JPH10312462A - Identity specifying device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To lower an effective decision standard and to surely specify the identity of a relevant person by varying the effective decision standard for the identity specification information which are inputted at and after the 2nd stage when the identity specification information inputted at the 1st stage is decided effective. SOLUTION: A CPU acquires the face information on a customer who performs an input operation while looking at a CRT 14 as an image via an image pickup camera 18 and collates the image data on the face information with the registered data. If the image data are not coincident with the registered data, the CPU takes a relief step to confirm again the identity of the relevant person. That is, the CPU has the questions to the secret information on the date of birth, the telephone number, the names of parents of the person, etc., for example, which are changed at every time and confirms the identity of the person via collation and based on the received answers. When the customer instantaneously answers the questioned information and high probability is decided for the identity of the person, the CPU slightly lowers the threshold level of the face information and performs again the collation of identity. The CPU specifies the identity and allows reception of an ATM (automatic teller machine) 11 having a face information specifying function to start a transaction as long as the collation result is decided within an allowable range of the registered data.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a personal identification device which is provided, for example, on a customer service side of an automatic teller machine (ATM), and more particularly to a value suitable for specifying an effective judgment criterion for specifying a personal identification. And a personal identification device having an improved specific processing performance by permitting a change to be made.

[0002]

2. Description of the Related Art In general, a personal identification device for identifying a person using various cards or personal identification numbers is known. Because such personal identification devices can be stolen or forged,
Biometric information and signatures of the individual, such as fingerprints, palm prints, voice prints, hand and face shapes, and temperature distribution,
It is determined whether or not the person is the person using the specific information.

[0003] However, since the biometric information changes every day, when the user uses the collation, the user is not recognized as the user, and the user may be erroneously determined and cannot use the user. For example, an erroneous determination is made when the biometric information of the fingerprint changes due to an injury to the fingertip or dirt on the fingertip. In addition, when a cold is caught, the biometric information of the voiceprint changes and is erroneously determined.
Similarly, changes in makeup, hairstyle, and weight change the face biometric information, resulting in erroneous determination. As described above, when the biometric information is used as a specific element of the user, there is a problem that when the biometric information changes, a situation occurs in which the user is not recognized as the user.

[0004]

SUMMARY OF THE INVENTION Accordingly, the present invention is directed to a personal identification system in which, when the biological information of the individual cannot be identified due to a change, the validity criterion for identifying the individual is lowered to enable the individual to be identified reliably. The purpose is to provide the device.

[0005]

According to the first aspect of the present invention,
A personal identification device for identifying a principal by inputting a plurality of personal identification information, wherein when the personal identification information input in the first step is determined to be valid, the personal identification information input in the second and subsequent steps is valid. The criterion is varied.

According to a second aspect of the present invention, there is provided an identification device for identifying a user by inputting a plurality of pieces of identification information,
When the personal identification information input in the first stage is determined to be valid, the validity criterion for the personal identification information input in the second and subsequent stages is lowered.

The invention according to claim 3 is characterized in that the personal identification information input after the second stage is set as the biological information of the input operator.

The invention according to claim 4 is characterized in that, when the required time for input in the first step is within the set permissible time, the validity criterion of the personal identification information input after the second step is lowered. .

According to a fifth aspect of the present invention, there is provided a storage device for storing face information of a person who has performed an input operation when the person is specified by lowering the validity criterion of the person identification information.

[0010] The invention according to claim 6 is characterized in that when an individual is specified while maintaining the validity criterion of the personal identification information, updating means for updating the biometric information of the input user is provided. .

According to a seventh aspect of the present invention, there is provided an identification device for identifying a user by inputting a plurality of pieces of identification information,
When it is determined that the personal identification information input in the first step is valid, the validity criterion of the personal identification information input in the second and subsequent steps is raised. Characterized in that it is provided with changing means for changing.

[0012]

According to the present invention, when the input operator performs the input operation of the personal identification information in the first stage, the validity of the personal identification information input and operated in the first stage is determined. Therefore, the validity criterion of the personal identification information input after the second stage is changed to a reference value suitable for the specification, and the personal is specified.

Further, when the input operator performs the input operation of the personal identification information in the first stage, the validity of the personal identification information input and operated in the first stage is determined. Since the probability is high, the validity criterion of the personal identification information input after the second stage is reduced to identify the individual.

