. The door may be opened / closed, or the opening / closing may be controlled by an electronic lock.

For example, the security gate SG is placed in any facility such as a company where the employee works or a public facility, and only a person who is qualified to enter can pass through the security gate SG. In the present embodiment, security gate SGs are arranged in each of the plurality of facilities. Therefore, the authentication system S includes a plurality of authentication terminals 30, and a security gate SG and an authentication terminal 30 are arranged for each facility.

Generally, a security gate using a card key is the mainstream, but in such a security gate, the user needs to take out the card key and hold it over the card reader, which is troublesome. In addition, if the user loses the card key, a third party who has obtained the card key may impersonate the user and pass through the security gate.

In this respect, if biometric authentication such as face authentication is used, it is possible to save the trouble of taking it out like a card key, and there is no worry of losing it. However, biometric authentication does not require an exact match such as a face, and success or failure is determined by the similarity. Therefore, for example, another person who has a similar face to the user may impersonate the user and pass through the security gate. ..

Therefore, the authentication system S of the present embodiment unlocks the security gate SG on the condition that the user approaches the authentication terminal 30 and the biometric authentication using the authentication terminal 30 is successful. .. Even if a malicious third party tries to impersonate another person with a similar face, he / she cannot pass through the security gate SG by impersonating another person because he / she does not have the user terminal 20 of the other person.

FIG. 3 is a diagram showing a user approaching the authentication terminal 30. Although the server 10 is also shown in FIG. 3, the server 10 is actually arranged at a location away from the user and the authentication terminal 30. As shown in FIG. 3, a communicable area A1 and an authenticable area A2 are set around the authentication terminal 30. Although each of the communicable area A1 and the authenticateable area A2 is shown in a circle, they may have any shape and size, and may be, for example, a semicircle, an ellipse, or a polygon.

The communicable area A1 is an area indicating the communication range of the second wireless communication unit 33B of the authentication terminal 30. The communicable area A1 varies depending on the communication standard to be used and the communication environment, and is, for example, about 3 to 5 meters. When the user terminal 20 moves into the communicable area A1, direct communication between the user terminal 20 and the authentication terminal 30 becomes possible. However, in the present embodiment, it is assumed that the pairing is not executed and only the communication in the stage before the pairing is performed.

The authenticable area A2 is an area where authentication is permitted. The authenticateable area A2 is smaller than the communicable area A1. In other words, the authenticateable area A2 is included in the communicable area A1, and the end of the authenticateable area A2 is closer to the authentication terminal 30 than the end of the communicable area A1. For example, the authenticateable area A2 is about 1 meter.

In the present embodiment, the user terminal 20 stores the latitude / longitude information or the coordinate information of the authentication terminal 30. Therefore, the user terminal 20 can detect that the user has moved into the communicable area A1 based on the current position detected by the GPS receiving unit 26.

For example, suppose a user approaches the authentication terminal 30 with the user terminal 20 in his pocket or bag. As shown in FIG. 3, when the user terminal 20 detects that the user has entered the communicable area A1, the user enters the authentication terminal 30 with respect to the server 10 by using the first wireless communication unit 23A. Send a notification that you are approaching.

As shown in FIG. 3, the above notification includes an authentication terminal ID that identifies the authentication terminal 30 that the user has approached, a user ID that identifies the user, and a wireless communication ID that identifies the second wireless communication unit 23B. .. By receiving this information, the server 10 detects that the user has entered the communicable area A1.

Further, when the user enters the communicable area A1, direct communication is possible between the second wireless communication unit 23B of the user terminal 20 and the second wireless communication unit 33B of the authentication terminal 30. become. However, if pairing is attempted at this point, the user needs to take out the user terminal 20 from the pocket or bag and perform an operation for pairing. Therefore, in the present embodiment, in order to save the user's trouble. , Pairing shall not be performed.

When the user gets closer to the authentication terminal 30 and enters the authenticationable area A2, the authentication can be started. In the present embodiment, the display unit 35 of the authentication terminal 30 displays the button B35 for starting the authentication, and the user causes the photographing unit 36 to take a picture of his / her face and starts the authentication. Touch button B35.

When the user selects the button B35, the authentication terminal 30 uses the photographing unit 36 to photograph the user's face. Further, the authentication terminal 30 uses the second wireless communication unit 33B to request the user terminal 20 for the wireless communication ID of the second wireless communication unit 23B. This request is transmitted by the communication in the previous stage of pairing, and is transmitted by using, for example, an advertising packet or the like.

Upon receiving the request, the user terminal 20 transmits the wireless communication ID of the second wireless communication unit 23B to the authentication terminal 30. The information that can be transmitted using the advertising packet or the like is predetermined, and here, the wireless communication ID is set to be transmitted. Therefore, in the present embodiment, the authentication terminal 30 cannot receive the user ID from the user terminal 20.

When the authentication terminal 30 receives the wireless communication ID from the user terminal 20, it transmits its own authentication terminal ID, the received wireless communication ID, and an image captured by the photographing unit 36 to the server 10. Although the details will be described later, the authentication terminal 30 scans the signal strength (RSSI: Received Signal Strength Indication) detected by the second wireless communication unit 33B in order to identify the user in the authenticateable area A2. Then, the distance to the user terminal 20 is measured, and only the wireless communication ID received from the user terminal 20 within a predetermined distance is filtered.

When the server 10 receives the authentication terminal ID and the wireless communication ID from the authentication terminal 30, the server 10 refers to the user ID, the authentication terminal ID, and the wireless communication ID received in advance from the user terminal 20 and enters the authenticationable area A2. Identify the user ID of the user. As described above, since the authentication terminal 30 cannot receive the user ID from the user terminal 20, the server 10 uses the authentication terminal 30 to identify the user ID of the user in the authenticateable area A2. The received authentication terminal ID and the user ID associated with the wireless communication ID will be referred to.

When the server 10 specifies the user ID of the user in the authenticateable area A2, the server 10 identifies the feature amount of the face indicated by the image received from the authentication terminal 30 and the face registered in advance in association with the specified user ID. Authentication is performed based on the feature amount of. If the authentication is successful, the security gate SG is unlocked.

FIG. 4 is a diagram showing how the authentication terminal 30 succeeds in authentication. As shown in FIG. 4, when the authentication is successful, information such as the name of the user who has succeeded in the authentication is displayed on the display unit 35 of the authentication terminal 30, and it is notified that the security gate SG is allowed to pass. .. After that, the user passes through the security gate SG.

As described above, in the present embodiment, the authentication is successful on the condition that the user approaches the authentication terminal 30 and the biometric authentication using the authentication terminal 30 is successful. .. However, even if this is done, spoofing may not be prevented when there are a plurality of users having similar faces to each other in the vicinity of the authentication terminal 30.

For example, suppose that when the user A touches the button B35, there is a user B having a face similar to that of the user A in the authenticateable area A2. In this case, since it is detected in the authentication system S that each of the user A and the user B is in the authenticateable area A2, there is a possibility that the user A is authenticated as the user B without the user B noticing. There is. Therefore, the user A may impersonate the user B and pass through the security gate SG.

Therefore, in the authentication system S of the present embodiment, when a plurality of users having similar faces are in the vicinity of the security gate SG, the success of the authentication is restricted, spoofing is prevented, and the security is enhanced. ..

FIG. 5 is a diagram showing a case where a plurality of users having similar faces are in the authenticateable area A2. In this case, since one user may be authenticated as the other user, the authentication system S does not succeed in the authentication and keeps the security gate SG locked, as shown in FIG. In this case, a message indicating that the authentication is not successful is displayed on the display unit 35 of the authentication terminal 30.

When the message shown in FIG. 5 is displayed on the display unit 35, for example, any user urges another nearby user to leave the security gate SG. When another user leaves the security gate SG and goes out of the authenticateable area A2, the authentication restriction is lifted. In this case, the authentication is successful and the security gate SG is unlocked in the same manner as in FIG.

FIG. 6 is a diagram showing a case where a plurality of users whose faces are not similar to each other are in the authenticateable area A2. If the faces are not similar to each other, one user will not be authenticated as the other user, and thus the success of authentication is not limited, as shown in FIG. That is, in the present embodiment, when a plurality of users are in the authenticateable area A2, the success of the authentication is not forcibly restricted, but when there is no possibility of spoofing, the success of the authentication is permitted. To improve convenience.

As described above, the authentication system S prevents spoofing and enhances security by limiting the success of authentication when a plurality of users having similar faces are in the authenticateable area A2. There is. Hereinafter, the details of this technique will be described.

[1-3. Functions realized in the first embodiment]
FIG. 7 is a functional block diagram showing an example of the functions realized in the first embodiment. Here, the functions realized by each of the server 10, the user terminal 20, and the authentication terminal 30 will be described.

[1-3-1. Functions realized on the server]
As shown in FIG. 7, in the server 10, a data storage unit 100, an identification information acquisition unit 101, an authentication unit 102, a possibility determination unit 103, a restriction unit 104, a notification unit 105, and an exclusion unit 106 are realized.

[Data storage]
The data storage unit 100 is mainly realized by the storage unit 12. The data storage unit 100 stores data necessary for executing the process described in this embodiment. Here, as an example of the data stored in the data storage unit 100, the user database DB, the authentication terminal list L1, and the approaching user list L2 will be described.

FIG. 8 is a diagram showing an example of storing data in the user database DB. As shown in FIG. 8, the user database DB is a database in which various information about the user is stored. For example, the user database DB stores a user ID, a user's name, a password, a facial photograph, and a facial feature amount. For example, when a user registers a predetermined use on the server 10, a new user ID is issued and a new record is created in the user database DB. The record stores the name and password entered by the user, the face photo uploaded by the user, and the feature amount calculated based on the face photo. The information stored in the user database DB is not limited to the example shown in FIG. 8, and arbitrary information such as the user's contact information and address may be stored.

Passwords and facial features are a type of authentication information. The authentication information is information referred to at the time of authentication, and the name differs depending on the authentication method. For example, in the case of electronic stamp authentication, the multi-touch pattern of the stamp becomes the authentication information, and in the case of password authentication, the password becomes the authentication information. Each of the password and the facial feature amount may be used for any purpose. In the present embodiment, the password is used for the user to apply for registration of the face photo and edit the registered information, and the facial feature amount is used for the user to pass through the security gate SG. To. The face photo may correspond to the authentication information.

The facial feature amount is information that quantifies facial features, and indicates features such as the relative position, size, or shape of facial parts, for example. In the present embodiment, the facial feature amount shown by the facial photograph is calculated in advance, but the facial feature amount may be calculated on the spot at the time of authentication. When a plurality of face photographs are registered, the feature amount of the face is calculated for each face photograph. Various methods can be applied to face recognition itself, for example, methods such as principal component analysis, linear discriminant analysis, elastic matching, or hidden Markov model can be used, and features are calculated according to these methods. It may be calculated by the formula. For example, facial features are represented by multidimensional vectors, but may be represented in other formats such as arrays or single numbers.

