JP7201113B1 - Authentication device, authentication system, authentication method, and authentication program - Google Patents

Abstract

An authentication device, an authentication system, an authentication method, and an authentication program that reduce the possibility of unauthorized authentication using a password obtained by a suspicious person even if the password being entered is stolen by the suspicious person. Kind Code: A1 An authentication device determines that authentication is successful when the degree of similarity of input biometric identification data input from an imaging unit 11 to registered biometric identification data registered in advance is equal to or greater than a first threshold. If the similarity with the authentication unit 14 is equal to or less than a second threshold smaller than the first threshold, the input password input from the input unit 15 is compared with the first password to determine authentication success or authentication failure, a second authentication unit 16 that determines authentication success or authentication failure by comparing the input password with a second password different from the first password when the degree of similarity is equal to or greater than the second threshold and equal to or less than the first threshold; Prepare. [Selection drawing] Fig. 2

Description

The present disclosure relates to an authentication device, an authentication system, an authentication method, and an authentication program.

In the conventional authentication system described in Patent Literature 1, when the face image of the person to be photographed photographed by the photographing unit is the face image of the person wearing the mask, the difference detection unit detects whether or not the mask is worn as a difference. Detect it as a candidate. When the difference detection unit detects a difference candidate, the display unit displays a message such as "please remove the mask". Thereby, the person to be photographed can notice that the mask should be removed. When the person to be photographed removes the mask, it is possible to reduce the possibility that face authentication performed by the authentication system will fail.

Japanese Patent Application Laid-Open No. 2020-170569 (paragraph [0032])

When using the authentication system described in Patent Document 1, it may be difficult to remove the mask in a public area. In this case, the authentication system may perform authentication by inputting a password from the terminal device. Authentication by entering a password is often performed at the time of authentication using a mobile terminal such as a smartphone. However, authentication by entering a password is often performed in public areas. In that case, there is a possibility that the password being entered may be stolen by a suspicious person.

An object of the present disclosure is to solve the above problems, and to obtain an authentication device, an authentication system, an authentication method, and an authentication program with higher security.

The authentication device according to the present disclosure determines that the authentication is successful when the similarity of the input biometric identification data input from the biometric identification data input unit to the registered biometric identification data registered in advance is greater than a first threshold. an authentication unit, and a second authentication unit that determines authentication success or authentication failure based on the input password input from the password input unit when the degree of similarity is equal to or less than a first threshold, the second authentication unit , if the similarity is equal to or less than a second threshold smaller than the first threshold, the input password is compared with the first password to determine authentication success or authentication failure, and the similarity is greater than the second threshold and the first If it is equal to or less than the threshold, the input password is compared with a second password different from the first password to determine whether the authentication is successful or unsuccessful. The first threshold is a value set based on the similarity of a plurality of biometric identification data of the same person, and the second threshold is the similarity of biometric identification data between different persons and the biometric identification data of a certain person. This value is set based on the degree of similarity between the person and the biometric identification data of the same person in which a partial region is missing.

Further, the authentication system according to the present disclosure includes a biometric data input device, a password input unit, and input biometric data input from the biometric data input device. A first authentication unit that determines authentication success if the first threshold value is exceeded, and if the similarity is equal to or less than the first threshold value, determines authentication success or authentication failure based on the input password input from the password input unit. and a second authenticator, wherein the second authenticator authenticates by comparing the input password with the first password when the similarity is equal to or lower than a second threshold smaller than the first threshold. Success or authentication failure is determined, and if the similarity is greater than the second threshold and less than or equal to the first threshold, the input password is compared with a second password different from the first password to determine authentication success or authentication failure. do. The first threshold is a value set based on the similarity of a plurality of biometric identification data of the same person, and the second threshold is the similarity of biometric identification data between different persons and the biometric identification data of a certain person. This value is set based on the degree of similarity between the person and the biometric identification data of the same person in which a partial region is missing.

Further, the authentication method according to the present disclosure determines that the authentication is successful when the similarity of the input biometric identification data input from the biometric identification data input unit to the registered biometric identification data registered in advance is greater than the first threshold. and determining success or failure of authentication based on the input password entered from the password input unit when the similarity is equal to or less than a first threshold, wherein In the step of determining authentication success or authentication failure, if the similarity is equal to or less than a second threshold smaller than the first threshold, the input password is compared with the first password to determine authentication success or authentication failure. If the degree is greater than the second threshold and less than or equal to the first threshold, the input password is compared with a second password different from the first password to determine success or failure of authentication. The first threshold is a value set based on the similarity of a plurality of biometric identification data of the same person, and the second threshold is the similarity of biometric identification data between different persons and the biometric identification data of a certain person. This value is set based on the degree of similarity between the person and the biometric identification data of the same person in which a partial region is missing.

