WO2020129675A1

WO2020129675A1 - Authentication device, authentication method, and program

Info

Publication number: WO2020129675A1
Application number: PCT/JP2019/047602
Authority: WO
Inventors: 岩崎　潤; 映子杉崎; 拓司石田
Original assignee: ソニーセミコンダクタソリューションズ株式会社; 東日本旅客鉄道株式会社
Priority date: 2018-12-19
Filing date: 2019-12-05
Publication date: 2020-06-25
Also published as: JPWO2020129675A1; JP7458991B2

Abstract

An authentication device according to the present embodiment is provided with a memory, a receiving unit, a comparison unit, and a transmission unit. The memory stores first biometric authentication information, which is about a device owner, in association with qualification information. The receiving unit receives second biometric authentication information about an authentication target person, which is acquired by another device. The comparison unit compares the first biometric authentication information with the second biometric authentication information, and generates an authentication result. The transmission unit transmits, to another device, the authentication result when the qualification information meets a prescribed condition.

Description

Authentication device, authentication method and program

The present technology relates to an authentication device. More specifically, the present invention relates to an authentication device that performs authentication according to qualification information using biometric authentication information, a processing method thereof, and a program that causes a computer to execute the method.

In recent years, biometric authentication such as face authentication has been used to authenticate the identity of the person when entering the facility. For example, an authentication system has been proposed in which personal information such as a face photograph is registered in advance in an authentication server, and a camera or a fingerprint collator is used for verification during a commercial transaction to verify the identity of the person (for example, Patent Document 1). reference.).

JP, 2004-038917, A

In the above-mentioned conventional technique, the biometric information registered in advance and the biometric information actually acquired are compared to authenticate the person. However, with this conventional technique, a facial photograph or the like, which is personal information, must be submitted in advance to a third party, which may cause a problem in handling personal information. In addition, there is a problem that it is not realistic to prepare biometric information of all passers in a gate or a traffic ticket gate through which an unspecified number of people pass.

　This technology was created in view of such a situation, and the purpose is to perform personal authentication without registering personal information with a third party.

The present technology has been made in order to solve the above-mentioned problems, and a first aspect thereof is a memory that stores first biometric authentication information that is biometric authentication information of a device owner and qualification information in association with each other. And a receiving unit that receives the second biometric authentication information, which is the biometric authentication information of the person to be authenticated acquired in another device, and the first biometric authentication information and the second biometric authentication information. An authentication apparatus, an authentication method, and a program including a comparing section for generating an authentication result according to the above, and a transmitting section for transmitting the authentication result to the other apparatus when the qualification information satisfies a predetermined condition. .. Thus, the first biometric authentication information stored in association with the qualification information is compared with the second biometric authentication information acquired by another device, and if the qualification information satisfies a predetermined condition, the authentication result is transmitted. Brings the effect of doing.

Further, in the first aspect, the transmission unit transmits the qualification information to the other device, and the reception unit determines that the qualification information satisfies the predetermined condition in the other device. In this case, the second biometric authentication information may be received from the other device. This brings about the effect of causing another device to judge whether or not the qualification information satisfies a predetermined condition.

Further, in the first aspect, the reception unit further receives a permission condition in the other device from the other device, and the transmission unit determines the predetermined condition when the qualification information satisfies the permission condition. The authentication result may be transmitted to the other device as satisfying the condition. This brings about an effect that the authentication result is transmitted to another device after determining whether the qualification information satisfies a predetermined condition.

Also, in the first aspect, the receiving unit and the transmitting unit may perform transmission and reception with the other device by predetermined one-to-one communication. This brings about the effect of shortening the time required for connection.

Further, in the first aspect, the first and second biometric authentication information is assumed to be, for example, a face image of a person, an iris image, or a fingerprint image.

In the first aspect, the second biometric authentication information includes a plurality of face images, and the comparing unit determines that the face image of any one of the second biometric authentication information is the first biometric authentication. The authentication result indicating that the authentication is successful may be generated when the information matches the face image of the information. In this case, the plurality of face images of the second biometric authentication information may be face images of different persons or face images of the same person at different angles.

Further, in the first aspect, the qualification information is information regarding entrance qualification to the facility, and the transmission unit is configured such that the first biometric authentication information and the second biometric authentication information match, and Alternatively, when the qualification information satisfies a predetermined condition, a notification to the effect that admission to the facility is permitted may be transmitted to the other device. This brings about the effect of controlling entrance to the facility according to the authentication result of the biometric authentication information.

In addition, a second aspect of the present technology is a receiving unit that receives the qualification information from the other device that stores the first biometric authentication information and the qualification information of the owner of the other device in association with each other, and the qualification information. When a predetermined condition is satisfied, an acquisition unit that acquires second biometric authentication information that is biometric authentication information of an approaching individual, a transmission unit that transmits the second biometric authentication information to the other device, and An authentication device comprising an authentication result based on a comparison between the first biometric authentication information and the second biometric authentication information from the other device and performs control according to the authentication result, and an authentication method thereof. And a program. As a result, when the qualification information satisfies a predetermined condition, the second biometric authentication information is transmitted to another device to perform authentication, and control is performed according to the authentication result. Further, in this case, a gate unit for performing an opening/closing operation may be further provided, and the control unit may control the gate unit according to the authentication result. Further, the control unit may delete the second biometric authentication information after the second biometric authentication information acquired by the acquisition unit is transmitted by the transmission unit.

