WO2016035402A1

WO2016035402A1 - Authentication device, authentication system, authentication method and program

Info

Publication number: WO2016035402A1
Application number: PCT/JP2015/066154
Authority: WO
Inventors: 一秀梅田
Original assignee: Ｎｅｃソリューションイノベータ株式会社
Priority date: 2014-09-02
Filing date: 2015-06-04
Publication date: 2016-03-10
Also published as: JP6390986B2; JPWO2016035402A1

Abstract

An authentication device (40) comprises: a user information acquiring unit (41) which acquires user identification information from user mobile terminals located within a certain distance from an installed device installed in the vicinity of a biometric information acquiring device which acquires biometric information from users; an extracting unit (42) which extracts registered biometric information corresponding to the user identification information acquired by the user information acquiring unit (41), from a storage device which stores a plurality of items of registered biometric information corresponding to a plurality of users; a biometric information acquiring unit (43) which acquires biometric information from the biometric information acquiring device; and an authentication unit (44) which performs an authentication process on the basis of the registered biometric information extracted during the authentication process, and the biometric information acquired by the biometric information acquiring unit (43).

Description

Authentication device, authentication system, authentication method and program

The present invention relates to an authentication device, an authentication system, an authentication method, and a program.

Patent Document 1 discloses an authentication system using a face image.

JP 2014-115821 A

In addition to facial images, biometric authentication using various biological data such as fingerprints, voiceprints, irises, etc. is often used. However, in the case of a conventional biometric authentication system, when the number of registered biometric data registered in advance increases, there is a problem that authentication accuracy and authentication processing speed become insufficient.

An object of the present invention is to provide a technique for improving authentication accuracy and authentication processing speed in biometric authentication.

According to the present invention,
User information acquisition means for acquiring the identification information of the user from each of the user portable terminals located within a predetermined distance from an installation device installed in the vicinity of the biological information acquisition device that acquires biological information from each user;
Extracting means for extracting the registered biometric information corresponding to the identification information of the user acquired by the user information acquisition means from a storage device storing a plurality of registered biometric information corresponding to each of the plurality of users;
Biological information acquisition means for acquiring the biological information from the biological information acquisition device;
Authentication means for performing authentication processing based on the registered biometric information extracted during authentication processing and the biometric information acquired by the biometric information acquisition means;
An authentication device is provided.

Moreover, according to the present invention,
The authentication device, a biometric information acquisition device that acquires biometric information from each user, an installation device installed in the vicinity of the biometric information acquisition device, and a user portable terminal that is carried by each of the users,
The installation apparatus further includes detection information transmission means for transmitting detection information to the user portable terminal located within a predetermined distance from the own apparatus periodically or intermittently,
The portable terminal is
User information storage means for storing identification information of the user;
Detection information receiving means for receiving the detection information;
When the detection information receiving means receives the detection information, in response to the reception, user information transmission means for transmitting the user identification information to the authentication device;
An authentication system is provided.

Moreover, according to the present invention,
Computer
A user information acquisition step of acquiring identification information of the user from each of the user portable terminals located within a predetermined distance from an installation device installed in the vicinity of the biological information acquisition device that acquires biological information from each user;
An extraction step of extracting the registered biometric information corresponding to the identification information of the user acquired in the user information acquisition step from a storage device storing a plurality of registered biometric information corresponding to each of the plurality of users;
A biological information acquisition step of acquiring the biological information from the biological information acquisition device;
An authentication process for performing an authentication process based on the registered biometric information extracted during the authentication process and the biometric information acquired in the biometric information acquisition process;
An authentication method is provided for performing.

Moreover, according to the present invention,
Computer
User information acquisition means for acquiring identification information of the user from each of the user portable terminals located within a predetermined distance from an installation device installed in the vicinity of the biological information acquisition device that acquires biological information from each user;
Extraction means for extracting the registered biometric information corresponding to the identification information of the user acquired by the user information acquisition means from a storage device storing a plurality of registered biometric information corresponding to each of the plurality of users;
Biological information acquisition means for acquiring the biological information from the biological information acquisition device;
An authentication unit that performs an authentication process based on the registered biometric information extracted during the authentication process and the biometric information acquired by the biometric information acquisition unit;
A program for functioning as a server is provided.

According to the present invention, authentication accuracy and authentication processing speed can be improved in biometric authentication.

The above-described object and other objects, features, and advantages will be further clarified by a preferred embodiment described below and the following drawings attached thereto.

It is a figure for demonstrating an example of the whole image of the authentication system of this embodiment. It is a figure which shows an example of the functional block diagram of the installation apparatus of this embodiment. It is a figure which shows an example of the functional block diagram of the user portable terminal of this embodiment. It is a figure which shows typically an example of the information which the storage device of this embodiment memorize | stores. It is a figure which shows typically an example of the hardware constitutions of the authentication apparatus of this embodiment. It is a figure which shows an example of the functional block diagram of the authentication apparatus of this embodiment. It is a figure which shows typically an example of the information which the memory | storage part of the authentication apparatus of this embodiment memorize | stores. It is a figure for demonstrating an example of the whole image of the authentication system of this embodiment. It is a figure which shows an example of the functional block diagram of the user portable terminal of this embodiment. It is a figure which shows an example of the functional block diagram of the installation apparatus of this embodiment. It is a schematic diagram for demonstrating the technical idea of this embodiment. It is a figure which shows an example of the functional block diagram of the authentication apparatus of this embodiment. It is a figure which shows typically an example of the information which the memory | storage part of the authentication apparatus of this embodiment memorize | stores. It is a figure which shows typically an example of the information which the storage device of this embodiment memorize | stores. It is a figure which shows an example of the functional block diagram of the authentication apparatus of this embodiment. It is a figure which shows typically an example of the information which the memory | storage part of the authentication apparatus of this embodiment memorize | stores. It is a figure which shows typically an example of the information which the memory | storage part of the authentication apparatus of this embodiment memorize | stores. It is a figure which shows typically an example of the information which the authentication apparatus of this embodiment memorize | stores.

Hereinafter, embodiments of the present invention will be described. Each unit and each unit included in each embodiment of the present embodiment includes a CPU (Central Processing Unit), a memory, and a program loaded in the memory (a program stored in the memory from the stage of shipping the device in advance). In addition, it includes hardware such as CD (Compact Disc) and programs downloaded from servers on the Internet, storage units such as hard disks that store the programs, and network connection interfaces. Realized by any combination of It will be understood by those skilled in the art that there are various modifications to the implementation method and apparatus.

The functional block diagram used in the following description of the embodiment shows a functional unit block, not a hardware unit configuration. In these drawings, each device and each terminal are described as being realized by one device, but the means for realizing the same is not limited thereto. That is, it may be a physically separated configuration or a logically separated configuration. In addition, the same code | symbol is attached | subjected to the same component and description is abbreviate | omitted suitably.

<< First Embodiment >>
First, with reference to FIG. 1, an overall image of an authentication system according to the present embodiment that can improve authentication accuracy and authentication processing speed in biometric authentication will be described.

The authentication system according to the present embodiment includes at least one of the biometric information acquisition device 10, the installation device 20, the user portable terminal 30, the authentication device 40, and the storage device 50.