Further, the authentication program according to the present disclosure is configured such that when the degree of similarity of the input biometric identification data input from the biometric data input unit to the registered biometric identification data registered in advance is greater than a first threshold, the authentication is successful. and a step of determining success or failure of authentication based on the input password entered from the password input unit when the degree of similarity is equal to or less than a first threshold. In the step of determining authentication success or authentication failure, if the similarity is equal to or less than a second threshold smaller than the first threshold, the input password input from the password input unit is compared with the first password to determine authentication success. Alternatively, if the similarity is greater than the second threshold and equal to or less than the first threshold, the authentication success or failure is determined by comparing the input password with a second password different from the first password. . The first threshold is a value set based on the similarity of a plurality of biometric identification data of the same person, and the second threshold is the similarity of biometric identification data between different persons and the biometric identification data of a certain person. This value is set based on the degree of similarity between the person and the biometric identification data of the same person in which a partial region is missing.

In the authentication device, authentication system, authentication method, and authentication program according to the present disclosure, the degree of similarity of input biometric identification data input from a biometric data input device to registered biometric identification data registered in advance is equal to or greater than a first threshold. If so, it is determined that the authentication is successful. If the degree of similarity is equal to or less than the second threshold, which is smaller than the first threshold, the input password input from the password input unit is compared with the first password to determine whether the authentication has succeeded or failed. If the degree of similarity is equal to or greater than the second threshold and equal to or less than the first threshold, the input password is compared with a second password different from the first password to determine success or failure of authentication. Therefore, even if a suspicious person steals a second password that the user is inputting in the password input section, there is a low possibility that the authentication device will be fraudulently authenticated by the second password stolen by the suspicious person. That is, it is possible to obtain an authentication device, an authentication system, an authentication method, and an authentication program with higher security.

1 is an external view of an authentication device according to Embodiment 1 of the present disclosure; FIG. 1 is a functional configuration diagram of an authentication device according to Embodiment 1 of the present disclosure; FIG. 4 is a flow chart showing the operation of the authentication device according to Embodiment 1 of the present disclosure; 1 is an external view of an authentication device when using the authentication device according to Embodiment 1 of the present disclosure; FIG. 1 is an external view of an authentication device when using the authentication device according to Embodiment 1 of the present disclosure; FIG. 1 is an external view of an authentication device when using the authentication device according to Embodiment 1 of the present disclosure; FIG. 1 is an external view of an authentication device when using the authentication device according to Embodiment 1 of the present disclosure; FIG. 2 is a hardware configuration diagram of an authentication device according to Embodiment 1 of the present disclosure; FIG. FIG. 7 is a functional configuration diagram of an authentication device according to Embodiment 2 of the present disclosure; FIG. 9 is a flowchart showing operations of an authentication device according to Embodiment 2 of the present disclosure; FIG. FIG. 11 is a schematic diagram showing a similarity correspondence database of a portion of a character string of a password with respect to a verification rate of an authentication device according to Embodiment 2 of the present disclosure;

Embodiment 1
FIG. 1 is an external view of an authentication device according to this embodiment. As shown in FIG. 1 , the authentication device 1 has an imaging unit 11 as a biometric data input unit and a display unit 18 . The authentication device 1 is, for example, a mobile terminal such as a smart phone owned by the user 20 . The imaging unit 11 is, for example, a CCD (Charge Coupled Device) camera provided on the upper part of the authentication device 1 . The imaging unit 11 images the face, which is the biometric information of the user 20 . The display unit 18 is, for example, a liquid crystal screen provided in the authentication device 1 . The input section 15, which is a password input section, is displayed within the dotted line of the display section 18. As shown in FIG. The input unit 15 is, for example, ten keys for the user 20 to input a password. Also, the display unit 18 displays the face image of the user 20 captured by the imaging unit 11 . Also, the display unit 18 displays character information or graphic information notified by the authentication device 1 .

The authentication device 1 performs authentication based on the input face image data, which is the input biometric identification data of the user 20 captured by the imaging unit 11 . If the registered face image data preliminarily registered in the authentication device 1 is similar to the input face image data of the user 20 captured by the imaging unit 11, the authentication device 1 determines that the authentication is successful. When there is no registered face image data, which is registered biometric identification data registered in advance in the authentication device 1, similar to the input face image data of the user 20 captured by the imaging unit 11, the authentication device 1 uses The password input from the input unit 15 by the person 20 determines whether the authentication succeeds or fails. Authentication by inputting a password of the authentication device 1 is often substituted when omitting face authentication. Authentication by inputting a password of the authentication device 1 is often used as a substitute when face authentication is impossible due to a defect of the imaging unit 11 or the like. Authentication by password input of the authentication device 1 may be used as a substitute for cases such as when the fingerprint is used as the biometric data input unit and the finger is not touching the biometric data input unit sufficiently and the predetermined number of times of authentication has been exceeded. There are many.