Further, a third aspect of the present technology is biometric authentication information of an approaching individual when the other device, which stores the first biometric authentication information and the qualification information of the owner of the other device in association with each other, approaches. No. 2 acquisition unit for acquiring biometric authentication information, a transmission unit for transmitting the second biometric authentication information and the permission condition to the other device, and the first biometric unit when the qualification information satisfies the permission condition. An authentication device including an authentication result based on a comparison between the authentication information and the second biometric authentication information from the other device and performing control according to the authentication result, an authentication method thereof, and a program Is. Thus, the second biometric authentication information of the approaching individual and the permission condition are transmitted to another device, authentication is performed when the qualification information satisfies the permission condition, and control is performed according to the authentication result. Bring Further, in this case, a gate unit for performing an opening/closing operation may be further provided, and the control unit may control the gate unit according to the authentication result. Further, the control unit may delete the second biometric authentication information after the second biometric authentication information acquired by the acquisition unit is transmitted by the transmission unit.

It is a figure showing an example of the whole composition of the gate system in an embodiment of this art. It is a figure showing an example of composition of terminal 100 in an embodiment of this art. It is a figure showing an example of composition of gate device 200 in an embodiment of this art. It is a figure showing an example of appearance image of gate device 200 in an embodiment of this art. It is a sequence diagram which shows the example of a communication procedure between the terminal 100 and the gate apparatus 200 in embodiment of this technique. It is a timing diagram which shows the example of a communication procedure of IEEE802.15.3e which is an application example of embodiment of this technique. It is a figure showing an example of field composition of a ticket database managed by management server 400 in an embodiment of this art. It is a flow chart which shows an example of a processing procedure at the time of ticket purchase in an embodiment of this art. It is a flow chart which shows an example of a processing procedure at the time of facility entrance in a 1st embodiment of this art. It is a figure showing the 1st modification in an embodiment of this art. It is a figure which shows the 2nd modification in embodiment of this technique. It is a flow chart showing an example of a processing procedure at the time of facility entrance in a 2nd embodiment of this art.

Hereinafter, modes for carrying out the present technology (hereinafter, referred to as embodiments) will be described. The description will be given in the following order.
1. First embodiment (example of presenting a ticket ID from a terminal)
2. Second embodiment (example in which a gate device transmits permission conditions together with biometric authentication information)

<1. First Embodiment>
[Gate system]
FIG. 1 is a diagram showing an example of the overall configuration of a gate system according to an embodiment of the present technology.

　This gate system is a system that manages entrance to the facility. This gate system includes a terminal 100, a gate device 200, a selling device 300, and a management server 400.

The terminal 100 is a terminal owned by the user. The user uses the terminal 100 to purchase a ticket and carries the terminal 100 to enter the facility. In this embodiment, the ticket means all things that prove the right of a specific person to enter the facility, such as an admission ticket to a concert venue or a movie theater, a transportation passport or a commuter pass, and a day at a ski resort. It is a concept that widely includes electronic tickets such as lift tickets.

The gate device 200 is an entrance gate installed at the entrance of the facility. The gate device 200 acquires biometric authentication information such as image data of a face photograph (face image) from a user who carries the terminal 100, and transmits the acquired biometric authentication information to the terminal 100. After that, when a notification of successful authentication is received from the terminal 100, a pass permission operation such as opening a gate is performed.

The selling device 300 sells tickets for entering the facility. The selling device 300 sells tickets and the like in response to a purchase request from the terminal 100. This vending device 300 issues qualification information such as a ticket ID when the ticket is sold, and sends it to the terminal 100.

The management server 400 is a server that manages information about sold tickets. The management server 400 stores qualification information such as a ticket ID of a ticket sold by the sales device 300, and supplies the qualification information to the gate device 200 as necessary. The management server 400 can store the minimum necessary information about the user, but does not store biometric authentication information such as image data of a facial photograph of the user.

[Terminal]
FIG. 2 is a diagram showing an example of the configuration of the terminal 100 in the embodiment of the present technology.

This terminal 100 includes an antenna 110, an antenna switch 115, a receiver 120, a transmitter 130, a reception memory 140, a personal information memory 150, a comparator 160, a camera 180, and a controller 190. ..

The antenna 110 is an antenna for communicating with other devices. The receiver 120 receives a signal from another device and demodulates it. The transmitter 130 modulates a signal and transmits it to another device. The antenna switch 115 is a switch that switches a path between the antenna 110 and the receiver 120 or the transmitter 130. The receiver 120 is an example of the receiving unit described in the claims. Further, the transmitter 130 is an example of the transmission unit described in the claims.

