WO2023058397A1

WO2023058397A1 - Storage container system and storage container management method

Info

Publication number: WO2023058397A1
Application number: PCT/JP2022/033678
Authority: WO
Inventors: 雄也山崎; 健石原; 正司大園; 一真大谷
Original assignee: パナソニックＩｐマネジメント株式会社
Priority date: 2021-10-04
Filing date: 2022-09-08
Publication date: 2023-04-13
Also published as: JP2023054482A

Abstract

[Problem] To improve user-friendliness for a user when retrieving an article which was deposited in a storage container, and to make it possible to ensure that there is a high level of security for identity authentication. [Solution] A management server 2: obtains a face image for registration by imaging the face of a user via a security locker 1 (registration device) when registering a user; issues a two-dimensional code to be delivered to the user, obtains a face image for authentication by capturing the face of the user and a two-dimensional code which is presented by the user, via the security locker (authentication device), when belongings are retrieved; performs, as identity authentication, a face collation for comparing the face image for registration and the face image for authentication with one another and/or performs a code collation for comparing the two-dimensional code delivered to the user and the two-dimensional code presented by the user with one another; and on the basis of the collation results, determines whether or not the security locker may be unlocked.

Description

Storage system and storage management method

This disclosure performs personal authentication to confirm that the user is the same person as the registrant when taking out the contents of the storage that is locked with an electronic lock. The present invention relates to a storage system for unlocking an electronic lock and a storage management method.

At facilities such as train stations, so-called coin lockers are installed where users can temporarily deposit their luggage by inserting coins. Also, in order to improve convenience for users, keyless safes using IC cards are becoming popular. In such a keyless vault using an IC card, personal authentication is based on the information held in the IC card to confirm that the user is the same person who deposited the package when the user picks up the package. is done.

On the other hand, there is also a known technique for authenticating a person when picking up a package by face matching without using an IC card (see Patent Document 1). With this technology, the face image of the user is acquired by photographing the user's face when the baggage is checked in (when the baggage is locked), and the facial image is registered. The face image of the user is acquired by photographing the user's face, and the face image at the time of depositing the baggage and the face image at the time of picking up the baggage are collated.

JP 2007-070899 A

Now, in face matching, there are cases where false matching occurs, even if the same person does not match. If such an erroneous collation occurs in the keyless storage, the user cannot retrieve the package. Therefore, in the conventional technology, when the person in charge visually compares the face image of the target person and the face image of the registrant to confirm that they are the same person, the unlocking operation is performed. As a result, the user can take out the parcel even if an erroneous collation occurs in the face collation. However, in such a method in which the attendant responds, there is a problem that the user has to wait for a long time, which is inconvenient for the user. For this reason, it is desired to improve the usability of the user when taking out the articles deposited in the storage. Also, there are cases where high security is required for personal authentication, and it is desirable to meet such demands.

Therefore, the present disclosure aims to provide a storage system and a storage management method that are easy for users to take out items deposited in the storage and that can ensure high security in personal authentication. Main purpose.

The storage system of the present disclosure includes a storage device that is locked and unlocked by an electronic lock, a registration device that performs processing related to user registration for registering user information necessary for personal authentication, and the user registration a server device for issuing a code image to be issued to the user, and a server device for acquiring a face image for registration by photographing the face of the user via the registration device, and authentication by photographing the face of the user and an authentication device for acquiring at least one of the face image for use and the code image presented by the user, and when unlocking the storage device, the face image for registration is used as the personal authentication. causing the verification unit to perform at least one of face verification for comparing the face image for authentication with the face image for authentication, and code verification for comparing the code image delivered to the user with the code image presented by the user; It is configured to determine whether or not the storage device can be unlocked based on the collation result.

In addition, the storage management method of the present disclosure includes a storage device that locks and unlocks with an electronic lock, a registration device that performs processing related to user registration for registering user information necessary for personal authentication, and At the time of user registration, a server device that acquires a face image for registration by photographing the face of the user via the registration device, issues a code image to be issued to the user, and a server device that issues the user's face In a storage system comprising an authentication device that acquires at least one of a photographed face image for authentication and the code image presented by a user, the personal authentication is performed when the storage device is unlocked. and at least one of face matching for comparing the face image for registration and the face image for authentication, and code matching for comparing the code image delivered to the user and the code image presented by the user. and whether or not the storage device can be unlocked is determined based on the collation result.

According to this disclosure, face matching and code matching are performed for personal authentication. Therefore, for example, even if an erroneous collation occurs in face collation, if a matching result is obtained in code collation, it is possible to operate such that personal authentication succeeds. As a result, it is possible to improve usability for the user when taking out an article deposited in the storage. On the other hand, if a matching result is not obtained in both face matching and code matching, it can be operated such that personal authentication will not succeed. As a result, high security can be ensured for personal authentication.

Overall configuration diagram of security locker system according to first embodiment Front view showing appearance of security locker Block diagram showing schematic configuration of security locker Block diagram showing the schematic configuration of the management server Explanatory diagram showing an overview of the processing performed at the time of luggage deposit in the security locker and management server Explanatory diagram showing the screen displayed on the security locker display when checking in luggage Flow diagram showing the operation procedure at the time of user registration in the security locker and management server Explanatory diagram showing an overview of the processing performed at the security locker and the management server when picking up packages Explanatory diagram showing the screen displayed on the security locker display when picking up luggage A flow chart showing the operation procedure when a security locker and a management server receive packages. A flow diagram showing the procedure of the unlockability determination process performed by the management server A flow diagram showing the procedure of the unlockability determination process performed by the management server Explanatory diagram showing an overview of the processing performed by the security locker and the management server when unlocking Explanatory diagram showing the setting screen displayed on the management terminal Overall configuration diagram of a security locker system according to the second embodiment Block diagram showing a schematic configuration of a register according to the second embodiment Block diagram showing a schematic configuration of a security locker according to a second embodiment

The first invention, which has been made to solve the above-mentioned problems, is a storage device that is locked and unlocked by an electronic lock, and a registration device that performs processing related to user registration for registering user information necessary for personal authentication. a device, a server device that acquires a face image for registration by photographing a user's face via the registration device at the time of the user registration, and issues a code image to be issued to the user; an authentication device that acquires at least one of a face image for authentication photographing a person's face and the code image presented by the user, and when unlocking the storage device, the personal authentication is performed. at least one of face matching for comparing the face image for registration and the face image for authentication, and code matching for comparing the code image delivered to the user and the code image presented by the user; It is configured such that it is executed by a collation unit, and based on the result of the collation, it is determined whether or not the storage device can be unlocked.

