WO2022044274A1

WO2022044274A1 - Authentication control device, authentication system, authentication control method, and non-transitory computer-readable medium

Info

Publication number: WO2022044274A1
Application number: PCT/JP2020/032660
Authority: WO
Inventors: 秀典北方
Original assignee: 日本電気株式会社
Priority date: 2020-08-28
Filing date: 2020-08-28
Publication date: 2022-03-03
Also published as: JPWO2022044274A1

Abstract

The purpose of the present invention is to provide an authentication control device which can reduce deterioration in the convenience of a user in multimodal authentication. This authentication control device (10) comprises: a biological information acquisition means (11) which acquires first biological information and second biological information about a prescribed user; an authentication control means (12) which controls at least one among first biometric authentication using the first biological information and second biometric authentication using the second biological information; and a determination means (13) which, when at least one among the first biometric authentication and the second biometric authentication succeeds, determines whether to use the other biometric authentication result.

Description

Authentication control device, authentication system, authentication control method and non-temporary computer readable medium

This disclosure relates to an authentication control device, an authentication system, an authentication control method, and a non-temporary computer-readable medium.

In recent years, biometric authentication has been used in various scenes. In particular, due to concerns about infectious diseases, the use of non-contact biometric authentication methods such as face recognition and iris recognition is expected.

For example, Patent Document 1 discloses an authentication system that is installed at the entrance of a special area provided inside a closed space and controls admission by face recognition. The authentication system of Patent Document 1 aims to speed up the face authentication process by narrowing down the search range of the face image to be searched based on the collation result of the identification information obtained from the ID card of the visitor. There is.

Further, Patent Document 2 discloses a hotel system that determines whether or not to enter a room by collating the face information of the user. In the hotel system of Patent Document 2, the user can enter the room without carrying the room key.

Furthermore, in recent years, the utilization of multimodal authentication that combines multiple methods is being considered, in addition to biometric authentication using one method as described above. By adopting multimodal authentication, there are merits such as the ability to dramatically improve the authentication accuracy. For example, Patent Document 3 discloses a biometric authentication device that uses a user's fingerprint and a vein of the palm as biometric information. In this way, by using a plurality of biometric information, it is possible to more reliably confirm the identity of the user.

International Publication No. 2018/110012 Japanese Patent Application Laid-Open No. 2003-256583 Japanese Patent No. 5796523

While multimodal authentication enables highly accurate biometric authentication, the burden on the user may increase due to the need to present multiple biometric information. For example, when biometric authentication is performed using a face image and an iris image, face authentication may fail if the user wears a mask. In such a case, the user needs to remove the mask in order to perform authentication. This is especially inconvenient when the user has luggage in both hands.
In this way, if multimodal authentication is uniformly adopted regardless of the situation in which biometric authentication is performed, the convenience of the user may be reduced. The techniques disclosed in Patent Documents 1 to 3 do not consider such a problem.

This disclosure is made to solve such a problem, and is an authentication control device, an authentication system, an authentication control method, and a non-authentication control device, which can reduce a decrease in user convenience in multimodal authentication. The purpose is to provide a temporary computer-readable medium.

The authentication control device according to this disclosure is
A biometric information acquisition means for acquiring the first biometric information and the second biometric information of a predetermined user, and
An authentication control means for controlling at least one of a first biometric authentication using the first biometric information and a second biometric authentication using the second biometric information.
When at least one of the first biometric authentication and the second biometric authentication is successful, a determination means for determining whether or not to use the result of the other biometric authentication.
It is equipped with.

The authentication system for this disclosure is
An authentication terminal that acquires multiple types of biometric information from a given user,
The authentication control device connected to the authentication terminal and
Equipped with
The authentication control device is
The first biometric information and the second biometric information of the user are acquired from the authentication terminal, and the user's first biometric information and the second biometric information are acquired.
At least one of the first biometric authentication using the first biometric information and the second biometric authentication using the second biometric information is controlled.
When at least one of the first biometric authentication and the second biometric authentication is successful, it is determined whether or not to use the result of the other biometric authentication.

The authentication control method for this disclosure is
The computer
Acquire the first biometric information and the second biometric information of a predetermined user,
At least one of the first biometric authentication using the first biometric information and the second biometric authentication using the second biometric information is controlled.
When at least one of the first biometric authentication and the second biometric authentication is successful, it is determined whether or not to use the result of the other biometric authentication.

Non-temporary computer-readable media containing the authentication control program for this disclosure may be used.
The biometric information acquisition process for acquiring the first biometric information and the second biometric information of a predetermined user, and
Authentication control processing that controls at least one of the first biometric authentication using the first biometric information and the second biometric authentication using the second biometric information, and
When at least one of the first biometric authentication and the second biometric authentication is successful, a determination process for determining whether or not to use the result of the other biometric authentication, and
Is to be executed by the computer.

According to the present disclosure, it is possible to provide an authentication control device, an authentication system, an authentication control method, and a non-temporary computer-readable medium that can reduce the deterioration of user convenience in multimodal authentication.

It is a block diagram which shows the structure of the authentication control apparatus which concerns on Embodiment 1. FIG. It is a flowchart which shows the process of the authentication control apparatus which concerns on Embodiment 1. FIG. It is a block diagram which shows the structure of the authentication system which concerns on Embodiment 2. It is a block diagram which shows the structure of the authentication apparatus which concerns on Embodiment 2. FIG. It is a flowchart which shows the biometric information registration process of the authentication apparatus which concerns on Embodiment 2. It is a flowchart which shows the biometric authentication process of the authentication apparatus which concerns on Embodiment 2. FIG. It is a block diagram which shows the structure of the authentication terminal which concerns on Embodiment 2. FIG. It is a block diagram which shows the structure of the authentication control apparatus which concerns on Embodiment 2. FIG. It is a figure which shows an example of the biometric authentication system used in the authentication control system which concerns on Embodiment 2. FIG. It is a flowchart which shows the process of the authentication control apparatus which concerns on Embodiment 2. It is a flowchart which shows the process of the authentication control apparatus which concerns on Embodiment 3. It is a block diagram which shows the structure of the authentication control apparatus which concerns on Embodiment 4. FIG. It is a block diagram which shows the structure of the authentication control apparatus which concerns on Embodiment 5.

Hereinafter, Embodiment 1 of the present disclosure will be described in detail with reference to the drawings. In each drawing, the same or corresponding elements are designated by the same reference numerals, and duplicate explanations are omitted as necessary for the sake of clarity of explanation.

<Embodiment 1>
FIG. 1 is a block diagram showing a configuration of the authentication control device 10 according to the present embodiment. As shown in FIG. 1, the authentication control device 10 includes a biometric information acquisition unit 11, an authentication control unit 12, and a determination unit 13.
The biometric information acquisition unit 11 acquires the first biometric information and the second biometric information of a predetermined user.
The authentication control unit 12 controls at least one of the first biometric authentication using the first biometric information and the second biometric authentication using the second biometric information.
If at least one of the first biometric authentication and the second biometric authentication is successful, the determination unit 13 determines whether or not to use the result of the other biometric authentication. When the authentication control unit 12 controls (executes) only one of the first biometric authentication and the second biometric authentication, the determination unit 13 determines the success or failure of the executed biometric authentication as "one". Of course. Further, "using the result of the other biometric authentication" includes, for example, providing services and performing various controls according to the result. Further, when it is determined that the biometric authentication of the other is not executed and "the result of the biometric authentication of the other is used", the authentication control unit 12 may control (execute) the biometric authentication of the other.