FIG. 9 is a diagram showing an example of storing data in the authentication terminal list L1. As shown in FIG. 9, the authentication terminal list L1 is a list of a plurality of authentication terminals 30 included in the authentication system S. For example, the authentication terminal list L1 stores an authentication terminal ID that uniquely identifies the authentication terminal 30, an authentication terminal name indicating the name of the authentication terminal 30, and authentication terminal position information.

The authentication terminal position information is information regarding the position of the authentication terminal 30. The authentication terminal position information may be any information that can identify the position of the authentication terminal 30, and is, for example, latitude / longitude information, coordinate information, address information, access point information, beacon information, or mobile base station information. The authentication terminal position information may indicate an area in which the authentication terminal 30 is arranged. The area is a rough position of the authentication terminal 30, and may be, for example, a city name, an area, a zip code, a station name, an airport name, or a bus stop name, or on a map on which latitude / longitude information or coordinate information is plotted. Alternatively, it may be a region on coordinates.

The authentication terminal position information may be input by the administrator of the authentication system S, or may be acquired from the authentication terminal 30. For example, when the authentication terminal 30 includes a GPS receiving unit, the authentication terminal position information acquired by the authentication terminal 30 using the GPS receiving unit is registered in the authentication terminal list L1. Further, for example, the authentication terminal position information acquired by the communication unit 33 of the authentication terminal 30 is registered in the authentication terminal list L1. Further, for example, the authentication terminal position information input from the operation unit 34 of the authentication terminal 30 is registered in the authentication terminal list L1.

FIG. 10 is a diagram showing a data storage example of the approaching user list L2. As shown in FIG. 10, the approaching user list L2 is a list showing users approaching the authentication terminal 30. In the present embodiment, since a plurality of authentication terminals 30 are included, the approaching user list L2 shows the approaching user for each authentication terminal 30. For example, in the approaching user list L2, a user ID of a user who has approached the authentication terminal 30 and a wireless communication ID that uniquely identifies the second wireless communication unit 23B are stored for each authentication terminal ID.

The wireless communication ID may be any information that can identify the wireless communication interface, such as UUID or BLE-ID. The wireless communication ID is indicated by an arbitrary symbol string. The wireless communication ID may be fixed so that it cannot be edited by the user, or it may be editable by the user. As described with reference to FIG. 3, in the present embodiment, when the user moves into the communicable area A1, the authentication terminal ID, the user ID, and the wireless communication ID are uploaded to the approaching user list L2. Stores these uploaded information.

[Identification information acquisition unit]
The identification information acquisition unit 101 is mainly realized by the control unit 11. The identification information acquisition unit 101 acquires identification information from the user terminal 20 approaching the authentication terminal 30.

The user terminal 20 approaching the authentication terminal 30 is a user terminal 20 of a user who is within a predetermined distance from the authentication terminal 30. In the present embodiment, a case where entering the communicable area A1 indicating the communicable range of the second wireless communication unit 33B corresponds to approaching the authentication terminal 30 will be described.

The area for determining whether or not the user has approached the authentication terminal 30 may be defined regardless of the communicable range. For example, when the distance is shorter than the maximum distance of the communicable range of the second wireless communication unit 33B, it may be determined that the authentication terminal 30 is approached, or it is outside the communicable area A1 but has approached to some extent. In some cases, it may be determined that the user has approached the authentication terminal 30.

The identification information may be any information that can identify the user, and is, for example, a user ID, individual identification information of the user terminal 20, a telephone number of the user terminal 20, or a wireless communication ID. In this embodiment, the case where the user ID corresponds to the identification information will be described. Therefore, the portion described as the user ID in the present embodiment can be read as the identification information.

When the user terminal 20 enters the communicable area A1, the identification information acquisition unit 101 acquires a user ID from the user terminal 20. For example, the user terminal 20 voluntarily uploads the user ID when approaching the authentication terminal 30, and the identification information acquisition unit 101 voluntarily acquires the uploaded user ID.

The user ID may not be uploaded voluntarily when the user terminal 20 approaches the authentication terminal 30, but may be uploaded from the user terminal 20 to the server 10 on a regular basis. That is, the user terminal 20 may periodically upload the user ID regardless of whether or not it is near the authentication terminal 30. In this case, the identification information acquisition unit 101 acquires position information together with the user ID of the user terminal 20, identifies the user terminal 20 approaching the authentication terminal 30, and authenticates the user ID received from the user terminal 20. It may be acquired as the identification information of the user terminal 20 approaching the terminal 30.

[Authentication Department]
The authentication unit 102 is mainly realized by the control unit 11. The authentication unit 102 is associated with the authentication information acquired by using the authentication terminal 30 (hereinafter, simply referred to as "acquired authentication information") and the user ID of a user in the vicinity of the authentication terminal 30. Authentication is performed based on the authentication information registered in the data storage unit 100 (hereinafter, simply referred to as "registered authentication information").

The acquired authentication information may mean the authentication information acquired by the authentication terminal 30 itself, or may mean the authentication information acquired by another computer based on the information acquired by the authentication terminal 30. .. In the present embodiment, the facial feature amount corresponds to the authentication information, and the server 10 calculates the facial feature amount. Therefore, the acquired authentication information is calculated based on the image acquired by the server 10 from the authentication terminal 30. .. The authentication terminal 30 may calculate the facial feature amount based on the image taken by the photographing unit 36 and upload the calculated facial feature amount to the server 10.

The acquired authentication information is information to be compared with the registered authentication information. In other words, the acquired authentication information is information that becomes a query at the time of authentication. On the other hand, the registered authentication information is the authentication information registered by the user, and is the authentication information that can be the correct answer at the time of authentication. In other words, the registered authentication information is information to be compared with the input authentication information, and is information that serves as an index at the time of authentication. In the present embodiment, the facial feature amount stored in the user database DB corresponds to the registered authentication information.

The facial feature amount is associated with the user ID and registered in the user database DB, and is not associated with the wireless communication ID. Therefore, in the present embodiment, a user ID is required to specify the registered authentication information, and the individual identification information of the user terminal 20, the telephone number of the user terminal 20, or the wireless communication ID is registered. It is not possible to identify the authentication information.

The user in the vicinity of the authentication terminal 30 is a user who is within a predetermined distance from the authentication terminal 30. In the present embodiment, a case where being in the authenticateable area A2 where authentication is possible corresponds to being in the vicinity of the authentication terminal 30 will be described. In the present embodiment, "approaching the authentication terminal 30" means entering the communicable area A1, and "being near the authentication terminal 30" means entering the authenticable area A2. Mean and distinguish between them. It should be noted that these meanings may be the same, entering the authenticationable area A2 may mean approaching the authentication terminal 30, and entering the communicable area A1 may mean the authentication terminal 30. It may mean that you are in the vicinity of.

To be associated is to associate multiple pieces of information with each other. When one piece of information can be used to search for another piece of information, it means that these pieces of information are associated with each other. In the present embodiment, the user ID and the authentication information are stored in the same record in the user database DB, and the user ID and the authentication information are registered in association with each other.

The authentication unit 102 authenticates by comparing the acquired authentication information with the registered authentication information. For example, the authentication unit 102 authenticates by determining whether or not the acquired authentication information and the registered authentication information match or are similar. If the acquired authentication information and the registered authentication information do not match or are similar, the authentication unit 102 determines that the authentication is not successful, and the acquired authentication information and the registered authentication information match or are similar. If so, it is determined that the authentication was successful.

Matching means that the entered authentication information and the registered authentication information are the same. The match here means an exact match, not a partial match. Therefore, when it is determined that the authentication information matches, the authentication will not succeed if the authentication information is partially different. For example, in password authentication, a password match is determined.

The similarity is whether or not the acquired authentication information and the registered authentication information are similar. In other words, similarity is the difference or difference between the entered authentication information and the registered authentication information. For example, in biometric authentication, the similarity of biometric authentication information is determined.

In the present embodiment, the case where the similarity of the authentication information is determined will be described. For example, the authentication unit 102 calculates the similarity based on the acquired authentication information and the registered authentication information. If the similarity is less than the threshold value, the authentication unit 102 determines that the authentication is not successful, and if the similarity is equal to or more than the threshold value, determines that the authentication is successful.

The degree of similarity is an index showing the degree of similarity. In other words, the degree of similarity is an index showing the difference or the smallness of the difference between these authentication information. The higher the degree of similarity, the more similar the authentication information to each other, and the smaller the degree of similarity, the less similar the authentication information to each other. The degree of similarity can also be said to be the probability that the authentication information is similar. The similarity may be expressed as a percentage between 0% and 100%, or within other numerical ranges.

Since biometric authentication is used in this embodiment, the authentication unit 102 authenticates based on the biometric authentication information acquired by using the authentication terminal 30 and the registered biometric authentication information. For example, the authentication unit 102 calculates the similarity based on the feature amount indicated by the acquired biometric authentication information and the feature amount indicated by the registered biometric authentication information. The difference between these feature quantities may be used as the similarity degree as it is, or the similarity degree may be calculated by substituting these feature quantities into a predetermined calculation formula. When the feature quantity is expressed by a vector, the distance between the vectors may be the similarity.

In the present embodiment, when the user approaches the authentication terminal 30, the user ID is transmitted from the user terminal 20 to the server 10, so that the authentication unit 102 registers based on the user ID acquired from the user terminal 20. Acquire the authenticated authentication information and authenticate. Since the user ID received from the user terminal 20 is stored in the approaching user list L2, the authentication unit 102 authenticates based on the authentication information registered in association with the user ID stored in the approaching user list L2. Do.

[Possibility judgment unit]
The possibility determination unit 103 is mainly realized by the control unit 11. The possibility determination unit 103 determines whether or not one user may be authenticated as another user when there are a plurality of users in the vicinity of the authentication terminal 30.

The possibility here is the possibility of spoofing by at least one of a plurality of users in the vicinity of the authentication terminal 30. In other words, there is a possibility that any user of the plurality of users in the vicinity of the authentication terminal 30 is erroneously authenticated as another user. Hereinafter, the possibility of determination by the possibility determination unit 103 will be described as the possibility of spoofing. Therefore, the part described as the possibility of spoofing in the present embodiment can be simply read as the possibility.

The possibility determination unit 103 determines whether or not there is a possibility of spoofing based on at least one of the acquired authentication information and the registered authentication information. In the present embodiment, the case where the possibility determination unit 103 determines whether or not there is a possibility of spoofing based on both of these will be described, but as in the modification described later, the possibility determination unit 103 , The possibility of spoofing may be determined based on only one of these.