Further, the biometric information of the input operator is set as personal identification information to be input and used in the second and subsequent stages, and the individual is specified. Also, if the required time of the input operation performed by the input operator in the first stage is within the set permissible time, there is a high probability that the user is the individual, so that the validity of the personal identification information input in the second stage and thereafter is determined. Identify yourself by lowering standards.

Similarly, when a person is specified by lowering the validity criterion of the person identification information, the face information of the person who performed the input operation at that time is stored by the storage means. Further, when the user is specified while maintaining the validity determination criteria of the user identification information, the biometric information, which changes daily, of the user who performed the input operation is updated as new specifying data by the updating unit, and the next specified operation is performed. Prepare.

When it is determined that the personal identification information input in the first stage is valid, the validity criterion of the personal identification information input in the second and subsequent stages is raised, and the individual is identified based on the validity criterion. At this time, since the probability that the user is the principal is sufficiently high, the credit limit of the credit is set and changed to an amount corresponding to the principal by the change means.

[0017]

As a result, when the personal identification information input in the first stage is determined to be valid when the personal identification information is determined to be valid, there is a high probability that the user is the individual, and the personal information after the second stage inputted thereafter is input. The user can be identified by changing to a criterion suitable for the subsequent specific determination, for example, by loosening the validity criterion of the specific information a little. For this reason, for the input operation in the second and subsequent stages, the personal identification rate is increased and erroneous determination is less likely to occur, and high-reliability identification performance is exhibited.

For example, if secret information such as a password matching the registered data is input in the first step, the information is known only to the person himself, so there is a high probability that he is the person himself. In this case, the person is identified by lowering the validity criterion. Even if the person is identified by lowering the validity criterion, the person can be identified without lowering the security level.

Further, the personal identification information input and operated in the second and subsequent stages includes biometric information representing characteristics unique to the input operator, such as fingerprints, palm prints, voice prints, hand and face shapes, and temperature distributions, as specific elements. If the user is used to identify the person, the person can be more reliably specified from the biological information unique to the person. Also, when the hairstyle is changed, wearing glasses, or the biometric information of the person changes, the registration data of the biometric information of the person is updated, and the specific performance is improved by using the latest biometric information. Can be.

[0020]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS One embodiment of the present invention will be described below in detail with reference to the drawings. FIG. 1 shows an ATM 11 with a face information identification function,
The ATM 11 with face information identification function includes a passbook insertion slot 12, a card insertion slot 13, a CRT 14 also serving as an input operation surface for displaying and guiding transaction operations, a coin entrance 15 and a bill entrance 16, With deposit, withdrawal,
Transaction operations such as transfer, borrowing, passbook entry, balance inquiry, etc. are allowed.

Among them, the CRT 14 has a touch input function for displaying various transaction display guides and operation procedures thereof, and for allowing a touch input corresponding to a display portion displayed on the screen. An imaging camera 18 is disposed at an inner position of the CRT 14 via a half mirror 17. The imaging camera 18 is arranged in an obliquely upward direction in which the imaging camera 18 approaches the CRT 14 and captures an image of a customer's face. By setting, the customer's face information is naturally acquired as an image.

In this case, when the image of the face is acquired by the imaging camera 18, the shape and size of each part such as eyes, nose, mouth, etc. and the whole face, hairstyle, presence or absence of glasses, color, wrinkles, degree of makeup, etc. The biological information of the person's unique face is imaged to obtain an image. The acquired face information is collated with face information registered in advance as a collation element, and it is determined whether or not the user is the principal.

FIG. 2 shows a control circuit block diagram of an ATM with a face information specifying function. The CPU 21 controls each circuit device according to a program stored in the ROM 22 and stores the control data in the RAM 23 in a readable manner.

The CPU 21 is connected to the CRT 14, the imaging camera 18, the passbook processing unit 25, the card processing unit 26, the coin processing unit 27, the bill processing unit 28, the form processing unit 29, the timer 30, the center communication processing unit 31, A remote monitoring device (CRMC) communication processing unit 32 and a staff panel processing unit 33 are connected.

Further, the CPU 21 displays the instructed display contents in C
Display output on the display of RT14
When the customer performs a touch input operation on the input operation key displayed in the above, a touch input signal of a display position corresponding to the display portion is taken into the CPU 21 via the touch panel.