The biometric information acquisition apparatus 10 is installed at a spot (place) where biometric authentication is required. Examples of such a spot include, but are not limited to, an entrance (e.g., a door) of a room where only authenticated users can enter, a gate that allows only authenticated users to pass through, and the like.

The biometric information acquisition apparatus 10 acquires biometric data such as a user's face image, fingerprint, voiceprint, iris, etc. at the installed spot. The biometric information acquisition apparatus 10 may be able to extract a predetermined feature amount from the acquired biometric data. In this way, the biological information acquisition device 10 acquires biological information including biological data and / or feature amounts.

In the storage device 50, registered biometric information registered in advance is stored. That is, in the storage device 50, biometric information (registered biometric information) of each of one or more users who are authenticated at the spot (eg, passage is permitted) is registered.

The authentication device 40 is connected to the biometric information acquisition device 10 in a wired and / or wireless manner and can communicate. Further, the authentication device 40 is connected to the storage device 50 by wire and / or wireless so that communication is possible. Furthermore, the authentication device 40 is connected to the user portable terminal 30 via a network 1 such as the Internet by wire and / or wireless so that communication is possible. In the figure, the connection between the authentication device 40 and the storage device 50, the connection between the authentication device 40 and the biometric information acquisition device 10, and the connection between the authentication device 40 and the user portable terminal 30 are realized by different networks. It may be realized by a network.

The authentication device 40 acquires biometric information from the biometric information acquisition device 10. The authentication device 40 uses the biometric information acquired from the biometric information acquisition device 10 and the registered biometric information stored in the storage device 50 to authenticate the user who has input the biometric information to the biometric information acquisition device 10. I do.

Note that the authentication device 40 does not perform the authentication process by using all of the registered biometric information registered in the storage device 50 each time, but some of the registered biometrics narrowed down using information acquired from the user portable terminal 30. Authentication processing is performed using only information.

Specifically, identification information of each user is stored in the user portable terminal 30 carried by each user. And the authentication apparatus 40 acquires the said user's identification information via the network 1 from the user portable terminal 30 located near the biometric information acquisition apparatus 10. For example, the installation device 20 installed in the vicinity of the biometric information acquisition device 10 and the user portable terminal 30 communicate with each other according to a predetermined wireless communication standard in which the communication distance is equal to or less than a predetermined value when the distance between them is equal to or less than a predetermined value. Configured to do. And if the said wireless communication with the installation apparatus 20 is performed, the user portable terminal 30 will transmit a user's identification information to the authentication apparatus 40 according to it.

The authentication device 40 extracts a part of the registered biometric information from the storage device 50 based on the user identification information received from the user portable terminal 30. Specifically, the registered biometric information of the user specified by the user identification information acquired from the user portable terminal 30 is extracted. In this way, registered biometric information of a user located near the biometric information acquisition apparatus 10 can be extracted in advance. And if the authentication apparatus 40 acquires biometric information from the biometric information acquisition apparatus 10, it will perform an authentication process using the biometric information acquired from the biometric information acquisition apparatus 10 and the registered biometric information extracted at that time. .

As described above, the authentication device 40 of the present embodiment includes a large number of registered biometric information registered in the storage device 50 based on information acquired from the user portable terminal 30 located near the biometric information acquisition device 10. Therefore, the registered biometric information of the user located near the biometric information acquisition apparatus 10 can be extracted. Then, the authentication process can be performed using only the registered biometric information extracted at the time of the authentication process.

According to this embodiment, the number of registered biometric information used in the authentication process using each biometric information acquired by the biometric information acquisition apparatus 10 can be reduced. As a result, authentication accuracy and authentication processing speed can be improved.

Hereinafter, the configuration of each device will be described.

<Biological information acquisition apparatus 10>
The biometric information acquisition device 10 includes devices such as a camera, a microphone, and a fingerprint input device, and acquires biometric data such as a user's face image, fingerprint, voiceprint, and iris. In addition, the biometric information acquisition apparatus 10 may acquire other biometric data. The biometric information acquisition apparatus 10 may be further configured to extract a predetermined feature amount from the biometric data by a predetermined algorithm. When the biometric information acquisition device 10 acquires biometric information including at least one of biometric data and the feature amount, the biometric information is transmitted to the authentication device 40 by wired and / or wireless communication, for example, by real-time processing.

<Installation device 20>
In FIG. 2, an example of the functional block diagram of the installation apparatus 20 is shown. As illustrated, the installation apparatus 20 includes a detection information transmission unit 21.

The detection information transmission part 21 transmits detection information by radio | wireless communication to the user portable terminal 30 located within the predetermined distance regularly or intermittently from the own apparatus. The detection information may include identification information of the installation device 20.

For example, the detection information transmission unit 21 periodically uses a predetermined wireless communication standard in which a communication distance is within a predetermined distance within a communication area (communication area 20A in FIG. 1) within a predetermined distance from the own device. The detection information is transmitted intermittently or intermittently. And the user portable terminal 30 located in the said communication area (communication area 20A of FIG. 1) will receive the said detection information. Examples of the wireless communication standard include, but are not limited to, a Bluetooth standard and a wireless LAN (Local Area Network) standard. The installation device 20 may be, for example, a so-called beacon terminal or a wireless LAN access point, but is not limited thereto.

Note that, as shown in FIG. 1, the installation device 20 is installed in the vicinity of the biological information acquisition device 10. In this embodiment, a user near the installation apparatus 20 is treated as a user near the biological information acquisition apparatus 10. For this reason, it is preferable that the installation apparatus 20 be installed as close as possible to the biological information acquisition apparatus 10. The distance between the biological information acquisition apparatus 10 and the installation apparatus 20 is, for example, within 3 m, preferably within 1 m, and more preferably within 0.5 m.

<User portable terminal 30>
In FIG. 3, an example of the functional block diagram of the user portable terminal 30 is shown. As illustrated, the user portable terminal 30 includes a user information storage unit 31, a detection information reception unit 32, and a user information transmission unit 33.

The user information storage unit 31 stores user identification information. The user identification information may be, but is not limited to, the user name, an arbitrarily defined character string (may include numbers, symbols, etc.), the terminal ID of the user portable terminal 30, and the like.

The detection information receiving unit 32 can perform wireless communication with the same standard as the detection information transmitting unit 21 of the installation apparatus 20. Then, when the user portable terminal 30 enters an area (communication area 20A in FIG. 1) in which wireless communication can be performed with the installation apparatus 20 according to the standard, that is, an area (in FIG. 1) where detection information transmitted from the installation apparatus 20 arrives. When the user portable terminal 30 enters the communication area 20 </ b> A), the detection information receiving unit 32 receives the detection information transmitted from the installation apparatus 20.

When the detection information reception unit 32 receives the detection information, the user information transmission unit 33 transmits the user information including the user identification information stored in the user information storage unit 31 to the authentication device 40 in response to the reception. To do. When the identification information of the installation device 20 is included in the detection information, the user information transmission unit 33 may include the identification information of the installation device 20 in the user information and transmit it to the authentication device 40. For example, when the detection information receiving unit 32 receives the detection information, the user information transmission unit 33 writes the user identification information stored in the user information storage unit 31 at a predetermined position in the detection information, and stores the user identification information in the user information. May be transmitted to the authentication device 40.