For example, the possibility determination unit 103 determines that there is a possibility of spoofing when there are a plurality of registered authentication information that matches or is similar to the acquired authentication information. In other words, the possibility determination unit 103 can spoof when there are a plurality of users who can succeed in authentication with the acquired authentication information among the plurality of users in the vicinity of the authentication terminal 30. Judged as having sex.

The possibility determination unit 103 identifies the number of users having registered authentication information similar to the acquired authentication information among a plurality of users in the vicinity of the authentication terminal 30. The possibility determination unit 103 does not determine that there is a possibility of spoofing if the specified number of people is one, and if the specified number of people is a plurality of people (two or more), there is a possibility of spoofing. Judge that there is.

In the present embodiment, since the user in the vicinity of the authentication terminal 30 is detected by using the short-range wireless communication, the possibility determination unit 103 is located in the vicinity of the authentication terminal 30 based on the communication content of the short-range wireless communication. When it is determined that there are a plurality of users, it is determined whether or not there is a possibility of spoofing. When there is no user or only one user in the vicinity of the authentication terminal 30, the possibility determination unit 103 does not have to execute the process of determining the possibility of spoofing.

For short-range wireless communication, a communication standard capable of directly communicating between terminals may be used. In this embodiment, Bluetooth (registered trademark) will be described, but other communication such as Wi-Fi described above will be described. Standards may be used. In short-range wireless communication, when each of a plurality of terminals is within the communication range of each other, direct communication without other devices becomes possible. The communication range of short-range wireless communication may be any range defined by the communication standard, and is, for example, about 1 meter to 100 meters.

[Restriction part]
The limiting unit 104 is mainly realized by the control unit 11. The limiting unit 104 limits the success of authentication when it is determined that there is a possibility of spoofing. The limiting unit 104 does not limit the success of authentication if it is not determined that there is a possibility of spoofing.

Limiting the success of authentication means preventing the authentication unit 102 from determining that the authentication is successful. In other words, even if the acquired authentication information and the registered authentication information match or are similar, preventing the authentication from being judged as successful is equivalent to limiting the success of the authentication. .. Restrictions here have the same meaning as prohibition and the opposite of permission.

In the present embodiment, if the authentication is successful, the server 10 executes a predetermined process. When the success of authentication is restricted by the restriction unit 104, the predetermined process is not executed. Therefore, limiting the success of authentication can also prohibit the execution of a predetermined process. The predetermined process may be any process that is permitted to be executed on condition that the authentication is successful. In the present embodiment, information indicating that the authentication is successful is transmitted to the authentication terminal 30 or information indicating that the authentication is successful is transmitted. , Is to send a command to unlock the security gate SG. The predetermined process may be determined according to the situation in which the authentication system S is used. For example, it may be a payment process or a process of displaying an image permitting the use of the service. ..

The restriction by the restriction unit 104 may be released at any time. For example, the restriction unit 104 determines that there is a possibility of spoofing and that there is a possibility of spoofing after the success of authentication is restricted. Allow successful authentication if it is no longer available. The limiting unit 104 continuously limits the success of authentication until it is no longer determined that there is a possibility of spoofing.

[Notification section]
The notification unit 105 is mainly realized by the control unit 11. When it is determined that there is a possibility of spoofing, the notification unit 105 gives a predetermined notification to at least one of the plurality of users.

A predetermined notification is a notification indicating that the success of authentication is limited. In other words, the predetermined notification is a notification given when it is determined that there is a possibility of spoofing. Hereinafter, the notification given by the notification unit 105 is referred to as an authentication restriction notification.

The authentication restriction notification may be a notification that can be perceived by humans. In the present embodiment, a visual notification is taken as an example, but it may be an auditory notification using voice or a tactile notification using vibration or the like. The content of the authentication restriction notification may be editable by the administrator of the authentication system S, for example, the content prompting the user to leave the authentication terminal 30, the content indicating that there is a user with a similar face, or the authentication is not successful. It is the content that shows that.

In the present embodiment, since the notification unit 105 is realized by the server 10, the notification unit 105 sends the authentication restriction notification to the user terminal 20 or the authentication terminal 30 by transmitting data for giving the authentication restriction notification. Do. This data may be in any format, such as a message, image, push notification, or email. The data for notifying the authentication restriction is stored in advance in the data storage unit 100, and the notification unit 105 performs the authentication restriction notification based on the data stored in the data storage unit 100.

The authentication restriction notification may be given using the user terminal 20 instead of using the authentication terminal 30. For example, the notification unit 105 may send an authentication restriction notification to at least one user terminal 20 of a plurality of users near the authentication terminal. In this case, the authentication restriction notification may be given to all of these plurality of users, or the authentication restriction notification may be given to only some of the users.

[Exclusion part]
The exclusion unit 106 is mainly realized by the control unit 11. The exclusion unit 106 excludes the registered authentication information so that it is not used in the authentication when the user terminal 20 approaching the authentication terminal 30 leaves the authentication terminal 30.

To move away from the authentication terminal 30 means to move to a position of a predetermined distance or more from the authentication terminal 30. That is, changing from a state of approaching the authentication terminal 30 to a state of not approaching the authentication terminal 30 corresponds to moving away from the authentication terminal 30. In the present embodiment, entering the communicable area A1 indicating the communicable range of the second wireless communication unit 33B corresponds to approaching the authentication terminal 30, so that the second wireless communication unit 33B goes out of the communicable area A1. That corresponds to moving away from the authentication terminal 30.

The exclusion means not to be a comparison target with the acquired authentication information, or to be not a reference target by the authentication unit 102. That is, it corresponds to exclusion so that it does not become an index at the time of authentication. In the present embodiment, the case where the exclusion is performed by deleting the user ID stored in the approaching user list L2 will be described, but the exclusion is performed by changing the information such as the flag instead of deleting the user ID. You may be broken.

In the present embodiment, when the user terminal 20 is separated from the authentication terminal 30, the authentication restriction notification is transmitted. Therefore, when the exclusion unit 106 receives the authentication restriction notification, the registered authentication information is used for authentication. Exclude so that it is not done. The exclusion unit 106 excludes the registered authentication information from being used in the authentication on condition that the authentication restriction notification is received. Therefore, the exclusion unit 106 does not exclude until the authentication restriction notification is received, but excludes according to the receipt of the authentication restriction notification.

[1-3-2. Functions realized on user terminals]
As shown in FIG. 7, in the user terminal 20, the data storage unit 200, the first acquisition unit 201, the second acquisition unit 202, the approach determination unit 203, the identification information transmission unit 204, the departure determination unit 205, and the notification transmission unit 206. Is realized.

[Data storage]
The data storage unit 200 is mainly realized by the storage unit 22. The data storage unit 200 stores data necessary for executing the process described in the present embodiment. For example, the data storage unit 200 stores the data of the user's face photograph. Further, for example, the data storage unit 200 may store a user ID, a password, individual identification information of the user terminal 20, a telephone number of the user terminal 20, or an ID of the communication unit 23. In the present embodiment, since the first wireless communication unit 23A and the second wireless communication unit 23B are included in the communication unit 23, the ID of the communication unit 23 includes the wireless communication ID of the first wireless communication unit 23A and the first wireless communication unit 23A. 2 The wireless communication ID of the wireless communication unit 23B and the wireless communication unit 23B are included.

In the present embodiment, the data storage unit 200 stores the authentication terminal list L1. An example of storing data in the authentication terminal list L1 is as described with reference to FIG. The authentication terminal list L1 stored in the data storage unit 200 does not need to show the information of all the authentication terminals 30, but may show only the information of some authentication terminals 30. For example, the data storage unit 200 may store the authentication terminal list L1 showing only the information of the authentication terminal 30 connected to the security gate SG through which the user can pass.

[First acquisition department]
The first acquisition unit 201 is mainly realized by the control unit 21. The first acquisition unit 201 acquires the authentication terminal position information regarding the position of the authentication terminal 30. In the present embodiment, since the authentication terminal position information is stored in the authentication terminal list L1, the first acquisition unit 201 refers to the authentication terminal list L1 stored in the data storage unit 200 and acquires the authentication terminal position information. To do. When the data storage unit 200 does not store the authentication terminal list L1, the first acquisition unit 201 refers to the authentication terminal list L1 stored in the data storage unit 200 of the server 10 and acquires the authentication terminal position information. You may.

[Second acquisition department]
The second acquisition unit 202 is mainly realized by the control unit 21. The second acquisition unit 202 acquires the user terminal position information regarding the position of the user terminal 20.

The user terminal position information is information that can identify the current position of the user terminal 20, and is, for example, latitude / longitude information, coordinate information, access point information, beacon information, or mobile base station information. In the present embodiment, the user terminal position information is latitude / longitude information or coordinate information, and the second acquisition unit 202 acquires the user terminal position information based on the signal received by the GPS receiving unit 26 of the user terminal 20. The case will be described.

When the user terminal position information is access point information, beacon information, or mobile base station information, the second acquisition unit 202 uses the user terminal position information based on the communication content of the communication unit 23 of the user terminal 20. To get. Further, the second acquisition unit 202 may acquire the user terminal position information based on another method. For example, when the user terminal 20 includes a photographing unit, the second acquisition unit 202 may acquire the user terminal position information based on the image captured by the photographing unit.

[Approach judgment unit]
The approach determination unit 203 is mainly realized by the control unit 21. The approach determination unit 203 determines whether or not the user has approached the authentication terminal 30 based on the authentication terminal position information and the user terminal position information. For example, the approach determination unit 203 calculates the distance between the position indicated by the authentication terminal position information and the position indicated by the user terminal position information, and if the distance is less than the threshold value, determines that the user has approached the authentication terminal 30. .. In the present embodiment, entering the communicable area A1 corresponds to approaching the authentication terminal 30, so that the approach determination unit 203 sets the user in the communicable area A1 set based on the authentication terminal position information. It is determined whether or not the terminal 20 is entered.

When using access point information or the like, the approach determination unit 203 may determine whether or not the authentication terminal position information and the user terminal position information match. When these match, the approach determination unit 203 determines that the authentication terminal 30 has been approached. Further, for example, the approach determination unit 203 may determine whether or not the area indicated by the authentication terminal position information includes the position indicated by the user terminal position information. The approach determination unit 203 determines that the user has approached the authentication terminal 30 when the area indicated by the authentication terminal position information includes the position indicated by the user terminal position information.

[Identification information transmitter]
The identification information transmission unit 204 is mainly realized by the control unit 21. The identification information transmission unit 204 transmits a user ID when it is determined that the user ID has approached the authentication terminal 30. The identification information transmission unit 204 transmits the user ID on condition that it is determined that the user ID has approached the authentication terminal 30. The identification information transmitting unit 204 does not transmit the user ID until it is determined that the user ID has approached the authentication terminal 30, and transmits the user ID according to the approach to the authentication terminal 30. In the present embodiment, the case where the destination of the user ID is the server 10 will be described, but the destination may be another computer, or the user ID may be transmitted to the server 10 via the other computer. ..