According to this, face matching and code matching are performed for personal authentication. Therefore, for example, even if an erroneous collation occurs in face collation, if a matching result is obtained in code collation, it is possible to operate such that personal authentication succeeds. As a result, it is possible to improve usability for the user when taking out an article deposited in the storage. On the other hand, if a matching result is not obtained in both face matching and code matching, it can be operated such that personal authentication will not succeed. As a result, high security can be ensured for personal authentication.

In a second aspect of the invention, the verification unit manages identification information of the storage unit of the storage device, the face image for registration, and the code image issued to the user in association with each other. do.

According to this, it is possible to efficiently manage the information necessary for personal authentication for unlocking the storage device.

In a third aspect of the present invention, the collation unit may set the face collation and the code collation as a setting related to a judgment method when judging whether or not unlocking is possible based on each collation result of the face collation and the code collation. AND authentication, in which it is determined that authentication is successful when a match is obtained in both, and OR authentication, in which authentication is determined to be successful when a match is obtained in either the face collation or the code collation. It is configured to manage settings for selecting either one.

According to this, AND authentication can improve security. On the other hand, if OR authentication is used, user convenience can be enhanced. In addition, if OR authentication is used, processing load can be reduced by omitting the other collation when matching results are obtained in one collation.

Further, in a fourth aspect of the invention, the storage device includes the registration device and the authentication device, and the server device, at the time of the user registration, uses the storage device which also serves as the registration device. a user presents the face image for authentication and the face image for authentication via the storage device that also serves as the authentication device when taking out the contents of the storage device. It is configured to acquire the code image and the code image.

According to this, the storage device serves both as a registration device and an authentication device, so the system configuration can be simplified. The storage device may also serve as the authentication device, and the registration device may be provided separately from the storage device.

Further, in a fifth invention, the server device is configured to transmit the issued code image to a mobile terminal possessed by the user in order to deliver the issued code image to the user.

According to this, the user can easily be authenticated by presenting the screen of the mobile terminal on which the code image is displayed to the authentication device.

In a sixth aspect, the registration device outputs a sheet on which the code image is printed by a printing device in order to deliver the issued code image to the user.

According to this, the user can easily be authenticated by presenting the sheet on which the code image is printed to the authentication device.

A seventh invention is configured such that the code image is a two-dimensional code or a one-dimensional code.

According to this, the code image can be read with high accuracy.

An eighth aspect of the invention includes a storage device that is locked and unlocked by an electronic lock, a registration device that performs processing related to user registration for registering user information required for personal authentication, and the user registration device. a server device for issuing a code image to be issued to the user, and a server device for acquiring a face image for registration by photographing the face of the user via the registration device, and authentication by photographing the face of the user and an authentication device that acquires at least one of the face image of the user and the code image presented by the user. performing at least one of face matching for comparing the face image for registration and the face image for authentication, and code matching for comparing the code image delivered to the user and the code image presented by the user; Based on the collation result, it is configured to determine whether or not the storage device can be unlocked.

According to this, as with the first invention, it is easy for the user to take out an item deposited in the safe, and high security can be ensured for personal authentication.

Hereinafter, embodiments of the present disclosure will be described with reference to the drawings.

(First embodiment)
FIG. 1 is an overall configuration diagram of a security locker system according to the first embodiment.

This security locker system (storage system) includes a security locker 1 (storage device, registration device, authentication device), a management server 2 (server device), a management terminal 3, and a mobile terminal 4. The security locker 1, management server 2, management terminal 3, and mobile terminal 4 are connected via a network.

In this security locker system, when a user picks up their luggage, personal authentication is performed to confirm that the user is the person who deposited the luggage. If the personal authentication succeeds, the security locker 1 is unlocked and the user can pick up the checked luggage.

In this embodiment, face matching and two-dimensional code matching are performed as personal authentication. In face matching, the user's face image (face image for registration) photographed at the time of baggage deposit and the user's face image (face image for authentication) photographed at the time of baggage pickup are collated. In the two-dimensional code matching, the two-dimensional code issued to the user when depositing the baggage is compared with the two-dimensional code presented by the user when picking up the baggage. The two-dimensional code is, for example, a QR code (registered trademark), which proves that the person presenting the code is the person who checked in the baggage. The two-dimensional code is issued by the management server 2 at the time of user registration.

The security locker 1 functions as a register (registration device) that performs processing related to user registration for registering user information necessary for personal authentication. to the management server 2 (face image for registration).

In addition, the security locker 1 functions as a checker (authentication device) that performs processing related to personal authentication, and captures the user's face image (authentication face image) obtained by photographing the user's face when the package is picked up. Send to management server 2 . In addition, the security locker 1 transmits the two-dimensional code presented by the user to the management server 2 when picking up the package.

The management server 2 acquires the user's face image (face image for registration) from the security locker 1 at the time of depositing the luggage, and performs user registration processing. At this time, the management server 2 issues a two-dimensional code to be issued to the user. Specifically, the management server 2 causes the security locker 1 to output a sheet on which the two-dimensional code is printed. The management server 2 also sends an e-mail containing link information (for example, the URL of the web page) for accessing the website that distributes the two-dimensional code to the mobile terminal 4 owned by the user. The sheet on which the two-dimensional code is printed and the portable terminal 4 serve as a two-dimensional code medium, and the user presents the two-dimensional code medium to the security locker 1 when picking up the baggage. The website that distributes the two-dimensional code is constructed by the management server 2, but may be constructed by a server device other than the management server 2. FIG.

In addition, the management server 2 acquires the user's face image (face image for authentication) and the two-dimensional code from the security locker 1 when picking up the package, and performs face verification processing and two-dimensional code verification processing as identity verification. I do. When the personal authentication succeeds and it is determined that unlocking is permitted, an unlocking permission notification is sent from the management server 2 to the security locker 1, and the security locker 1 unlocks. On the other hand, when personal authentication fails and unlocking is not permitted, a notice of unlocking disapproval is sent from the management server 2 to the security locker 1, and the security locker 1 maintains the locked state.

The management terminal 3 is operated by an administrator and is composed of a PC or the like. On the management terminal 3 , an administrator performs an operation for setting conditions related to processing performed by the management server 2 .

The mobile terminal 4 is a smartphone or the like owned by the user. The mobile terminal 4 functions as a medium for a two-dimensional code issued to the user at the time of user registration. Specifically, on the mobile terminal 4, the two-dimensional code is displayed on the screen by accessing the website using the web browser based on the link information distributed from the management server 2. FIG.