The reception memory 140 is a memory that stores data received from another device. Specifically, the reception memory 140 stores the image data of the face photograph received from the gate device 200 as biometric authentication information.

The camera 180 is a camera for photographing a subject. The camera 180 is used, for example, to take a facial photograph of the owner of the terminal 100.

The personal information memory 150 is a memory that stores personal information necessary for authenticating the owner of the terminal 100. Specifically, the personal information memory 150 stores a face photograph of the owner of the terminal 100 as biometric authentication information. This facial photograph may be a facial photograph taken by the camera 180 or may be prepared separately. The personal information memory 150 also stores qualification information such as a ticket ID issued from the selling device 300 when the ticket is purchased. In the personal information memory 150, the qualification information and the biometric authentication information are stored in association with each other. That is, when the qualification information satisfies a predetermined condition, the biometric authentication information stored in association with the qualification information becomes an authentication target.

It is desirable that the personal information memory 150 is a secure memory that is hard to be tampered with. In particular, in order to prevent resale of tickets, it is desirable to set a certain rule for associating the qualification information with the biometric authentication information. For example, it is conceivable that the image data of the face photograph is required to be registered in the personal information memory 150 in association with the qualification information when the ticket is purchased or within a certain period after the ticket is purchased, and the rewriting after that is prohibited. As a result, it is possible to prevent the person from being resold to another person after the ticket is purchased and being impersonated. The personal information memory 150 is an example of the memory described in the claims.

The comparator 160 compares the biometric authentication information stored in the reception memory 140 with the biometric authentication information stored in the personal information memory 150 to generate an authentication result. That is, if the image data of the face photograph received from the gate device 200 matches the image data of the face photograph stored in the personal information memory 150, an authentication result indicating that the authentication is successful is generated. On the other hand, if the image data of the face photograph received from the gate device 200 does not match the image data of the face photograph stored in the personal information memory 150, an authentication result indicating that the authentication has failed is generated. The authentication result by the comparator 160 is transmitted to the gate device 200 by the transmitter 130. The comparator 160 is an example of a comparison unit described in the claims.

The control unit 190 controls the operation of each unit of the terminal 100.

In the first embodiment, it is assumed that the qualification information (ticket ID) is transmitted from the terminal 100 to the gate device 200 when entering the facility. As a result, the validity of the qualification information is determined in the gate device 200, and when the qualification information satisfies a predetermined condition, the biometric authentication information (image data of a face photograph) is transmitted from the gate device 200 to the terminal 100. Therefore, at the stage when the authentication is being performed by the comparator 160, the qualification information already satisfies the predetermined condition. The image data of the face photograph stored in the personal information memory 150 is an example of the first biometric authentication information described in the claims. The image data of the face photograph stored in the reception memory 150 is an example of the second biometric authentication information described in the claims. The ticket ID is an example of the qualification information described in the claims.

[Gate device]
FIG. 3 is a diagram illustrating an example of a configuration of the gate device 200 according to the embodiment of the present technology.

The gate device 200 includes an antenna 210, an antenna switch 215, a receiver 220, a transmitter 230, a temporary memory 240, a camera 250, a sensor 260, a flapper gate 270, a display unit 280, and a control unit. And 290.

The antenna 210 is an antenna for communicating with another device. The receiver 220 receives a signal from another device and demodulates it. The transmitter 230 modulates a signal and transmits it to another device. The antenna switch 215 is a switch that switches a path between the antenna 210 and the receiver 220 or the transmitter 230. The receiver 220 is an example of the receiving unit described in the claims. Further, the transmitter 230 is an example of the transmission unit described in the claims.

The sensor 260 is a sensor that detects a person approaching the gate device 200. The sensor 260 can be realized by, for example, a human sensor that uses infrared rays, ultrasonic waves, visible light, or the like.

The camera 250 is a camera for photographing the face of a person who approaches the gate device 200 when the sensor 260 detects the person. It should be noted that the camera 250 may be used as a monitoring camera, and may also be used as the sensor 260. The camera 250 is an example of the acquisition unit described in the claims.

The temporary memory 240 is a memory that temporarily stores image data of a face photograph taken by the camera 250. The image data of the facial photograph stored in the temporary memory 240 is erased after being transmitted to the terminal 100 via the transmitter 230. As a result, it is possible to entrust the authentication in the terminal 100 without leaving the image data of the taken face photograph in the gate device 200.

The flapper gate 270 is a gate that opens and closes at the entrance of the facility. Under the control of the control unit 290, the flapper gate 270 performs an opening operation when passing a person approaching the gate apparatus 200, and performs a closing operation when not passing the person. The flapper gate 270 is an example of the gate unit described in the claims.

The display unit 280 outputs images and sounds. Under the control of the control unit 290, the display unit 280 outputs a character or voice indicating that the person who approaches the gate apparatus 200 is able to pass, and when not passing the person, it is impossible to pass. Output characters and voice.

The control unit 290 controls the operation of each unit of the gate device 200. The control unit 290 is an example of the control unit described in the claims.