[Withdrawal judgment unit]
The withdrawal determination unit 205 is mainly realized by the control unit 21. The withdrawal determination unit 205 determines whether or not the user has left the authentication terminal 30 based on the authentication terminal position information and the user terminal position information. For example, the withdrawal determination unit 205 calculates the distance between the position indicated by the authentication terminal position information and the position indicated by the user terminal position information, and if the distance is equal to or greater than the threshold value, determines that the user has left the authentication terminal 30. .. In the present embodiment, since going out of the communicable area A1 corresponds to moving away from the authentication terminal 30, the approach determination unit 203 is set by the user outside the communicable area A1 set based on the authentication terminal position information. It is determined whether or not the terminal 20 has come out.

Further, for example, when using access point information or the like, the withdrawal determination unit 205 may determine whether or not the authentication terminal position information and the user terminal position information match. When these do not match, the withdrawal determination unit 205 determines that the user has left the authentication terminal 30. Further, for example, the withdrawal determination unit 205 may determine whether or not the area indicated by the authentication terminal position information includes the position indicated by the user terminal position information. The withdrawal determination unit 205 determines that the user has left the authentication terminal 30 when the area indicated by the authentication terminal position information does not include the position indicated by the user terminal position information.

[Notification transmitter]
The notification transmission unit 206 is mainly realized by the control unit 21. The notification transmission unit 206 transmits a predetermined notification when it is determined that the user has left the authentication terminal 30. In the present embodiment, the case where the destination of the notification is the server 10 will be described, but the destination may be another computer, or the notification may be transmitted to the server 10 via the other computer. The predetermined notification here is a notification indicating that the user has left the authentication terminal 30. Hereinafter, the notification given by the notification transmission unit 206 is referred to as a withdrawal notification. The notification transmission unit 206 transmits a withdrawal notification by transmitting data in a predetermined format indicating that the user has left the authentication terminal 30.

[1-3-3. Functions realized in the authentication terminal]
As shown in FIG. 7, in the authentication terminal 30, the data storage unit 300 and the communication content determination unit 301 are realized. In this embodiment, the case where the authentication terminal 30 is included in the authentication system S will be described, but the authentication terminal 30 may be an external device capable of communicating with the authentication system S.

[Data storage]
The data storage unit 300 is mainly realized by the storage unit 32. The data storage unit 300 stores data necessary for executing the process described in this embodiment. For example, the data storage unit 300 stores the authentication terminal ID of the authentication terminal 30 and the communication partner list L3.

FIG. 11 is a diagram showing an example of storing data in the communication partner list L3. As shown in FIG. 11, the communication partner list L3 is a list of user terminals 20 in the communicable area A1 of the second wireless communication unit 33B of the authentication terminal 30. For example, the communication partner list L3 stores the wireless communication ID of the second wireless communication unit 23B of the user terminal 20 in the communicable area A1 and the distance between the user terminal 20 and the authentication terminal 30. Will be done.

The wireless communication ID is acquired by short-range wireless communication performed between the user terminal 20 and the authentication terminal 30. The distance is measured by the signal strength of the short-range wireless communication performed between the user terminal 20 and the authentication terminal 30. The distance may be acquired by analyzing the image of the photographing unit 36 instead of the short-range wireless communication, or may be acquired by using another method such as a depth sensor or an ultrasonic sensor.

[Communication content judgment unit]
The communication content determination unit 301 is mainly realized by the control unit 31. The communication content determination unit 301 determines whether or not there is a user in the vicinity of the authentication terminal 30 based on the communication content of the short-range wireless communication performed between the authentication terminal 30 and the user terminal 20. In the present embodiment, the communication content is the content of data exchanged between the second wireless communication unit 23B of the user terminal 20 and the second wireless communication unit 33B of the authentication terminal 30.

The communication content determination unit 301 determines whether or not there is a user in the vicinity of the authentication terminal 30 by determining whether or not the wireless communication ID has been received from the user terminal 20 by short-range wireless communication. When the communication content determination unit 301 does not receive the wireless communication ID, it does not determine that there is a user in the vicinity of the authentication terminal 30, and when it receives the wireless communication ID, it determines that there is a user in the vicinity of the authentication terminal 30. judge.

In the present embodiment, Bluethoth (registered trademark) will be described as an example of short-range wireless communication, but short-range wireless communication capable of directly communicating between terminals may be used, and other communication standards may be used. You may. For example, Wi-Fi or infrared communication may be used.

The short-range wireless communication of the present embodiment can measure the distance between the authentication terminal 30 and the user terminal 20, and the communication content determination unit 301 of the authentication terminal 30 is based on the distance measured by the short-range wireless communication. Determine if there is a user in the vicinity. As the distance measurement method itself, a method defined by a communication standard can be used, and the signal strength in short-range wireless communication may be used. For example, the stronger the signal strength, the shorter the measured distance, and the weaker the signal strength, the longer the measured distance.

The communication content determination unit 301 does not determine that there is a user in the vicinity of the authentication terminal 30 when the distance between the authentication terminal 30 and the user terminal 20 is equal to or greater than the threshold value, and when the distance is less than the threshold value, It is determined that there is a user in the vicinity of the authentication terminal 30. In the present embodiment, being in the authenticateable area A2 corresponds to being in the vicinity of the authentication terminal 30, so that the communication content determination unit 301 is in the authenticateable area A2 which is an area within a predetermined distance from the authentication terminal 30. Determine if there is a user in.

[1-4. Process executed in Embodiment 1]
12 and 13 are flow charts showing the processes executed in the first embodiment. The processes shown in FIGS. 12 and 13 are executed by the control units 11, 21, and 31 operating according to the programs stored in the storage units 12, 22, and 32, respectively. The process described below is an example of the process executed by the functional block shown in FIG. 7.

As shown in FIG. 12, first, in the user terminal 20, the control unit 21 acquires the user terminal position information based on the signal received by the GPS receiving unit 26 (S100). The process of S100 is executed periodically, and the control unit 21 repeatedly acquires the user terminal position information indicating the latest current position.

The control unit 21 determines whether or not the user has approached the authentication terminal 30 based on the authentication terminal list L1 stored in the storage unit 22 (S101). In S101, the control unit 21 determines whether or not the distance calculated based on the authentication terminal position information and the user terminal position information is equal to or greater than the threshold value for each authentication terminal ID stored in the authentication terminal list L1. To do.

In the present embodiment, the case where the threshold value used in S101 is the radius of the communicable area A1 in FIG. 3 will be described, but the threshold value may be any value. The control unit 21 does not determine that the user has approached the authentication terminal 30 when the distance is equal to or greater than the threshold value, and determines that the user has approached the authentication terminal 30 when the distance is less than the threshold value. In S101, the control unit 21 determines whether or not the user has moved into the communicable area A1.

If it is not determined that the user has approached the authentication terminal 30 (S101; N), the process returns to the process of S100. On the other hand, when it is determined that the user has approached the authentication terminal 30 (S101; Y), the control unit 21 uses the first wireless communication unit 23A to approach the server 10 to indicate that the user has approached the authentication terminal 30. A notification is transmitted (S102). The approach notification may be performed by transmitting data in a predetermined format. For example, the authentication terminal ID and user ID of the authentication terminal 30 approached by the user, and the wireless communication ID of the second wireless communication unit 23B. including.

When the server 10 receives the approach notification, the control unit 11 adds the user approaching the authentication terminal 30 to the approach user list L2 (S103). In S103, the control unit 11 adds the authentication terminal ID, the user ID, and the wireless communication ID included in the received approach notification to the approach user list L2.

The control unit 31 determines whether or not the button B35 displayed on the display unit 35 is selected based on the detection signal of the operation unit 34 (S104). If it is not determined that the button B35 has been selected (S104; N), the process returns to the process of S104 again, and the selection of the button B35 is awaited.

On the other hand, when it is determined that the button B35 is selected (S104; Y), the authentication terminal 30 requests the user terminal 20 for a wireless communication ID, and the control unit 21 of the user terminal 20 uses the second wireless communication unit 23B. Is used to transmit the wireless communication ID of the second wireless communication unit 23B to the authentication terminal 30 (S105). In S105, the second wireless communication unit 23B of the user terminal 20 uses the advertisement packet to transmit the wireless communication ID to the authentication terminal 30 without establishing pairing.

When the authentication terminal 30 receives the wireless communication ID, the control unit 31 adds it to the communication partner list L3 (S106), scans the strength of the signal received by the second wireless communication unit 23B, and communicates with the user terminal 20. Measure the distance (S107). The processes S105 to S107 may be executed before the button B35 is touched.

The control unit 31 acquires the wireless communication ID of the user terminal 20 within a predetermined distance from the authentication terminal 30 based on the list (S108). In S108, the control unit 31 acquires the wireless communication ID whose distance measured in S107 is less than the threshold value among the wireless communication IDs stored in the list. In the present embodiment, since this threshold value is set according to the authenticateable area A2, in S108, the control unit 31 acquires the wireless communication ID of the user terminal 20 in the authenticateable area A2.

The control unit 31 uses the photographing unit 36 to photograph the user's face (S109). In S109, the control unit 31 generates image data indicating the shooting result based on the detection signal of the shooting unit 36.

The control unit 31 transmits an authentication request for requesting execution of the authentication process to the server 10 (S110). The authentication request may be made by transmitting data in a predetermined format. For example, the authentication terminal ID stored in the storage unit 32, the wireless communication ID acquired in S108, and the image taken in S109. including.

When the server 10 receives the authentication request, the control unit 11 calculates the feature amount of the face of the user in front of the authentication terminal 30 based on the image included in the authentication request (S111). The facial feature amount calculated in S111 is the authentication information acquired by using the authentication terminal 30.

The control unit 11 acquires the user ID of a user who is within a predetermined distance from the authentication terminal 30 in the approaching user list L2 (S112). In S112, the control unit 11 acquires the user ID of the record in which the authentication terminal ID and the wireless communication ID included in the authentication process are stored in the approach user list L2. In other words, the control unit 11 searches the approach user list L2 by using the authentication terminal ID and the wireless communication ID included in the authentication request as a query, and acquires the user ID stored in the hit record.

Moving to FIG. 13, the control unit 11 acquires the facial feature amount registered in association with the user ID acquired in S111 based on the user database DB (S113). In S113, the control unit 11 refers to the record in which the user ID acquired in S112 is stored in the user database DB, and acquires the facial feature amount stored in the record. The facial feature amount acquired in S113 is the registered authentication information.

The control unit 11 compares the acquired facial feature amount with the registered facial feature amount (S114). In S114, the control unit 11 calculates the similarity between the acquired facial feature amount and the registered facial feature amount for each user ID acquired in S112, and the similarity is equal to or greater than the threshold value. Judge whether or not.

