JPH09147116A - Qualification inspection system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a qualification inspection system with high safety. SOLUTION: This system is associated with a qualification inspection system. The qualification inspection system is characterized with an integrated circuit card 4 in which a camera means 14, data processing means 12, 16 and 22 and storage means 161 and 162 storing at least one of the digital image of the authorized user of the system are incorporated. The card 4 is separated from a host means in non-use. Also a communication means is prepared and the exchange of the ciphered signals is performed between the card 4 and the host means. The camera means 14 produces the image of the user and transmits the image to the processing means. In the processing means 12, 16 and 22, the transmitted image is compared with at least one image of the authorized use stored in the storage means 121 and 122 and the signals representing the comparison results are generated. The signals generated at these means are transmitted to the host means by a ciphering form.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a qualification inspection system that gives a target person the authority to execute a predetermined action or procedure. For example, the present invention is applied as part of an access control system that manages the entry and exit of people to and from financial facilities such as security areas and automatic teller machines (ATMs).

[0002]

2. Description of the Related Art It is known to provide biometric identification means for the purpose of improving the safety of qualification inspection systems. Known biometric identification means include, for example, a fingerprint or handprint recognition system incorporating a digitizer, and the user touches the digitizer with his or her finger or hand to generate characteristic data of the user's fingerprint or handprint. can do. This data is compared with previously stored fingerprint or handprint feature data of a person who is authorized to use the system, and a signal representing the result of the comparison is generated.

[0003]

However, the above system has a drawback in that even a fingerprint or a bill can be duplicated. Therefore, an unauthorized person may duplicate a handprint or fingerprint of an authorized person and use the duplicated handprint or fingerprint, for example, using synthetic gloves that show the handprint or fingerprint. , There is a possibility to gain access to illegal areas and facilities.

Therefore, it is an object of the present invention to provide a highly safe qualification inspection system.

[0005]

SUMMARY OF THE INVENTION The present invention is a qualification inspection system provided with an integrated circuit card which is removably attached to a host means at the time of use, wherein the host means verifies the identity of the person who uses the card. Suitable for accepting, said integrated circuit card comprising storage means for storing at least one reference image of the face of at least one person authorized to use said card, data processing means, Camera means for sending an image of the user's face actually using the card to the data processing means for comparison with at least one reference image, the card and the host And a communication means for communicating between them, the data processing means generating a signal representing the comparison result, The product signal, characterized in that the transmittable to the host unit.

Here, an integrated circuit card (hereinafter referred to as an IC card or simply a card) means a card on which one or more integrated circuits are mounted.

[0007]

BEST MODE FOR CARRYING OUT THE INVENTION An embodiment of a qualification inspection system 2 according to the present invention will be described with reference to FIG. The qualification inspection system 2 includes a camera means 14 equipped with a lens 15.
(FIG. 4), an IC card 4 and a host means 6 connected to a door actuating device 8 controlled to unlock the door 10 when a person 11 enters or leaves the safety protection area are incorporated. There is. The door operating device 8 unlocks the door 10 only when it is instructed by the host means 6 to do so based on the identification of the person 11 by the card 4.

The card 4 has the same major external dimensions as a standard magnetic stripe card, approximately 85 m.
The size is m × 55 mm, and the thickness is 1.5 to 5 mm. Also,
This card 4 is separable from the host means 6 and is normally carried by the user when not in use.

When operating the qualification inspection system 2, the user first inserts the card 4 into the grooved guide 5 of the host means 6. As shown in FIG. 1, in order to generate an image of the user, the card 4 is inserted so that the camera lens 15 faces outward and captures the user. Here, in order to prevent "camera shake", the dimensions of the card 4 and the grooved guide 5 are matched so that the card 4 is firmly held by the grooved guide 5.

Referring also to FIG. 5, the host means 6 has a built-in power supply 13. That is, when the card 4 is inserted into the grooved guide 5 (FIG. 1), the non-contact type IC card power supply terminal 7 (FIG. 3) of the card 4 provided on the side opposite to the camera lens 15 and the card 4 are inserted. Via the non-contact integrated circuit power supply terminal 9 of the host means 6 corresponding to the power supply terminal 7,
The card 4 is connected to the power supply 13. The card 4 also has a data communication terminal 19 (FIG. 3). The data communication terminal 19 is arranged adjacent to the power supply terminal 7 and the communication terminal 21 of the host means 6 arranged corresponding to the terminal 19.
Data transmission is performed between the card 4 and the host means 6 in cooperation with.