FIG. 2 is a flowchart showing the flow of the authentication control method according to the first embodiment.
First, the biometric information acquisition unit 11 acquires the first biometric information and the second biometric information of a predetermined user (S11). Next, the authentication control unit 12 controls at least one of the first biometric authentication using the first biometric information and the second biometric authentication using the second biometric information (S12). When at least one of the first biometric authentication and the second biometric authentication is successful (Yes in S13), the determination unit 13 determines whether or not to use the result of the other biometric authentication (S14). When both the first and second biometric authentications fail (No in S13), the authentication control device 10 ends the process.

As described above, according to the authentication control device 10 according to the present embodiment, if at least one of the first biometric authentication and the second biometric authentication is successful, the result of the other biometric authentication is used. Since it is determined whether or not it is, it is possible to reduce the deterioration of user convenience in multimodal authentication.

The authentication control device 10 includes a processor, a memory, and a storage device as a configuration (not shown). Further, the storage device stores a computer program in which the processing of the authentication control method according to the first embodiment is implemented. Then, the processor reads the computer program from the storage device into the memory and executes the computer program. As a result, the processor realizes the functions of the biometric information acquisition unit 11, the authentication control unit 12, and the determination unit 13.

Alternatively, the biometric information acquisition unit 11, the authentication control unit 12, and the determination unit 13 may each be realized by dedicated hardware. Further, a part or all of each component of each device may be realized by a general-purpose or dedicated circuitry, a processor, or a combination thereof. These may be composed of a single chip or may be composed of a plurality of chips connected via a bus. A part or all of each component of each device may be realized by the combination of the circuit or the like and the program described above. Further, as a processor, a CPU (Central Processing Unit), a GPU (Graphics Processing Unit), an FPGA (field-programmable gate array), or the like can be used.

Further, when a part or all of each component of the authentication control device 10 is realized by a plurality of information processing devices and circuits, the plurality of information processing devices and circuits may be centrally arranged. It may be distributed. For example, the information processing device, the circuit, and the like may be realized as a form in which each is connected via a communication network, such as a client-server system and a cloud computing system. Further, the function of the authentication control device 10 may be provided in the SaaS (Software as a Service) format.

<Embodiment 2>
The second embodiment is a specific example of the first embodiment described above. FIG. 3 is a block diagram showing the overall configuration of the authentication system 1000 according to the second embodiment.
The authentication system 1000 includes an authentication device 100, an authentication control device 200, and authentication terminals 400a to 400g. Each of the authentication device 100, the authentication control device 200, and the authentication terminals 400a to 400g is connected via the network N. Here, the network N is a wired or wireless communication line.

In the second embodiment, the case where the authentication system 1000 is realized in an accommodation facility such as a hotel will be described as an example. First, the outline of the present embodiment will be described with reference to FIG.

As shown in FIG. 3, the authentication terminals 400a to 400g are installed at places in the hotel where biometric authentication is required. Each authentication terminal 400 performs biometric authentication to the user U in each application and installation location. Each authentication terminal 400 supports multimodal authentication, and for example, authentication can be performed by either face authentication or iris authentication. Each authentication terminal 400 is, for example, a digital signage, and includes a display unit 440 that displays a display prompting the user U for biometric authentication and a display indicating the result of the authentication result.

Here, the user U who is a customer of the hotel will be described as the user U1. The user U1 registers in advance the information necessary for accommodation (accommodation date, name, contact information, etc.) in the authentication control device 200 through a reservation web site or the like. Further, the authentication control device 200 stores that the user U1 is a customer in association with the user ID as an attribute of the user U1. Further, the user U1 registers the face image of the user U1 in the authentication device 100 in advance through a reservation web site or the like. As a result, the user U1 can use face recognition in the hotel.

The authentication terminals 400a to 400g collate the face image registered in the authentication device 100 in advance with the face image taken in the hotel by comparing their characteristic information, and perform biometric authentication for the user U1. By succeeding in biometric authentication at each authentication terminal 400, the user U1 can receive a predetermined service in the hotel. The user U1 may register the iris image together with the face recognition image in advance, but since a dedicated camera (infrared camera) is required to acquire the iris image, the user U1 is only the face image here. Will be explained as if it were registered in advance. Therefore, the user U1 registers only the face image by himself / herself from the web site or the like in advance, and registers the iris image by using the authentication terminal 400 after visiting the hotel. The user U1 may register in advance whether or not he / she agrees to use the iris authentication including the shooting of the iris at the time of making an accommodation reservation. This makes it possible to promptly carry out the iris registration procedure after visiting the museum.

When the user U1 visits the hotel, the authentication terminal 400a installed at the entrance performs biometric authentication to the user U1. The authentication terminal 400a can urge the user U1 to perform face authentication by displaying a message on the display unit 440 or the like. Further, the authentication terminal 400a may provide guidance to the user U1 by voice along with a display by a speaker or the like.

The authentication terminal 400a photographs the face of the user U1 with a built-in camera, and authenticates the face of the user U1 using the captured face image. Specifically, the authentication terminal 400a transmits a biometric authentication request to the authentication control device 200 together with the captured face image. The authentication control device 200 receives the biometric authentication request from the authentication terminal 400a, performs a predetermined process, and transmits the biometric authentication request to the authentication device 100. The authentication device 100 receives a biometric authentication request from the authentication control device 200, performs biometric authentication, and returns the result to the authentication control device 200. The authentication control device 200 returns the result to the authentication terminal 400a.
By the above processing, the authentication terminal 400a can receive the authentication result for the user U1. More details about these processes will be described later.

When the face authentication of the user U1 is successful, the authentication terminal 400a displays a message such as "Successful face authentication" or "Welcome, Mr. XX" on the display unit 440. As a result, the user U1 can grasp that the face authentication has been successful from the face image registered at the time of reservation.

Subsequently, the user U1 performs the check-in procedure at the authentication terminal 400b installed at the counter. First, the authentication terminal 400b photographs the face of the user U1 with the built-in camera, and performs face authentication of the user U1 based on the captured face image. If the face recognition is successful, the employee at the counter performs the check-in procedure for the user U1. Subsequently, the authentication terminal 400b displays a display prompting the user U1 to take an iris in order to use the iris authentication in the scene of providing various services in the hall. If the user U1 has registered in advance that he / she agrees to use the iris authentication, the authentication terminal 400b will display a message such as "Next, the iris registration process will be performed based on the permission to use the iris authentication." It is displayed on the display unit 440 and the iris of the user U1 is photographed. If the user U1 does not consent to the use of iris authentication in advance, the authentication terminal 400b displays necessary items on the display unit 440 and confirms to the user U1 whether or not he / she agrees to use the iris recognition. .. The user U1 answers whether or not he / she agrees with the iris authentication by, for example, pressing a button displayed on the display unit 440. When the user U1 agrees to shoot the iris, the authentication terminal 400b shoots the iris of the user U1 by the built-in infrared camera.

The captured iris image is stored in the authentication device 100 in association with the user ID and the like via the network N. As a result, the user U1 can use the iris authentication in the subsequent procedures. Therefore, the user U1 can not only use face authentication and iris authentication independently, but can also handle the case where multimodal authentication using a plurality of authentication methods is required.
The iris registration process may be performed on any authentication terminal 400 other than the authentication terminal 400b. In addition, regardless of whether or not you have consented to the use of iris authentication in advance, a message such as "Iris authentication is available. Please register the iris." Is displayed to the user U1 who has not registered the iris. It may be displayed on the unit 440 to prompt the user U1 to register the iris. Further, the authentication terminal 400 may not perform the above display for the user U who has input that he / she does not agree to use the iris authentication.