The communication means by the user information transmission unit 33 is not particularly limited, but may be communication via the network 1 such as a wireless LAN or the Internet.

In addition, while the user portable terminal 30 is in the communication area 20A, the detection information receiving unit 32 continues to receive detection information transmitted from the installation apparatus 20 periodically or intermittently. The user information transmission unit 33 may transmit the user information to the authentication device 40 each time the detection information reception unit 32 receives the detection information. Alternatively, the user information transmission unit 33 may be configured not to transmit the user information at the second or subsequent reception when the detection information is continuously received from the installation apparatus 20 at a time interval shorter than a predetermined time. . In this case, the user portable terminal 30 may transmit information (including user identification information) indicating the fact to the authentication device 40 when reception of the detection information from the installation device 20 is interrupted for a predetermined time or more. This means that the user portable terminal 30 went out of the communication area 20A.

The user portable terminal 30 may realize the above-described function by installing a predetermined application on an existing portable terminal such as a mobile phone such as a smartphone, a tablet terminal, or a portable game machine. Alternatively, the user portable terminal 30 may be a terminal prepared exclusively for the authentication system of the present embodiment.

<Storage device 50>
The storage device 50 stores (stores) a plurality of registered biometric information corresponding to each of a plurality of users. That is, the storage device 50 stores registered biometric information corresponding to each user who is authenticated as having the right authority in the authentication process by the authentication device 40. The registered biometric information stored in the storage device 50 may be biometric data itself such as a user's face image, fingerprint, voiceprint, iris, or a predetermined feature amount extracted from these biometric data. It may be both or both. The storage device 50 is composed of, for example, a nonvolatile storage device.

The registered biometric information is associated with the identification information of each user in the storage device 50. The user identification information associated with the registered biometric information in the storage device 50 may be the same as or different from the user identification information stored in the user information storage unit 31 of the user portable terminal 30. When they are different from each other, the authentication device 40 holds association information for connecting the identification information of the same user.

FIG. 4 schematically shows an example of registered biometric information stored in the storage device 50. In the illustrated example, the user ID (user identification information) and the registered biometric information are associated with each other.

<Authentication device 40>
FIG. 5 is a diagram conceptually illustrating an example of a hardware configuration of the authentication device 40 of the present embodiment. As illustrated, the authentication device 40 according to the present embodiment includes, for example, a CPU 1A, a RAM (Random Access Memory) 2A, a ROM (Read Only Memory) 3A, a display control unit 4A, a display 5A, which are connected to each other via a bus 10A. An operation receiving unit 6A, an operation unit 7A, a communication unit 8A, an auxiliary storage device 9A, and the like are included. Although not shown, other elements such as an input / output interface connected to an external device by wire, a microphone, and a speaker may be provided. Further, some of the illustrated elements may not be included.

The CPU 1A controls the entire computer of the authentication device 40 together with each element. The ROM 3A includes an area for storing programs for operating the computer, various application programs, various setting data used when these programs operate. The RAM 2A includes an area for temporarily storing data, such as a work area for operating a program. The auxiliary storage device 9A is, for example, an HDD (Hard Disc Drive), and can store a large amount of data.

The touch panel display 5A includes a display device (LED (Light Emitting Diode) display, liquid crystal display, organic EL (Electro Luminescence) display, etc.) and a touch pad. The display control unit 4A reads data stored in a VRAM (Video RAM), performs predetermined processing on the read data, and then sends the data to the touch panel display 5A to display various screens. The operation reception unit 6A receives various operations via the operation unit 7A. The operation unit 7A includes operation keys, operation buttons, switches, a jog dial, a touch panel display, a keyboard, and the like. The communication unit 8A is wired and / or wirelessly connected to a network such as the Internet or a LAN, and communicates with other electronic devices.

FIG. 6 shows an example of a functional block diagram of the authentication device 40. As illustrated, the authentication device 40 includes a user information acquisition unit 41, an extraction unit 42, a biometric information acquisition unit 43, and an authentication unit 44.

The user information acquisition unit 41 acquires user information including user identification information from each of the user portable terminals 30 located within a predetermined distance from the installation device 20 installed in the vicinity of the biological information acquisition device 10. That is, the user information acquisition unit 41 receives the user information transmitted from the user information transmission unit 33 of the user portable terminal 30. In FIG. 6, the user information acquisition unit 41 is shown to receive user information from the installation apparatus 20 or the user portable terminal 30. An embodiment in which the user information acquisition unit 41 receives user information from the installation apparatus 20 will be described below.

The extraction unit 42 extracts the registered biometric information corresponding to the user identification information included in the user information acquired by the user information acquisition unit 41 from the storage device 50. The extracted registered biometric information is stored in the storage unit 45 (not shown). The storage unit 45 is composed of, for example, a volatile storage device. Note that the storage unit 45 may be configured by a nonvolatile storage device. The set of registered biometric information stored in the storage unit 45 is a subset of the set of registered biometric information stored in the storage device 50.

FIG. 7 schematically shows an example of registered biometric information stored in the storage unit 45. In the illustrated example, the user ID and registered biometric information are associated with each other.

Note that the extraction unit 42 can update the storage unit 45. For example, when the user information acquisition unit 41 newly acquires user information, the extraction unit 42 checks whether registered biometric information corresponding to the user identification information included in the user information is stored in the storage unit 45. And when it is memorize | stored, a process is complete | finished. On the other hand, if not stored, the registered biometric information corresponding to the identification information of the user is extracted from the storage device 50 and stored in the storage unit 45.

Further, the extraction unit 42 can also delete the registered biometric information stored in the storage unit 45. For example, the user information transmission unit 33 of the user portable terminal 30 is configured to transmit the user information to the authentication device 40 each time the detection information reception unit 32 receives the detection information. In this case, the extraction unit 42 may delete the registered biometric information corresponding to the identification information of the user from the storage unit 45 after identifying the identification information of the user for whom new reception has been interrupted for a predetermined time or more. When the reception of the user identification information is interrupted for a predetermined time or more, it means that the user portable terminal 30 storing the user identification information has gone out of the communication area 20A.

As another example, for example, when the reception of the detection information from the installation device 20 is interrupted for a predetermined time or longer, the user portable terminal 30 transmits information indicating that fact (including user identification information) to the authentication device 40. . In this case, the extraction unit 42 may delete the registered biometric information corresponding to the identification information of the user from the storage unit 45 in response to reception of the information. When reception of the detection information is interrupted for a predetermined time or more, it means that the user portable terminal 30 storing the user identification information has gone out of the communication area 20A.

Returning to FIG. 6, the biological information acquisition unit 43 acquires biological information from the biological information acquisition device 10. For example, when the biometric information acquisition device 10 acquires biometric information, the biometric information is transmitted to the authentication device 40 by real-time processing. The biometric information acquisition unit 43 receives the biometric information transmitted from the biometric information acquisition device 10 in this way. The biometric information acquired by the biometric information acquisition unit 43 includes at least one of biometric data such as a user's face image, fingerprint, voiceprint, and iris, and a feature amount extracted from the biometric data.