FIG. 4 is a diagram showing an example of an external image of the gate device 200 according to the embodiment of the present technology.

In this example, the gate device 200 is provided at the entrance of the facility, and the visitors can enter the facility by passing between the gate devices 200. When a person approaches, the sensor 260 detects it. When the sensor 260 detects a person, the camera 250 takes a picture of the person's face and stores it in the temporary memory 240. At this time, the control unit 290 may control the flapper gate 270 to close it once.

The image data of the face photograph stored in the temporary memory 240 passes through the transmitter 230 from the temporary memory 240, is switched by the antenna switch 215, and is transmitted to the terminal 100 via the antenna 210.

At this time, since the terminal 100 is normally in the reception mode, the signal received by the antenna 110 is sent to the receiver 120 through the antenna switch 115, and the captured face data is stored in the reception memory 140 as it is.

The comparator 160 compares the photographed face data stored in the reception memory 140 with the face photograph data of the attendee stored in the personal information memory 150 in advance. Then, if the two face photographs match, authentication success is transmitted, and if they do not match, authentication failure is transmitted from the transmitter 130 as the authentication result. At this time, the antenna switch 115 is switched to the transmission side, and transmission is performed to the gate device 200 via the antenna 110.

In the gate apparatus 200, the receiver 220 receives this via the antenna 210 and the antenna switch 215, and the control unit 290 judges the result. When the authentication is successful, the control unit 290 opens the flapper gate 270, expresses the characters and sounds that can be passed on the display unit 280, and passes the visitors. On the other hand, in the case of the authentication failure, the flapper gate 270 is closed, and the display unit 280 is used to perform a process of not letting the visitors pass by using characters or sounds.

[Communication protocol]
FIG. 5 is a sequence diagram showing an example of a communication procedure between the terminal 100 and the gate device 200 according to the embodiment of the present technology.

In the gate system, when a person carrying the terminal 100 approaches the gate device 200, it is necessary to make a communication connection promptly. In 1-to-N communication represented by Wi-Fi, it is necessary to search for surrounding terminals at the time of connection, the search processing takes time, and there is a possibility that communication processing will not be completed by the time the gate passes. Therefore, it is considered that one-to-one communication capable of high-speed connection is suitable for the gate system. As such a communication standard, for example, IEEE802.15.3e or TransferJet X (Transfer Jet X) is assumed. Here, an example of a communication procedure when applied to IEEE802.15.3e will be described.

Gate apparatus 200 transmits beacon 711 at a certain fixed interval. The terminal 100 approaching the gate device 200 receives this beacon 711 and returns an association request 721. The gate apparatus 200 that has received the association request 721 transmits an association response 722. The terminal 100 transmits a reception confirmation signal (Ack) 723 to the association response 722, and when the gate device 200 receives the reception confirmation signal (Ack) 723, the connection for one-to-one communication is completed.

When the connection is completed, the gate device 200 transmits the captured face image data 731 to the terminal 100. The terminal 100, which has received the face image data 731, returns a reception confirmation signal (Ack) 732 to the gate device 200.

The terminal 100 compares face images and sends the determination result 733 to the gate device 200. The gate device 200 that has received the determination result 733 returns a reception confirmation signal (Ack) 734 to the gate device 200, and performs processing corresponding to the determination result.

FIG. 6 is a timing diagram showing an example of a communication procedure of IEEE802.15.3e, which is an application example of the embodiment of the present technology.

Gate apparatus 200 transmits beacon 711 at regular intervals during the setup period. The terminal 100 that has received the beacon 711 transmits an association request 721 in the access slot after the SIFS (Short Inter Frame Space) has elapsed from the beacon 711.

When the gate device 200 that has received the association request 721 transmits an association response 722 and the terminal 100 transmits a reception confirmation signal (Stk-Ack) 723, the connection is completed and the set period is changed to the connected state. Note that IEEE802.15.3e stipulates that the setup time from the reception of the beacon 711 to the transmission of the reception confirmation signal 723 must be less than 2 milliseconds.

When releasing the connection state, the terminal 100 transmits a disassociation request 739. As a result, the connection state is released, and the gate apparatus 200 transits again to the setup state in which the beacon is transmitted.

Management server
FIG. 7 is a diagram showing an example of the field configuration of the ticket database managed by the management server 400 according to the embodiment of the present technology.

The management server 400 stores the qualification information such as the ticket ID of the ticket sold by the sales device 300, and supplies the qualification information to the gate device 200 as necessary. In this example, the management server 400 stores a ticket ID 411, a ticket sales date and time 412, ticket information 413, and a member number 414 as a ticket database.

The ticket ID 411 is an identifier of the sold ticket. The ticket sale date and time 412 is the date and time when the ticket corresponding to the ticket ID 411 was sold. The ticket information 413 is information regarding the ticket corresponding to the ticket ID 411. The ticket information 413 includes, for example, the validity period of the ticket and information that identifies available facilities. The gate device 200 can determine whether the ticket ID received from the terminal 100 is valid at the facility by referring to the ticket information 413 corresponding to the ticket ID 411.