Input biometric identification data and registered biometric identification data are collectively referred to simply as biometric identification data. Input face image data and registered face image data are collectively referred to simply as face image data. Details of the operation of the authentication device 1 will be described later.

The authentication device 1 can also be used for authentication for permitting or restricting entry/exit from a management area (not shown). In this case, the authentication device 11 may be installed near the entrance to the management area (not shown). When the authentication device 1 determines that the user 20 has been successfully authenticated, the electronic lock (not shown) of the door (not shown) provided at the entrance is unlocked. When the authentication device 11 determines that the authentication of the user 20 has failed, the electronic lock (not shown) of the door (not shown) provided at the entrance is kept locked.

As shown in FIG. 1, the imaging unit 11 is provided in the authentication device 1. As shown in FIG. The imaging unit 11 may be a biometric identification data input device installed in a building. For example, the biometric identification data input device may be a surveillance camera that captures an image of the vicinity of the authentication device 1 .

Biometric identification data is not limited to face image data. Other types of biometric identification data such as fingerprint data or vein pattern data may also be used. In that case, the biometric identification data input unit may read other types of biometric identification data. Of course, a biometric data input device for reading other types of biometric data may be installed in the building.

As shown in FIG. 1 , an input unit 15 as a password input unit is provided in the authentication device 1 . The input unit 15 is ten keys displayed on the display unit 18 . For example, the input unit 15 may be composed of physically depressible push buttons provided on the authentication device 1 instead of the 10 keys displayed on the display unit 18 . Also, the input unit 15 may be, for example, a password input device installed in a building. In that case, the password input device may be a push button device provided separately from the authentication device 1, or may be a touch panel on which 10 key buttons are displayed. Also, the password input unit and the password input device may not be 10-key buttons, but may be buttons that allow character input.

In FIG. 1 , the display unit 18 is provided in the authentication device 1 . The display unit 18 may be, for example, a display device installed in a building. In that case, the display device may be a liquid crystal screen or a touch panel provided separately from the authentication device 1 .

When the imaging unit 11, the input unit 15, and the display unit 18 are provided outside the authentication device 1, the biometric identification data input device that is the imaging unit 11, the password input device that is the input unit 15, and the display unit 18 An authentication system including a certain display device and an authentication device 1 is configured.

FIG. 2 is a functional configuration diagram of the authentication device 1 according to this embodiment. As shown in FIG. 2, the authentication device 1 includes an imaging unit 11, a storage unit 12, a similarity calculation unit 13, a first authentication unit 14, an input unit 15, a second authentication unit 16, a display control unit 17, and a display unit 18. consists of

The imaging unit 11 images the face of the user 20 . The storage unit 12 stores in advance registered face image data to be authenticated as registered biometric identification data. Further, the storage unit 12 stores in advance a registered password to be authenticated. The similarity calculation unit 13 calculates the similarity of the input face image data input from the imaging unit 11 to registered face image data registered in advance.

The first authentication unit 14 compares the degree of similarity with the first threshold. When the degree of similarity is equal to or greater than the first threshold, the first authentication unit 14 determines that face authentication has succeeded, and thus the first authentication unit 14 determines that authentication of the user 20 has succeeded. When the degree of similarity is equal to or less than the first threshold, the first authentication unit 14 determines that the face authentication has failed, so the second authentication unit 16 authenticates the user 20 .

The second authenticator 16 compares the degree of similarity with a second threshold. The second threshold is a value smaller than the first threshold. When the degree of similarity is equal to or less than the second threshold, the second authentication unit 16 compares the input password input from the input unit 15 with the first password registered in advance in the storage unit 12. It determines whether the authentication of the user 20 has succeeded or failed. Note that the first threshold and the second threshold are appropriately set.

When the degree of similarity is equal to or higher than the second threshold, that is, equal to or higher than the second threshold and equal to or lower than the first threshold, the second authentication unit 16 uses the input password input from the input unit 15 as the second password registered in advance in the storage unit 12. 2 The authentication success or failure of the user 20 is determined by collating with the password. The second password is a password different from the first password. The second password may be a password different from the first password, and may be a part of the character string of the first password. In this case, the storage unit 12 does not need to store the second password. In this case, the storage unit 12 may store data indicating a part of the character string of the first password. In the present embodiment, description will be made on the premise that the second password is part of the character string of the first password.

The display control unit 17 causes the display unit 18 to display the processing details of the authentication device 1 . The display control unit 17 causes the display unit 18 to display the input face image data of the user 20 input from the imaging unit 11, for example. The display control unit 17 causes the display unit 18 to display, for example, the authentication results determined by the first authentication unit 14 and the second authentication unit 16 . The display control unit 17 causes the display unit 18 to display, for example, a message prompting the user to enter a password from the input unit 15 .

Next, the operation of the authentication device 1 will be explained. FIG. 3 is a flow chart showing the operation of the authentication device according to this embodiment.