The authentication unit 44 extracts the registered biometric information (stored in the storage unit 45) extracted during the authentication process using each of the biometric information acquired by the biometric information acquisition unit 43 and the biometric information acquired by the biometric information acquisition unit 43. Authentication processing is performed based on the information. That is, when the biometric information acquisition unit 43 acquires biometric information, the authentication unit 44 uses the biometric information and the verification process using the registered biometric information extracted by the extraction unit 42 and stored in the storage unit 45 at that time. Thus, the authentication process is performed.

The authentication device 40 may further include an output unit (not shown) that outputs an authentication result by the authentication unit 44. The output unit transmits the authentication result to a predetermined device installed at a spot (place) where biometric authentication is required by wired and / or wireless communication. The apparatus executes a predetermined process based on the authentication result. For example, if the authentication result is “Authenticate”, perform processing such as unlocking the entrance of a room where only authenticated users can enter or opening a gate that allows only authenticated users to pass through. To do. On the other hand, if the authentication result is “not authenticated”, information indicating that is output via a predetermined output device such as a display, a speaker, and a warning lamp.

According to the authentication system of this embodiment described above, the authentication device 40 acquires information acquired from the user portable terminal 30 located near the biological information acquisition device 10 (identification of the user carrying each user portable terminal 30). Information), it is possible to extract registered biometric information related to a user located near the biometric information acquisition apparatus 10 from a large number of registered biometric information registered in the storage device 50. Then, the authentication process can be performed using only the registered biometric information extracted during the authentication process.

According to this embodiment, the number of registered biometric information used in the authentication process using each biometric information acquired by the biometric information acquisition apparatus 10 can be reduced. As a result, authentication accuracy and authentication processing speed can be improved. In the case of the authentication process using only the user identification information registered in the user portable terminal 30, fraud such as impersonation is easily performed by lending the user portable terminal 30. In the present embodiment, since the authentication process is performed using the biometric information, the occurrence of the inconvenience can be suppressed.

<Second Embodiment>
First, the overall image of the authentication system according to the present embodiment will be described with reference to FIG. In the authentication system of this embodiment, the user portable terminal 30 transmits detection information including user identification information into the communication area 30A, and the installation apparatus 20 located in the communication area 30A receives the detection information. And the installation apparatus 20 which received the detection information transmits the user information containing a user's identification information to the authentication apparatus 40 according to the said reception. The authentication system of this embodiment is different from the first embodiment in this respect. Details will be described below. In addition, since the structure of the biometric information acquisition apparatus 10 and the storage apparatus 50 is the same as that of 1st Embodiment, description here is abbreviate | omitted.

<User portable terminal 30>
In FIG. 9, an example of the functional block diagram of the user portable terminal 30 of this embodiment is shown. As illustrated, the user portable terminal 30 includes a user information storage unit 31 and a detection information transmission unit 34. The configuration of the user information storage unit 31 is the same as that of the first embodiment. The user portable terminal 30 is carried by the user as in the first embodiment.

The detection information transmission part 34 transmits detection information by radio | wireless communication to the installation apparatus 20 located within the predetermined distance regularly or intermittently from the own apparatus. The detection information includes user identification information stored in the user information storage unit 31.

For example, the detection information transmission unit 34 uses a predetermined wireless communication standard in which a communication distance is within the predetermined distance, within a communication area (communication area 30A in FIG. 8) within the predetermined distance from the own terminal. Send detection information periodically or intermittently. And the installation apparatus 20 located in the said communication area (communication area 30A of FIG. 8) will receive the said detection information. Examples of the wireless communication standard include, but are not limited to, a Bluetooth standard and a wireless LAN standard. For example, the user portable terminal 30 may realize the above function by installing a predetermined application on an existing portable terminal such as a mobile phone such as a smartphone, a tablet terminal, or a portable game machine. Alternatively, the user portable terminal 30 may be a terminal prepared exclusively for the authentication system of the present embodiment, for example, a beacon terminal.

<Installation device 20>
In FIG. 10, an example of the functional block diagram of the installation apparatus 20 of this embodiment is shown. As illustrated, the installation apparatus 20 includes a detection information reception unit 22 and a user information transmission unit 23. The installation apparatus 20 is installed in the vicinity of the biological information acquisition apparatus 10 as in the first embodiment.

The detection information receiving unit 22 can perform wireless communication with the same standard as the detection information transmitting unit 34 of the user portable terminal 30. When the installation apparatus 20 enters the area (communication area 30A in FIG. 8) where the user portable terminal 30 can wirelessly communicate with the user portable terminal 30 according to the standard, that is, transmitted from the user portable terminal 30 When the installation apparatus 20 enters the area where the detection information reaches (communication area 30 </ b> A in FIG. 8), the detection information receiving unit 22 receives the detection information transmitted from the user portable terminal 30.

When the detection information reception unit 22 receives the detection information, the user information transmission unit 23 transmits user information including user identification information included in the detection information to the authentication device 40 in response to the reception. In addition, the user information transmission part 23 may transmit to the authentication apparatus 40 including the identification information (identification information of the installation apparatus 20) of the own apparatus in the user information. For example, when the detection information receiving unit 22 receives the detection information, the user information transmitting unit 23 writes the identification information of the own device (identification information of the installation device 20) at a predetermined position in the detection information, and uses this as user information. You may transmit to the authentication apparatus 40.

The communication means by the user information transmission unit 23 is not particularly limited, but may be communication via the network 1 such as a wireless LAN or the Internet, or may be wired communication.

In addition, while the installation apparatus 20 is in the communication area 30 </ b> A, the detection information receiving unit 22 continues to receive detection information transmitted from the user portable terminal 30 periodically or intermittently. The user information transmission unit 23 may transmit the user information to the authentication device 40 each time the detection information reception unit 22 receives the detection information. Alternatively, the user information transmission unit 23 is configured not to transmit the user information at the second or subsequent reception when the detection information is continuously received from the same user portable terminal 30 at a time interval shorter than a predetermined time. Also good. In this case, when reception of detection information from a certain user portable terminal 30 is interrupted for a predetermined time or more, the installation device 20 may transmit information indicating that fact (including user identification information) to the authentication device 40. In this case, it means that the installation device 20 has moved out of the communication area 30 </ b> A of the user portable terminal 30 due to the movement of the user portable terminal 30.

<Authentication device 40>
An example of a functional block diagram of the authentication device 40 is shown in FIG. 6 as in the first embodiment. Although not shown, the storage unit 45 may be further included. The configurations of the extraction unit 42, the biometric information acquisition unit 43, the authentication unit 44, and the storage unit 45 are the same as those in the first embodiment.

The user information acquisition unit 41 is connected to each of the user portable terminals 30 located within a predetermined distance from the installation device 20 installed in the vicinity of the biological information acquisition device 10 via the installation device 20 (via the installation device 20). To obtain user identification information. That is, the user portable terminal 30 transmits user identification information to the installation apparatus 20. After that, the installation apparatus 20 transmits the received user identification information to the authentication apparatus 40. The user information acquisition unit 41 receives the user identification information transmitted in this way.

In the authentication system of the present embodiment described above, the same operational effects as those of the first embodiment can be realized.