In S114, the control unit 11 determines that there is a possibility of spoofing when there are a plurality of user IDs whose similarity is equal to or higher than the threshold value. The control unit 11 determines that there is no possibility of spoofing when there is only one user ID whose similarity is equal to or higher than the threshold value. The control unit 11 determines that the authentication has failed when there is no user ID whose similarity is equal to or higher than the threshold value.

When it is determined in S114 that there is a possibility of spoofing (S114; possible), the control unit 11 limits the success of the authentication and sends an authentication restriction notification to the authentication terminal 30 (S115). In this case, the process of S119 described later is not executed, and the lock of the security gate SG is not released.

When the authentication terminal 30 receives the authentication restriction notification, the control unit 31 displays the authentication restriction notification on the display unit 35 (S116), and returns to the process of S104. When the process of S116 is executed, the authentication terminal 30 is in the state shown in FIG. 5, and the lock of the security gate SG is not released.

On the other hand, when it is determined in S114 that the authentication has failed (S114; failure), the control unit 11 transmits an authentication failure notification indicating that the authentication has failed to the authentication terminal 30 (S117). The authentication failure notification may be sent by transmitting data in a predetermined format. When the authentication terminal 30 receives the authentication failure notification, the control unit 31 causes the display unit 35 to display that the authentication has failed (S118), and returns to the process of S104.

On the other hand, when it is determined in S114 that there is no possibility of spoofing (S114; success), the control unit 11 permits the success of the authentication, and notifies the authentication terminal 30 of the success of the authentication indicating that the authentication was successful. Is transmitted (S119). The authentication success notification may be performed by transmitting data in a predetermined format, and includes, for example, a code indicating an instruction to unlock the security gate SG.

When the authentication terminal 30 receives the authentication success notification, the control unit 31 causes the display unit 35 to display that the authentication has been successful (S120). When the process of S120 is executed, the authentication terminal 30 is in the state of FIG. 4 or FIG. 6, and the lock of the security gate SG is released.

On the other hand, in the user terminal 20, the control unit 21 acquires the user terminal position information based on the signal received by the GPS receiving unit 26 (S121). The processing of S121 is the same as that of S100.

The control unit 21 determines whether or not the user has left the authentication terminal 30 (S122). In S122, whether the distance calculated by the control unit 21 based on the authentication terminal position information of the authentication terminal 30 determined to be approached in S101 and the user terminal position information acquired in S121 is equal to or greater than the threshold value. Judge whether or not. In this embodiment, the case where the threshold value used in S122 and the threshold value used in S101 are the same will be described, but these may be different.

If it is not determined that the user has left the authentication terminal 30 (S122; N), the process returns to the process of S121. On the other hand, when it is determined that the user has left the authentication terminal 30 (S122; Y), the control unit 21 uses the first wireless communication unit 23A to indicate to the server 10 that the user has left the authentication terminal 30. A withdrawal notice is transmitted (S123). The withdrawal notification may be performed by transmitting data in a predetermined format. For example, the authentication terminal ID and user ID of the authentication terminal 30 away from the user, and the wireless communication ID of the second wireless communication unit 23B. including.

When the server 10 receives the withdrawal notification, the control unit 11 deletes the user who has left the authentication terminal 30 from the approaching user list L2 (S124), and this process ends. In S124, the control unit 11 deletes the authentication terminal ID, the user ID, and the wireless communication ID included in the received withdrawal notification from the approach user list L2.

According to the authentication system S described above, when there are a plurality of users in the vicinity of the authentication terminal 30, it is determined whether or not there is a possibility of spoofing, and when it is determined that there is a possibility of spoofing, By limiting the success of authentication, spoofing can be prevented and security can be increased. Further, if there are a plurality of users in the vicinity of the authentication terminal 30 and the success of the authentication is forcibly restricted regardless of whether or not the faces are similar to each other, there is no possibility of spoofing. , The success of authentication is limited and the convenience of the user is reduced. In this respect, in the authentication system S, if the faces of a plurality of users in the vicinity of the authentication terminal 30 do not resemble each other and there is no possibility of spoofing, the success of authentication is not limited, so that the convenience of the user is improved. Can be enhanced.

In addition, if it is determined that there is a possibility of spoofing and the success of authentication is restricted, and then it is no longer determined that there is a possibility of spoofing, by allowing successful authentication, users with similar faces can use it. It is possible to prevent the authentication from not succeeding even though the user has left the vicinity of the authentication terminal 30, and the convenience of the user can be improved.

In addition, when there are multiple registered authentication information that matches or is similar to the acquired authentication information, it is determined that there is a possibility of spoofing, so that the presence or absence of the possibility of spoofing can be accurately determined. it can.

In addition, when it is determined that there is a possibility of spoofing, at least one of a plurality of users is notified of the authentication restriction so that the user can understand that there is a possibility of spoofing. it can. A legitimate user can understand why the authentication is not successful, and in order to succeed in the authentication, it is possible to take measures such as having another user with a similar face move away.

Further, since the registered authentication information is acquired and the authentication is executed based on the user ID acquired from the user terminal 20 approaching the authentication terminal 30, it is necessary to accurately identify the user approaching the authentication terminal 30. Can be done. When the user terminal 20 voluntarily transmits the user ID, the user can execute the authentication without taking out the user terminal 20 from the pocket or the bag, and the time and effort of the user can be saved.

Further, when the user terminal 20 approaching the authentication terminal 30 is separated from the authentication terminal 30, the registered authentication information is excluded so as not to be used in the authentication, so that a user having a similar face is separated from the authentication terminal 30. Despite this, it is possible to prevent the authentication from being unsuccessful and improve the convenience of the user.

Further, in the user terminal 20, it is determined whether or not the user has approached the authentication terminal 30 based on the authentication terminal position information and the user terminal position information, and when it is determined that the user has approached the authentication terminal 30, the user ID is determined. By uploading, it is not necessary for the server 10 to determine whether or not the user has approached the authentication terminal 30, and the processing load of the server 10 can be reduced. Further, when the server 10 determines whether or not the user has approached the authentication terminal 30, it is necessary to constantly upload the user terminal position information from the user terminal 20 to the server 10, and there is a concern that the communication load of the network N will increase. At some point, by making a determination on the user terminal 20, it is not necessary to upload the user terminal position information, and the communication load on the network N can be reduced.

Further, in the user terminal 20, it is determined whether or not the user has left the authentication terminal 30 based on the authentication terminal position information and the user terminal position information, and when it is determined that the user has left the authentication terminal 30, a withdrawal notification is issued. By uploading, it is not necessary for the server 10 to determine whether or not the user has left the authentication terminal 30, and the processing load of the server 10 can be reduced. Further, when the server 10 determines whether or not the user has left the authentication terminal 30, it is necessary to constantly upload the user terminal position information from the user terminal 20 to the server 10, and there is a concern that the communication load of the network N will increase. At some point, by making a determination on the user terminal 20, it is not necessary to upload the user terminal position information, and the communication load on the network N can be reduced.

Further, by determining whether or not there is a user in the vicinity of the authentication terminal 30 based on the communication content of the short-range wireless communication performed between the authentication terminal 30 and the user terminal 20, the vicinity of the authentication terminal 30 is determined. It is possible to accurately identify the user who is.

Further, authentication is performed by determining whether or not there is a user in the vicinity of the authentication terminal 30 based on the distance measured by using short-range wireless communication capable of measuring the distance between the authentication terminal 30 and the user terminal 20. It is possible to more accurately identify the user in the vicinity of the terminal 30.

Further, in biometric authentication such as face authentication, the success or failure of authentication is determined by the similarity of authentication information, so that it is relatively easy to spoof, but spoofing is possible when there are a plurality of users in the vicinity of the authentication terminal 30. By determining whether or not there is a property, even if biometric authentication is used, spoofing can be prevented and security can be enhanced.

[2. Embodiment 2]
Next, the second embodiment (hereinafter, the second embodiment) will be described. In the first embodiment, the second wireless communication unit 23B of the user terminal 20 is turned on, and when the user approaches the authentication terminal 30, the second wireless communication units 23B and 33B of each other are used for a short distance. The case where wireless communication is performed has been described. In this respect, when the second wireless communication unit 23B is in the off state, the user needs to manually turn on the second wireless communication unit 23B before executing the authentication, which is troublesome. Further, if the second wireless communication unit 23B is always on, wasteful power is consumed when short-range wireless communication is not required.

Therefore, in the second embodiment, when the second wireless communication unit 23B is in the off state, the user terminal 20 changes the second wireless communication unit 23B from the off state to the on state on condition that the user terminal 20 approaches the authentication terminal 30. By switching automatically, power consumption is reduced without the hassle of the user. Hereinafter, the details of the second embodiment will be described. In the second embodiment, the description of the same configuration as that of the first embodiment will be omitted.

[2-1. Functions realized in the second embodiment]
FIG. 14 is a functional block diagram of the second embodiment. As shown in FIG. 14, in the second embodiment, the functions realized in the server 10 and the user terminal 20 will be described.

[2-1-1. Functions realized on the server]
In the server 10, the data storage unit 100 and the authentication unit 102 are realized. Although omitted in FIG. 14, in the second embodiment as well, the identification information acquisition unit 101, the possibility determination unit 103, the restriction unit 104, the notification unit 105, and the exclusion unit 106 described in the first embodiment are realized. You may.

For example, the data storage unit 100 has the same function as the function described in the first embodiment, and stores the user database DB, the authentication terminal list L1, and the approaching user list L2.

The authentication unit 102 also has the same function as the function described in the first embodiment. In the second embodiment, it is assumed that the second wireless communication unit 23B is in the off state when the user approaches the authentication terminal 30, so that the authentication unit 102 is switched from the off state to the on state by the switching unit 209. Authentication is performed based on the communication content between the second wireless communication unit 23B and the authentication terminal 30. The details of the authentication process are as described in the first embodiment.

The off state is a state in which the wireless communication function is disabled. The off state is a state in which the second wireless communication unit 23B is not energized and the power is turned off. The on state is a state in which the wireless communication function is enabled. The on state is a state in which the second wireless communication unit 23B is energized and the power is on. The off state and the on state can be switched by the user performing a predetermined operation on the user terminal 20.

The authentication in the second embodiment may be realized by a process different from that in the first embodiment. For example, in the second embodiment, the authentication information may be transmitted from the user terminal 20 to the authentication terminal 30 when the user approaches the authentication terminal 30. In this case, the authentication unit 102 may perform authentication based on the authentication information acquired from the user terminal 20 via the authentication terminal 30. The method for determining the success or failure of the authentication is as described in the first embodiment.