First, the similarity calculation unit 13 calculates the similarity between the input face image data of the user 20 captured by the imaging unit 11 and the registered face image data stored in the storage unit 12 (S101). After that, the process proceeds to S102.

Next, the first authentication unit 14 compares the degree of similarity calculated in S101 with a first threshold (S102). If the degree of similarity is greater than the first threshold (YES in S102), the first authentication unit 14 determines that the user 20 has been successfully authenticated. After that, the process proceeds to S109. If the degree of similarity is not greater than the first threshold (NO in S102), the process proceeds to S104.

Next, the second authentication unit 16 compares the degree of similarity calculated in S101 with a second threshold (S104). If the similarity is greater than the second threshold (YES in S104), the process proceeds to S106. Next, the user 20 inputs a password from the input section 15 . The second authentication unit 16 performs authentication by comparing the input password with the second password (S106). After that, the process proceeds to S108.

On the other hand, if the degree of similarity is not greater than the second threshold in the process of S104 (NO in S104), the process proceeds to S105. Next, the user 20 inputs a password from the input section 15 . The second authentication unit 16 performs authentication by comparing the entered input password with the first password (S105). After that, the process proceeds to S108.

Next, the second authentication unit 16 determines whether the authentication of the user 20 is successful or unsuccessful based on the input password entered by the user 20 (S108). When the second authentication unit 16 determines that the user 20 has been successfully authenticated (YES in S108), the process proceeds to S109. Next, the display control unit 17 causes the display unit 18 to display that the authentication has succeeded (S109). After that, the process ends.

On the other hand, when the second authentication unit 16 determines in the process of S108 that the authentication of the user 20 has failed (NO in S108), the process proceeds to S110. Next, the display control unit 17 causes the display unit 18 to display that the authentication has failed (S110). After that, the process ends.

Next, operation and display of the authentication device 1 when the user 20 uses the authentication device 1 will be described. 4 to 7 are external views of the authentication device when using the authentication device according to the present embodiment.

FIG. 4 shows how the imaging unit 11 incorporated in the authentication device 1 captures an image of the face of the user 20 and the input face image data of the user 20 is input to the authentication device 1 . As shown in FIG. 4, the face image 23 of the user 20 is displayed on the display section 18 . The authentication device 1 may automatically determine that the input of the face image data of the user 20 has been completed. Further, the authentication device 1 may determine that the input of the face image data of the user 20 has been completed by a predetermined operation of the user 20 on the input unit 15 .

FIG. 5 shows the situation when the first authentication unit 14 determines that the face authentication of the user 20 is successful. In this case, the degree of similarity of the input face image data input from the imaging unit 11 to registered face image data registered in advance in the storage unit 12 is equal to or greater than the first threshold. In this case, as shown in FIG. 5, the display unit 18 may display a message indicating that the face authentication is successful, such as "Face authentication is OK." The user 20 can recognize that the authentication of the authentication device 1 has succeeded from the message.

FIG. 6 shows the situation when the first authentication unit 14 determines that the face authentication of the suspicious person 21 has failed. In this case, the degree of similarity between the input face image data input from the imaging unit 11 and the registered face image data registered in advance in the storage unit 12 is equal to or less than the second threshold. In this case, as shown in FIG. 6, the display unit 18 displays a message indicating that the face authentication has failed, such as "Face authentication is NG." In addition, the display unit 18 also displays a message prompting the user to enter a password, such as "please enter a password". In this case, the suspicious person 21 needs to input the first password to the input unit 15 in order for the authentication device 1 to succeed in the authentication.

FIG. 7 shows the situation when the user 20 wearing the mask 22 is judged to have failed face authentication by the first authentication unit 14 . If the user 20 wears the mask 22 and part of the face is hidden, or if the imaging unit 11 is dirty and part of the face cannot be captured properly, the face authentication of the user 20 is performed. It can be a disturbing disturbance. In this case, the degree of similarity between the input face image data input from the imaging unit 11 and the registered face image data registered in advance in the storage unit 12 is equal to or greater than the second threshold and equal to or less than the first threshold. The face image data of the user 20 is preliminarily registered in the storage unit 12 as registered face image data, but there is a high possibility that the condition that the degree of similarity is equal to or higher than the first threshold is not satisfied due to some disturbance.

In this case, as shown in FIG. 5, the display unit 18 displays a message indicating that the face authentication has failed, such as "Face authentication is NG." In addition, the display unit 18 also displays a message prompting the user to enter a password, such as "please enter part of the password". A portion corresponding to a portion of the password (square portion in FIG. 7) is also displayed. In this case, a part of the first password, which is the second password, should be entered in order for the authentication device 1 to succeed in authentication.

Next, the effects of this embodiment will be described.