After completing the check-in procedure, the user U1 performs biometric authentication using the authentication terminal 400c at the entrance of the accommodation building when moving from the entrance to the accommodation building. Multimodal certification is performed here because access to the accommodation building needs to be strictly controlled. The authentication terminal 400c performs face authentication and iris authentication to the user U1. If the authentication is successful, the door to the accommodation building opens and the user U1 can enter the accommodation building. The display unit 440 displays a message such as "Mr. XX, face authentication and iris authentication have been successful."

Subsequently, the user U1 enters the accommodation room reserved by himself / herself. As shown in FIG. 3, authentication terminals 400d to 400f are installed at the entrances of the rooms A to C, respectively. The user U1 authenticates with the authentication terminal 400 installed in front of the room reserved by the user U1. Since strict identity verification is performed by multimodal authentication at the entrance of the accommodation building, user U1 is authenticated only by face authentication here.

For example, when the room in which the user U1 stays is the room A, the user U1 authenticates at the authentication terminal 400d installed in front of the room A. If the face recognition is successful, the room A is unlocked and the user U1 can enter the room A. If the user U1 tries to authenticate with the authentication terminal 400 installed in front of the room where he / she is not planning to stay, the authentication fails. In this case, the authentication terminal 400 may display the fact that the authentication has failed on the display unit 440 and prompt the user U1 to confirm the room number.

Also, when user U1 makes a purchase at a souvenir shop, it is necessary to strictly confirm his / her identity because payment processing is involved. Therefore, the authentication terminal 400g installed at the souvenir shop's cash register performs multimodal authentication using face authentication and iris authentication.

Then, when the customer checks out, the user U1 is authenticated by the authentication terminal 400b installed at the counter, as at the time of check-in. Since check-out involves payment of accommodation charges, etc., multi-modal authentication by face authentication and iris authentication is performed as in the case of souvenir shops.

Up to this point, the biometric authentication method used in each situation has been explained assuming that the user U is a customer staying at a hotel. In the following, a case where the user U is not a customer but an employee of the hotel will be described.

User U, who is an employee, will be described as user U2. The user U2 takes an image of the face and the iris using the authentication terminal 400 or the like, and registers these biometric information in the authentication device 100 in advance. As a result, the user U2 can use face authentication and iris authentication at each authentication terminal 400 in the hotel. Further, the authentication control device 200 stores that the user U2 is an employee in association with the user ID as an attribute of the user U2.

As for the user U2, biometric authentication is performed at each authentication terminal 400 as in the case of the user U1. However, even if the authentication terminal 400 is installed in the same place, the biometric authentication method used differs between the user U1 who is a customer and the user U2 who is an employee. The details of the specific processing will be described later, and the differences due to the attributes of the user U will be described below.

FIG. 9 is a diagram showing an example of biometric authentication required according to the attribute of the user U and the installation location of the authentication terminal 400. The upper part of the table shown in FIG. 9 shows the biometric authentication required for the user U1 already described. As shown in FIG. 9, the authentication method in the accommodation building or the accommodation room is different between the user U1 and the user U2, for example.
For example, in the above-mentioned example of the user U1, authentication is performed using face authentication and iris authentication at the authentication terminal 400c at the entrance of the accommodation building. However, user U2 can pass through the same accommodation building entrance only with successful iris recognition. Therefore, the user U2 can enter the accommodation building from the entrance even if he / she is wearing a mask, for example. When the user U2 succeeds in iris authentication on the authentication terminal 400c, the display unit 440 displays a message such as "Employee ID: XX number △△ -san iris authentication succeeded."

On the other hand, in the above-mentioned example of the user U1, the user U1 can enter the room A only by face authentication, whereas the user U2 needs to succeed in face authentication and iris authentication in order to enter the rooms A to C. be. This is because, unlike the case of the user U1, the user U2 only performs face recognition at the entrance of the accommodation building, so that it is necessary to strictly confirm the identity when entering the accommodation room.

Further, when the user U2 purchases a product at a souvenir shop, it is necessary to perform multimodal authentication by face authentication and iris authentication as in the case of user U1. This is because it is necessary for even employees to strictly verify their identities for processing including payment.

As described above, according to the authentication system 1000 according to the present embodiment, the number and method of biometric authentication performed by each authentication terminal 400 can be determined according to the attribute of the user U, the installation location of the authentication terminal 400, and the use of biometric authentication. Can be decided. As a result, multimodal authentication can be appropriately performed without deteriorating the convenience of the user U.

The above is the outline of the processing performed by the authentication system 1000 according to this embodiment. Subsequently, each of the authentication device 100, the authentication terminal 400, and the authentication control device 200 constituting the authentication system 1000 will be described in detail.

In response to the biometric authentication request received from the outside, the authentication device 100 collates the images such as faces and irises included in the request or the biometric information of these with the biometric information of each user U, and collates the result (the collation result ( It is an information processing device that returns the authentication result) to the requester. The authentication device 100 stores biometric information of a plurality of users U. Further, the authentication device 100 can store a plurality of biological feature information for one user U and perform authentication using each biological feature information. The biometric information is the characteristic information of the biometric information used for biometric authentication. The biological information is, for example, a face, an iris, a fingerprint, a vein, or the like. In the second embodiment, face authentication and iris authentication are used as an example of biometric authentication.

FIG. 4 is a block diagram showing the configuration of the authentication device 100 according to the second embodiment. The authentication device 100 includes a biometric information DB (DataBase) 110, a detection unit 120, a feature point extraction unit 130, a registration unit 140, and an authentication unit 150.

The biometric information DB 110 stores the user ID 111, the biometric information 112 of the user ID, and the biometric authentication method 113 in association with each other. The biological feature information 112 is a set of feature points extracted from a face image or an iris image. The biometric authentication method 113 is an authentication method such as face authentication, iris authentication, and vein authentication. The authentication device 100 may delete the biological feature information 112 in the biological information DB 110 in response to a request from the registered user U of the biological feature information 112. Alternatively, the authentication device 100 may be deleted after a certain period of time has elapsed from the registration of the biological feature information 112.

The detection unit 120 detects a face or iris region included in the registered image for registering biological information, and outputs the region to the feature point extraction unit 130. The feature point extraction unit 130 extracts feature points from the face region or the like detected by the detection unit 120, and outputs biological feature information to the registration unit 140. Further, the feature point extraction unit 130 extracts feature points included in a face image or the like received from the authentication control device 200, and outputs biological feature information to the authentication unit 150.

The registration unit 140 newly issues the user ID 111 when registering the biological feature information. The registration unit 140 registers the issued user ID 111 and the biological feature information 112 extracted from the registered image in the biological information DB 110 in association with each other. The authentication unit 150 performs biometric authentication using the biometric information 112. Specifically, the authentication unit 150 collates the biological feature information extracted from the face image or the like with the biological feature information 112 in the biological information DB 110. The authentication unit 150 returns to the authentication control device 200 whether or not the biological feature information matches. The presence or absence of matching of biological feature information corresponds to the success or failure of authentication. In addition, the fact that the biological feature information matches (with matching) means that the degree of matching is equal to or higher than a predetermined value.

Subsequently, the biometric information registration process and the authentication process according to the second embodiment will be described. FIG. 5 is a flowchart showing the flow of the biometric information registration process according to the second embodiment. First, the authentication device 100 acquires the registered image included in the biometric information registration request (S21). For example, the authentication device 100 receives a biometric information registration request from an authentication terminal 400, an accommodation web site, or the like via a network N. Next, the detection unit 120 detects a face region or the like included in the registered image (S22). Next, the feature point extraction unit 130 extracts feature points from the face region or the like detected in step S22, and outputs biological feature information to the registration unit 140 (S23). Finally, the registration unit 140 issues the user ID 111 and registers the user ID 111, the biometric information 112, and the biometric authentication method 113 in the biometric information DB 110 in association with each other (S24). The authentication device 100 may receive the biometric information 112 from a terminal or the like owned by the user U, and may register the biometric information 112 in the biometric information DB 110 in association with the user ID 111 and the biometric authentication method 113.