[2-1-2. Functions realized on user terminals]
In the user terminal 20, a data storage unit 200, a position information acquisition unit 207, a location information acquisition unit 208, and a switching unit 209 are realized. Although omitted in FIG. 14, in the second embodiment as well, the approach determination unit 203, the identification information transmission unit 204, the departure determination unit 205, and the notification transmission unit 206 described in the first embodiment may be realized. .. For example, the data storage unit 200 has the same function as the function described in the first embodiment, and stores the authentication terminal list L1.

[Location information acquisition unit]
The position information acquisition unit 207 is mainly realized by the control unit 21. The position information acquisition unit 207 acquires the position information regarding the position of the second wireless communication unit 23B. The position information may be any information that can identify the position of the second wireless communication unit 23B, and may be, for example, the position of the user terminal 20 including the second wireless communication unit 23B, or the second wireless communication unit 23B. If is present in a housing different from that of the user terminal 20, it may be in the position of the housing.

In this embodiment, the case where the function of the position information acquisition unit 207 is the same as that of the first acquisition unit 201 of the first embodiment will be described. Therefore, the user terminal position information described in the first embodiment corresponds to the position information of the second embodiment. The method for the position information acquisition unit 207 to acquire the position information is as described in the first acquisition unit 201 of the first embodiment, and the description of the first acquisition unit 201 of the first embodiment can be read as the position information acquisition unit 207. Just do it. For example, the position information acquisition unit 207 acquires position information based on the signal received by the GPS reception unit 26.

[Location information acquisition department]
The location information acquisition unit 208 is mainly realized by the control unit 21. The location information acquisition unit 208 acquires location information regarding a switching location for switching the energized state of the second wireless communication unit 23B.

The switching place is a place where the second wireless communication unit 23B should be switched from the on state to the off state, or a place where the second wireless communication unit 23B should be switched from the off state to the on state. For example, communication by the second wireless communication unit 23B is required, such as in the vicinity of the authentication terminal 30, the user's home, the user's work place, or the vicinity of a communication device with which the second wireless communication unit 23B has communicated. The location corresponds to a location where the second wireless communication unit 23B should be switched from the off state to the on state. Further, for example, a place away from the authentication terminal 30, a public facility, public transportation, an airplane, a hospital, or the like, where communication by the second wireless communication unit 23B should be refrained from, the second wireless communication unit 23B is turned on. Corresponds to the place where you should switch from to to off state.

The energized state is the presence / absence of power supply to the circuit of the second wireless communication unit 23B, and the on / off of the second wireless communication unit 23B. Changing from the on state to the off state, or changing from the off state to the on state corresponds to switching the energized state. In other words, switching the switch that supplies power to the circuit of the second wireless communication unit 23B corresponds to switching the energized state.

The location information may be any information as long as the switching location can be specified, and may be, for example, information regarding the position of the switching location or information regarding the area of the switching location. The area is a rough position of the switching place and has a certain area. For example, the area may be indicated by a range of predetermined shapes indicating the switching location, may be a city name, an area, a zip code, a station name, an airport name, or a stop name, and may be latitude / longitude information or coordinate information. May be the area on the map or coordinates on which is plotted.

In the present embodiment, a case where the switching location is in the vicinity of the authentication terminal 30 (communicable area A1) and the location information is the authentication terminal position information will be described as an example. Therefore, the case where the function of the location information acquisition unit 208 is the same as the function of the second acquisition unit 202 of the first embodiment will be described. The method for the location information acquisition unit 208 to acquire the location information is as described in the second acquisition unit 202 of the first embodiment, and the description of the second acquisition unit 202 of the first embodiment can be read as the location information acquisition unit 208. Just do it.

[Switching part]
The switching unit 209 is mainly realized by the control unit 21. The switching unit 209 switches the energized state of the second wireless communication unit 23B based on the position information and the location information.

Switching means changing the second wireless communication unit 23B from the on state to the off state, or changing the second wireless communication unit 23B from the off state to the on state. In other words, changing the energized state of the second wireless communication unit 23B corresponds to switching the energized state of the second wireless communication unit 23B. In the present embodiment, the case where the switching unit 209 switches the second wireless communication unit 23B from the off state to the on state will be described. On the contrary, the switching unit 209 switches the second wireless communication unit 23B from the on state. You may switch to the off state.

The switching unit 209 switches the energized state by controlling the switch in the circuit of the second wireless communication unit 23B. The switch is a switch for energizing the electric power from the power source of the user terminal 20 in the circuit of the second wireless communication unit 23B. The switching unit 209 turns the second wireless communication unit 23B on and turns the switch off by sending the first command for turning the switch on to the second wireless communication unit 23B. By sending the second command of the above to the second wireless communication unit 23B, the second wireless communication unit 23B is turned off.

The switching unit 209 determines whether or not the user is in or near the switching location based on the position information and the location information. If the switching unit 209 does not determine that it is at or near the switching location, it does not switch the energized state of the second wireless communication unit 23B, and if it determines that it is at or near the switching location, the second wireless communication unit 209. The energized state of 23B is switched.

In the present embodiment, since the location information indicates the position of the switching location, the switching unit 209 determines whether or not the distance between the position indicated by the location information and the position indicated by the location information is less than the threshold value. For example, when the position information and the place information are indicated by the latitude / longitude information or the coordinate information, the switching unit 209 calculates the distance based on the latitude / longitude information or the coordinate information.

For example, the switching unit 209 switches the energized state of the second wireless communication unit 23B when it is determined that the calculated distance is less than the threshold value. In other words, the switching unit 209 switches the energized state of the second wireless communication unit 23B on condition that the distance becomes less than the threshold value. The switching unit 209 switches the energized state of the second wireless communication unit 23B when the distance changes from a state in which the distance is equal to or greater than the threshold value to a state in which the distance is less than the threshold value.

When the second wireless communication unit 23B of the present embodiment is in the on state, it can shift to an idle state different from the off state, and the switching unit 209 sets the wireless communication unit based on the position information and the location information. Switch from the off state to the on state.

The idle state is a state in which the circuit of the second wireless communication unit 23B is energized, but the function is more limited than in the on state. The idle state consumes less power than the on state. For example, the idle state communicates with other devices less frequently than the on state. Further, for example, in the idle state, the amount of communication with other devices is less than in the on state. Further, for example, in the idle state, the communication speed with other devices is slower than in the on state.

In the present embodiment, the authentication terminal 30 is arranged at the switching location, and the switching unit 209 turns off the second wireless communication unit 23B when the second wireless communication unit 23B approaches the authentication terminal 30. Switch to the on state. The meaning of approaching the authentication terminal 30 is as described in the first embodiment, and here, it means entering the communicable area A1. The switching unit 209 switches the second wireless communication unit 23B from the off state to the on state when the second wireless communication unit 23B enters the communicable area.

[2-2. Process executed in the second embodiment]
FIG. 15 is a flow chart showing the processing executed in the second embodiment. Also in the second embodiment, the same process as that of the first embodiment may be executed, and when the second wireless communication unit 23B is in the off state, the process described below is executed. The process shown in FIG. 15 is executed by the control unit 21 operating according to the program stored in the storage unit 22. The process described below is an example of the process executed by the functional block shown in FIG.

First, as shown in FIG. 15, in the user terminal 20, the control unit 21 acquires the position information of the second wireless communication unit 23B based on the signal received by the GPS receiving unit 26 (S200). The processing of S200 is the same as that of S100 and S121.

The control unit 21 refers to the authentication terminal list L1 stored in the storage unit 22 and acquires the location information of the authentication terminal 30 (S201). In S201, the control unit 21 refers to the location information stored in the authentication terminal list L1.

The control unit 21 determines whether or not the second wireless communication unit 23B is in the switching location based on the position information acquired in S200 and the location information acquired in S201 (S202). The process of S202 is the same as the process of S101.

If it is not determined that the second wireless communication unit 23B is at the switching location (S202; N), the process returns to the process of S200. On the other hand, when it is determined that the second wireless communication unit 23B is in the switching location (S202; Y), the control unit 21 switches the second wireless communication unit 23B from the off state to the on state (S203), and this process is performed. finish. In S203, the control unit 21 sends a command to the second wireless communication unit 23B to turn on the switch for energizing the inside of the circuit. After that, the second wireless communication unit 23B is turned on, and the processes after S102 described in the first embodiment are executed.

According to the second embodiment described above, the second wireless communication unit 23B is automatically turned on only when necessary by switching the energized state of the second wireless communication unit 23B based on the position information and the location information. It can be put into a state, and power consumption can be suppressed without the trouble of the user. For example, the user keeps the second wireless communication unit 23B off when it is not necessary to use it, and the second wireless communication unit 23B automatically operates when the user approaches the switching location where he / she wants to use the second wireless communication unit 23B. In the case of turning on the state, the user does not need to perform the operation of turning on the second wireless communication unit 23B. Further, for example, the user keeps the second wireless communication unit 23B on when he / she is away from the switching place where the use of the second wireless communication unit 23B should be restricted, and the second wireless communication unit 23B automatically operates when approaching the switching place. Since it is turned off, the user does not need to perform an operation to turn off the second wireless communication unit 23B.

In addition, by acquiring position information based on the signal received by the GPS receiving unit that receives the signal from the satellite, it is possible to accurately identify the user at the switching location and switch the energized state of the second wireless communication unit 23B. be able to. For example, even if the second wireless communication unit 23B is in the off state, the position information can be acquired by using other means.

Further, it is determined whether or not the distance between the position indicated by the position information and the position indicated by the location information is less than the threshold value, and when it is determined that the distance is less than the threshold value, the second wireless communication unit 23B By switching the energized state, it is possible to accurately identify the person at the switching location and switch the energized state of the second wireless communication unit 23B.

Further, in the case of the on state, the power consumption can be suppressed as compared with the idle state by switching the second wireless communication unit 23B, which can shift to the idle state different from the off state, from the off state to the on state.

In addition, an authentication terminal 30 is arranged at the switching location, and authentication is performed when the second wireless communication unit 23B is switched from the off state to the on state, so that authentication can be performed without the user's trouble and authentication. It is also possible to reduce the power consumption of time.

[3. Modification example]
The present invention is not limited to the embodiments described above. It can be changed as appropriate without departing from the spirit of the present invention.

[3-1. Modification example according to the first embodiment]
(1-1) First, a modified example according to the first embodiment will be described. For example, in the first embodiment, the case where the presence or absence of the possibility of spoofing is determined based on the number of registered authentication information that matches or is similar to the acquired authentication information has been described, but the presence or absence of the possibility of spoofing has been described. The method for determining the above is not limited to the example described in the first embodiment.

Even if the possibility determination unit 103 of this modification determines whether or not there is a possibility of spoofing by comparing the registered authentication information of each of the plurality of users in the vicinity of the authentication terminal 30 with each other. Good. The method of acquiring the registered authentication information is as described in the first embodiment, and the possibility determination unit 103 refers to the user database DB and the approaching user list L2, and a plurality of users in the vicinity of the authentication terminal 30. It suffices to acquire the authentication information associated with each user ID of.