The reason why the inductive and non-contact type connection is used is that in the inductive transfer mechanism, the terminals 9 and 21 of the host means 6 are compared with the case where the non-inductive transfer mechanism is provided.
However, the accuracy of the installation location of the terminals 7 and 19 of the card 4 is not required.

With particular reference to FIG. 4, the card 4
Is a control processor 12 that controls the operation of the card 4.
And in the form of a digital integrated circuit chip camera,
Camera means 14 for producing a digital image of a user
And the image memory 16. Image memory 1
6 is a first storage means 1 for storing a digital image of the face of at least one person who has obtained permission to use the card 4.
61 and second storage means 162 in the form of a standard data buffer, which temporarily stores the digital image produced by the camera means 14 when the card 4 is used. Further, the card 4 has the first and second storage means 161,1.
An image processor 18, which compares the data from 62,
Also, the input / output (I /
O) The interface 20 is also incorporated. This interface 20 enables communication between the card 4 and the host means 6. Further, the card 4 also has a built-in encryption / decryption device 22 to encrypt the signal from the card 4 before transmitting it to the host means 6 and decrypt the encrypted signal received from the host means 6.

Further, the camera means 14 is a charge-coupled device (C
CD) chip, resolution is at least 200x2
An image of 00 pixels can be stored. As known to those skilled in the art, CCD cameras operate by collecting light at the surface of each CCD element. Here, the charge is accumulated on each element at a predetermined rate. The image of the card user is taken by transferring the charge on the device to the associated charge measuring device and sampling the state of each CCD device for a predetermined time. This sampling operation is similar to the opening / closing operation of the shutter in the conventional camera.

It goes without saying that the low charges correspond to dark areas of the image and the high charges correspond to bright areas of the image. If the sampling speed is too low, overexposure will occur exactly as it would with a normal camera if the exposure time is too long. Conversely, if the sampling rate is too high, there will not be enough time for the image-representing charges to accumulate on the CCD element, resulting in an underexposed image. It is considered that the optimum sampling rate is 50 samples / second.

In operation, the digital image of the user's head and shoulders produced by the first sample is stored in a first "shadow" memory (not shown) of the camera means 14 and then a second. Image of the second sample is taken and the image resulting from the second sample is
adow) ”memory (not shown). The camera means 14 then compares the first and second images pixel by pixel in an analog differential array. This process allows the camera means 14 to reliably compensate for fluctuations caused by slight movements of the user during the imaging process. This process is continued until the difference between the two images is below a predetermined maximum value and the final image is stable. This image is then converted by the camera means 14 into a digital bit string,
Image memory 1 along the data bus from card 4 to card 4
6 (FIG. 4).

If the card 4 is in the so-called certified image registration mode (a mode in which the image of the authorized user can be stored in the card 4) at the time of image generation, the image is stored in the first storage means 161 of the image memory 16.
Is forwarded to On the other hand, if the card 4 is not in the authorized image registration mode at the time of image generation, the image is transmitted to the second storage means 162 of the image memory 16 and is compared with the image of the authorized user from the first storage means 161 by the image processor. Holds temporarily until sent to 18.

The control processor 12 included in the card 4 comprises a first storage means 121 for storing the "image registration" secure code that the card 4 should receive before entering the certified image registration mode. In addition, this control processor 12
Also includes a second storage means 122 for storing a "card-certified" secure code to be transmitted to the processor 38 (FIG. 5) of the host means 6, and the card 4 prior to the operation of the card 4 which will be described later. Check that it can be used in.

Data is sent between the control processor 12, the image processor 18, the I / O interface 20 and the encryption / decryption device 22 of the card 4 via the data bus 26. The control processor 12 is also connected to other components of the card 4 via the control bus 28, and sends control signals via the control bus 26.

The operation procedure executed by the authorized user and storing the person's image in the first storage means 161 is as follows. First, when the card 4 is inserted into the grooved guide 5 of the host means 6, the power source 13 is connected as described above. Thereafter, using the keypad 30 (FIG. 1) provided on the host means 6, the authorized user inputs the image registration code into the card 4 via the I / O interface 20.