FIG. 6 is a flowchart showing the flow of biometric authentication processing by the authentication device 100 according to the second embodiment. First, the feature point extraction unit 130 acquires a face image or the like for authentication included in the biometric authentication request (S31). For example, the authentication device 100 receives a biometric authentication request from the authentication control device 200 via the network N, and extracts biometric characteristic information from the biometric image included in the biometric authentication request as in steps S21 to S23. Alternatively, the authentication device 100 may receive biometric information from the authentication control device 200.

Next, the authentication unit 150 collates the acquired biological characteristic information with the biological characteristic information 112 of the biological information DB 110 (S32). When the biometric information matches, that is, when the degree of matching of the biometric information is equal to or higher than a predetermined value (Yes in S33), the authentication unit 150 identifies the user ID 111 of the user U whose biometric information matches (S34). ). Then, the authentication unit 150 returns the user ID 111 specified that the biometric authentication was successful to the authentication control device 200 (S35). When there is no matching biometric information (No in S33), the authentication unit 150 returns to the authentication control device 200 that the biometric authentication has failed (S36).

Note that in step S32, the authentication unit 150 does not need to try to collate with all the biological feature information 112 in the biological information DB 110. For example, the authentication unit 150 can receive the biometric authentication request including the biometric authentication method 113, and can perform collation from those that match the biometric authentication method 113. Alternatively, the authentication unit 150 may preferentially try to collate with the biometric characteristic information registered in the period from the day when the biometric authentication request is received to several days before. These can improve the collation speed. Further, when the above-mentioned priority collation fails, it is advisable to collate with all the remaining biological characteristic information.

Next, the authentication terminal 400 will be described in detail. FIG. 7 is a block diagram showing the configuration of the authentication terminal 400 according to the second embodiment. Since the authentication terminals 400a to 400g are the same as the authentication terminal 400, their illustrations are omitted. The authentication terminal 400 includes a first camera 410, a second camera 411, a storage unit 420, a communication unit 430, a display unit 440, and a control unit 450.

The first camera 410 and the second camera 411 are photographing devices that take pictures under the control of the control unit 450. In the second embodiment, the first camera 410 photographs the face of the user U, and the second camera 411 photographs the iris of the user U. The second camera 411 is an infrared camera capable of photographing an iris.

The storage unit 420 is a storage device that stores a program for realizing each function of the authentication terminal 400.
The communication unit 430 is a communication interface with the network N.
The display unit 440 is at least a display device. Further, the display unit 440 may be an input / output unit including a display device and an input device, for example, a touch panel.

The control unit 450 controls the hardware of the authentication terminal 400. The control unit 450 includes a shooting control unit 451, a registration unit 452, an authentication control unit 453, and a display control unit 454.

The shooting control unit 451 controls the first camera 410 and the second camera 411, and shoots the registered image or the authentication image of the user U. The registered image and the authentication image taken by the first camera 410 and the second camera 411 are images including at least the face region and the iris region of the user U, respectively. The shooting control unit 451 outputs the registered image to the registration unit 452. Further, the photographing control unit 451 outputs the authentication image to the authentication control unit 453.

The registration unit 452 transmits a biometric information registration request including a registered image to the authentication device 100 via the network N.

The authentication control unit 453 transmits a biometric authentication request including an authentication image to the authentication control device 200 via the network N. Further, the authentication control unit 453 transmits the place ID for identifying the installed place and the use of the biometric authentication to the authentication control device 200 including the use of the biometric authentication in the biometric authentication request. Uses include, for example, information on whether or not to include payment processing and identity verification. Further, the authentication control unit 453 may include the terminal ID that identifies the authentication terminal 400 in the biometric authentication request and transmit it to the authentication control device 200 instead of the place ID. In that case, the authentication control device 200 associates the terminal ID of the authentication terminal 400 with the location ID of the installation location of the authentication terminal 400 and stores it in the storage unit 210 in advance. As a result, the authentication control device 200 can refer to the storage unit 210 and acquire the location ID of the authentication terminal 400 based on the terminal ID included in the received biometric authentication request.

The authentication control unit 453 receives the biometric authentication result and outputs the biometric authentication result to the display control unit 454. If the authentication result is successful, the authentication control unit 453 outputs an instruction signal for executing the service to the control device of the predetermined service. The predetermined service is, for example, opening / closing a door (gate), unlocking a lock, executing a payment process, executing a check-in process, executing a check-out process, and the like. Not limited to these, predetermined services include various services provided according to the success of user U authentication. As a result, the user U can receive the provision of a predetermined service requested to be authenticated, such as entering the accommodation room and payment processing, by using the result of the biometric authentication.

The display control unit 454 displays the display content according to the biometric authentication result on the display unit 440. The display control unit 454 displays, for example, to the user U that the authentication has succeeded or failed. Further, the display control unit 454 may display the biometric authentication method, the name of the user U, and the like on the display unit 440 together with the authentication result. For example, the display control unit 454 displays "Mr. XX, face authentication succeeded.", "Mr. XX, face authentication and iris authentication succeeded." Information such as the name may be hidden or in a format that cannot identify an individual, if necessary. If the user U is an employee, the display control unit 454 displays information such as the employee ID and affiliation, for example, "Employee ID: XX number △△ -san, iris authentication was successful." It may be displayed at the same time. In addition to these, the display control unit 454 may guide the user U to perform operations necessary for biometric authentication (remove the mask, turn the face toward the authentication terminal 400, etc.).

Return to Fig. 3 and continue the explanation. The authentication control device 200 is an information processing device that controls the biometric authentication process of the user U in the authentication terminal 400. The authentication control device 200 may be redundant to a plurality of servers, or each functional block may be realized by a plurality of computers.

Specifically, first, the authentication control device 200 receives a biometric authentication request including the biometric information of the user U, the location ID of the authentication terminal 400, and the use of biometric authentication from the authentication terminal 400. The authentication control device 200 determines a first biometric authentication method from a plurality of biometric authentication methods according to the installation location of the authentication terminal 400 or the use of biometric authentication, and makes a first biometric authentication request by the determined method. It is transmitted to the authentication device 100.

When the authentication control device 200 receives from the authentication device 100 that the first biometric authentication has been successful, the authentication control device 200 identifies the attribute of the user U. The authentication control device 200 determines whether or not to use the result of the second biometric authentication in consideration of the attribute of the user U in addition to the installation location of the authentication terminal 400 and the use of biometric authentication. When it is determined that the result of the second biometric authentication is used, the authentication control device 200 determines that the second biometric authentication is performed for the user U, and controls the second biometric authentication.

If it is determined to perform the second biometric authentication, the authentication control device 200 transmits the second biometric authentication request to the authentication device 100. When the authentication control device 200 receives from the authentication device 100 that the second biometric authentication has been successful, the authentication control device 200 transmits the fact to the authentication terminal 400.
By the above processing, the user U who has succeeded in biometric authentication can be provided with a desired service such as entry into an accommodation room and payment processing.

Next, the authentication control device 200 will be described in detail. FIG. 8 is a block diagram showing the configuration of the authentication control device 200 according to the second embodiment. The authentication control device 200 includes a storage unit 210, a memory 220, a communication unit 230, and a control unit 240.