If the registered authentication information of a plurality of users in the vicinity of the authentication terminal 30 does not match or resemble each other, the possibility determination unit 103 does not determine that there is a possibility of spoofing, and these match or resemble each other. When doing so, it is determined that there is a possibility of spoofing. In other words, the possibility determination unit 103 does not determine that there is a possibility of spoofing when there is no combination of authentication information that matches or is similar to each other, and there is one or more sets of this combination. It is determined that there is a possibility of spoofing.

In the first embodiment, it was determined by the process of S114 shown in FIG. 13 whether or not there is a possibility of spoofing, but in this modified example, before the process of S114 is executed, the vicinity of the authentication terminal 30 is determined. By comparing the authentication information of each of a plurality of users with each other, it is determined whether or not there is a possibility of spoofing. Further, for example, before the user touches the button B35, the approaching user list L2 is referred to, and the authentication information of the user whose user ID is stored in the approaching user list L2 is compared with each other, so that there is a possibility of spoofing. Whether or not it may be determined.

According to the modification (1-1), spoofing is possible by comparing the registered authentication information of each of the plurality of users in the vicinity of the authentication terminal 30 with each other and determining that there is a possibility of spoofing. The presence or absence of sex can be accurately determined. Further, since the authentication information acquired by using the authentication terminal 30 is not referred to in order to determine the possibility of spoofing, the possibility of spoofing can be determined at an earlier stage. As a result, the authentication restriction notification can be displayed on the authentication terminal 30 at an early stage before the user touches the button B35. The user can improve the convenience of the user because he / she knows that the success of the authentication is limited at an early stage and can urge other users in the vicinity to move away from the authentication terminal 30. Further, when the button B35 is touched, it is necessary to calculate the feature amount of the face from the image taken by the photographing unit 36 and execute the process of comparing the acquired authentication information with the registered authentication information. However, the processing load of the server 10 may increase, but by determining the possibility of spoofing in advance and limiting the success of authentication, it is not necessary to execute these processes, and the processing load of the server 10 is increased. Can be reduced.

(1-2) Further, for example, when the photographing unit 36 of the authentication terminal 30 photographs the face of the user, and the face of another user in the vicinity thereof is also photographed, the photographed face is captured in the image. By comparing, it is possible to determine whether or not there are users with similar faces. Therefore, is there a possibility of spoofing by the possibility determination unit 103 comparing the authentication information of each of the plurality of users in the vicinity of the authentication terminal 30 acquired by using the authentication terminal 30 with each other? It may be determined whether or not.

If the acquired authentication information of each of the plurality of users in the vicinity of the authentication terminal 30 does not match or resemble each other, the possibility determination unit 103 does not determine that there is a possibility of spoofing, and these match each other. Or, if they are similar, it is determined that there is a possibility of spoofing. In other words, the possibility determination unit 103 does not determine that there is a possibility of spoofing when there is no combination of authentication information that matches or is similar to each other, and there is one or more sets of this combination. It is determined that there is a possibility of spoofing.

In the first embodiment, it was determined by the process of S114 shown in FIG. 13 whether or not there is a possibility of spoofing, but in this modified example, before the process of S114 is executed, the vicinity of the authentication terminal 30 is determined. By comparing the acquired authentication information of each of the plurality of users, it is determined whether or not there is a possibility of spoofing. This process may be executed by the server 10 or may be executed by the authentication terminal 30. When the authentication terminal 30 determines whether or not there is a possibility of spoofing, it is possible to determine whether or not the success of authentication is restricted without transmitting an image or the like to the server 10.

According to the modification (1-2), spoofing is possible by comparing the acquired authentication information of each of the plurality of users in the vicinity of the authentication terminal 30 with each other and determining that there is a possibility of spoofing. It is possible to accurately determine the presence or absence of sex. Further, since the authentication information registered in the server 10 is not referred to in order to determine the possibility of spoofing, the possibility of spoofing can be determined at an earlier stage. As a result, the authentication restriction notification can be displayed on the authentication terminal 30 at an earlier stage. The user can improve the convenience of the user because he / she knows that the success of the authentication is limited at an early stage and can urge other users in the vicinity to move away from the authentication terminal 30. Further, when the server 10 calculates the feature amount of the face from the image taken by the photographing unit 36 and executes the process of comparing the acquired authentication information with the registered authentication information, the processing of the server 10 is performed. Although the load may increase, the possibility of spoofing is determined in advance on the authentication terminal 30 side, and the success of authentication is limited, so that it is not necessary to execute these processes and the processing load of the server 10 is reduced. can do.

(1-3) Further, for example, in the first embodiment, the situation where the user passes through the security gate SG is given as an example, but the authentication system S can be used in any situation. For example, the authentication system S can also be used in a situation where a service is provided. The service may be any service, for example, a product sales service, a food and drink provision service, a beauty service such as a haircut or a beauty treatment salon, a financial service, or an insurance service.

When the possibility determination unit 103 determines that there is a possibility of spoofing, the restriction unit 104 limits the success of the authentication, thereby limiting the provision of the service using the authentication terminal 30. Restricting the provision of services means not executing information processing to provide services, such as not executing payment processing and "Thank you" displayed when purchasing a product. For example, do not display the message.

In this modification, for example, the authentication terminal 30 is a vending machine, a ticket vending machine, a POS terminal, or a payment terminal in a store. When the user turns his face to the photographing unit 36 of the authentication terminal 30 and the face authentication is successful, the payment process is executed, and the user can purchase a product or use a service. For example, when the face authentication is successful, the server 10 may execute the payment process based on the payment information of the user who has succeeded in the face authentication. The payment information referred to in the payment process is the payment information associated with the user whose face authentication is successful.

Payment information is information necessary for making a payment, such as credit card information, electronic value (for example, electronic money or points) account information, virtual currency account information, bank account information, or debit card information. Is. It is assumed that the payment information is registered at the time of user registration or the like, and for example, the payment information is stored in the user database DB in association with the user ID. The payment information may be stored in a database different from the user database DB.

The server 10 may execute payment processing according to payment information, for example, credit processing based on credit card information, processing for reducing the balance of electronic value, processing for reducing the balance of virtual currency, withdrawal from a bank account, and the like. The process of making a transfer or the process of reducing the balance of the account indicated by the debit card information is executed. The server 10 does not execute the payment process when there are a plurality of users having similar faces to each other in the vicinity of the authentication terminal 30, and makes a payment when there are no multiple users having similar faces to each other and the authentication is successful. Execute the process.

When the payment process is executed, that fact is displayed on the display unit 35 of the authentication terminal 30, the terminal of the store, or the like, and the user receives the product or uses the service. For example, when the authentication terminal 30 is a digital signage device installed in a store or the like, when the authentication success notification is received from the server 10, a message indicating that the authentication is successful is displayed on the display unit 35. When the store staff confirms the message, they hand over the product or provide the service to the user. The message may be transferred and displayed not to the authentication terminal 30 but to another computer such as a terminal operated by the staff of the store. Further, for example, if the authentication terminal 30 is a vending machine, when the authentication success notification is received from the server 10, the authentication terminal 30 discharges a product specified by the user or cooks a product such as coffee or instant food. To do.

According to the modified example (1-3), it is possible to prevent other users with similar faces from impersonating and making payments, illegally purchasing products or using services, and when purchasing products or using services. The security at the time can be sufficiently enhanced. Further, from the user's point of view, even if he / she holds only the user terminal 20 and does not have a wallet, the payment can be made with security, so that the convenience of the user can be improved. From the point of view of the store, payment can be made without preparing a dedicated device such as a credit card reader, so the convenience of the store can be improved.

(1-4) Further, for example, the second wireless communication unit 23B may have a communication standard other than Bluetooth (registered trademark). For example, the second wireless communication unit 23B may be Wi-Fi. In this case, since the authentication terminal 30 cannot voluntarily acquire the wireless communication ID of the user in the vicinity of the authentication terminal 30, even if the user terminal 20 determines whether or not it is in the vicinity of the authentication terminal 30. Good.

16 and 17 are flow charts when the second wireless communication unit 23B is Wi-Fi. The processes shown in FIGS. 16 and 17 are executed by the control units 11, 21, and 31 operating according to the programs stored in the storage units 12, 22, and 32, respectively.

As shown in FIG. 16, the processing of S300 and S301 is the same as the processing of S100 and S101. When it is determined that the user has approached the authentication terminal 30 (S301; Y), the control unit 21 scans the signal strength (RSSI) received by the second wireless communication unit 23B and measures the distance to the authentication terminal 30 (S301; Y). S302). The processing of S302 is the same as the processing of S107, except that the signal strength of Bluetooth (registered trademark) is used in S107, while the signal strength of Wi-Fi is used in S302.

The control unit 21 determines whether or not the distance to the authentication terminal 30 is less than the threshold value (S303). In S303, the control unit 21 determines whether or not the user is in the authenticateable area A2.

If it is not determined that the distance to the authentication terminal 30 is equal to or greater than the threshold value (S303; N), the process returns to the process of S302. On the other hand, when it is determined that the distance to the authentication terminal 30 is less than the threshold value (S303; Y), the control unit 21 uses the first wireless communication unit 23A to transmit an approach notification to the server 10. (S304). The process of S304 is the same as the process of S102, but in S102, the approach notification is transmitted when the user enters the communicable area A1, whereas in S304, the user can authenticate the area. The difference is that an approach notification is sent when entering A2.

Subsequent processing of S305 to S308 is the same as that of S103, S104, S109, and S110. However, since the authentication terminal 30 of this modification does not acquire the wireless communication ID of the second wireless communication unit 23B of the user terminal 20, the authentication request transmitted in S308 does not include the wireless communication ID. That is, the authentication request transmitted in S308 includes only the authentication terminal ID and the image captured by the photographing unit 36.

Subsequent processing of S309 to S322 is the same as the processing of S111 to S124. However, in S112, the user ID associated with the authentication terminal ID and the wireless communication ID included in the authentication request in the approaching user list L2 is acquired, but in S310, the authentication request in the approaching user list L2. The difference is that the user ID associated with the authentication terminal ID included in is referred to. Further, in S320, the control unit 21 determines whether or not the user is in the authenticateable area A2.

According to the modification (1-4), even if a communication standard such as Wi-Fi that cannot calculate the distance to the user terminal 20 on the authentication terminal 30 side is used, spoofing is prevented. Security can be increased.

[3-2. Modification example according to the second embodiment]
(2-1) Next, a modified example according to the second embodiment will be described. In the second embodiment, the case where it is determined whether or not the user is at the switching location is determined based on the signal received by the GPS receiving unit 26. However, the method for determining whether or not the user is at the switching location is the GPS receiving unit 26. It is not limited to the method using.