As described above, the first authentication unit 14 of the authentication device 1 according to the present embodiment is configured such that the degree of similarity of the input face image data input from the imaging unit 11 to registered face image data registered in advance is equal to or greater than the first threshold. If so, it is determined that the authentication is successful. On the other hand, if the degree of similarity is equal to or less than the second threshold, which is smaller than the first threshold, the second authentication unit 16 compares the input password input from the input unit 15 with the first password to verify success or failure of authentication. to judge. Further, when the similarity is equal to or more than the second threshold and equal to or less than the first threshold, the second authentication unit 16 compares the input password with a second password different from the first password to determine authentication success or authentication failure. do.

When the degree of similarity is equal to or less than the second threshold, which is smaller than the first threshold, there is a high possibility that the face image input from the imaging unit 11 and the pre-registered face image are different persons. On the other hand, when the degree of similarity is equal to or greater than the second threshold and equal to or less than the first threshold, for example, the user 20 may wear a mask 22 or the like to partially hide the face and capture the image of the face. That is, compared to the case where the degree of similarity is equal to or less than the second threshold, it is possible that the input face image data input from the imaging unit 11 and the registered face image data registered in advance are face image data of the same person. highly sexual.

Consider a case where the input password entered when the degree of similarity is greater than or equal to the second threshold and less than or equal to the first threshold is the same first password as when the degree of similarity is less than or equal to the second threshold. In this case, when the face of the user 20 is partially hidden by wearing the mask 22 or the like as described above, the authentication device 1 requests the user to enter a password. In that case, the user 20 enters the first password. A suspicious person 21 peeks at the user 20 entering the password, and the suspicious person 21 steals the first password.

After that, the suspicious person 21 attempts authentication with the authentication device 1 . In this case, it is determined that the degree of similarity between the input face image data of the suspicious person 21 input from the imaging unit 11 and the pre-registered registered face image data of the user 20 is equal to or less than the second threshold. The suspicious person 21 inputs the stolen first password from the input unit 15 . The second authentication unit 16 determines that the suspicious person 21 has been successfully authenticated based on the input first password. In other words, the suspicious person 21 is illegally authenticated by the authentication device 1 by using the stolen first password.

In the authentication device 1 of the present embodiment, the password to be input when the degree of similarity is equal to or greater than the second threshold and equal to or less than the first threshold is the second password different from the first password. Consider a case where a suspicious person 21 snoops while the user 20 is entering the second password and steals the second password. Suppose that a suspicious person 21 tries to authenticate the authentication device 1 illegally by using the stolen second password. Based on the input face image data of the suspicious person 21 input from the imaging unit 11, the similarity calculation unit 13 determines that the similarity to registered face image data registered in advance in the storage unit 12 is equal to or less than the second threshold. . In that case, authentication with the first password is required by the second authentication unit 16 . As a result, it becomes impossible for the suspicious person 21 to illegally authenticate the authentication device 1 by using the illegally obtained second password. That is, there is an effect that an authentication device with higher security can be obtained.

Also, the second password is, for example, part of the character string of the first password. In this case, the same effect as described above can be obtained, and since the user 20 does not need to remember both the first password and the second password, the burden on the user 20 is small and the convenience is higher. There is a further effect that an authentication device can be obtained.

In this embodiment, the second password may be part of the character string of the first password. Part of the character string of the first password may be fixed by the authentication device 1 . A part of the character string of the first password may be changed and designated by the authentication device 1 each time the password is entered.

Further, in the present embodiment, the display control unit 17 of the authentication device 1 causes the display unit 18 to display a part of the character string of the first password. However, it is not necessary for the display control unit 17 of the authentication device 1 to display the part of the character string of the first password on the display unit 18 . However, since the display control unit 17 causes the display unit 18 to display a portion of the character string of the first password, the user 20 can easily grasp the portion of the first password. There is a further effect that the device 1 can be obtained.

Next, an example of the authentication device 1 will be described with reference to FIG. FIG. 8 is a hardware configuration diagram of an authentication device according to this embodiment.

Each function of the authentication device 1 can be implemented by a processing circuit. For example, processing circuitry comprises at least one processor 1001 and at least one memory 1002 . For example, the processing circuitry comprises at least one piece of dedicated hardware 2001 .

When the processing circuit comprises at least one processor 1001 and at least one memory 1002, each function of the authentication device 1 is implemented by software, firmware, or a combination of software and firmware. At least one of software and firmware is written as a program. Software and/or firmware are stored in at least one memory 1002 . At least one processor 1001 implements each function of authentication device 1 by reading and executing a program stored in at least one memory 1002 . The at least one processor 1002 is also referred to as a central processing unit, processing unit, computing unit, microprocessor, microcomputer, DSP. For example, the at least one memory 1002 is a nonvolatile or volatile semiconductor memory such as RAM, ROM, flash memory, EPROM, EEPROM, magnetic disk, flexible disk, optical disk, compact disk, minidisk, DVD, or the like.