In this embodiment, a code image, specifically, a two-dimensional code such as a QR code (registered trademark) is issued to the user as a means of certifying that the user is the person who deposited the baggage when picking up the baggage. However, the code image is not limited to a two-dimensional code, and may be a one-dimensional code such as a bar code.

Next, security locker 1 will be explained. FIG. 2 is a front view showing the appearance of the security locker 1. FIG.

The security locker 1 has a plurality of locker boxes 5 (storage units) that store the user's luggage. The security locker 1 also includes a camera 11 , a motion sensor 12 , displays 13 and 14 , a printer 15 (printing device), and an electronic lock 16 .

The camera 11 takes a picture of the user's face when the luggage is checked in. Also, the camera 11 photographs the user's face when the baggage is picked up. In addition, the camera 11 can detect the two-dimensional code presented by the user together with the user's face when the package is picked up. screen.

The human sensor 12 detects that a person has approached the security locker 1. When the human sensor 12 detects a person, screen display on the

displays

13 and 14 is started.

The display 13 displays a screen regarding user registration when baggage is deposited. Further, the display 13 displays a screen regarding personal identification (face verification and two-dimensional code verification) when picking up the parcel. The display 13 is composed of a touch panel, and the user can operate the screen.

The display 14 normally operates as a digital signage that displays content such as advertisements and weather forecasts. On the other hand, when a person using the security locker 1 is detected, a guidance screen related to the security locker 1, for example, a screen guiding the position of the locker box 5 selected by the user when depositing luggage, or a screen used by the user when picking up luggage, is displayed. A screen for guiding the position of the locker box 5 inside is displayed.

The printer 15 outputs a sheet on which the two-dimensional code is printed when the baggage is checked in. When the user presents the sheet on which the two-dimensional code is printed in front of the camera 11 when picking up the package, the two-dimensional code is verified by the management server 2 .

The electronic lock 16 locks and unlocks the door of the locker box 5.

In this embodiment, the security locker 1 (storage device) is provided with a plurality of locker boxes 5 (storage units). Instead, it is also possible to have a configuration having only one accommodating portion. For example, if the storage device is a key box that stores keys for rooms or vehicles in a building, there may be only one storage unit. In this case, one or more users use the key box, and information on these users is registered in advance.

Next, a schematic configuration of the security locker 1 will be described. FIG. 3 is a block diagram showing a schematic configuration of the security locker 1. As shown in FIG.

The security locker 1 includes a camera 11, a motion sensor 12, displays 13 and 14, a printer 15, and an electronic lock 16, as well as a communication section 17, a storage section 18, and a processor 19.

The communication unit 17 communicates with the management server 2 via the network.

The storage unit 18 stores programs and the like executed by the processor 19 .

The processor 19 performs various processes by executing programs stored in the storage unit 18 . In this embodiment, the processor 19 performs facial image acquisition processing, user registration request processing, two-dimensional code issuing processing, two-dimensional code acquisition processing, personal authentication request processing, door opening/closing control processing, GUI control processing, and the like.

In the facial image acquisition process, the processor 19 detects a person's face from the image captured by the camera 11 at the time of baggage check-in, cuts out the facial area from the captured image, and obtains the user's face image (face image for registration). to get In addition, the processor 19 detects a person's face from the photographed image of the camera 11 when picking up the parcel, cuts out the face area from the photographed image, and acquires the user's face image (face image for authentication).

In the user registration request process, the processor 19 transmits a user registration request from the communication unit 17 to the management server 2. The user registration request includes the box ID of the locker box 5 that the user wishes to use and the face image of the user. Upon receiving the user registration request, the management server 2 performs user registration processing for registering information about the user. Further, the management server 2 performs processing for issuing a two-dimensional code to be issued to the user.

In the two-dimensional code issuing process, the processor 19 issues the two-dimensional code issued by the management server 2 to the user at the time of luggage deposit. Specifically, as a first method, the printer 15 is controlled to output a sheet on which the two-dimensional code is printed. As a second method, a method is adopted in which an e-mail including link information for accessing a website displaying a two-dimensional code is sent from the management server 2 to the mobile terminal 4 as the two-dimensional code issuing process. be able to. Then, as a method of delivering the two-dimensional code to the user, an operation by the user to select at least one of printing the two-dimensional code by a printing device and transmitting the two-dimensional code to the portable terminal owned by the user. A screen for accepting the code is displayed on the display, and the method of issuing the two-dimensional code (printing or sending) can be selected by the user. Alternatively, the two-dimensional code may be transmitted from the security locker 1 to the mobile terminal 4 using short-range wireless communication such as Bluetooth (registered trademark).

In the two-dimensional code acquisition process, the processor 19 acquires the two-dimensional code presented by the user using the two-dimensional code medium when picking up the parcel. Specifically, the two-dimensional code area is detected from the captured image of the camera 11, the two-dimensional code area is cut out from the captured image, the two-dimensional code image is obtained, and the two-dimensional code image is read. acquires two-dimensional code information (information stored in a two-dimensional code image). Note that the management server 2 may read the image of the two-dimensional code.

In the personal authentication request process, the processor 19 transmits a personal authentication request from the communication unit 17 to the management server 2. Upon receiving the personal authentication request, the management server 2 performs personal authentication (face matching and two-dimensional code matching). A notification (authentication failure) is sent from the management server 2 to the security locker 1 .

In the door opening/closing control process, the processor 19 controls opening/closing of the door of the locker box 5 according to instructions from the management server 2. Specifically, when an unlocking permission notification is received from the management server 2, the electronic lock 16 is controlled to unlock the locker box 5, and when an unlocking disapproval notification is received, the locked state of the locker box 5 is maintained. .

In the GUI control process, the processor 19 displays on the display 13 a screen regarding user registration and personal authentication distributed from the management server 2. Further, according to the user's input operation using the input function of the display 13 (here, the touch panel), input information is acquired and screen control is performed.

Next, a schematic configuration of the management server 2 will be described. FIG. 4 is a block diagram showing a schematic configuration of the management server 2. As shown in FIG.

The management server 2 includes a communication unit 21, a storage unit 22, and a processor 23.

The communication unit 21 communicates with the security locker 1, management terminal 3, and mobile terminal 4 via the network.

The storage unit 22 stores programs and the like executed by the processor 23 . The storage unit 22 also stores registration information (user management information) in the user management table. User information required for personal authentication is registered in the user management table (see FIG. 5).