The member number 414 is an identifier of the owner who owns the ticket corresponding to the ticket ID 411. The member number 414 is an identifier for accessing a member database different from the ticket database. The information managed in the member database may include personal information, and is normally managed so that it cannot be freely accessed from the gate device 200.

[motion]
FIG. 8 is a flowchart showing an example of a processing procedure when purchasing a ticket according to the embodiment of the present technology.

The ticket purchaser uses the camera 180 of the terminal 100 to take a facial photograph of himself (step S931). The image data of this facial photograph is stored in the personal information memory 150. The image data stored in the personal information memory 150 may be acquired by another method.

The ticket purchaser accesses the selling device 300 through the terminal 100 and performs the ticket purchase procedure (step S932). The selling device 300 sells a ticket according to the information transmitted from the terminal 100, and issues a ticket ID of the ticket (step S933). The issued ticket ID is transmitted to the terminal 100 and stored in the ticket database of the management server 400 (step S934).

The terminal 100, which has received the ticket ID from the selling device 300, is stored in the personal information memory 150 in association with the image data of the face photograph stored in the personal information memory 150 (step S935). That is, the ticket ID is stored in association with the image data of the face photograph.

In this example, it is assumed that the image data of the face photograph taken in advance is associated with the ticket ID, but the camera 180 of the terminal 100 may be used during the ticket purchase. Alternatively, the ticket may be tied before admission without being tied. However, from the viewpoint of preventing ticket resale as described above, it is desirable to perform the linking at an early stage and prohibit the subsequent rewriting.

FIG. 9 is a flowchart showing an example of a processing procedure at the time of facility entrance in the first embodiment of the present technology.

Visitors who purchased the ticket carry the terminal 100 and head to the entrance. When the terminal 100 enters the communication range with the gate device 200, the connection is established by the communication protocol described above. Then, the terminal 100 presents the ticket ID by transmitting the ticket ID to the gate device 200 (step S911).

The gate device 200 having received the ticket ID from the terminal 100 determines whether the ticket ID is valid at this facility (step S912). If the ticket ID is not valid (step S912: No), the person carrying the terminal 100 is denied entry (step S922). That is, processing such as closing the flapper gate 270 is performed.

If the ticket ID is valid (step S912: Yes), the gate device 200 takes a facial photograph of a person who approaches the gate device 200 with the camera 250 (step S913), and the image data of the facial photograph is sent to the terminal. It is transmitted to 100 (step S914). The image data of the photographed face photograph is temporarily stored in the temporary memory 240, but is then immediately erased (step S915).

The terminal 100 receiving the image data of the face photograph from the gate device 200 stores the image data of the face photograph in the reception memory 140. Then, the image data of the facial photograph stored in the reception memory 140 and the image data of the facial photograph stored in the personal information memory 150 are compared by the comparator 160 (step S916). The authentication result based on this comparison is transmitted from the transmitter 130 to the gate device 200 (step S917).

If the authentication result indicates that the authentication is successful (step S919: Yes), the gate apparatus 200 that has received the authentication result from the terminal 100 allows the person carrying the terminal 100 to enter (step S921). That is, processing such as opening the flapper gate 270 and passing it is performed. On the other hand, if the authentication result indicates that the authentication has failed (step S919: No), the person who carries the terminal 100 is denied entry (step S922). If the authentication result is not received even after a certain period of time, it is determined that the authentication has failed, and the entrance is rejected (step S922).

As described above, in the first embodiment of the present technology, the gate device 200 takes a facial photograph of the person who has presented the ticket ID, transmits the photograph to the terminal 100, and the terminal 100 performs authentication. Thereby, the entrance to the facility can be controlled by using the authentication result in the terminal 100 without registering the image data of the facial photograph, which is the personal information, in the device of the third party other than the terminal 100.

[Modification]
FIG. 10 is a diagram showing a first modification example in the embodiment of the present technology.

In the above-described first embodiment, the terminal 100 that has presented the ticket ID is specified, and the facial photograph of the person carrying the terminal 100 is taken. Under the condition that the persons approaching the gate apparatus 200 are lined up in order, the identification is considered to be easy. However, when a large number of people flood the entrance, a plurality of candidates may be photographed. In that case, as shown in the figure, the face regions 510 of a plurality of candidates may be photographed, and these may be collectively transmitted from the gate device 200 to the terminal 100.

The terminal 100 having received the image data of a plurality of face photographs compares them with the image data of the face photograph stored in the personal information memory 150. If even one of them matches the person's face, it may be determined that the authentication is successful.

FIG. 11 is a diagram showing a second modification example of the embodiment of the present technology.

In the above-described first embodiment, it is assumed that one camera 250 takes a face picture, but a plurality of cameras may be taken. This makes it possible to limit the passersby as much as possible. For example, as shown in the figure, a plurality of

cameras

251 and 252 may be installed, images may be taken from different angles, and the images may be transmitted to the terminal 100.

In this case, the terminal 100, which has received the image data of a plurality of face photographs, compares them with the image data of the face photographs stored in the personal information memory 150. If even one of them matches the person's face, it may be determined that the authentication is successful.