Where the processing circuitry comprises at least one piece of dedicated hardware 2001, the processing circuitry may be implemented, for example, in single circuits, multiple circuits, programmed processors, parallel programmed processors, ASICs, FPGAs, or combinations thereof. be. For example, each function of the authentication device 9 is implemented by a processing circuit. For example, each function of the authentication device 1 is collectively realized by a processing circuit.

A part of each function of the authentication device 1 may be realized by dedicated hardware 2001 and the other part may be realized by software or firmware. For example, the functions of the imaging unit 11, the input unit 15, and the display unit 18 are implemented by a processing circuit as dedicated hardware 2001, and the functions other than the imaging unit 11, the input unit 15, and the display unit 18 are implemented by at least one processor. 1001 may be implemented by reading and executing a program stored in at least one memory 1002 .

Thus, the processing circuit implements each function of the authentication device 9 with hardware 2001, software, firmware, or a combination thereof.

Although not shown, each function of the authentication device 10 to be described later is also implemented by a processing circuit equivalent to the processing circuit that implements each function of the authentication device 1 .

Embodiment 2
FIG. 9 is a functional configuration diagram of an authentication device according to this embodiment. As shown in FIG. 9, the authentication device 10 includes a first authentication section 24 instead of the first authentication section 14 of the authentication device 1 of the first embodiment. As shown in FIG. 9, the authentication device 10 includes a second authentication section 26 instead of the second authentication section 16 of the authentication device 1 of the first embodiment. Other than that, it is the same as the authentication device 1 of the first embodiment, so detailed description will be omitted. In addition, in this embodiment, description will be made on the premise that the second password is a part of the character string of the first password. Description will be made on the premise that the third password is another part of the character string of the first password.

As in the first embodiment, the similarity calculation unit 13 calculates the similarity of the input face image data input from the imaging unit 11 to registered face image data registered in advance. The first authentication unit 24 compares the degree of similarity with the first threshold. When the degree of similarity is equal to or greater than the first threshold, the first authentication unit 24 determines that face authentication has succeeded, so the first authentication unit 24 determines that authentication of the user 20 has succeeded. If the degree of similarity is equal to or less than the first threshold, the first authentication unit 24 determines that the face authentication has failed, so the second authentication unit 26 authenticates the user 20 .

The second authentication unit 26 compares the degree of similarity with the second and third thresholds. The second threshold is a value smaller than the first threshold, as in the first embodiment. The third threshold is a value smaller than the first threshold and larger than the second threshold. When the degree of similarity is equal to or less than the second threshold, the second authentication unit 26 compares the input password input from the input unit 15 with the first password registered in advance in the storage unit 12. Determine authentication success or authentication failure. As a result, it is determined whether or not the user 20 has authentication authority for the authentication device 1 . Note that the first threshold, the second threshold, and the third threshold are appropriately set.

When the degree of similarity is equal to or higher than the third threshold, that is, equal to or higher than the third threshold and equal to or lower than the first threshold, the second authentication unit 26 uses the input password input from the input unit 15 as the password registered in the storage unit 12 in advance. Authentication success or authentication failure is determined by matching with a portion corresponding to a part (portion A) of the character string of the first password, which is the second password.

When the degree of similarity is equal to or greater than the second threshold and equal to or less than the third threshold, the second authentication unit 26 recognizes the input password input from the input unit 15 as the third password registered in advance in the storage unit 12, which is the first password. Authentication success or authentication failure is determined by collating with a part corresponding to another part (part B) of the character string of the password. Note that the portion B of the first password has more information than the portion A of the first password. That is, the second password and the third password contain more information than the first password. Also, the third password has more information than the second password. Note that the storage unit 12 may store the data indicating the locations of the respective portions (the portion A and the portion B) of the character string of the first password.

Next, the operation of the authentication device 10 will be described. As for the operation of the authentication device 10, only differences from the operation for the authentication device 1 shown in FIG. 3 will be described.

First, the similarity calculation unit 13 calculates the similarity between the input face image data of the user 20 captured by the imaging unit 11 and the registered face image data stored in the storage unit 12 (S101). After that, the process proceeds to S112.

Next, the first authentication unit 24 compares the degree of similarity calculated in S101 with a first threshold (S112). If the degree of similarity is greater than the first threshold (YES in S112), the first authentication unit 24 determines that the user 20 has been successfully authenticated. After that, the process proceeds to S119. If the degree of similarity is not greater than the first threshold (NO in S112), the process proceeds to S113.

Next, the second authentication unit 26 compares the degree of similarity calculated in S101 with the third threshold (S113). If the degree of similarity is greater than the third threshold (YES in S113), the process proceeds to S116. Next, the user 20 inputs a password from the input section 15 . The second authentication unit 26 performs authentication by comparing the entered input password with the part corresponding to the part A, which is a part of the first password (S116). After that, the process proceeds to S118.