The storage unit 210 is a storage device for a hard disk, a flash memory, or the like. The storage unit 210 stores the program 211, the attribute information 212, and the authentication method information 213.
The program 211 is a computer program in which the processing of the authentication control method according to the second embodiment is implemented.

The attribute information 212 is the attribute information of each user U. Specifically, the attribute information 212 is information in which the user ID 2121 and the attribute 2122 are associated with each other. The user ID 2121 is information that identifies the user U. The attribute 2122 is information indicating the attribute of the user U, and includes, for example, whether the user is a customer or an employee.

The authentication method information 213 is information in which the location ID 2131, the use 2132, the attribute 2133, and the authentication method 2134 are associated with each other. As already described with reference to FIG. 9, the authentication method and the combination thereof performed on the user U are determined according to the installation location of the authentication terminal 400, the use of biometric authentication, and the attributes of the user U. The authentication method information 213 is stored in association with each other.
The combination of authentication methods shown in FIG. 9 is an example, and is not limited to this. For example, the number of authentication methods to be combined may be increased or decreased depending on the high accuracy of biometric authentication, or the attributes of the user U may be further subdivided. For example, for employees, the combination of authentication methods may be adjusted according to the position and years of employment, and the application of iris recognition may be changed between those who wear masks less frequently and those who wear masks for cleaning work. May be good.

The memory 220 is a volatile storage device such as a RAM (Random Access Memory), and is a storage area for temporarily holding information when the control unit 240 operates.
The communication unit 230 is a communication interface with the network N.

The control unit 240 is a processor, that is, a control device that controls each configuration of the authentication control device 200. The control unit 240 reads the program 211 from the storage unit 210 into the memory 220, and executes the program 211. As a result, the control unit 240 realizes the functions of the biological information acquisition unit 241, the authentication control unit 242, the determination unit 243, and the determination unit 244.

The biological information acquisition unit 241 is an example of the above-mentioned biological information acquisition unit 11. The biometric information acquisition unit 241 acquires the first biometric information and the second biometric information of a predetermined user U who performs biometric authentication. Specifically, the biometric information acquisition unit 241 acquires the first and second biometric information from the authentication terminal 400 via the network N. The first and second biometric information is, for example, biometric information of the face and iris of the user U taken by the first camera 410 and the second camera 411.

The authentication control unit 242 is an example of the above-mentioned authentication control unit 12. The authentication control unit 242 controls at least one of the first biometric authentication using the first biometric information and the second biometric authentication using the second biometric information.
In the present embodiment, first, the authentication control unit 242 controls the first biometric authentication by using the first biometric information acquired by the biometric information acquisition unit 241. Specifically, the authentication control unit 242 transmits the first biometric authentication request to the authentication device 100 via the network N. The first biometric authentication request includes the first biometric information. The first biometric authentication method is determined by the determination unit 244, which will be described later. The first biometric authentication request may include information on the first biometric authentication method. This can improve the collation speed in the authentication device 100.

Subsequently, the authentication control unit 242 controls the second biometric authentication when it is determined by the determination unit 243, which will be described later, to perform the second biometric authentication for the user U. Specifically, the authentication control unit 242 transmits a second biometric authentication request to the authentication device 100 via the network N. The second biometric authentication request includes the second biometric information of the user U. Similar to the above, the second biometric authentication request may include information on the second biometric authentication method.

The determination unit 243 is an example of the determination unit 13 described above. If at least one of the first biometric authentication and the second biometric authentication is successful, the determination unit 13 determines whether or not to use the result of the other biometric authentication. In the present embodiment, the determination unit 243 determines whether or not to use the result of the second biometric authentication when the first biometric authentication is successful. Specifically, the determination unit 243 identifies the attribute of the user U who has succeeded in the first biometric authentication, and determines whether or not to use the result of the second biometric authentication based on the identified attribute. Further, when it is determined that the result of the second biometric authentication is used, the determination unit 243 determines that the second biometric authentication is performed.

The determination unit 243 determines whether or not to use the result of the second biometric authentication described above, for example, based on the conditions shown in the table of FIG. That is, the determination unit 243 determines whether or not to use the result of the second biometric authentication according to the attribute of the user U, the installation location of the authentication terminal 400, and the use of the biometric authentication, and then the second biometric authentication. Judge whether or not to perform.

For example, in the example shown in FIG. 9, the authentication terminal 400 is installed at the entrance of the accommodation building (a common entrance to a plurality of service provision locations for each of a plurality of service recipients of services provided according to the success of authentication). It is assumed that the user U1 has succeeded in face authentication as the first biometric authentication. The determination unit 243 identifies the attribute of the user U1 as a customer (service provider) based on the attribute information 212. Further, the determination unit 243 determines whether or not to use the result of the second biometric authentication for the user U1 with reference to the authentication method information 213 based on the attribute of the specified user U1. At the entrance of the accommodation building, the user U1 who is a customer needs not only face authentication but also iris authentication. Therefore, the determination unit 243 determines that the result of the second biometric authentication is used, and the second biometric authentication is used. It is determined that biometric authentication will be performed.
Similarly, when the user U is an employee (service provider), the determination is made based on the authentication method information 213. The determination unit 243 identifies that the attribute of the user U2 is an employee for the user U2 who has succeeded in the iris authentication which is the first biometric authentication, and refers to the authentication method information 213 based on the specified attribute. It is determined that the result of the second biometric authentication is not used for U2, and it is determined that the second biometric authentication is not performed.

By making such a judgment, it is possible to strictly verify the identity of the customer when entering the accommodation building by face recognition and iris recognition, so that it is possible to prevent a person who is not a customer from entering the accommodation building. be able to. In addition, employees can enter the accommodation building only with iris recognition, so even if the employee is wearing a mask, it is possible to efficiently verify the identity without removing the mask. can. Since iris authentication has higher authentication accuracy than face authentication, it is considered possible to perform strict identity verification even when entering the accommodation building using only iris authentication.

Further, in the example shown in FIG. 9, the authentication terminal 400 is installed in front of the accommodation room (the entrance of the service providing place provided according to the success of biometric authentication), and the user U1 faces as the first biometric authentication. It is assumed that the authentication is successful.
Similar to the above, the determination unit 243 identifies the attribute of the user U1 as a customer based on the attribute information 212. Based on the attribute of the specified user U1, the determination unit 243 determines that the result of the second biometric authentication is not used for the user U1 by referring to the authentication method information 213, and also performs the second biometric authentication. Judge not to do.
Further, when the user U2 succeeds in face recognition as the first biometric authentication, the determination unit 243 identifies the attribute of the user U2 as an employee, and based on the specified attribute, performs the authentication method information 213. It is determined that the result of the second biometric authentication is used by reference. Then, the determination unit 243 determines that the second biometric authentication is performed.

By making such a judgment, a customer who has already performed multimodal authentication at the entrance of the accommodation building can be permitted to enter the room only by face authentication when entering the accommodation room. In addition, it is possible to verify the identity of employees more strictly than at the entrance of the accommodation building.

Further, when the use of the authentication terminal 400 includes payment processing, the determination unit 243 determines that the second biometric authentication is used regardless of the attribute of the user U, and performs the second biometric authentication. You may judge. In the example shown in FIG. 9, in the souvenir shop, a second biometric authentication is required regardless of whether the attribute of the user U is a customer or an employee. As a result, it is possible to perform stricter identity verification for payment processing as compared with the provision of other services.