For example, when the user terminal 20 includes the second wireless communication unit 23B and the first wireless communication unit 23A which is another wireless communication unit different from the second wireless communication unit 23B, the position information acquisition unit 207 May acquire location information based on the communication content of the first wireless communication unit 23A, which is another wireless communication unit. In this modification, the location information is access point information, beacon information, or mobile base station information, and the location information is identification information of an access point, beacon, or mobile base station in or near the authentication terminal 30. ..

The switching unit 209 determines whether or not the access point information, the beacon information, or the mobile base station information indicated by the location information matches the access point information, the beacon information, or the mobile base station information indicated by the location information. By doing so, it is determined whether or not the user is at or near the switching location. If it is not determined that they match, the switching unit 209 does not determine that the user is at or near the switching location, and if it is determined that they match, it determines that the user is at or near the switching location. To do. The processing after it is determined that the user is at or near the switching location is as described in the second embodiment.

According to the modification (2-1), by acquiring the position information based on the communication content of the first wireless communication unit 23A, which is another wireless communication unit different from the second wireless communication unit 23B, the switching location can be set. It is possible to accurately identify the presence and switch the energized state of the second wireless communication unit 23B. For example, even if the second wireless communication unit 23B is in the off state, the position information can be acquired by using other means.

(2-2) Further, for example, the location information may indicate an area of the switching location having a certain area instead of pinpointing the position of the switching location.

The switching unit 209 determines whether or not the position indicated by the position information is included in the area indicated by the location information. For example, when the position information is latitude / longitude information or coordinate information, the location information has a certain size set on a map or in an n-dimensional space (n is a numerical value indicating the number of dimensions of the coordinate information). It becomes an area. The switching unit 209 determines whether or not the latitude / longitude information or coordinate information regarding the position of the second wireless communication unit 23B is included in the area on the map or in the n-dimensional space, so that the user can use the switching location or its vicinity. Determine if you are in.

The switching unit 209 switches the energized state of the second wireless communication unit 23B when it is determined that the position indicated by the position information is included in the area indicated by the location information. For example, the switching unit 209 switches the second wireless communication unit 23B from the on state to the off state when it is determined that the position indicated by the position information is included in the area indicated by the location information. Further, for example, the switching unit 209 switches the second wireless communication unit 23B from the off state to the on state when it is determined that the position indicated by the position information is included in the area indicated by the location information.

According to the modification (2-2), it is determined whether or not the position indicated by the position information is included in the area indicated by the location information, and if it is determined that the position is included, the second wireless communication unit 23B is energized. By switching the state, it is possible to accurately identify the user at the switching location and switch the energized state of the second wireless communication unit 23B.

(2-3) Further, for example, when the user moves out of the switching place after moving to the switching place, the second wireless communication unit 23B may be returned to the original state.

The switching unit 209 determines whether or not the user has moved away from the switching location based on the position information and the location information. For example, when the location information indicates the position of the switching location, the switching unit 209 determines whether or not the distance between the position indicated by the location information and the position indicated by the location information has changed from a state below the threshold value to a state above the threshold value. By determining, it is determined whether or not the user has moved away from the switching location. Further, for example, when the location information indicates an area of the switching location, the switching unit 209 determines whether or not the position indicated by the location information has changed from being included in the region indicated by the location information to being not included. Determine if the user has moved away from the switching location.

For example, when the second wireless communication unit 23B approaches the switching location, the switching unit 209 switches the second wireless communication unit 23B from the off state to the on state, and the second wireless communication unit 23B moves away from the location. In addition, the second wireless communication unit 23B is switched from the on state to the off state.

Further, for example, when the second wireless communication unit 23B approaches the switching location, the switching unit 209 switches the second wireless communication unit 23B from the on state to the off state, and the second wireless communication unit 23B moves away from the switching location. In that case, the second wireless communication unit 23B is switched from the off state to the on state.

According to the modification (2-3), when the second wireless communication unit 23B moves away from the switching location, the second wireless communication unit 23B is returned to the original state, thereby consuming power without the user's trouble. Can be suppressed.

(2-4) Further, for example, the wireless communication system according to the second embodiment can be applied to any situation, and may be applied to other than the authentication system S. For example, when the switching location is on the airplane, the wireless communication system may switch the second wireless communication unit 23B from the on state to the off state when the user gets on the airplane. Further, for example, the wireless communication system may switch the second wireless communication unit 23B from the off state to the on state when the user leaves the airplane. Further, for example, when the switching place is a movie theater or a test hall, the wireless communication system may switch the second wireless communication unit 23B from the on state to the off state when the user enters the movie theater or the test hall. Further, for example, the wireless communication system may switch the second wireless communication unit 23B from the off state to the on state when the user leaves the movie theater or the test site.

Further, for example, the user may specify the switching location. For example, the user may specify a home or work place as a switching place. Further, for example, the position information may be acquired based on the communication content of the second wireless communication unit 23B. In this case, when the second wireless communication unit 23B is in the on state, the switching unit 209 switches the second wireless communication unit 23B from the on state to the off state based on the communication content of the second wireless communication unit 23B. Further, for example, the switching unit 209 may switch the energized state of the first wireless communication unit 23A instead of the second wireless communication unit 23B.

[3-3. Other variants]
(3) Further, for example, the above modification may be combined.

Further, for example, the photographing unit 36 does not take a picture when the user touches the button B35, but may take a picture without any particular operation by the user. The photographing unit 36 may continuously photograph based on a predetermined frame rate. In addition, for example, the photographing unit 36 may photograph the user's face when the user emits a predetermined voice or makes a predetermined gesture. Further, for example, the case where the user terminal 20 and the authentication terminal 30 are not paired has been described, but these may be paired.

Further, for example, the case where the biometric authentication is executed based on the image taken by the photographing unit 36 of the authentication terminal 30 has been described, but the biometric authentication is executed by using another sensor such as an infrared sensor or an ultrasonic sensor. May be done. The authentication system S may include a sensor corresponding to the biometric authentication to be used. Further, for example, authentication other than biometric authentication may be used. For example, the user may input a password to the authentication terminal 30. In this case, it is possible to prevent spoofing when there are a plurality of users who use the same password for each other in the vicinity of the authentication terminal 30.

Further, for example, each function may be shared by a plurality of computers. For example, the functions may be shared by each of the server 10, the user terminal 20, and the authentication terminal 30. For example, the authentication process may not be executed on the server 10 but may be executed on the user terminal 20 or the authentication terminal 30. Further, for example, when the authentication system S includes a plurality of server computers, the functions may be shared by the plurality of server computers. Further, for example, the data described as being stored in the data storage unit 100 may be stored by a computer other than the server 10.

Claims (12)

An authentication system that includes an authentication device and a server.
The authentication device is
A receiving means that receives wireless communication identification information from the user terminal when a user terminal including the wireless communication means approaches itself.
A transmission means for transmitting the wireless communication identification information and the authentication information to the server, and
Including
The server
A first receiving means for receiving the wireless communication identification information and the authentication information from the authentication device, and
A second receiving means for receiving the wireless communication identification information from the user terminal when the user terminal approaches the authentication device.
An authentication means that executes authentication based on the wireless communication identification information and the authentication information received from the authentication device and the wireless communication identification information received from the user terminal.
Authentication system including. The transmission means further transmits the authentication device identification information to the server, and the transmission means further transmits the authentication device identification information.
The first receiving means further receives the authentication device identification information from the authentication device, and receives the authentication device identification information.
When the user terminal approaches the authentication device, the second receiving means further receives the authentication device identification information from the user terminal.
The authentication means further executes the authentication based on the authentication device identification information received from the authentication device and the authentication device identification information received from the user terminal.
The authentication system according to claim 1. When the user terminal approaches the authentication device, the second receiving means receives the authentication device identification information stored in the user terminal from the user terminal.
The authentication system according to claim 2. When the wireless communication identification information received from the authentication device and the wireless communication identification information received from the user terminal match, the authentication means obtains the authentication information by using the authentication device. Based on the above authentication,
The authentication system according to any one of claims 1 to 3. The authentication information is biometric information of the user of the user terminal acquired by using the authentication device.
The authentication is biometric authentication.
The authentication system according to claim 4. The second receiving means further receives the user identification information from the user terminal when the user terminal approaches the authentication device.
The user identification information is not transmitted from the user terminal to the authentication device, and is not transmitted.
The authentication means is associated with the user identification information received from the user terminal when the wireless communication identification information received from the authentication device and the wireless communication identification information received from the user terminal match. The authentication is executed based on the authentication information registered in the database and the authentication information acquired by using the authentication device.
The authentication system according to claim 4 or 5. In the database, the authentication information registered in association with the user identification information received from the user terminal is not associated with the wireless communication identification information.
The authentication system according to claim 6. The first receiving means receives the wireless communication identification information from the user terminal before the second receiving means receives the wireless communication identification information from the authentication device.
The authentication means adds the wireless communication identification information received from the user terminal to a list of the user terminals approaching the authentication device, and the wireless communication identification information received from the authentication device is present in the list. If the above authentication is performed,
The authentication system according to any one of claims 1 to 7. When the user terminal moves into the first region corresponding to the authentication device, the first receiving means receives the wireless communication identification information from the user terminal and receives the wireless communication identification information.
The second receiving means receives the wireless communication identification information from the authentication device when the user terminal moves into the second area corresponding to the authentication device, which is narrower than the first area.
The authentication system according to any one of claims 1 to 8. A first receiving means that receives the wireless communication identification information and the authentication information from the authentication device that receives the wireless communication identification information from the user terminal when the user terminal including the wireless communication means approaches itself.
A second receiving means for receiving the wireless communication identification information from the user terminal when the user terminal approaches the authentication device.
An authentication means that executes authentication based on the wireless communication identification information and the authentication information received from the authentication device and the wireless communication identification information received from the user terminal.
The server that contains. When the user terminal including a wireless communication unit is close to the authentication device, a receiving step of said received the authentication device radio communications identification information transmitted to the authentication device from the user terminal,
A transmission step in which the authentication device transmits the wireless communication identification information and the authentication information to the server, and
A first receiving step in which the server receives the wireless communication identification information and the authentication information transmitted from the authentication device to the server.
Wherein when the user terminal is close to the authentication device, and a second reception step of receiving server pre Symbol wireless communication identification information transmitted to the server from the user terminal,
An authentication step in which the server executes authentication based on the wireless communication identification information and the authentication information received by the server from the authentication device and the wireless communication identification information received by the server from the user terminal. ,
Authentication methods including. A first receiving means that receives the wireless communication identification information and the authentication information from the authentication device that receives the wireless communication identification information from the user terminal when the user terminal including the wireless communication means approaches itself.
A second receiving means that receives the wireless communication identification information from the user terminal when the user terminal approaches the authentication device.
An authentication means that executes authentication based on the wireless communication identification information and the authentication information received from the authentication device and the wireless communication identification information received from the user terminal.
A program to make your computer work as.

Images