<Third Embodiment>
First, the overall image of this embodiment will be described. In the present embodiment, the plurality of registered biometric information stored in the storage device 50 is not narrowed down to groups used for authentication processing in one step, but stepwise according to the distance between the installation device 20 and the user portable terminal 30. And finally narrow down to groups used for authentication processing. For example, as shown in FIG. 11, a plurality of areas are set according to the distance from the installation device 20, and the registered biometric information is gradually narrowed down according to the detection of the user portable terminal 30 in each area.

According to this embodiment, it is possible to efficiently perform the process of extracting the registered biometric information as a group used for the authentication process. For example, in the case of FIG. 11, registered biometric information corresponding to a user located in the area 20A-1 is extracted as a group used for authentication processing.

In the case of narrowing down in one step, when it is detected that the user is located in the area of 20A-1, the registered biometric information of the user is extracted from the storage device 50. That is, an enormous number of registered biometric information stored in the storage device 50 is a search target.

On the other hand, when narrowing down step by step according to the distance, when it is detected that the user is located in the area 20A-1, the registered biometric information of the user is extracted corresponding to the area 20A-2. It is extracted from the registered biometric information group. Naturally, the number of search targets is smaller than when a huge number of registered biometric information stored in the storage device 50 is the search target. As a result, it is possible to efficiently perform processing for extracting predetermined registered biometric information. Details will be described below. In addition, since the structure of the biometric information acquisition apparatus 10 and the storage apparatus 50 is the same as that of 1st Embodiment, description here is abbreviate | omitted.

<Installation device 20>
An example of a functional block diagram of the installation apparatus 20 of the present embodiment is shown in FIG. 2 as in the first embodiment.

The detection information transmission unit 21 can control the transmission distance of the detection information from the first level to the nth level (n is an integer of 2 or more, and the distance increases as n increases). For example, the detection information transmission unit 21 may be capable of controlling the transmission distance between the first to third levels as shown in FIG. FIG. 11 shows three communication areas 20A-1 to 20A-3. Communication area 20A-1 corresponds to the first level transmission distance, communication area 20A-2 corresponds to the second level transmission distance, and communication area 20A-3 corresponds to the third level transmission distance. .

Then, the detection information transmission unit 21 transmits the detection information to be transmitted including distance information indicating the transmission distance. That is, when the detection information is transmitted at a transmission distance of the p-th level (p is an integer of 1 to n), the detection information transmission unit 21 detects at the transmission distance of the p-th level in the detection information. It is transmitted including distance information indicating that the information has been transmitted.

The control of the transmission distance by the detection information transmission unit 21 may be realized by adjusting the transmission distance according to the same wireless communication standard, or the detection information transmission unit 21 may have a plurality of wireless communication with different communication distances. The detection information can be transmitted according to the standard, and may be realized by transmitting the detection information according to each standard.

<User portable terminal 30>
An example of a functional block diagram of the user portable terminal 30 of the present embodiment is shown in FIG. 3 as in the first embodiment. The configuration of the user information storage unit 31 is the same as that of the first embodiment.

The detection information receiving unit 32 can perform wireless communication with the same standard as the detection information transmitting unit 21 of the installation apparatus 20. Then, the detection information receiving unit 32 receives detection information including distance information from the installation apparatus 20.

The user information transmission unit 33 transmits user information including user identification information and distance information to the authentication device 40. For example, when the detection information receiving unit 32 receives the detection information, the user information transmission unit 33 writes the user identification information stored in the user information storage unit 31 at a predetermined position in the detection information, and stores the user identification information in the user information. May be transmitted to the authentication device 40.

While the user portable terminal 30 is in the communication area 20A (communication areas 20A-1 to 20A-3 shown in FIG. 11), the detection information receiving unit 32 is transmitted from the installation device 20 periodically or intermittently. Will continue to receive detection information. The user information transmission unit 33 may transmit the user information to the authentication device 40 each time the detection information reception unit 32 receives the detection information. Alternatively, when the user information transmission unit 33 receives detection information including distance information indicating the same transmission distance continuously at a time interval shorter than a predetermined time from the installation device 20, the user information transmission unit 33 receives the user information at the second and subsequent receptions. You may comprise so that it may not transmit. In this case, the user portable terminal 30 may transmit information (including user identification information) indicating the fact to the authentication device 40 when reception of the detection information from the installation device 20 is interrupted for a predetermined time or more. This means that the user portable terminal 30 went out of the communication area 20A.

<Authentication device 40>
FIG. 12 shows an example of a functional block diagram of the authentication device 40 of the present embodiment. As shown in the figure, the authentication device 40 of this embodiment includes a user information acquisition unit 41, an extraction unit 42, a biometric information acquisition unit 43, an authentication unit 44, a storage unit 45, and a grouping unit 46 for each distance. Have The structure of the extraction part 42 and the biometric information acquisition part 43 is the same as that of 1st Embodiment.

The user information acquisition unit 41 further acquires distance information indicating the distance from the installation device 20 of each user portable terminal 30. That is, the user information acquisition unit 41 receives user information including distance information transmitted by the user portable terminal 30.

The distance-by-distance grouping unit 46 divides the registered biometric information extracted by the extraction unit 42 into a plurality of groups according to the distance based on the distance information. For example, the distance grouping unit 46 divides the registered biometric information extracted by the extraction unit 42 and stored in the storage unit 45 into a plurality of groups according to the distance indicated by the distance information. When the user information acquisition unit 41 repeatedly acquires user information including identification information of a certain user, the distance grouping unit 46 performs grouping based on the distance information included in the latest user information.

Here, although an example of the grouping process by the distance grouping unit 46 is shown, the grouping process by the distance grouping unit 46 is not limited to this.

FIG. 13 schematically shows an example of registered biometric information stored in the storage unit 45. In the example illustrated, the user ID, the registered biometric information, and the distance group ID are associated with each other. For example, the distance grouping unit 46 updates the distance group ID of the information shown in FIG. 13 stored in the storage unit 45 based on the user information acquired by the user information acquisition unit 41. The illustrated distance group ID corresponds to the transmission distance level described above. That is, in the case of the example, the distance grouping unit 46 converts the registered biometric information extracted by the extraction unit 42 from the first group to the nth group (n is 2 or more) corresponding to the transmission distance level. And the larger the n, the larger the distance).

When the user information acquisition unit 41 acquires user information including the identification information of the first user and the distance information corresponding to the p-th (p is 1 or more and n or less) group, the distance-by-distance grouping unit 46 Is at least one of the (p−1) th group and the (p + 1) th group in the registered biometric information extracted at that time (eg, registered biometric information stored in the storage unit 45). The registered biometric information to which it belongs is set as a search target, and it is confirmed whether there is any registered biometric information corresponding to the identification information of the first user.

When there is registered biometric information corresponding to the identification information of the first user belonging to the (p−1) th group or the (p + 1) th group, the distance-by-distance grouping unit 46 identifies the specified registered biometrics. Move information to the p th group. For example, the value of the distance group ID in FIG. 13 is updated to a predetermined value.