The processor 23 performs various processes by executing programs stored in the storage unit 22 . In this embodiment, the processor 23 performs facial feature extraction processing, two-dimensional code generation processing, information management processing, two-dimensional code issuance processing, face matching processing, two-dimensional code matching processing, unlockability determination processing, and unlocking control. processing, etc. Facial feature extraction processing, two-dimensional code generation processing, and information management processing are processing related to user registration. The facial feature extraction process, face collation process, two-dimensional code collation process, and unlockability determination process are processes related to personal authentication.

In the facial feature extraction process, the processor 23 extracts facial feature information from the user's facial image obtained from the security locker 1 at the time of baggage check-in and baggage pickup.

In the two-dimensional code issuing process, the processor 23 issues (generates) a two-dimensional code to be issued to the user when the luggage is checked in. The two-dimensional code stores specific information that proves the identity of the person who checked in the baggage. The specific information is information, such as a random number, that does not actually overlap with the two-dimensional code that is delivered to others.

In the information management process, the processor 23 collects the box ID (number) of the locker box 5 that the user desires to use, the user's facial feature information acquired in the facial feature extraction process, and the two-dimensional code issuance. The two-dimensional code issued in the process is registered in the user management table. In the user management table, mail addresses and the like are also registered as information related to users.

In the two-dimensional code delivery process, the processor 23 sends an e-mail from the communication unit 21 to the mobile terminal 4, including link information for accessing the website displaying the two-dimensional code delivered to the user. Note that an e-mail including the two-dimensional code itself may be sent to the mobile terminal 4 .

In the face matching process, the processor 23 matches the user's facial feature information acquired in the facial feature extraction process with the facial feature information registered in the user management table when the parcel is picked up.

In the two-dimensional code matching process, the processor 23 compares the two-dimensional code acquired from the security locker 1 with the two-dimensional code registered in the user management table when picking up the package.

In the unlockability determination process, the processor 23 determines whether or not the personal authentication is successful based on each matching result of the face matching process and the two-dimensional code matching process. It is determined whether or not the locker box 5 can be unlocked, that is, whether or not unlocking is permitted. In this embodiment, the administrator can select either AND authentication or OR authentication as the authentication form. In AND authentication, it is determined that personal authentication has succeeded when matching results are obtained in both face matching and two-dimensional code matching. In OR authentication, when a matching result is obtained from either face matching or two-dimensional code matching, it is determined that personal authentication has succeeded.

In the unlocking control process, the processor 23 controls unlocking of the electronic lock 16 in the security locker 1. Specifically, when the package is picked up, an unlocking permission notification or an unlocking non-permission notification is sent from the communication unit 21 according to the determination result of the unlocking permission/prohibition determination process, that is, whether unlocking is permitted or not. Send to 1.

By the way, in the present embodiment, the management server 2 (server device) is a matching unit that performs face matching processing and two-dimensional code matching processing, but the security locker 1 as an authentication device performs face matching processing and two-dimensional code matching processing. It may be a collating unit that performs Further, in the present embodiment, the management server 2 performs the unlockability determination process, but a server other than the management server 2 may perform the unlockability determination process. An unlockability determination process may be performed.

Next, the processing performed at the security locker 1 and the management server 2 when depositing luggage will be explained. FIG. 5 is an explanatory diagram showing an overview of the processing performed in the security locker 1 and management server 2 when luggage is deposited.

When depositing luggage, the security locker 1 and the management server 2 perform user registration processing for using the security locker 1. Further, the security locker 1 and the management server 2 perform a process of issuing a two-dimensional code and delivering it to the user. The user registration process may be performed in advance using an application or the like installed on the mobile terminal 4 of the user at a location other than the location where the security locker 1 is used.

Specifically, first, the security locker 1 acquires the user's face image from the image captured by the camera 11 (face image acquisition processing) and transmits the user's face image to the management server 2 . In addition, the security locker 1 allows the user to select the desired locker box 5 using the display 13, acquires the box ID of the locker box 5 according to the user's screen operation, and stores the box ID. Send to management server 2 .

The management server 2 extracts facial feature information from the user's facial image received from the security locker 1 (facial feature extraction processing). Also, the management server 2 issues a two-dimensional code to be issued to the user (two-dimensional code issuing process). Then, the management server 2 associates the box ID of the locker box 5 received from the security locker 1 (identification information of the storage unit) with the user's facial feature information and the two-dimensional code issued to the user, Register in the user management table (information management processing). The information about the face image registered in the user management table may be the face image itself in addition to the facial feature information.

In addition, in the management server 2, when the user selects transmission as the delivery method of the two-dimensional code, the communication unit 21 transmits link information (for example, the URL of the web page) for accessing the website that distributes the two-dimensional code. to the portable terminal 4 (two-dimensional code issuing process). On the mobile terminal 4, the two-dimensional code is displayed on the screen by accessing the website based on the link information using the web browser. When registering as a user, the security locker 1 displays a screen for entering an e-mail address, and allows the user to obtain the e-mail address of the mobile terminal 4 .

Further, in the security locker 1, when the user selects printing as the method of issuing the two-dimensional code, the two-dimensional code is obtained from the management server 2, and a sheet on which the two-dimensional code is printed is output by the printer 15 ( Two-dimensional code issuing process).

Next, the operations performed by the user when depositing luggage in the security locker 1 will be explained. FIG. 6 is an explanatory diagram showing a screen displayed on the display 13 of the security locker 1 when luggage is deposited.

The display 13 of the security locker 1 first displays the screen 101 shown in FIG. 6(A). This screen 101 (initial screen, menu screen) is used by the user to select one of baggage deposit and baggage pick-up modes. This screen 101 is provided with a baggage deposit button 102 and a baggage pickup button 103 . When the user operates the luggage deposit button 102, the screen transitions to the screen 111 shown in FIG. 6B.

The screen 111 (locker box selection screen) shown in FIG. 6(B) is for selecting the locker box 5 that the user wishes to use. A locker box selection button 112 is provided on this screen 111 . When the user operates the locker box selection button 112, the screen transitions to the screen 121 shown in FIG. 6(C). Note that the locker box selection button 112 that is being used by another person is in a non-selectable state.

The screen 121 (personal information handling regulation confirmation screen) shown in FIG. 6C allows the user to confirm the personal information handling regulation. We will notify the user and obtain the user's consent. This screen 121 displays characters 122 representing the personal information handling regulations in the personal authentication system. The personal information handling regulations state that a facial image of the user is acquired by photographing the user's face when the baggage is checked in and when the baggage is picked up. This screen 121 is also provided with an agree button 123 and a cancel button 124 . The user operates the agree button 123 or the cancel button 124 depending on whether or not the user agrees with the personal information handling regulations. When the user operates the consent button 123, the screen transitions to the screen shown in FIG. 6(D). When the user operates the cancel button 124, user registration is canceled.