<2. Second Embodiment>
In the above-described first embodiment, the face photograph is taken after confirming the validity of the ticket, but the face photograph may be taken first. In the second embodiment, it is assumed that the terminal 100 confirms the validity of the ticket after the terminal 100 receives the image data of the facial photograph from the gate device 200. Since the basic configuration of the gate system is the same as that of the first embodiment described above, detailed description of the configuration is omitted.

[motion]
FIG. 12 is a flowchart showing an example of a processing procedure at the time of entering a facility according to the second embodiment of the present technology.

The attendee who purchased the ticket carries the terminal 100 and heads for the entrance (step S941). When a person approaching the gate apparatus 200 is detected by the sensor 260, the camera 250 of the gate apparatus 200 captures the face of the person (step S943).

The image data of the photographed face photograph is transmitted to the terminal 100 together with the permission conditions (step S944). Here, the permission condition is a condition for obtaining permission to pass through the gate device 200. For example, a range of ticket IDs permitted to pass through the gate device 200, a specific field value of the ticket ID, and the like are assumed. To be done. Further, when managing entry of an employee in a company, the employee ID may be stored in the terminal 100 and the range of entryable employee IDs may be specified by permission conditions.

The image data of the photographed face photograph is temporarily stored in the temporary memory 240, but is then immediately deleted (step S945).

The terminal 100, which has received the image data of the facial photograph and the permission conditions, stores them in the reception memory 140. Then, it is determined whether the ticket ID stored in the personal information memory 150 satisfies the permission condition stored in the reception memory 140 (step S942). When the permission condition is satisfied (step S942: Yes), the image data of the facial photograph stored in the reception memory 140 and the image data of the facial photograph stored in the personal information memory 150 are compared by the comparator 160 ( Step S946). The authentication result based on this comparison is transmitted from the transmitter 130 to the gate device 200 (step S947). On the other hand, when the permission condition is not satisfied (step S942: No), the comparison of the face photographs is not performed.

If the authentication result indicates that the authentication is successful (step S949: Yes), the gate apparatus 200 that has received the authentication result from the terminal 100 permits the person carrying the terminal 100 to enter (step S951). That is, processing such as opening the flapper gate 270 and passing it is performed. On the other hand, if the authentication result indicates that the authentication has failed (step S949: No), the person carrying the terminal 100 is denied entry (step S952). If the authentication result is not received even after a certain period of time, it is determined that the authentication has failed, and the entrance is rejected (step S952).

As described above, in the second embodiment of the present technology, the facial photograph taken by the gate device 200 and the permission condition are transmitted to the terminal 100, and the terminal 100 performs authentication. Thereby, the entrance to the facility can be controlled by using the authentication result in the terminal 100 without registering the image data of the facial photograph, which is the personal information, in the device of the third party other than the terminal 100.

Note that the modified example described in the above-described first embodiment can be similarly applied to this second embodiment.

Further, in the above-described embodiment, the example in which the image data of the face photograph is used as the biometric authentication information has been described, but the present invention is not limited to this. For example, other biometric authentication information such as a fingerprint, a vein, or an iris. May be used.

Note that the above-described embodiment shows an example for embodying the present technology, and the matters in the embodiment and the matters specifying the invention in the claims have a correspondence relationship. Similarly, the matters specifying the invention in the claims and the matters having the same names in the embodiments of the present technology have a correspondence relationship. However, the present technology is not limited to the embodiments and can be embodied by making various modifications to the embodiments without departing from the gist thereof.

Further, the processing procedure described in the above-described embodiment may be regarded as a method having these series of procedures, or as a program for causing a computer to execute these series of procedures or a recording medium storing the program. You can catch it. As this recording medium, for example, a CD (Compact Disc), an MD (MiniDisc), a DVD (Digital Versatile Disc), a memory card, a Blu-ray disc (Blu-ray (registered trademark) Disc), or the like can be used.

It should be noted that the effects described in the present specification are merely examples, and the effects are not limited and may have other effects.