On the other hand, if the degree of similarity is not greater than the third threshold in the process of S113 (NO in S113), the process proceeds to S114. Next, the second authentication unit 26 compares the degree of similarity calculated in S101 with a second threshold (S114). If the similarity is greater than the second threshold (YES in S114), the process proceeds to S117. Next, the user 20 inputs a password from the input section 15 . The second authentication unit 26 performs authentication by comparing the entered input password with a part corresponding to part B, which is a part of the first password (S117). After that, the process proceeds to S118.

On the other hand, if the degree of similarity is not greater than the second threshold in the process of S114 (NO in S114), the process proceeds to S115. Next, the user 20 inputs a password from the input section 15 . The second authentication unit 26 performs authentication by comparing the entered input password with the first password (S115). After that, the process proceeds to S118.

Next, the second authentication unit 26 determines whether the authentication of the user 20 has succeeded or failed based on the password entered by the user 20 (S118). When the second authentication unit 26 determines that the user 20 has been successfully authenticated (YES in S118), the process proceeds to S109. On the other hand, when the second authentication unit 26 determines that the authentication of the user 20 has failed (NO in S118), the process proceeds to S110. Since the operations other than the above S112 to S118 are the same as those of the authentication device 1, detailed description thereof will be omitted.

Next, the effects of this embodiment will be described.

As described above, the second authentication unit 26 of the authentication device 10 according to the present embodiment determines that the degree of similarity of the face image data input from the imaging unit 11 to registered face image data registered in advance is equal to or lower than the second threshold. and the degree of similarity is equal to or greater than a third threshold that is greater than the second threshold and less than the first threshold, the input password is another part of the character string of the first password and the amount of information is greater than that of the second password. The success or failure of the authentication is determined by collating with the third password having many passwords.

When the similarity is equal to or greater than the second threshold and equal to or less than the third threshold, compared with the case where the similarity is equal to or greater than the third threshold and equal to or less than the first threshold, the input face image data input from the imaging unit 11 and the There is a higher possibility that the registered face image data belongs to a different person. The amount of information in the input password can be increased or decreased according to the degree of possibility. On the other hand, the higher the possibility that the input face image data input from the imaging unit 11 and the registered face image data registered in advance are the same person, the less the burden of password input is. That is, there is a further effect that the authentication device 11 having both security and convenience can be obtained.

In the present embodiment, password input is performed in three stages by setting the first to third thresholds for the degree of similarity, but the number of stages is not limited to three. As shown in FIG. 11, four or more stages may be used. FIG. 11 is a schematic diagram showing a similarity correspondence database of a part of the character string of the first password with respect to the verification rate of the authentication device according to the present embodiment. The correspondence database 19 is provided as stored data in the storage unit 12, for example.

As shown in FIG. 11 , the correspondence database 19 stores portions of the character string of the first password in association with respective degrees of similarity. For example, when the degree of similarity is 100% to 90%, the first authentication unit 24 determines that face authentication has succeeded.

When the degree of similarity is 90% to 80%, the portion D of the character string of the first password to be authenticated by the second authentication unit 26 is set as one digit of the character string of the first password. It is When the degree of similarity is 80% to 70%, the part E of the character string of the first password to be authenticated by the second authentication unit 26 is set as any part of the three digits of the character string of the first password. It is When the degree of similarity is 70% to 60%, the part F of the character string of the first password to be authenticated by the second authentication unit 26 is set as any part of the 5-digit character string of the first password. It is If the degree of similarity is 60% or less, it is necessary to enter all digits (for example, 8 digits) of the first password. As shown in FIG. 11, the lower the degree of similarity, the larger the number of digits of the input password entered by the user 20 .

In this case, the thresholds for each degree of similarity may be set to 90%, 80%, 70%, and 60%, respectively. The degree of similarity of face image data input from the imaging unit 11 to registered face image data registered in advance, and the degree of similarity in the correspondence database 19 stored in the storage unit 12, and a part of the character string of the first password. The second authentication unit 26 may determine a part of the character string of the first password that the user 20 enters into the authentication device 10 according to the part.

In addition, as described above, the first threshold, the second threshold, and the third threshold in Embodiments 1 and 2 can be set as appropriate. For example, the first threshold may be determined by aggregating the similarities of a plurality of pieces of biometric identification data of the same person. For example, for the second threshold, first, the similarity A of the biometric identification data of another person is aggregated. Next, the similarity B between the biometric identification data of a certain person and the biometric data of the same person in which a partial region is missing is aggregated. A value between the aggregate result of the similarity A and the aggregate result of the similarity B may be determined as the similarity. When the biometric identification data is face image data, for example, the similarity of the face image data when a certain person wears a mask and when the person does not wear a mask may be totaled and determined.

For example, the third threshold may be determined in the same manner as the second threshold. In this case, the size of the partial region lacking biometric identification data may be made smaller than in the case of determining the second threshold value. When the biometric identification data is face image data, for example, the degree of similarity between face image data when a certain person wears an eyepatch smaller than a mask and when the person does not wear an eyepatch may be tallied and determined.