A screen 131 (face image capturing screen) shown in FIG. 6(D) guides the user to capture a face image of the user. On this screen 131, characters 132 explaining how to take a face image, an image 133 taken by the camera 11, and a shooting frame 134 are displayed. The user adjusts the position and orientation of the face so that the user's face fits properly within the shooting frame 134 . The screen 131 is also provided with a shooting button 135 and a stop button 136 . When the user operates the shooting button 135, the camera 11 shoots the user. When the user operates the cancel button 136, user registration is canceled. When the photographing of the face image by the camera 11 ends normally, the screen changes to the screen 141 shown in FIG. 6(E).

A screen 141 (face image confirmation screen) shown in FIG. 6(E) is for the user to confirm that the face image has been properly captured. This screen 141 displays characters 142 prompting confirmation as to whether or not the face image has been properly captured, and a captured image (face image) 143 . This screen 141 is also provided with a registration button 144 , a recapture button 145 and a stop button 146 . If the user's face is properly photographed, the user operates the registration button 144 . In this case, the screen transitions to the screen 151 shown in FIG. If the user's face is not properly captured, the user operates the re-capture button 145 . In this case, the screen returns to the screen 131 shown in FIG. 6(D). When the user operates the cancel button 146, the user registration is canceled.

A screen 151 (two-dimensional code issue screen) shown in FIG. 6(F) is for the user to issue and issue a two-dimensional code. This screen 151 is provided with an issue button 152 , a print button 153 and a send button 154 . When the user operates the issue button 152, the management server 2 issues (generates) a two-dimensional code to be issued to the user. When the user operates the print button 153, the printer 15 outputs a sheet on which the two-dimensional code is printed. When the user operates the send button 154 , an e-mail containing link information for accessing the website displaying the two-dimensional code is sent from the management server 2 to the mobile terminal 4 . When the printing or transmission of the two-dimensional code is completed normally, the screen transitions to the screen 161 shown in FIG. 6(G). When the user operates the send button 154, the screen transitions to an email address input screen (not shown) before transitioning to the screen 161 shown in FIG. Enter

A screen 161 (registration completion screen) shown in FIG. 6(G) notifies the user that user registration has been completed. This screen 161 displays characters 162 indicating that user registration has been completed and that the locker box 5 selected by the user can be used. Thereby, the user can use the locker box 5 selected by him/herself. At this time, when the user opens the door of the selected locker box 5, stores the luggage in the locker box 5, and closes the door, the electronic lock 16 of the locker box 5 is locked.

Next, the operation procedure for depositing luggage in the security locker 1 and the management server 2 will be explained. FIG. 7 is a flow chart showing the operation procedure at the time of user registration in the security locker 1 and management server 2. As shown in FIG.

The security locker 1 first acquires the box ID of the locker box 5 that the user wishes to use according to the user's selection operation (ST101). In addition, the security locker 1 acquires the face image of the user from the image captured by the camera 11 (face image acquisition processing) (ST102). Next, a user registration request is transmitted to the management server 2 (user registration request processing) (ST103). The user registration request includes the box ID of the locker box 5 selected by the user and the face image of the user.

When the management server 2 receives the user registration request from the security locker 1 (Yes in ST201), it extracts the user's facial feature information from the facial image included in the received user registration request (facial feature extraction process) ( ST202). The management server 2 also issues (generates) a two-dimensional code to be issued to the user (two-dimensional code issuing process) (ST203). Next, the box ID included in the received user registration instruction, the extracted facial feature information of the target person, and the generated two-dimensional code are registered in the user management table (information management processing) (ST204). Management server 2 then transmits a user registration completion report to security locker 1 (ST205). The user registration completion report includes a two-dimensional code to be delivered to the user.

The management server 2 also sends an e-mail containing link information for accessing the website that distributes the two-dimensional code to the mobile terminal 4 (two-dimensional code issuing process) (ST206). Note that this processing is performed when the user selects transmission as the two-dimensional code issuing method.

When the security locker 1 receives the user registration completion report from the management server 2 (ST104), based on the two-dimensional code included in the received user registration completion report, the printer 15 prints a sheet on which the two-dimensional code is printed. Output (two-dimensional code issuing process) (ST105). Note that this processing is performed when the user selects printing as the method of issuing the two-dimensional code.

Also, based on the received user registration completion report, the security locker 1 notifies the user that the user registration has been completed and that the locker box 5 selected by the user can be used (ST106). In response to this, when the user opens the door of the selected locker box 5, stores the luggage in the locker box 5, and closes the door, the electronic lock 16 of the locker box 5 is locked.

Also, the security locker 1 deletes the user's face image (face image for registration) held in the storage unit 18 of its own device (ST107). As a result, it is possible to enhance the security of the personal authentication system based on face matching.

Next, the processing performed at the security locker 1 and the management server 2 when picking up a package will be explained. FIG. 8 is an explanatory diagram showing an overview of the process performed by the security locker 1 and management server 2 when picking up a package.

When picking up the luggage, the security locker 1 and the management server 2 perform personal authentication (face verification and two-dimensional code verification). Further, in the security locker 1 and the management server 2, processing for unlocking the locker box 5 of the security locker 1 is performed when the personal authentication is successful.

Specifically, first, the security locker 1 acquires the face image of the user from the image captured by the camera 11 (face image acquisition processing). Also, the two-dimensional code presented by the user is obtained from the captured image of the camera 11 (two-dimensional code obtaining process). Then, the user's face image and the two-dimensional code are transmitted to the management server 2 .

The management server 2 extracts facial feature information from the user's facial image received from the security locker 1 (facial feature extraction processing), and extracts the facial feature information of the user and the facial features registered in the user management table. information is compared (face matching processing). Also, the two-dimensional code acquired from the security locker 1 and the two-dimensional code information registered in the user management table are collated (two-dimensional code collation processing).

Next, the management server 2 determines whether or not the locker box 5 being used by the user can be unlocked, that is, whether unlocking is permitted or not, based on the matching results of the face matching process and the two-dimensional code matching process. is determined (unlock availability determination process). Then, depending on the determination result, that is, whether unlocking is permitted or not, the communication unit 21 transmits an unlocking permission notice or an unlocking non-permission notice to the security locker 1 (unlocking control processing).