The determination unit 244 determines the first biometric authentication method from a plurality of biometric authentication methods according to the use or installation location of the authentication terminal 400. For example, in the example shown in FIG. 9, iris authentication is required at the entrance of the accommodation building regardless of the attribute of the user U. Therefore, the determination unit 244 decides to use iris recognition as the first biometric authentication method. Similarly, in the accommodation room, the first biometric authentication is determined as face authentication.

The determination unit 244 may determine the first biometric authentication method in consideration of the accuracy of the authentication method. For example, even if only face authentication is required as the first biometric authentication, if the user U is wearing a mask and can only acquire the iris image, iris authentication with higher authentication accuracy is determined as the first biometric authentication method. You can do it.
Further, in the case where any authentication method may be used and a plurality of biometric information can be acquired from the authentication terminal 400, a plurality of biometric information is acquired and the first biometric method is given priority to a more accurate authentication method. It may be decided as authentication.

FIG. 10 is a flowchart showing the flow of the authentication control process according to the second embodiment. First, the biometric information acquisition unit 241 receives the biometric authentication request from the authentication terminal 400, and acquires the first and second biometric information (S401).

Next, the determination unit 244 determines the first biometric authentication method according to the use or installation location of the authentication terminal 400 (S402). The authentication control unit 242 transmits a first biometric authentication request corresponding to the determined first biometric authentication method to the authentication device 100 (S403).

The authentication control unit 242 receives the result of the first biometric authentication from the authentication device 100, and determines whether or not the first biometric authentication is successful (S404). When the first biometric authentication is successful (Yes in S404), the determination unit 243 identifies the attribute of the user U (S405). Further, the determination unit 243 determines whether or not to use the result of the second biometric authentication, and determines whether or not to perform the second biometric authentication according to the determination result (S406). For example, the determination unit 243 makes a determination with reference to the authentication method information 213.

When it is determined to perform the second biometric authentication (Yes in S406), the authentication control unit 242 transmits the second biometric authentication request to the authentication device 100 (S407).

The authentication control unit 242 receives the result of the second biometric authentication from the authentication device 100, and determines whether or not the second biometric authentication is successful (S408). When the second biometric authentication is successful (Yes in S408), the authentication control unit 242 returns to the authentication terminal 400 that the biometric authentication was successful (S409).

When the first biometric authentication fails in step S404 (No in S404) and when the second biometric authentication fails in step S408 (No in S408), the authentication control unit 242 authenticates that the biometric authentication has failed. Reply to the terminal 400 (S410).

If it is determined in step S406 that the second biometric authentication is not performed (No in S406), the authentication control unit 242 returns to the authentication terminal 400 that the biometric authentication was successful (S409).

When biometric authentication is successful (S409), an instruction signal for executing processing such as opening / closing the door (gate), unlocking the lock, executing payment processing, executing check-in processing, and executing check-out processing is sent from the authentication terminal 400. It is output to the control device of each service. As a result, the user U can receive desired services such as entry into each facility and payment processing.

As described above, according to the authentication system 1000 according to the present embodiment, whether the attribute of the user U is specified by the success of the first biometric authentication and the result of the second biometric authentication is used based on the specified attribute. It is possible to determine whether or not to perform the second biometric authentication. Further, the first biometric authentication method can be determined according to the use or installation location of the authentication terminal 400. Therefore, for example, even if the user U is wearing a mask, depending on the attributes of the user U, the purpose of use of the authentication terminal 400, and the installation location, the identity verification of the user U can be appropriately performed without removing the mask. It can be carried out. Further, for example, in the payment process, strict identity verification can be performed according to the use of biometric authentication, such as requiring multimodal authentication regardless of the attribute of the user U.
From the above, according to the authentication system 1000 according to the present embodiment, it is possible to appropriately confirm the identity while reducing the deterioration of the convenience of the user U in the multimodal authentication.

<Embodiment 3>
The third embodiment is a modification of the second embodiment described above. In the second embodiment, the authentication control device 200 first controls the first biometric authentication, and then controls the second biometric authentication according to the success. On the other hand, the authentication control device 200 according to the present embodiment first controls both the first and second biometric authentication, and when at least one of these biometric authentication is successful, the result of the other biometric authentication is obtained. It determines whether or not to use it.

Since the configuration of the authentication control device 200 according to the present embodiment is the same as that of the second embodiment, the description thereof will be omitted.
FIG. 11 is a flowchart showing the flow of the authentication control process according to the present embodiment. First, the biometric information acquisition unit 241 receives the biometric authentication request from the authentication terminal 400, and acquires the first and second biometric information (S501).

Next, the authentication control unit 242 transmits the first and second biometric authentication requests using the acquired first and second biometric information to the authentication device 100 (S502). As in the second embodiment, the determination unit 244 may determine the first biometric authentication method, but since the first and second biometric authentications are performed together in the present embodiment, the description thereof will be omitted here.

The authentication control unit 242 receives the results of the first and second biometric authentications from the authentication device 100, and determines whether or not at least one of the biometric authentications has been successful (S503). If either biometric authentication is successful (Yes in S503), the determination unit 243 identifies the attribute of the user U (S504). Further, the determination unit 243 determines whether or not to use the result of the other biometric authentication based on the specified attribute (S505). For example, the determination unit 243 makes a determination with reference to the authentication method information 213.

When it is determined that the result of the other biometric authentication is used (Yes in S505), the authentication control unit 242 determines whether or not the other biometric authentication is successful (S506).

When the other biometric authentication is successful (Yes in S506), the authentication control unit 242 returns to the authentication terminal 400 that the biometric authentication was successful (S507).

When the first biometric authentication fails in step S503 (No of S503) and when the other biometric authentication fails in step S506 (No of S506), the authentication control unit 242 indicates that the biometric authentication has failed. Reply to 400 (S508).

If it is determined in step S505 that the result of the other biometric authentication is not used (No in S505), the authentication control unit 242 returns to the authentication terminal 400 that the biometric authentication was successful (S507). ..

If the biometric authentication is successful (S507), the user U can receive the desired service such as opening / closing the door (gate).

As described above, in the authentication control device 200 according to the present embodiment, the first and second biometric authentications are performed together, and when at least one of them succeeds, the attribute of the user U is specified and based on the specified attribute. It is determined whether or not to use the result of the other biometric authentication. For example, it is assumed that the user U performs face recognition and iris recognition when wearing a mask. It is considered that the user U fails in the face recognition and succeeds in the iris recognition. However, due to the success of the iris recognition, the authentication control device 200 identifies the attribute of the user U, and based on the attribute, the result of the face recognition ( Failure) can be determined. Therefore, for example, in a situation where the authentication is successful only by the success of the iris authentication, the user U receives the desired service even if the face authentication fails by determining that the face authentication result is not used. It becomes possible.
Therefore, according to the authentication control device 200 according to the present embodiment, the same effect as that of the second embodiment can be obtained.

<Embodiment 4>
The fourth embodiment is a modification of the second embodiment described above. The authentication control device 200a according to the present embodiment performs an authentication process for a biometric authentication request received from the authentication terminal 400 without going through the authentication device 100, and returns the result to the authentication terminal 400.

FIG. 12 is a block diagram showing the configuration of the authentication control device 200a according to the present embodiment. As shown in FIG. 12, the authentication control device 200a includes a storage unit 210, a memory 220, a communication unit 230, and a control unit 240. The storage unit 210 further stores the biological information 214 in addition to the program 211, the attribute information 212, and the authentication method information 213.

The biometric information 214 corresponds to the biometric information DB 110 of the above-mentioned authentication device 100, and the user ID 2141, the biometric characteristic information 2142, and the biometric authentication method 2143 are stored in association with each other.