On the other hand, if there is no registered biometric information corresponding to the identification information of the first user belonging to the (p−1) th group or the (p + 1) th group, the grouping unit 46 for each distance indicates that fact. Information is input to the extraction unit 42. Then, the extraction unit 42 extracts the registered biometric information corresponding to the identification information of the first user from the storage device 50 and stores it in the storage unit 45, for example. Then, the grouping unit 46 for each distance causes the newly extracted registered biometric information to belong to the p-th group. For example, a predetermined value is entered in the distance group ID column of FIG.

Returning to FIG. 12, the authentication unit 44 is based on the registered biometric information belonging to the group with the smallest distance (distance group ID: 1 in FIG. 13) and the biometric information acquired by the biometric information acquisition unit 43 during the authentication process. Authentication processing.

Here, a modified example of this embodiment will be described. In the example described above, the installation device 20 is based on the first embodiment, and the installation apparatus 20 changes the transmission distance from the first level to the nth level (n is an integer of 2 or more, and the larger the n, the larger the distance). The detection information was transmitted while controlling between. On the other hand, based on the second embodiment, the user portable terminal 30 changes the transmission distance from the first level to the n-th level (n is an integer of 2 or more, and the distance increases as n increases). The detection information may be transmitted while being controlled between. Even if it does in this way, the effect similar to the said example is realizable.

According to the present embodiment described above, the same operational effects as those of the first and second embodiments can be realized. Further, according to the present embodiment, a plurality of registered biometric information stored in the storage device 50 can be narrowed down step by step according to the distance between the installation device 20 and the user portable terminal 30. As a result, the narrowing-down process can be performed efficiently.

<Fourth Embodiment>
First, the overall image of this embodiment will be described. In this embodiment, there are a plurality of spots where biometric authentication is performed, and the biometric information acquisition apparatus 10 and the installation apparatus 20 are installed in each spot. And the authentication apparatus 40 acquires biometric information from the some biometric information acquisition apparatus 10, and performs an authentication process. Details will be described below.

The configurations of the biological information acquisition device 10, the installation device 20, and the user portable terminal 30 are the same as those in any of the first to third embodiments.

<Storage device 50>
FIG. 14 schematically shows an example of information stored in the storage device 50 of the present embodiment. In the example illustrated, the user ID, the registered biometric information, and the permitted spot ID are associated with each other. A user whose registered biometric information is registered in the storage device 50 is authenticated by at least one of a plurality of spots. As shown in FIG. 14, the storage device 50 stores information indicating spots (permitted spots) where each user is authenticated.

<Authentication device 40>
FIG. 15 shows an example of a functional block diagram of the authentication device 40 of the present embodiment. As illustrated, the authentication device 40 includes a user information acquisition unit 41, an extraction unit 42, a biometric information acquisition unit 43, an authentication unit 44, a storage unit 45, and a grouping unit 47 for each installation device. In addition, you may further have the grouping part 46 for every distance.

The user information acquisition unit 41 receives user identification information from each user portable terminal 30 located within a predetermined distance from the installation device 20 installed in the vicinity of the biological information acquisition device 10 directly or via the installation device 20. Is acquired, the identification information of the installation apparatus 20 located within a predetermined distance from the user portable terminal 30 is further acquired.

In the first to third embodiments, the embodiment in which the installation device 20 or the user portable terminal 30 transmits the user information including the identification information of the installation device 20 to the authentication device 40 has been described. The user information acquisition unit 41 can receive the user information transmitted in this way.

When the user is a user who is authenticated at the installation spot of the installation device 20 based on the user identification information included in the user information and the identification information of the installation device 20, the extraction unit 42 receives the information from the storage device 50. The registered biometric information of the user is extracted. The extracted registered biometric information is stored in the storage unit 45, for example.

The extraction unit 42 is configured to be able to specify the installation spot of each installation device 20. For example, the extraction unit 42 holds information in which an installation device ID and a spot ID indicating an installation spot are associated with each other as illustrated in FIG. Then, when the user information acquisition unit 41 acquires the user information, the extraction unit 42 specifies the installation spot based on the identification information of the installation device 20. Further, the extraction unit 42 searches the storage device 50 and specifies registered biometric information corresponding to the user identification information included in the user information (see FIG. 14). Thereafter, the extraction unit 42 determines whether the installation spot specified this time is included in the spots where the user is authenticated. If included, the specified registered biometric information is extracted. If not included, the specified registered biometric information is not extracted.

The installation device grouping unit 47 extracts the registered biometric information extracted by the extraction unit 42 and stored in the storage unit 45 based on the identification information of the installation device 20 acquired by the user information acquisition unit 41, for example. Each of the identification information is divided into a plurality of groups.

FIG. 16 schematically shows an example of registered biometric information stored in the storage unit 45. In the example illustrated, the user ID, the registered biometric information, and the installation device ID are associated with each other. For example, the installation device grouping unit 47 sets the installation device ID of the information shown in FIG. 16 stored in the storage unit 45 based on the identification information of the installation device 20 included in the user information acquired by the user information acquisition unit 41. Update.

FIG. 17 schematically shows another example of registered biometric information stored in the storage unit 45. In the illustrated example, a user ID, registered biometric information, an installation device ID, and a distance group ID are associated with each other. For example, the installation device grouping unit 47 sets the installation device ID of the information shown in FIG. 17 stored in the storage unit 45 based on the identification information of the installation device 20 included in the user information acquired by the user information acquisition unit 41. Update. The distance grouping unit 46 then updates the distance group ID of the information shown in FIG. 17 stored in the storage unit 45 based on the distance information included in the user information acquired by the user information acquisition unit 41.

The biometric information acquisition unit 43 acquires the identification information of the installation device 20 installed nearby when acquiring biometric information from the biometric information acquisition device 10. That is, the biological information acquisition device 10 transmits the biological information and the identification information of the installation device 20 installed in the vicinity to the authentication device 40.

The authentication unit 44 associates the registered biometric information belonging to the group corresponding to the identification information of the installation device 20 acquired by the biometric information acquisition unit 43 (in FIG. 16 and FIG. 17, the identification information (installation device ID) of the installation device). Authentication processing) is performed based on the registered biometric information) and the biometric information acquired by the biometric information acquisition unit 43. As in the third embodiment, when the distance-by-distance grouping unit 46 is included, the authentication unit 44 belongs to the group corresponding to the identification information of the installation apparatus 20 acquired by the biometric information acquisition unit 43, and is the longest distance. Authentication processing is performed based on the registered biometric information belonging to the small group (distance group ID: 1 in the case of FIG. 17) and the biometric information acquired by the biometric information acquisition unit 43.

According to the present embodiment described above, the same operational effects as those of the first to third embodiments can be realized. In addition, even when there are a plurality of spots for performing biometric authentication and the authenticated user is different for each spot, the authentication processing at the plurality of spots is more efficiently performed by the pair of authentication device 40 and storage device 50. Can be executed.