At this time, the face information of the customer who performs the input operation is picked up by the image pick-up camera 18, and the picked-up data is subjected to image processing to accurately obtain face data. Passbook processing unit 25
Reads the transaction data of the passbook inserted into the passbook insertion slot 12 and writes and updates the updated data, and records the transaction data and unregistered data in the print field of the passbook. Further, the passbook is returned to the passbook insertion slot 12 when the transaction is completed or canceled.

The card processing unit 26 reads the transaction data of the transaction card inserted into the card insertion slot 13, writes and updates the transaction data, and discharges the transaction card to the card insertion slot 13 when the transaction is completed or canceled.

The coin processing unit 27 takes in the coins inserted into the coin entrance 15 to receive and process the coins, and discharges the coins from the coin entrance 15 at the time of withdrawal and withdrawal of the deposit.
The banknote processing unit 28 takes in the banknotes inserted into the banknote entry / exit 16 and performs a receiving process, and discharges the banknotes from the banknote entry / exit 16 at the time of withdrawal and at the time of deposit cancellation. Report processing unit 2
9 issues a statement describing data of various transaction contents such as deposit and withdrawal transactions and balance inquiry for each transaction, and a journal (copy slip) of the same record content is stored in the apparatus every time a statement is issued. save.

The timer 30 counts the time required for inputting collation information, and inputs a secret number or secret information such as a date of birth, a telephone number, and the name of parents in addition to the secret number. Operate and time the input required time at this time, and if the time is short, there is a high probability that the user is the person himself / herself because the input operation was performed quickly. It has a timer management function that uses a timer counting operation that determines that an input operation has been performed by a person other than the user because the operation is time-consuming, as a verification element.

The center communication processing unit 31 transmits the edited deposit / withdrawal request message, bookkeeping request message, etc. to a center 34 having a host computer and a memory, and receives a deposit / withdrawal answer, bookkeeping data, etc. sent from the center 34. Receive and process automatic transaction data. The CRMC communication processing unit 32 transmits the detection data of the ATM with the face information specifying function to the CRMC, and receives and processes the response data returned from the CRMC. The attendant panel processing section 33 is an AT with a face information specifying function.
M allows input and output of processing data to a staff panel provided in M and executes staff operations such as banknote / coin attachment / detachment processing, distribution / scrutiny processing, fault recovery and maintenance / inspection.

By the way, in the RAM 23, registration data relating to the face of the person is registered and set in advance, and is stored in the CRT.
When the imaging camera 18 acquires the imaging data of the face of the customer who performs the input operation by looking at 14, the CPU 21 compares the imaging data with the registration data, and if the imaging data and the registration data match, it is determined that the user is the person. Confirm, CRT
14 and guides the display to accept the ATM. on the other hand,
If the collation data does not match, the user is determined to be a user other than the user, and the CPU 21 displays the information on the CRT 14 and guides the user.
Refuse to accept TM.

In this case, since the customer's face is imaged by the imaging camera 18 from inside the ATM and the imaging camera 18 cannot be seen from the outside, the customer does not experience any discomfort that privacy is violated, and promptly operates the customer. Can be used. In addition, biometric information is not limited to face imaging, but may include fingerprints, palm prints, voice prints,
Information indicating characteristics unique to the user, such as the shape of the hand and the temperature distribution, can also be used as the specific element.

When the face information is acquired, if the hairstyle is changed, the user wears glasses, or if the biometric information of the person cannot be specified, as shown in FIG. 3, an effective method for specifying the person is used. The judgment criterion (threshold level) is lowered from the normal level L1 to the low level L2, and the setting is changed so that the person can be reliably identified.

In this case, in order to change the setting to the low level L2, the judgment elements are removed from the judgment elements in order of decreasing importance among many judgment elements. For example, if the collation information such as the position and orientation of the customer who is additionally obtained when the face is imaged is removed from the determination element, the collation rate with the person can be maintained without lowering the security level. . Further, if the image data of the face is stored as evidence data in the RAM 23, a highly reliable collation use can be achieved without any trouble.

Further, by taking into account biometric information such as face information and personal identification information such as a personal identification number, high matching performance can be obtained.
For example, if information such as a password matching the registered data is input at the first input stage, the information is only known to the person himself, so the probability of being the person is high. The user is easily identified because the threshold is reduced as a criterion level and the user is collated. As a result, the identification ratio of the user is increased, and erroneous determination is difficult.