In the security locker 1, the electronic lock 16 provided in each locker box 5 is controlled (door opening/closing control processing) according to the unlocking permission notification or the unlocking non-permission notification from the management server 2.

The management server 2 performs processing related to verification, that is, facial feature extraction processing, face verification processing, and two-dimensional code verification processing. It may be In this case, the management server 2 assigns a user ID to each user and manages user information (facial feature information, two-dimensional code information). and may be managed in association with each other.

Here, the user holds the two-dimensional code medium, specifically, the sheet on which the two-dimensional code is printed or the mobile terminal 4 on which the two-dimensional code is displayed, in front of his or her chest. By doing so, the user's face and the two-dimensional code are photographed at the same time. As a result, the user's face image and the two-dimensional code can be acquired at the same time by taking a single image, so that the user's time and effort can be reduced during personal authentication. Alternatively, the user's face and the two-dimensional code may be photographed in order.

Further, when OR authentication is set and the user wants to complete personal authentication only by face matching, the user does not present the two-dimensional code in front of the camera 11, Only one's own face should be photographed by the camera 11. - 特許庁Conversely, if the user wishes to complete personal authentication only by verifying the two-dimensional code, the user may present the two-dimensional code in front of the camera 11 so that it can be acquired without fail.

Next, the operations performed by the user when picking up the luggage in the security locker 1 will be explained. FIG. 9 is an explanatory diagram showing a screen displayed on the display 13 of the security locker 1 when the baggage is picked up.

The display 13 of the security locker 1 first displays the screen 101 shown in FIG. 9(A). This screen 101 (initial screen, menu screen) is the same as the screen shown in FIG. When the user operates the parcel pick-up button 103, the screen transitions to the screen shown in FIG. 9B. At this time, in the security locker 1 and the management server 2, processing related to personal authentication (face matching and two-dimensional code matching) is started.

The screen 201 (face authentication in progress screen) shown in FIG. 9(B) notifies the user that personal authentication of the user (face matching and two-dimensional code matching) is in progress. An image 202 captured by the camera 11 is displayed on this screen 201 . At this time, the user holds the two-dimensional code medium (the sheet on which the two-dimensional code is printed, the mobile terminal 4 on which the two-dimensional code is displayed on the screen) so that the two-dimensional code is photographed together with his/her face. , hold it in front of your chest. This screen 201 also displays characters 203 and a graphic 204 indicating that personal authentication is in progress. When the personal authentication is completed (successful), the screen changes to the screen 211 shown in FIG. 9(C).

The screen 211 (face authentication completion screen) shown in FIG. 9(C) notifies the user that the personal authentication of the user has been completed (successful). This screen 211 displays characters 212 and a graphic 213 indicating that the personal identification has been completed. Next, the screen transitions to the screen 221 shown in FIG. 9(D).

The screen 221 (unlock notification screen) shown in FIG. 9(D) notifies the user that the locker box 5 in use has been unlocked. This screen 221 displays characters 222 to the effect that the locker box 5 in use has been unlocked and characters 223 to the effect that the user is urged to take out the baggage. The number and position of the unlocked locker box 5 may be displayed.

When the locker box 5 is unlocked, the user can open the door of the locker box 5 and take out the luggage from the locker box 5. When the luggage is taken out from the locker box 5, the screen transitions to a screen 231 (use completion screen) shown in FIG. 9(E). A sensor (not shown) may be provided inside the locker box 5, and the removal of the luggage from the locker box 5 may be detected based on the detection result of this sensor.

In addition, a continued use button 224 is provided on the screen 221 shown in FIG. 9(D). The security locker 1 can be used continuously even after the locker box 5 in use is unlocked by the user. can. When the user operates the continuous use button 224, the mode transitions to the continuous use mode, and when the user opens the door of the locker box 5 to put in and take out the luggage and then closes the door, the electronic lock 16 of the locker box 5 is locked. be done. It should be noted that the continuous use button 224 is not displayed when the usage time has expired.

Next, the operation procedure for picking up packages in the security locker 1 and the management server 2 will be explained. FIG. 10 is a flow chart showing the operation procedure of the security locker 1 and management server 2 when picking up a package.

The security locker 1 first acquires the face image of the user from the image captured by the camera 11 (face image acquisition processing) (ST301). Also, the two-dimensional code of the user is acquired from the captured image of the camera 11 (two-dimensional code acquisition process) (ST302). Next, a personal authentication request is transmitted to the management server 2 (personal authentication request processing) (ST303). The personal authentication request includes the user's face image and two-dimensional code.

When the management server 2 receives the personal authentication request from the security locker 1 (Yes in ST401), it extracts the facial feature information of the user from the face image included in the received personal authentication request (facial feature extraction process) (ST402). . Next, the facial feature information of the user and the facial feature information registered in the user management table are collated (face collation processing) (ST403). Also, the two-dimensional code included in the received personal authentication request is collated with the two-dimensional code registered in the user management table (two-dimensional code collation processing) (ST404).

Next, the management server 2 determines whether or not the locker box 5 being used by the user can be unlocked based on the matching results of the face matching process and the two-dimensional code matching process. It notifies the security locker 1 whether or not unlocking is permitted (unlocking control processing). At this time, if unlocking is permitted (Yes in ST405), an unlocking permission notice is transmitted to security locker 1 (ST406). On the other hand, if unlocking is not permitted (No in ST405), a notice of unlocking disapproval is sent to security locker 1 (ST407).

When the security locker 1 receives the unlock permission notification from the management server 2 (Yes in ST304), it controls the electronic lock 16 to unlock the locker box 5 being used by the user (ST305). Thereby, the user can open the door of the locker box 5 and take out the luggage.

On the other hand, when the security locker 1 receives the unlocking disapproval notification from the management server 2 (Yes in ST306), an error screen is displayed on the display 13 to notify the user that the locker box 5 cannot be unlocked due to failure of the personal authentication. (ST307).

Next, in the security locker 1, the user's face image (face image for authentication) held in the storage unit 18 of its own device is deleted (ST308).

Next, the unlockability determination process (ST405 in FIG. 10) performed by the management server 2 will be described. 11 and 12 are flow charts showing the procedure of the unlockability determination process performed by the management server 2. FIG.

In personal authentication, the management server 2 determines whether or not the locker box 5 being used by the user can be unlocked, that is, whether or not unlocking is permitted, based on the matching results of the face matching process and the code matching process. Judgment (unlock availability judgment processing).