The present technology may have the following configurations.
(1) A memory that stores the first biometric information that is the biometric information of the device owner and the qualification information in association with each other;
A receiving unit that receives the second biometric authentication information that is the biometric authentication information of the authentication target person acquired in another device;
A comparing unit configured to compare the first biometric authentication information and the second biometric authentication information to generate an authentication result;
An authentication device, comprising: a transmission unit that transmits the authentication result to the other device when the qualification information satisfies a predetermined condition.
(2) The transmission unit transmits the qualification information to the other device,
The authentication according to (1), wherein the receiving unit receives the second biometric authentication information from the other device when the other device determines that the predetermined condition is satisfied for the qualification information. apparatus.
(3) The receiving unit further receives permission conditions for the other device from the other device,
The authentication device according to (1), wherein the transmission unit transmits the authentication result to the other device assuming that the predetermined condition is satisfied when the qualification information satisfies the permission condition.
(4) The authentication device according to any one of (1) to (3), wherein the reception unit and the transmission unit perform transmission and reception with the other device by predetermined one-to-one communication.
(5) The authentication device according to any one of (1) to (4), wherein the first and second biometric authentication information is a face image of a person.
(6) The second biometric authentication information includes a plurality of face images,
In the above (5), the comparison unit generates the authentication result indicating that the authentication is successful when any face image of the second biometric authentication information matches the face image of the first biometric authentication information. The described authentication device.
(7) The authentication device according to (6), wherein the plurality of face images of the second biometric authentication information are face images of different persons.
(8) The authentication device according to (6), wherein the plurality of face images of the second biometric authentication information are face images of the same person at different angles.
(9) The qualification information is information regarding the qualification for admission to the facility,
The transmitting unit notifies the admission to the facility when the first biometric authentication information and the second biometric authentication information match and the qualification information satisfies a predetermined condition. The authentication device according to any one of (1) to (8), wherein the authentication device transmits the message to the other device.
(10) A receiving unit that receives the qualification information from the other device that stores the first biometric authentication information and the qualification information of the owner of the other device in association with each other,
An acquisition unit that acquires second biometric information that is biometric information of an approaching individual when the qualification information satisfies a predetermined condition;
A transmitting unit that transmits the second biometric authentication information to the other device;
An authentication device, comprising: a control unit that receives an authentication result based on a comparison between the first biometric authentication information and the second biometric authentication information from the other device and performs control according to the authentication result.
(11) Further comprising a gate unit for opening and closing,
The said control part is an authentication device as described in said (10) which controls the said gate part according to the said authentication result.
(12) In the above (10) or (11), the control unit erases the second biometric authentication information after the second biometric authentication information acquired by the acquisition unit is transmitted by the transmission unit. The described authentication device.
(13) Obtaining second biometric authentication information that is biometric authentication information of an approaching individual when the other device that stores the first biometric authentication information and the qualification information of the owner of the other device in association with each other approaches The acquisition part,
A transmission unit that transmits the second biometric authentication information and the permission condition to the other device;
When the qualification information satisfies the permission condition, an authentication result based on the comparison between the first biometric authentication information and the second biometric authentication information is received from the other device, and control is performed according to the authentication result. An authentication device including a control unit.
(14) Further comprising a gate unit for opening and closing,
The said control part is an authentication apparatus as described in said (13) which controls the said gate part according to the said authentication result.
(15) In the above (13) or (14), the control unit deletes the second biometric authentication information after the second biometric authentication information acquired by the acquisition unit is transmitted by the transmission unit. The described authentication device.
(16) An authentication method in an authentication device, which stores the first biometric authentication information that is the biometric authentication information of the device owner and the qualification information in association with each other,
A procedure in which the receiving unit receives the second biometric authentication information that is the biometric authentication information of the authentication target person acquired in another device;
A procedure in which the comparison unit compares the first biometric authentication information with the second biometric authentication information to generate an authentication result;
And a transmitting unit transmitting the authentication result to the other device when the qualification information satisfies a predetermined condition.
(17) A procedure in which the reception unit receives the qualification information from the other device that stores the first biometric authentication information and the qualification information of the owner of the other device in association with each other,
A procedure in which the acquisition unit acquires second biometric authentication information that is biometric authentication information of an approaching individual when the qualification information satisfies a predetermined condition;
A procedure in which the transmission unit transmits the second biometric authentication information to the other device;
An authentication method, including a procedure in which a control unit receives an authentication result based on a comparison between the first biometric authentication information and the second biometric authentication information from the other device and performs control according to the authentication result. ..
(18) Second biometric authentication, which is biometric authentication information of an approaching individual when the acquisition unit associates and stores the first biometric authentication information and qualification information of the owner of the other device when the other device approaches The steps to get the information,
A procedure in which the transmission unit transmits the second biometric authentication information and the permission condition to the other device;
The control unit receives an authentication result based on the comparison between the first biometric authentication information and the second biometric authentication information from the other device when the qualification information satisfies the permission condition, and responds to the authentication result. An authentication method including a procedure for performing the above control.
(19) In an authentication device that stores the first biometric authentication information that is the biometric authentication information of the device owner and the qualification information in association with each other,
A procedure of receiving second biometrics information, which is the biometrics information of the authentication target person acquired in another device,
A procedure of comparing the first biometric authentication information and the second biometric authentication information to generate an authentication result;
A program for causing a computer to execute a procedure of transmitting the authentication result to the other device when the qualification information satisfies a predetermined condition.