The host means 6 comprises a processor 38 (FIG. 5), which processor 38 comprises an encryption / decryption device 40.
The encryption / decryption device 40 encrypts the image registration code input by the authorized user. Since the encrypted image registration code is transmitted to the card 4 via the I / O interface 20 (and the encryption / decryption device 22) and to the control processor 12 via the data bus 26,
The risk of the code being compromised by an unauthorized user can be reduced.

When sent to the control processor 12 of the card 4, the image registration code is compared with the code stored in the first storage means 121 of the control processor 12. If the code entered by the user matches the code stored in the first storage means 121, the card 4 enters the certified image registration mode after a short delay time described later. This is notified to the user by lighting a first light emitting diode (LED) 32 (FIG. 1) provided on the host means 6. The image of the authorized user is displayed in the first storage means 16 of the memory 16 in the first LED 32.
It remains lit until it is stored in 1. On the other hand, when the code entered by the user does not match the code stored in the first storage means 121 of the control processor 12, the card 4 does not enter the certified image registration mode and is turned on. Notifying the user by not turning on the LED 32.

After inserting the card 4 into the grooved guide 5,
The user moves to a position 1 to 1.5 m in front of the card 4,
Wait for the card 4 to enter the certified image registration mode. On the other hand, the control processor 12 commands the camera means 14 to enter the certified image registration mode about 3 seconds after the card 4 is inserted into the grooved guide 5 of the host means 6. This delay is preset in the control software of the control processor 12 in order to give the user time to move in front of the camera means 14. The actual delay time can be changed by changing this parameter in the software.

The software of the control processor 12 also includes a pattern recognition algorithm. This pattern recognition algorithm is configured to search for contour lines based on the head and both shoulders of the user candidate. If the pattern recognition algorithm does not identify the person standing in front of the camera means 14 within the delay time of 3 seconds, the control means 12 will not put the card 4 into the authorized image registration mode. That is, only if the pattern recognition algorithm determines that someone is standing in front of the camera means 14, the pattern recognition algorithm issues a command to the camera means 14 to enter the image registration mode.

If the system is designed to allow different levels of access to different users, the first storage means 121 of the control processor 12 contains a plurality of different codes. Each code corresponds to a different level of access within the system. That is, since the access method provided to a certain user differs depending on the code, before the image of the user is input to the first storage means 161 of the image memory 16 as that of one authorized user, this code is first Is entered.

When the appropriate authorization code is accepted by the card 4, the camera means 14 produces an image of this authorized user and transfers it to the first storage means 161 of the image memory 16 as described above.

When used to gain access to a secure area, the user inserts the card 4 into the grooved guide 5 of the host means 6 connected to the door actuating means 8, as described above, Front of host means 6, cards 4 to 1
Stand again at ~ 1.5m. The card 4 is connected to the power source 13 by inserting the card 4 into the grooved guide 5 as in the certified image registration mode.
The control processor 12 then uses the second storage means 12
The card authorization code stored in 2 is searched, and the searched code is sent to the encryption / decryption device 22. This retrieved code is encrypted by the encryption / decryption unit 22 and then I / O
It is transmitted to the host means 6 via the interface 20.
In the host means 6, the encrypted card authorization code is decrypted by the encryption / decryption device 40 and stored in the storage means 42 of the host means 6 by the processor 38 before the host means 6 accepts the operation of the card 4. Is compared with the code that is being used. The code transmitted from the card 4 is the host means 6
Host means 6 if it matches that found by
Control processor 12 via I / O interface 20
To the control processor 12 that the card 4 is authorized for use by the host means 6.

If the system is configured to utilize the same host means 6 in the image registration mode used for user identification and qualification, this card acceptance process is also performed by the host means 6,
After that, the image registration process is performed. This card acceptance process ensures that the card 4 has been issued for use in the qualification check system to which the subject host means 6 belongs.