When the credit limit is applied to change the credit limit, the credit can be borrowed without complicated operations. In general, a relatively low borrowing amount is set, and a secret effective for borrowing is set. By inputting information, the borrowing amount can be changed to be higher as the degree of identification of the individual increases, and the security level can be changed to a security level commensurate with the borrowing amount, such as by providing a new financial product, and the transaction can be used.

Whenever the biometric information of the customer's face changes, such as when the customer changes his hairstyle, wears glasses, or makes up his makeup, the registration data of the biometric information of the customer's face that has been input is changed each time. Update to the latest data to increase specific performance. Further, if there is biometric information with a low matching rate from many biometric information every time, only the database information of the biometric information with a bad matching rate is updated.

Furthermore, the present invention can be used to gradually increase the threshold level to provide high security. For example, when the present invention is applied to opening / closing management of a door having relatively low security, the threshold level is set low, and the vehicle is allowed to pass only at the first verification. On the other hand, when the present invention is applied to opening / closing management of a vault door requiring high security, entry into the room is permitted by gradually setting the threshold level and clearing many input steps.

The collation processing operation of the ATM 11 with the face information specifying function configured as described above will be described with reference to the flowcharts of FIGS. Now, with face information identification function A
According to the transaction guide displayed on the CRT 14 of TM11,
When the customer inserts the transaction card into the card slot 13 (step n1), the inserted card information is read,
The card information and the personal identification information downloaded from the center 34 are collated and confirmed (step n2).

At this time, if necessary according to the transaction type, the user is required to input personal identification information such as a personal identification number and collate and confirm the identification information. Steps n3 to n4).

Subsequently, the CPU 21 obtains an image of the face information of the customer who performs the input operation while looking at the CRT 14 by the imaging camera 18 (step n5), and compares the image data of the obtained face information with the registered data registered in advance. If the registered data matches the registered data, the CPU 21 identifies the person as an ATM and
Is started (step n6).

On the other hand, when the biometric information of the face changes due to hairstyle, makeup, increase or decrease in weight, etc., the data does not match even in the case of the person, and the person may be erroneously determined to be other than the person. Therefore, when the data does not match the registered data, the CPU 21 provides a remedy for reconfirming the identity of the person and copes with it. For example, it asks for secret information to be changed every time, such as the person's date of birth, telephone number, parent's name, etc., and makes it answered to confirm collation (steps n7 to n8).

If the answer to the questioned secret information is correct, check the required input time required for answering,
If the input operation is performed promptly, it is highly probable that the user is the person himself / herself. Conversely, if the input operation takes time and the set permissible time is exceeded, it is determined that another person has performed the input operation (steps n9 to n10).

When the customer immediately answers this secret information and determines that the probability of identity is high, the CPU 21 slightly lowers the threshold level of the face information and verifies the identity (steps n11 to n12).

At the time of this face information collation, if it is determined that the collation is performed within the allowable range of the registered data, the CPU 21 identifies the person and accepts the ATM 11 with the face information identification function, and starts a desired transaction. (Steps n13 to n1
Four).

For each transaction, the CPU 21 manages the latest face information of the person, so that the data is acquired so as to follow the latest face information of the person at the time of data processing without lowering the threshold level. The face information database is updated every time (steps n15 to n16).

On the other hand, when the threshold level of the face information is lowered, the face information at that time is stored and managed together with the transaction information as evidence information in the RAM 23 to prepare for an emergency (step n17).

If the customer takes time to input the secret information or if the customer cannot be identified by lowering the threshold level, the face information collating operation is repeated several times to confirm (step n18). If the person cannot be identified even after the number of times exceeds, the person in charge performs a manned response to confirm. If the person in charge is recognized as the person, the ATM transaction is permitted (steps n19 to n20). If the person in charge cannot confirm the identity of the person, or if wrong secret information is entered, the ATM transaction is immediately rejected (step n2).
1).