The biometric information acquisition unit 241a determines whether or not the second biometric information is registered in the biometric information 214 for the user U who has succeeded in the first biometric authentication, and if the second biometric information is not registered, the user U The second biometric information is obtained from. For example, when the user U registers only the face information and the iris information is not registered, the biometric information acquisition unit 241a acquires the iris information of the user U. Then, the biometric information acquisition unit 241a registers the user ID, the registered first biometric information face information, and the acquired second biometric information iris information in association with the biometric information 214.

In acquiring the second biometric information, as described in the second embodiment, there is a method of displaying a message to the effect that the iris is to be photographed on the display unit 440 and obtaining the consent of the user U. When the user U agrees to take the iris, the second camera 411 takes the iris of the user U, and the biological information acquisition unit 241a acquires the iris image via the network N.

The biometric information acquisition unit 241a also has the functions of the detection unit 120, the feature point extraction unit 130, the registration unit 140, and the authentication unit 150 in the authentication device 100. That is, the biometric information acquisition unit 241a detects the iris region from the iris image included in the biometric information registration request received from the authentication terminal 400, extracts the characteristic information of the iris, and issues the user ID. Further, the biometric information acquisition unit 241a registers the biometric information 214 in which the user ID 2141 is associated with the first and second biometric information 2142 and the biometric authentication method 2143 in the storage unit 210.

The authentication control unit 242a performs biometric authentication by collating the feature information extracted from the area such as the face and iris of the user U included in the acquired captured image with the biometric feature information 2142 stored in the storage unit 210. To control.
Since the configurations other than the above are the same as those in the second embodiment, their description will be omitted.

As described above, according to the authentication control device 200a according to the present embodiment, the same effect as that of the second embodiment can be obtained.

<Embodiment 5>
The fifth embodiment is a modification of the second embodiment described above. The authentication control device 200b according to the present embodiment has the function of the authentication terminal 400 described in the second embodiment.

FIG. 13 is a block diagram showing a configuration of the authentication control device 200b according to the present embodiment. As shown in FIG. 13, the authentication control device 200b includes a storage unit 210, a memory 220, a communication unit 230, a control unit 240, a first camera 250, a second camera 251 and a display unit. It is equipped with 260.
Further, the control unit 240 can realize each function of the photographing control unit 245, the registration unit 246, and the display control unit 248 in addition to the functions described in the second embodiment.

The first camera 250, the second camera 251 and the display unit 260 correspond to the first camera 410, the second camera 411, and the display unit 440 in the second embodiment, respectively. That is, the first camera 250 photographs the face of the user U, for example, and the second camera 251 photographs the iris of the user U. The display unit 260 is at least a display device, and may be an output unit including an input device, for example, a touch panel.

The biometric information acquisition unit 241b acquires the first and second biometric information of the user U from the face image and the iris image of the user U taken by the first camera 250 and the second camera 251.

The shooting control unit 245, the registration unit 246, and the display control unit 248 correspond to the shooting control unit 451, the registration unit 452, and the display control unit 454 described in the second embodiment, respectively. However, the photographing control unit 245 outputs the registered image to the registration unit 246, but outputs the authentication image to the authentication control unit 242b.

The determination unit 244b determines a first biometric authentication method from a plurality of biometric authentication methods according to the application or installation location of the authentication control device 200b. The authentication control unit 242b controls the first biometric authentication corresponding to the determined first biometric authentication method.
Since the configurations other than the above are the same as those in the second embodiment, their description will be omitted.

As described above, according to the authentication control device 200b according to the present embodiment, the same effect as that of the second embodiment can be obtained.

Although described as a hardware configuration in the above-described embodiment, the present invention is not limited to this. The present disclosure can also be realized by causing the CPU to execute a computer program for arbitrary processing.

In the above example, the program can be stored and supplied to the computer using various types of non-transitory computer readable medium. Non-temporary computer-readable media include various types of tangible storage mediums. Examples of non-temporary computer-readable media include magnetic recording media (eg, flexible disks, magnetic tapes, hard disk drives), magneto-optical recording media (eg, magneto-optical disks), CD-ROMs (ReadOnlyMemory), CD-Rs, Includes CD-R / W, DVD (DigitalVersatileDisc), semiconductor memory (eg, mask ROM, PROM (ProgrammableROM), EPROM (ErasablePROM), flash ROM, RAM (RandomAccessMemory)). The program may also be supplied to the computer by various types of transient computer readable medium. Examples of temporary computer readable media include electrical, optical, and electromagnetic waves. The temporary computer-readable medium can supply the program to the computer via a wired communication path such as an electric wire and an optical fiber, or a wireless communication path.

The present disclosure is not limited to the above embodiment, and can be appropriately modified without departing from the spirit. Further, the present disclosure may be carried out by appropriately combining the respective embodiments.
For example, in the above description, face authentication and iris authentication are used as the first and second biometric authentication methods, but other biometric authentication methods may be used. In addition, biometric authentication may be performed using three or more authentication methods.
Further, instead of using a plurality of biometric authentication, biometric authentication and a technique other than biometric authentication may be combined. For example, in the example shown in FIG. 9, in the authentication in front of the accommodation room, the user U2 who is an employee needs to succeed in face authentication and iris authentication. Here, the authentication terminal 400 photographs, for example, the uniform worn by the user U2 and the name tag of the employee, and determines whether or not the user U2 is an employee by image recognition or the like. When it is determined that the user U2 is an employee, the authentication control device 200 may perform only the iris authentication without performing face authentication on the user U2. As a result, for example, even if the user U2 is wearing a mask, it is possible to perform authentication without removing the mask and enter the accommodation room.