Hereinafter, examples of the reference form will be added.
1. User information acquisition means for acquiring the identification information of the user from each of the user portable terminals located within a predetermined distance from an installation device installed in the vicinity of the biological information acquisition device that acquires biological information from each user;
Extracting means for extracting the registered biometric information corresponding to the identification information of the user acquired by the user information acquisition means from a storage device storing a plurality of registered biometric information corresponding to each of the plurality of users;
Biological information acquisition means for acquiring the biological information from the biological information acquisition device;
Authentication means for performing authentication processing based on the registered biometric information extracted during authentication processing and the biometric information acquired by the biometric information acquisition means;
An authentication device.
2. In the authentication device according to 1,
The user information acquisition means further acquires distance information indicating a distance from the installation device of each of the user portable terminals,
The registration biometric information extracted by the extraction means further includes a grouping unit for each distance based on the distance information and divided into a plurality of groups according to the distance,
The authentication unit is an authentication device that performs an authentication process based on the registered biometric information belonging to a group having the smallest distance during the authentication process and the biometric information acquired by the biometric information acquisition unit.
3. In the authentication device according to 2,
The distance grouping means includes:
Grouping the registered biometric information extracted by the extracting means into a first group to an nth group (n is an integer of 2 or more, and the larger the n, the greater the distance);
When the user information acquisition means acquires the first identification information of the user and the distance information corresponding to the p-th group (p is 1 or more and n or less), the (p−1) -th group and the When the registered biometric information corresponding to the identification information of the first user is specified from among the registered biometric information belonging to the search target group, at least one of the groups of (p + 1) is specified. An authentication apparatus for moving information to the p-th group.
4). In the authentication device according to any one of 1 to 3,
The user information acquisition means further acquires identification information of the installation device located within a predetermined distance from the user portable terminal,
The registration biometric information extracted by the extraction unit further includes a grouping unit for each installation device that divides the biometric information into a plurality of groups for each identification information of the installation device based on the identification information of the installation device,
The biological information acquisition means acquires the biological information and identification information of the installation device installed in the vicinity from the biological information acquisition device,
The authentication unit performs an authentication process based on the registered biometric information belonging to the group corresponding to the identification information of the installation apparatus acquired by the biometric information acquisition unit and the biometric information acquired by the biometric information acquisition unit. Authentication device to perform.
5. The authentication device according to any one of 1 to 4, a biological information acquisition device that acquires biological information from each user, an installation device that is installed in the vicinity of the biological information acquisition device, and each of the users A user portable terminal,
The installation apparatus further includes detection information transmission means for transmitting detection information to the user portable terminal located within a predetermined distance from the own apparatus periodically or intermittently,
The portable terminal is
User information storage means for storing identification information of the user;
Detection information receiving means for receiving the detection information;
When the detection information receiving means receives the detection information, in response to the reception, user information transmission means for transmitting the user identification information to the authentication device;
Having an authentication system.
6). In the authentication system according to 5,
The detection information transmission means can control the transmission distance of the detection information from a first level to an nth level (n is an integer of 2 or more, and the larger the distance, the larger the distance). And including the distance information indicating the transmission distance in the detection information,
The user information transmission unit is an authentication system that transmits the distance information to the authentication device.
7). In the authentication system according to 5 or 6,
The detection information transmitting means transmits the detection information including identification information of the device itself,
The user information transmission means is an authentication system for transmitting identification information of the installation device to the authentication device.
8). The authentication device according to any one of 1 to 4, a biological information acquisition device that acquires biological information from each user, an installation device that is installed in the vicinity of the biological information acquisition device, and each of the users A user portable terminal,
The user portable terminal is
User information storage means for storing identification information of the user;
Periodically or intermittently, detection information transmission means for transmitting detection information including the identification information of the user to the installation device located within a predetermined distance from the device itself;
Further comprising
The installation device is
Detection information receiving means for receiving the detection information;
When the detection information receiving means receives the detection information, in response to the reception, user information transmission means for transmitting the user identification information to the authentication device;
Having an authentication system.
9. In the authentication system according to 8,
The detection information transmission means can control the transmission distance of the detection information from a first level to an nth level (n is an integer of 2 or more, and the larger the distance, the larger the distance). And including the distance information indicating the transmission distance in the detection information,
The user information transmission unit is an authentication system that transmits the distance information to the authentication device.
10. In the authentication system according to 8 or 9,
The user information transmitting means is an authentication system that transmits identification information of the device itself to the authentication device.
11. Computer
A user information acquisition step of acquiring identification information of the user from each of the user portable terminals located within a predetermined distance from an installation device installed in the vicinity of the biological information acquisition device that acquires biological information from each user;
An extraction step of extracting the registered biometric information corresponding to the identification information of the user acquired in the user information acquisition step from a storage device storing a plurality of registered biometric information corresponding to each of the plurality of users;
A biological information acquisition step of acquiring the biological information from the biological information acquisition device;
An authentication process for performing an authentication process based on the registered biometric information extracted during the authentication process and the biometric information acquired in the biometric information acquisition process;
Authentication method to perform.
11-2. 11. In the authentication method according to 11,
In the user information acquisition step, further acquiring distance information indicating a distance from the installation device of each of the user portable terminals,
The computer further performs a distance grouping step of dividing the registered biometric information extracted in the extraction step into a plurality of groups according to the distance based on the distance information,
An authentication method for performing authentication processing based on the registered biometric information belonging to the group having the smallest distance at the time of authentication processing and the biometric information acquired in the biometric information acquisition step in the authentication step.
11-3. In the authentication method described in 11-2,
In the distance grouping step,
The registered biometric information extracted in the extraction step is grouped into a first group to an nth group (n is an integer of 2 or more, and the larger n is, the larger the distance is).
In the user information obtaining step, when the identification information of the first user and the distance information corresponding to the p-th (p is 1 or more and n or less) group are obtained, the (p−1) -th group and the When the registered biometric information corresponding to the identification information of the first user is specified from among the registered biometric information belonging to the search target group, at least one of the groups of (p + 1) is specified. An authentication method for moving information to the p-th group.
11-4. In the authentication method according to any one of 11 to 11-3,
In the user information acquisition step, further acquiring identification information of the installation device located within a predetermined distance from the user portable terminal,
The computer further executes a grouping step for each installation device that divides the registered biometric information extracted in the extraction step into a plurality of groups for each identification information of the installation device based on the identification information of the installation device,
In the biological information acquisition step, from the biological information acquisition device, acquire the biological information and identification information of the installation device installed in the vicinity,
In the authentication step, an authentication process is performed based on the registered biometric information belonging to the group corresponding to the identification information of the installation device acquired in the biometric information acquisition step and the biometric information acquired in the biometric information acquisition step. Authentication method to perform.
12 Computer
User information acquisition means for acquiring identification information of the user from each of the user portable terminals located within a predetermined distance from an installation device installed in the vicinity of the biological information acquisition device that acquires biological information from each user;
Extraction means for extracting the registered biometric information corresponding to the identification information of the user acquired by the user information acquisition means from a storage device storing a plurality of registered biometric information corresponding to each of the plurality of users;
Biological information acquisition means for acquiring the biological information from the biological information acquisition device;
An authentication unit that performs an authentication process based on the registered biometric information extracted during the authentication process and the biometric information acquired by the biometric information acquisition unit;
Program to function as.
12-2. In the program described in 12,
Causing the user information acquisition means to further acquire distance information indicating a distance from the installation device of each of the user portable terminals;
The computer further causes the registered biometric information extracted by the extraction means to function as a distance-by-distance grouping means that divides the biometric information into a plurality of groups according to the distance based on the distance information,
A program for causing the authentication unit to perform an authentication process based on the registered biometric information belonging to the group having the smallest distance during the authentication process and the biometric information acquired by the biometric information acquisition unit.
12-3. In the program described in 12-2,
In the distance grouping means,
Grouping the registered biometric information extracted by the extraction means from the first group to the nth group (n is an integer of 2 or more, and the larger the n, the greater the distance);
When the user information acquisition means acquires the first identification information of the user and the distance information corresponding to the p-th group (p is 1 or more and n or less), the (p−1) -th group and the When the registered biometric information corresponding to the identification information of the first user is specified from among the registered biometric information belonging to the search target group, at least one of the groups of (p + 1) is specified. A program for moving information to the p-th group.
12-4. In the program according to any one of 12 to 12-3,
Causing the user information acquisition means to further acquire identification information of the installation device located within a predetermined distance from the user portable terminal;
The computer further causes the registered biometric information extracted by the extraction unit to function as a grouping unit for each installation device that divides the biometric information into a plurality of groups for each identification information of the installation device based on the identification information of the installation device,
The biological information acquisition means, from the biological information acquisition device, to acquire the biological information and identification information of the installation device installed in the vicinity,
Based on the registered biometric information belonging to the group corresponding to the identification information of the installation device acquired by the biometric information acquisition unit and the biometric information acquired by the biometric information acquisition unit, the authentication unit performs authentication processing. Program to be performed.