As described above, when it is first determined that the personal identification information input by the customer is valid, the validity of the personal identification information is high from this validity. You can lower your shoulder level to identify yourself. For this reason, an inconvenience such as being erroneously determined to be a person other than the person can be reliably eliminated, and the verification rate of the person can be increased. For example, when a password is entered for the first time, there is a high probability that the user is who he or she is because it is information that only the person can know.Therefore, even if the threshold level is lowered for subsequent input, the security level will not be reduced. You can identify yourself.

Further, not only the face information of the customer but also the fingerprint,
The individual can be similarly identified by using biometric information representing characteristics unique to the individual, such as a palm print, a voice print, a hand shape, and a temperature distribution, as a specific element. In addition to storing and managing such biometric information and handling it as evidence information, if a customer's input required time is managed by a timer as a collation determination element, the identity of the individual can be further reliably identified. In addition, whenever the hairstyle is changed, the user wears glasses, or the biometric information of the individual changes, the registered data of the biometric information of the input user is updated and the specific performance is updated using the latest biometric information. Can be enhanced.

Further, not only can the threshold level be gradually lowered, but also the threshold level can be gradually raised to provide high security. For example, when applied to the opening / closing management of a door with low security, the threshold level is set low, and traffic is permitted only at the first collation. In contrast, when applied to vault door opening and closing control, the threshold level is set higher,
Clear many input steps and allow entry.

Also, when such a face information specifying function is applied when changing the credit limit of credit, a relatively low borrowing amount is usually set, and valid secret information is input. The higher the personal identification degree, the higher the borrowing amount should be changed. In this way, it is possible to use a cashing transaction desired by the customer while switching to a security level commensurate with the borrowing amount.

In correspondence between the present invention and the configuration of the above-described embodiment, the personal identification device of the present invention corresponds to the ATM 11 with the face information specifying function of the embodiment. Number, date of birth, telephone number, the name of the parents and other secret information and face information, the validity criterion corresponds to the threshold level, the biometric information corresponds to the face information, and the storage means is a RAM 23. And the updating means and the changing means correspond to the CPU 21 and the center 34, but the present invention is not limited to the configuration of the embodiment described above.

[Brief description of the drawings]

FIG. 1 is an essential part perspective view showing an ATM with a face information specifying function according to the present invention.

FIG. 2 is a control circuit block diagram of the ATM with a face information specifying function of the present invention.

FIG. 3 is a table showing a relationship between a recognition distribution rate and a threshold level according to the present invention.

FIG. 4 is a flowchart showing a collation processing operation of the ATM with a face information specifying function according to the present invention.

FIG. 5 is a flowchart of the present invention following FIG. 4;

[Explanation of symbols]

 11 ATM with face information identification function 14 CRT 18 Imaging camera 21 CPU 23 RAM 30 Timer 34 Center L1 Normal level L2 Low level

 ──────────────────────────────────────────────────続 き Continuing on the front page (72) Inventor Toru Kurumo Omron Co., Ltd. 10 Hanazono Todocho, Ukyo-ku, Kyoto-shi, Kyoto

Claims (7)

[Claims] 1. A personal identification device for identifying a person by inputting a plurality of personal identification information, wherein the personal identification information inputted in the first step is inputted after the second step when it is determined to be valid. A personal identification device characterized by changing a validity criterion of personal identification information. 2. An identification device for identifying a user by inputting a plurality of identification information, wherein the identification information input in the first step is input after the second step when the identification information is determined to be valid. A personal identification device characterized by lowering the validity criterion of personal identification information. 3. The personal identification information input in the second and subsequent steps is biological information of an input operator.
Or the personal identification device according to 2. 4. The method according to claim 1, wherein when the required time for input in the first stage is within the set allowable time, the validity criterion of the personal identification information input in the second and subsequent stages is lowered.
Or the personal identification device according to 3. 5. The personal identification according to claim 1, further comprising storage means for storing the face information of the person who performed the input operation when the personal identification information was identified by lowering the validity criterion of the personal identification information. apparatus. 6. An apparatus according to claim 1, further comprising updating means for updating the biometric information of the person who has performed the input operation when the person is specified while maintaining the validity criterion of the personal identification information. Personal identification device. 7. A personal identification device for identifying a user by inputting a plurality of personal identification information, wherein when the personal identification information input in the first step is determined to be valid, the personal identification information is input in the second and subsequent steps. A personal identification device comprising a change means for increasing a validity criterion of personal identification information and changing a credit limit when a principal is specified by the validity criterion.