The control processor 12 then activates the camera means 14, producing an image of the user standing in front of the card 4, as described above. Then, the camera means 14 sends the generated image to the image processor 18 via the second storage means 162 of the image memory 16. At this time, the first storage means 16 of the image memory 16
From 1, the image of the authorized user is also sent via the data bus 24 to the image processor 18 for comparison with the image produced by the camera means 14. If the image of the user produced by the camera means 14 matches that of the authorized user stored in the first storage means 161, the image processor 18 produces a first signal indicating a match. This first signal is encrypted by the encryption / decryption device 22, transmitted to the host means 6 via the I / O interface 20, and then transmitted to the processor 38 via the encryption / decryption device 40. Upon receipt of the decrypted signal in the coder / decoder 40, the processor 38 generates and encrypts a corresponding signal and sends it to the door actuator 8. Upon receiving this signal from the processor 38, the door actuator 8 unlocks the door 10 and the processor 38 of the host means 6 causes the host means 6 to unlock.
The second LED 34 (FIG. 1) provided on the door is turned on to notify the user that the door is unlocked. Thereafter, the user can remove the card 4 from the host means 6 and open the unlocked door 10. The door 10 remains unlocked for a predetermined time or until it is opened and then closed.

However, if the image of the user produced by the camera means 14 does not match that of the authorized user read from the first storage means 161 of the image memory 16, the image processor 18 will output a second signal. Then, it is transmitted to the host means 6. Upon receipt of this second signal from the card 4, instead of sending a signal to the door actuating means 8, the processor 38 turns on a third LED 36 (FIG. 1) provided in the host means 6 and the system activates the corresponding user. Notify that you have not recognized as an authorized user. This prompts the user to remove the card 4 from the host means 6. The second LED color
Ideally 34 is green and the third color is red.

It goes without saying that the first storage means 161 of the image memory 16 holds images of a plurality of authorized users if the card 4 is intended for use by one or more persons. For example, when the card 4 is shared by members of the cleaning staff who are allowed to go in and out, the images of the authorized users are stored in the first storage means 161 in advance, and the card 4 is used as necessary. Handed between members.

In this case, when the card 4 is used, the image of the corresponding user is sequentially compared with the image of each authorized user, and matches with any of the images of the authorized users stored in the first storage means 161. In that case, the card 4 accepts the user as one of the authorized users.

The case where the present invention is used in a door entry system has been described above, but the present invention is not limited to this, and for example, an automatic teller machine (AT).
It can also be used for other systems or devices, including M), that require confirmation that the user is entitled to use the card.

[0033]

As described in detail above, the present invention provides
Since the image of the face of an authorized user is used for qualification inspection, it is difficult to illegally approach an area or facility where an unauthorized person exists, as compared with known biometric systems, and authorization This makes it more difficult to make a copy of the obtained fingerprint or handprint of the user.

Further, since the present invention realizes image capture, reference image storage, and comparison of both images by one device, a user who does not have permission to use the IC card puts his hand on the system to perform some forgery. For that purpose, it is possible to reduce the risk of interfering with the communication between the components realizing the above-mentioned functions.

[Brief description of the drawings]

FIG. 1 is a perspective view of a qualification inspection system according to the present invention when in use.

2 is a front view of an integrated circuit card used in the qualification inspection system of FIG.

3 is a rear view of the integrated circuit card of FIG.

FIG. 4 is a circuit block diagram of the integrated circuit card of FIGS. 2 and 3.

5 is a circuit block diagram of host means used in the qualification inspection system of FIG. 1. FIG.

[Explanation of symbols]

 4 integrated circuit card (IC card) 6 host means 12 control processor 14 camera means 16 image memory 18 image processor 20 I / O interface 21 communication terminal 22 encryption / decryption device 161 first storage means 162 second storage means

Claims (1)

[Claims] 1. A qualification inspection system (2) comprising an integrated circuit card (4) detachably attached to a host means (6) when in use, said host means verifying the identity of the person using said card. A storage means (161) for storing at least one reference image of the face of at least one person who is licensed to use the card; Processing means (12, 18), for creating an image of the face of the user who is actually using the card, and comparing the created image with the data processing means (12) for comparison with at least one reference image. , 18) and a communication means (20, 21) provided in the card (4) and the host means (6) for communicating with each other. The qualification inspection system characterized in that the data processing means (12, 18) is configured to generate a signal indicating the comparison result, and the generated signal can be transmitted to the host means (6).