In this embodiment, the administrator can select either AND authentication or OR authentication. In AND authentication, if matching results are obtained in both the face matching process and the code matching process, it is determined that the person has been successfully authenticated, and unlocking is permitted. In the OR authentication, if a matching result is obtained from either the face matching process or the code matching process, it is determined that the person has been successfully authenticated, and unlocking is permitted.

The example shown in FIG. 11(A) is a case where code matching is prioritized in OR authentication. In this case, when a two-dimensional code is presented, two-dimensional code matching is performed, and when a matching result is obtained in two-dimensional code matching, face matching is omitted and face matching is not performed. , it determines that the personal authentication is successful and permits unlocking. On the other hand, if the two-dimensional code is not presented, face collation is performed, and if a matching result is obtained in the face collation, it is determined that the person has been authenticated successfully, and unlocking is permitted.

Specifically, first, it is determined whether or not the two-dimensional code has been read (acquired) successfully (ST501). Here, if the reading of the two-dimensional code is successful (Yes in ST501), then it is determined whether or not a matching result is obtained in the two-dimensional code collation (ST502). Here, if a matching result is obtained in the two-dimensional code collation (Yes in ST502), unlocking is permitted (ST505).

On the other hand, if the reading of the two-dimensional code fails (No in ST501), or if a matching result cannot be obtained in the two-dimensional code collation (No in ST502), then whether or not the face detection was successful is checked. is determined (ST503). Here, if the face detection is successful (Yes in ST503), it is next determined whether or not a matching result is obtained in face matching (ST504). Here, if a matching result is obtained in face matching (Yes in ST504), unlocking is permitted (ST505).

Also, if no matching result is obtained in face matching (No in ST504), unlocking is not permitted (ST506). If the face detection fails (No in ST503), the current process is terminated.

The example shown in FIG. 11(B) is a case where priority is given to face matching in OR authentication. In this case, if the user's face is detected, face matching is performed, and if a matching result is obtained in face matching, code matching is omitted, and personal authentication is performed without performing code matching. is determined to be successful and unlocking is permitted. On the other hand, if the user's face is not detected, the two-dimensional code is verified, and if a match is obtained in the two-dimensional code verification, it is determined that the person has been authenticated successfully and unlocking is permitted. do.

Specifically, first, it is determined whether face detection has succeeded (ST601). Here, if the face detection is successful (Yes in ST601), it is next determined whether or not a matching result is obtained in face matching (ST602). Here, if a matching result is obtained in face matching (Yes in ST602), unlocking is permitted (ST605).

On the other hand, if the face detection fails (No in ST601) or if no matching result is obtained in face matching (No in ST602), then it is determined whether or not the reading of the two-dimensional code was successful. (ST603). Here, if the reading of the two-dimensional code is successful (Yes in ST603), then it is determined whether or not a matching result is obtained in the two-dimensional code collation (ST604). Here, if a matching result is obtained in the two-dimensional code collation (Yes in ST604), unlocking is permitted (ST605).

Also, if a matching result is not obtained in the two-dimensional code collation (No in ST604), unlocking is not permitted (ST606). Also, if reading of the two-dimensional code fails (No in ST603), the current process is terminated.

The example shown in FIG. 12 is for AND authentication. In this case, face verification and two-dimensional code verification are performed in sequence, and if a match is obtained in both face verification and two-dimensional code verification, it is determined that the person has been successfully authenticated, and the lock is unlocked. To give permission.

Specifically, first, it is determined whether face detection has succeeded (ST701). Here, if the face detection is successful (Yes in ST701), it is next determined whether or not a matching result is obtained in face matching (ST702). Here, if a matching result is obtained in face matching (Yes in ST702), then it is determined whether or not the reading of the two-dimensional code has succeeded (ST703). If the reading of the two-dimensional code is successful (Yes in ST703), then it is determined whether or not a matching result is obtained in the two-dimensional code collation (ST704). Here, if a matching result is obtained in the two-dimensional code collation (Yes in ST704), unlocking is permitted (ST705).

On the other hand, if no matching result is obtained in face matching (No in ST702) or if no matching result is obtained in two-dimensional code matching (No in ST704), unlocking is not permitted (ST703). If the face detection fails (No in ST701) or if the reading of the two-dimensional code fails (No in ST703), this process is terminated.

In the example shown in FIG. 12, processing is performed in the order of face verification and two-dimensional code verification, but processing may be performed in the reverse order of two-dimensional code verification and face processing.

Here, in OR authentication such as the example shown in FIGS. 11A and 11B, if a matching result is obtained from only one of face matching and two-dimensional code matching, personal authentication is successful. unlocking is permitted. Therefore, when the user picks up the luggage, it is possible to avoid a situation in which the user cannot take out the luggage because unlocking is not permitted even though the user is the person who deposited the luggage. It is possible to improve the convenience of the user. In addition, when matching results are obtained in one matching process, the other matching process is omitted, thereby reducing the processing load. On the other hand, in the AND authentication as shown in the example shown in FIG. 12, if a matching result is not obtained in both the face matching and the two-dimensional code matching, the person authentication fails and the unlocking is not permitted. can be enhanced.

Next, the processing performed by the security locker 1 and the management server 2 when unlocking will be described. FIG. 13 is an explanatory diagram showing an overview of the processing performed by the security locker 1 and the management server 2 when unlocking.

The management server 2 determines the success or failure of personal authentication (authentication success/failure determination processing) based on each matching result of the face matching process and the two-dimensional code matching process as the unlocking possibility determination process. Then, it is determined whether or not the locker box 5 being used by the user can be unlocked, that is, whether or not unlocking is permitted.

At this time, if the management server 2 determines that the personal authentication has been successful based on the matching results of the face matching process and the two-dimensional code matching process, the management server 2 sends a command to the security locker 1 to inquire whether or not there is unlocking authority. do.

When the security locker 1 receives from the management server 2 a command inquiring whether or not there is unlocking authority, the security locker 1 determines whether or not there is unlocking authority as key management processing, and transmits a response including the determination result to the management server 2. . At this time, if there is no locker box 5 corresponding to the user whose identity has been successfully authenticated, it is determined that the user does not have unlocking authority.

When the management server 2 receives a response including the determination result regarding whether or not there is authorization to unlock from the security locker 1, the management server 2 performs key determination processing based on the success or failure of personal authentication and whether or not there is authorization to unlock the locker box 5. , i.e., whether unlocking is permitted or not.