Some or all of the above embodiments may also be described, but not limited to:
(Appendix 1)
A biometric information acquisition means for acquiring the first biometric information and the second biometric information of a predetermined user, and
An authentication control means for controlling at least one of a first biometric authentication using the first biometric information and a second biometric authentication using the second biometric information.
When at least one of the first biometric authentication and the second biometric authentication is successful, a determination means for determining whether or not to use the result of the other biometric authentication.
Authentication control unit.
(Appendix 2)
The authentication control device according to Appendix 1, which controls the biometric authentication of the other, when it is determined that the authentication control means uses the result of the biometric authentication of the other.
(Appendix 3)
The determination means is
Identify the attributes of the user who succeeded in biometric authentication of one of the above,
The authentication control device according to Appendix 1 or 2, which determines whether or not to use the result of the other biometric authentication based on the specified attribute.
(Appendix 4)
The biometric information acquisition means acquires the first biometric information and the second biometric information from a predetermined authentication terminal.
Further provided with a determination means for determining a first biometric authentication method from a plurality of biometric authentication methods according to the use or installation location of the authentication terminal.
The authentication control device according to Appendix 3, wherein the authentication control means controls the first biometric authentication corresponding to the determined first biometric authentication method.
(Appendix 5)
The authentication control device according to Appendix 4, wherein the determination means determines to use the result of the other biometric authentication when the use of the authentication terminal includes payment processing.
(Appendix 6)
The authentication terminal is installed at the entrance of the service providing place provided according to the success of biometric authentication.
The determination means is
When the attribute of the user who succeeds in the biometric authentication of one of them is the provider of the service, it is determined that the result of the biometric authentication of the other is used.
The authentication control device according to Appendix 4 or 5, which determines that the result of biometric authentication of the other is not used when the attribute of the user is the provider of the service.
(Appendix 7)
The authentication terminal is installed at a common entrance to a plurality of service provision locations for each of the plurality of service recipients of the service provided according to the success of biometric authentication.
The determination means is
When the attribute of the user who succeeds in the biometric authentication of one of them is the provider of the service, it is determined that the result of the biometric authentication of the other is used.
When the attribute of the user is the provider of the service, it is determined that the result of the biometric authentication of the other is not used.
The authentication control device according to any one of Supplementary note 4 to 6, wherein the one biometric authentication has higher authentication accuracy than the other biometric authentication.
(Appendix 8)
Further provided with a storage means in which the user and the first biometric information are at least associated with each other.
The biometric information acquisition means is
When the second biometric information is not registered in the storage means for the user who succeeded in the first biometric authentication, the second biometric information is acquired from the user.
The authentication control device according to any one of Supplementary note 1 to 7, wherein the user and the first biometric information are associated with the acquired second biometric information and registered in the storage means.
(Appendix 9)
The authentication control means determines a first biometric authentication method according to the use or installation location of the authentication control device from a plurality of biometric authentication methods, and corresponds to the determined first biometric authentication method. The authentication control device according to any one of Supplementary note 1 to 3, which controls the first biometric authentication.
(Appendix 10)
An authentication terminal that acquires multiple types of biometric information from a given user,
The authentication control device connected to the authentication terminal and
Equipped with
The authentication control device is
The first biometric information and the second biometric information of the user are acquired from the authentication terminal, and the user's first biometric information and the second biometric information are acquired.
At least one of the first biometric authentication using the first biometric information and the second biometric authentication using the second biometric information is controlled.
An authentication system for determining whether or not to use the result of the other biometric authentication when at least one of the first biometric authentication and the second biometric authentication is successful.
(Appendix 11)
The authentication control device is
The authentication system according to Appendix 10 that controls the biometric authentication of the other when it is determined to use the result of the biometric authentication of the other.
(Appendix 12)
The computer
Acquire the first biometric information and the second biometric information of a predetermined user,
At least one of the first biometric authentication using the first biometric information and the second biometric authentication using the second biometric information is controlled.
An authentication control method for determining whether or not to use the result of the other biometric authentication when at least one of the first biometric authentication and the second biometric authentication is successful.
(Appendix 13)
The biometric information acquisition process for acquiring the first biometric information and the second biometric information of a predetermined user, and
Authentication control processing that controls at least one of the first biometric authentication using the first biometric information and the second biometric authentication using the second biometric information, and
When at least one of the first biometric authentication and the second biometric authentication is successful, a determination process for determining whether or not to use the result of the other biometric authentication, and
A non-temporary computer-readable medium that contains an authentication control program that causes a computer to run.

10 Authentication control device 11 Biometric information acquisition unit 12 Authentication control unit 13 Judgment unit 100 Authentication device 110 Biometric information DB
111 User ID
112 Biometric information 113 Biometric authentication method 120 Detection unit 130 Feature point extraction unit 140 Registration unit 150

Authentication unit

200, 200a, 200b Authentication control device 210 Storage unit 211 Program 212 Attribute information 213 Authentication method information 214 Biometric information 220 Memory 230 Communication unit 240

Control unit

241 and 241a Biometric information acquisition unit 242, 242a, 242b Authentication control unit 243 Judgment unit 244 Decision unit 400, 400a to 400g Authentication terminal 410 First camera 411 Second camera 420 Storage unit 430 Communication unit 440 Display unit 450 Control unit 451 Shooting control unit 452 Registration unit 453 Authentication control unit 454 Display control unit 1000 Authentication system 2121 User ID
2122 attribute 2131 location ID
2132 Usage 2133 Attribute 2134 Authentication method 2141 User ID
2142 Biometric information 2143 Biometric authentication method N network U user

Claims

A biometric information acquisition means for acquiring the first biometric information and the second biometric information of a predetermined user, and
An authentication control means for controlling at least one of a first biometric authentication using the first biometric information and a second biometric authentication using the second biometric information.
When at least one of the first biometric authentication and the second biometric authentication is successful, a determination means for determining whether or not to use the result of the other biometric authentication.
Authentication control unit.
The authentication control device according to claim 1, wherein the authentication control means controls the biometric authentication of the other when it is determined to use the result of the biometric authentication of the other.
The determination means is
Identify the attributes of the user who succeeded in biometric authentication of one of the above,
The authentication control device according to claim 1 or 2, wherein it is determined whether or not to use the result of the other biometric authentication based on the specified attribute.
The biometric information acquisition means acquires the first biometric information and the second biometric information from a predetermined authentication terminal.
Further provided with a determination means for determining a first biometric authentication method from a plurality of biometric authentication methods according to the use or installation location of the authentication terminal.
The authentication control device according to claim 3, wherein the authentication control means controls the first biometric authentication corresponding to the determined first biometric authentication method.
The authentication control device according to claim 4, wherein the determination means determines to use the result of the other biometric authentication when the use of the authentication terminal includes payment processing.
The authentication terminal is installed at the entrance of the service providing place provided according to the success of biometric authentication.
The determination means is
When the attribute of the user who succeeds in the biometric authentication of one of them is the provider of the service, it is determined that the result of the biometric authentication of the other is used.
The authentication control device according to claim 4 or 5, wherein when the attribute of the user is the provider of the service, it is determined that the result of the biometric authentication of the other is not used.
The authentication terminal is installed at a common entrance to a plurality of service provision locations for each of the plurality of service recipients of the service provided according to the success of biometric authentication.
The determination means is
When the attribute of the user who succeeds in the biometric authentication of one of them is the provider of the service, it is determined that the result of the biometric authentication of the other is used.
When the attribute of the user is the provider of the service, it is determined that the result of the biometric authentication of the other is not used.
The authentication control device according to any one of claims 4 to 6, wherein the one biometric authentication has higher authentication accuracy than the other biometric authentication.
Further provided with a storage means in which the user and the first biometric information are at least associated with each other.
The biometric information acquisition means is
When the second biometric information is not registered in the storage means for the user who succeeded in the first biometric authentication, the second biometric information is acquired from the user.
The authentication control device according to any one of claims 1 to 7, wherein the user and the first biometric information are associated with the acquired second biometric information and registered in the storage means.
The authentication control means determines a first biometric authentication method according to the use or installation location of the authentication control device from a plurality of biometric authentication methods, and corresponds to the determined first biometric authentication method. The authentication control device according to any one of claims 1 to 3, which controls the first biometric authentication.
An authentication terminal that acquires multiple types of biometric information from a given user,
The authentication control device connected to the authentication terminal and
Equipped with
The authentication control device is
The first biometric information and the second biometric information of the user are acquired from the authentication terminal, and the user's first biometric information and the second biometric information are acquired.
At least one of the first biometric authentication using the first biometric information and the second biometric authentication using the second biometric information is controlled.
An authentication system for determining whether or not to use the result of the other biometric authentication when at least one of the first biometric authentication and the second biometric authentication is successful.
The authentication control device is
The authentication system according to claim 10, wherein when it is determined to use the result of the other biometric authentication, the other biometric authentication is controlled.
The computer
Acquire the first biometric information and the second biometric information of a predetermined user,
At least one of the first biometric authentication using the first biometric information and the second biometric authentication using the second biometric information is controlled.
An authentication control method for determining whether or not to use the result of the other biometric authentication when at least one of the first biometric authentication and the second biometric authentication is successful.
The biometric information acquisition process for acquiring the first biometric information and the second biometric information of a predetermined user, and
Authentication control processing that controls at least one of the first biometric authentication using the first biometric information and the second biometric authentication using the second biometric information, and
When at least one of the first biometric authentication and the second biometric authentication is successful, a determination process for determining whether or not to use the result of the other biometric authentication, and
A non-temporary computer-readable medium that contains an authentication control program that causes a computer to run.