This application claims priority based on Japanese Patent Application No. 2014-177857 filed on September 2, 2014, the entire disclosure of which is incorporated herein.

Claims

User information acquisition means for acquiring the identification information of the user from each of the user portable terminals located within a predetermined distance from an installation device installed in the vicinity of the biological information acquisition device that acquires biological information from each user;
Extracting means for extracting the registered biometric information corresponding to the identification information of the user acquired by the user information acquisition means from a storage device storing a plurality of registered biometric information corresponding to each of the plurality of users;
Biological information acquisition means for acquiring the biological information from the biological information acquisition device;
Authentication means for performing authentication processing based on the registered biometric information extracted during authentication processing and the biometric information acquired by the biometric information acquisition means;
An authentication device.
The authentication device according to claim 1,
The user information acquisition means further acquires distance information indicating a distance from the installation device of each of the user portable terminals,
The registration biometric information extracted by the extraction means further includes a grouping unit for each distance based on the distance information and divided into a plurality of groups according to the distance,
The authentication unit is an authentication device that performs an authentication process based on the registered biometric information belonging to a group having the smallest distance during the authentication process and the biometric information acquired by the biometric information acquisition unit.
The authentication device according to claim 2,
The distance grouping means includes:
Grouping the registered biometric information extracted by the extracting means into a first group to an nth group (n is an integer of 2 or more, and the larger the n, the greater the distance);
When the user information acquisition means acquires the first identification information of the user and the distance information corresponding to the p-th group (p is 1 or more and n or less), the (p−1) -th group and the When the registered biometric information corresponding to the identification information of the first user is specified from among the registered biometric information belonging to the search target group, at least one of the groups of (p + 1) is specified. An authentication apparatus for moving information to the p-th group.
The authentication device according to any one of claims 1 to 3,
The user information acquisition means further acquires identification information of the installation device located within a predetermined distance from the user portable terminal,
The registration biometric information extracted by the extraction unit further includes a grouping unit for each installation device that divides the biometric information into a plurality of groups for each identification information of the installation device based on the identification information of the installation device,
The biological information acquisition means acquires the biological information and identification information of the installation device installed in the vicinity from the biological information acquisition device,
The authentication unit performs an authentication process based on the registered biometric information belonging to the group corresponding to the identification information of the installation apparatus acquired by the biometric information acquisition unit and the biometric information acquired by the biometric information acquisition unit. Authentication device to perform.
5. The authentication apparatus according to claim 1, a biological information acquisition apparatus that acquires biological information from each user, an installation apparatus that is installed in the vicinity of the biological information acquisition apparatus, and each of the users And a user portable terminal
The installation apparatus further includes detection information transmission means for transmitting detection information to the user portable terminal located within a predetermined distance from the own apparatus periodically or intermittently,
The portable terminal is
User information storage means for storing identification information of the user;
Detection information receiving means for receiving the detection information;
When the detection information receiving means receives the detection information, in response to the reception, user information transmission means for transmitting the user identification information to the authentication device;
Having an authentication system.
The authentication system according to claim 5,
The detection information transmission means can control the transmission distance of the detection information from a first level to an nth level (n is an integer of 2 or more, and the larger the distance, the larger the distance). And including the distance information indicating the transmission distance in the detection information,
The user information transmission unit is an authentication system that transmits the distance information to the authentication device.
The authentication system according to claim 5 or 6,
The detection information transmitting means transmits the detection information including identification information of the device itself,
The user information transmission means is an authentication system for transmitting identification information of the installation device to the authentication device.
5. The authentication apparatus according to claim 1, a biological information acquisition apparatus that acquires biological information from each user, an installation apparatus that is installed in the vicinity of the biological information acquisition apparatus, and each of the users And a user portable terminal
The user portable terminal is
User information storage means for storing identification information of the user;
Periodically or intermittently, detection information transmission means for transmitting detection information including the identification information of the user to the installation device located within a predetermined distance from the device itself;
Further comprising
The installation device is
Detection information receiving means for receiving the detection information;
When the detection information receiving means receives the detection information, in response to the reception, user information transmission means for transmitting the user identification information to the authentication device;
Having an authentication system.
The authentication system according to claim 8,
The detection information transmission means can control the transmission distance of the detection information from a first level to an nth level (n is an integer of 2 or more, and the larger the distance, the larger the distance). And including the distance information indicating the transmission distance in the detection information,
The user information transmission unit is an authentication system that transmits the distance information to the authentication device.
The authentication system according to claim 8 or 9,
The user information transmitting means is an authentication system that transmits identification information of the device itself to the authentication device.
Computer
A user information acquisition step of acquiring identification information of the user from each of the user portable terminals located within a predetermined distance from an installation device installed in the vicinity of the biological information acquisition device that acquires biological information from each user;
An extraction step of extracting the registered biometric information corresponding to the identification information of the user acquired in the user information acquisition step from a storage device storing a plurality of registered biometric information corresponding to each of the plurality of users;
A biological information acquisition step of acquiring the biological information from the biological information acquisition device;
An authentication process for performing an authentication process based on the registered biometric information extracted during the authentication process and the biometric information acquired in the biometric information acquisition process;
Authentication method to perform.
Computer
User information acquisition means for acquiring identification information of the user from each of the user portable terminals located within a predetermined distance from an installation device installed in the vicinity of the biological information acquisition device that acquires biological information from each user;
Extraction means for extracting the registered biometric information corresponding to the identification information of the user acquired by the user information acquisition means from a storage device storing a plurality of registered biometric information corresponding to each of the plurality of users;
Biological information acquisition means for acquiring the biological information from the biological information acquisition device;
An authentication unit that performs an authentication process based on the registered biometric information extracted during the authentication process and the biometric information acquired by the biometric information acquisition unit;
Program to function as.