100 terminal 110 antenna 115 antenna switch 120 receiver 130 transmitter 140 reception memory 150 personal information memory 160 comparator 180 camera 190 control unit 200 gate device 210 antenna 215 antenna switch 220 receiver 230 transmitter 240 temporary memory 250-252 camera 260 Sensor 270 Flapper gate 280 Display unit 290 Control unit 300 Sales device

Claims

A memory that stores the first biometric information that is the biometric authentication information of the device owner and the qualification information in association with each other;
A receiving unit that receives the second biometric authentication information that is the biometric authentication information of the authentication target person acquired in another device;
A comparing unit configured to compare the first biometric authentication information and the second biometric authentication information to generate an authentication result;
An authentication device, comprising: a transmission unit that transmits the authentication result to the other device when the qualification information satisfies a predetermined condition.
The transmission unit transmits the qualification information to the other device,
The authentication device according to claim 1, wherein the reception unit receives the second biometric authentication information from the other device when the other device determines that the predetermined condition is satisfied for the qualification information.
The receiving unit further receives permission conditions for the other device from the other device,
The authentication device according to claim 1, wherein the transmission unit transmits the authentication result to the other device assuming that the predetermined condition is satisfied when the qualification information satisfies the permission condition.
The authentication device according to claim 1, wherein the reception unit and the transmission unit perform transmission and reception with the other device by predetermined one-to-one communication.
The authentication device according to claim 1, wherein the first and second biometric authentication information is a face image of a person.
The second biometric information includes a plurality of face images,
The said comparison part produces|generates the said authentication result that authentication was successful, when the face image of any of the said 2nd biometrics information matches the face image of the said 1st biometrics information. Authentication device.
The authentication device according to claim 6, wherein the plurality of face images of the second biometric authentication information are face images of different persons.
The authentication device according to claim 6, wherein the plurality of face images of the second biometric authentication information are face images of the same person at different angles.
The qualification information is information about the qualification for entering the facility,
The transmitting unit notifies the admission to the facility when the first biometric authentication information and the second biometric authentication information match and the qualification information satisfies a predetermined condition. Is transmitted to the other device.
A receiver for receiving the qualification information from the other device that stores the first biometric information and the qualification information of the owner of the other device in association with each other;
An acquisition unit that acquires second biometric information that is biometric information of an approaching individual when the qualification information satisfies a predetermined condition;
A transmitting unit that transmits the second biometric authentication information to the other device;
An authentication device, comprising: a control unit that receives an authentication result based on a comparison between the first biometric authentication information and the second biometric authentication information from the other device and performs control according to the authentication result.
Further comprising a gate unit for opening and closing operation,
The authentication device according to claim 10, wherein the control unit controls the gate unit according to the authentication result.
The authentication device according to claim 10, wherein the control unit deletes the second biometric authentication information after the second biometric authentication information acquired by the acquisition unit is transmitted by the transmission unit.
An acquisition unit that stores the first biometric authentication information and the qualification information of the owner of the other device in association with each other and acquires the second biometric authentication information that is the biometric authentication information of the approaching individual when the other device approaches. ,
A transmission unit that transmits the second biometric authentication information and the permission condition to the other device;
When the qualification information satisfies the permission condition, an authentication result based on the comparison between the first biometric authentication information and the second biometric authentication information is received from the other device, and control is performed according to the authentication result. An authentication device including a control unit.
Further comprising a gate unit for opening and closing operation,
The authentication device according to claim 13, wherein the control unit controls the gate unit according to the authentication result.
The authentication device according to claim 13, wherein the control unit deletes the second biometric authentication information after the second biometric authentication information acquired by the acquisition unit is transmitted by the transmission unit.
An authentication method in an authentication device, which stores first biometric information that is device authentication biometric information and credential information in association with each other,
A procedure in which the receiving unit receives the second biometric authentication information that is the biometric authentication information of the authentication target person acquired in another device;
A procedure in which the comparison unit compares the first biometric authentication information with the second biometric authentication information to generate an authentication result;
A transmitting unit transmitting the authentication result to the other device when the qualification information satisfies a predetermined condition.
A procedure in which the receiving unit receives the qualification information from the other device that stores the first biometric information and the qualification information of the owner of the other device in association with each other;
A procedure in which the acquisition unit acquires second biometric authentication information that is biometric authentication information of an approaching individual when the qualification information satisfies a predetermined condition;
A procedure in which the transmission unit transmits the second biometric authentication information to the other device;
An authentication method, wherein the control unit receives an authentication result based on a comparison between the first biometric authentication information and the second biometric authentication information from the other device, and performs control according to the authentication result. ..
The acquisition unit acquires the second biometric authentication information that is the biometric authentication information of the approaching individual when the other device that stores the first biometric authentication information and the qualification information of the owner of the other device in association with each other approaches. Steps to
A procedure in which the transmission unit transmits the second biometric authentication information and the permission condition to the other device;
The control unit receives an authentication result based on the comparison between the first biometric authentication information and the second biometric authentication information from the other device when the qualification information satisfies the permission condition, and responds to the authentication result. An authentication method comprising a procedure for performing the above control.
In an authentication device that stores the first biometric authentication information that is the biometric authentication information of the device owner and the qualification information in association with each other,
A procedure of receiving second biometrics information, which is the biometrics information of the authentication target person acquired in another device,
A procedure of comparing the first biometric authentication information and the second biometric authentication information to generate an authentication result;
A program for causing a computer to execute a procedure of transmitting the authentication result to the other device when the qualification information satisfies a predetermined condition.