The present disclosure is not limited to Embodiments 1 and 2 and combinations thereof. Within the scope of the technical idea of the present invention, it is possible to change, omit, etc. a part of it.

Reference Signs List 1, 10 authentication device 11 imaging unit 12 storage unit 13 similarity calculation unit
14, 24 first authentication unit,
15 input section,
16, 26 second authentication unit,
17 display control unit, 18 display unit, 19 corresponding database,
20 user, 21 suspicious person, 22 mask, 23 face image.

Claims (7)

a first authentication unit that determines that authentication is successful when the degree of similarity of input biometric identification data input from a biometric identification data input unit to registered biometric identification data that has been registered in advance is greater than a first threshold;
A second authentication unit that determines authentication success or authentication failure based on the input password input from the password input unit when the similarity is equal to or less than the first threshold,
The second authentication unit,
If the similarity is equal to or less than a second threshold smaller than the first threshold, the input password is compared with the first password to determine authentication success or authentication failure,
if the similarity is greater than the second threshold and less than or equal to the first threshold, determining success or failure of authentication by comparing the input password with a second password different from the first password;
The first threshold is a value set based on the similarity of a plurality of biometric identification data of the same person,
The second threshold is based on the similarity of the biometric identification data between different persons and the similarity between the biometric identification data of a certain person and the data in which a partial region of the biometric identification data of the same person is missing. Authenticator, which is the value set by 2. The authentication device according to claim 1, wherein said second password is part of the character string of said first password. 3. The authentication device according to claim 2, further comprising a display unit that displays a portion corresponding to said part of said character string. If the similarity is greater than the second threshold and the similarity is equal to or less than a third threshold that is greater than the second threshold and less than the first threshold, the second authentication unit determines that the second password and instead of collation, the input password is collated with a third password which is another part of the character string of the first password and has a larger amount of information than the second password, thereby determining success or failure of authentication. The authentication device according to claim 2 or 3. a biometric data input device;
a password input section;
a first authentication unit that determines that authentication is successful when the degree of similarity of input biometric identification data input from the biometric data input device to registered biometric identification data that has been registered in advance is greater than a first threshold; and the degree of similarity. is equal to or less than the first threshold, an authentication device having a second authentication unit that determines authentication success or authentication failure based on the input password input from the password input unit;
The second authentication unit,
If the similarity is equal to or less than a second threshold smaller than the first threshold, the input password is compared with the first password to determine authentication success or authentication failure,
if the similarity is greater than the second threshold and less than or equal to the first threshold, determining success or failure of authentication by comparing the input password with a second password different from the first password;
The first threshold is a value set based on the similarity of a plurality of biometric identification data of the same person,
The second threshold is the similarity of biometric identification data between different persons, the biometric identification data of a certain person, the biometric identification data of the same person as the certain person, and the data in which a partial area of the biometric identification data is missing. An authentication system that is a value set based on similarity and . a step of determining that authentication is successful when the degree of similarity of the input biometric identification data input from the biometric identification data input unit to the registered biometric identification data registered in advance is greater than a first threshold;
An authentication method that causes a computer to execute a step of determining authentication success or authentication failure based on the input password input from the password input unit when the similarity is equal to or less than the first threshold,
In the step of determining authentication success or authentication failure,
If the similarity is equal to or less than a second threshold smaller than the first threshold, the input password is compared with the first password to determine authentication success or authentication failure,
if the degree of similarity is greater than the second threshold and equal to or less than the first threshold, determining success or failure of authentication by comparing the input password with a second password different from the first password;
The first threshold is a value set based on the similarity of a plurality of biometric identification data of the same person,
The second threshold is based on the similarity of the biometric identification data between different persons and the similarity between the biometric identification data of a certain person and the data in which a partial region of the biometric identification data of the same person is missing. is the value set by
Authentication method. to the computer,
a step of determining that authentication is successful when the degree of similarity of the input biometric identification data input from the biometric identification data input unit to the registered biometric identification data registered in advance is greater than a first threshold;
An authentication program for executing a step of determining authentication success or authentication failure based on the input password input from the password input unit when the similarity is equal to or less than the first threshold,
In the step of determining authentication success or authentication failure,
If the similarity is equal to or less than a second threshold smaller than the first threshold, the input password input from the password input unit is compared with the first password to determine authentication success or authentication failure,
If the degree of similarity is greater than the second threshold and equal to or less than the first threshold, the input password is collated with a second password different from the first password to determine success or failure of authentication. 1 threshold is a value set based on the similarity of a plurality of biometric identification data of the same person,
The second threshold is based on the similarity of the biometric identification data between different persons and the similarity between the biometric identification data of a certain person and the data in which a partial region of the biometric identification data of the same person is missing. is the value set by
certification program.

Images