Next, as unlocking control processing, the management server 2 transmits to the security locker 1 an unlocking permission notification or an unlocking refusal notification based on the determination result regarding whether or not unlocking is permitted. At this time, if the user authentication fails and the user does not have unlocking authority, an unlocking disapproval notification including the authentication result of failure is sent. Also, if the person is successfully authenticated and the user does not have unlocking authority, an unlocking disapproval notification including a successful authentication result is sent. In addition, when the personal authentication is successful and the unlocking authority is granted, an unlocking permission notice including the successful authentication result is transmitted.

As a door opening/closing control process, the security locker 1 controls the opening/closing of the door of the locker box 5 according to the content of the notification upon receiving an unlocking permission notification or an unlocking non-permission notification from the management server 2 . That is, when receiving the unlocking permission notification, the electronic lock 16 is controlled to unlock the locker box 5, and when receiving the unlocking non-permission notification, the locked state of the locker box 5 is maintained.

In addition, as GUI control processing, the security locker 1 displays an image representing the result of personal authentication and the state of the electronic lock 16 on the display 13 according to the content of the notification received from the management server 2 . Specifically, when an unlocking disapproval notification including a failed authentication result is received, an image 251 representing authentication failure and unlocking disapproval is displayed. When the unlocking disapproval notification including the successful authentication result is received, an image 252 representing authentication success and unlocking disapproval is displayed. When an unlocking permission notice including a successful authentication result is received, an image 253 representing authentication success and unlocking permission is displayed. Note that the

images

251, 252, and 253 are displayed on the display 13 at the timing when the screen 221 (unlock notification screen) shown in FIG. 9D is displayed, for example.

Next, setting operations related to personal authentication performed on the management terminal 3 will be described. FIG. 14 is an explanatory diagram showing a setting screen displayed on the management terminal 3. As shown in FIG.

On the management terminal 3, by accessing the management server 2 and logging in in administrator mode, various management screens are displayed, and the administrator can perform various setting operations on the management screens. On the screen 301 shown in FIG. 13 , the administrator can perform setting operations related to personal authentication (face matching and two-dimensional code matching) for each security locker 1 .

A security locker selection section 302 and a two-dimensional code verification selection section 303 are provided on this screen 301 (authentication setting screen). In the security locker selection section 302, the administrator can select the target security locker 1 (apparatus ID) by selection operation of the pull-down menu. In the two-dimensional code matching selection section 303, the administrator can select whether or not to perform two-dimensional code matching in addition to face matching in personal authentication by operating a radio button.

In addition, this screen 301 is provided with an authentication mode selection section 304 and a set period input section 305 as detailed setting items.

In the authentication mode selection section 304, the administrator can select either AND authentication or OR authentication as the authentication mode by selecting radio buttons. In AND authentication, if a match is obtained in both face matching and two-dimensional code matching, it is determined that personal authentication has succeeded, and unlocking is permitted. In OR authentication, when a match is obtained from either face matching or two-dimensional code matching, it is determined that personal authentication has succeeded, and unlocking is permitted.

In the setting period input section 305, the administrator can input the setting target period (start date and end date) regarding personal authentication (face matching and two-dimensional code matching) by performing an input operation in the input box. As a result, it is possible to perform personal authentication that satisfies the required conditions for a limited period of time. For example, it is possible to increase the security of personal authentication by adopting AND authentication only for a specific period of time, such as when an event is held.

A registration button 306 is also provided on this screen 301 . When the administrator operates the registration button 306 after performing necessary selection and input operations in each section of the setting screen, the management server 2 performs processing for registering information based on the contents of the selection and input.

(Second embodiment)
Next, a second embodiment will be described. It should be noted that points not particularly mentioned here are the same as those in the above-described embodiment. FIG. 15 is an overall configuration diagram of a security locker system according to the second embodiment.

In the first embodiment, the security locker 1 (storage device, registration device, authentication device) functions as a register (registration device) that performs processing related to user registration, and a checker (authentication device) that performs processing related to personal authentication. function as When an unspecified number of people use a facility such as a railway station, if the security locker 1 has both functions of a cash register and a checker, user registration is performed when baggage is deposited, and personal authentication is performed when baggage is picked up. Since it is performed, the convenience of the user is improved.

On the other hand, in this embodiment, a register 8 (registration device) is provided in addition to the security locker 7 (storage device, authentication device). A security locker 7 has the function of a checker, but does not have the function of a register. The cash register 8 is composed of a tablet terminal or the like, and is installed in a place different from the security locker 7 . For example, the registers 8 are placed in hotel lobbies, offices, receptions of sports facilities, etc. By performing user registration using the registers 8, users can use the security lockers 7 installed in the facilities. be able to. In addition, since the register 8 is provided separately from the security locker 7, the user registration information acquired using the register 8 can be shared with other systems that use personal authentication (for example, entrance/exit management). , the system configuration can be simplified.

Next, a schematic configuration of the register 8 according to the second embodiment will be described. FIG. 16 is a block diagram showing a schematic configuration of the register 8. As shown in FIG.

The register 8 includes a camera 81 , a display 82 , a printer 83 , a communication section 84 , a storage section 85 and a processor 86 .

The camera 81 photographs the face of the user who is the target of user registration. The display 82 displays a screen regarding user registration. The display 82 is composed of a touch panel, and the user can operate the screen. A printer 83 outputs a sheet on which the two-dimensional code is printed. The communication unit 84 communicates with the management server 2 via the network. The storage unit 85 stores programs and the like executed by the processor 86 .

The processor 86 performs various processes by executing programs stored in the storage unit 85 . In this embodiment, the processor 86 performs face image acquisition processing, user registration request processing, two-dimensional code issuing processing, GUI control processing, and the like. Each process is the same as that of the security locker 1 of the first embodiment.

Next, a schematic configuration of the security locker 7 according to the second embodiment will be described. FIG. 17 is a block diagram showing a schematic configuration of the security locker 7. As shown in FIG.

The security locker 7 includes a camera 11, a motion sensor 12, displays 13 and 14, an electronic lock 16, a communication section 17, a storage section 18, and a processor 19, as in the security locker 1 of the first embodiment. , but the printer 15 is not provided.

As in the security locker 1 of the first embodiment, the processor 19 performs face image acquisition processing, two-dimensional code acquisition processing, personal authentication request processing, door opening/closing control processing, GUI control processing, and the like. processing and two-dimensional code issuing processing are not performed.

By the way, it is possible to make the use of the security locker 1 free of charge, but if the use of the security locker 1 is charged, a settlement process is performed for the user to pay the usage fee. In this case, the usage fee may be settled by a payment system linked with face authentication. Also, the usage fee may be settled by credit card, electronic money using an IC card or smart phone. Specifically, the management server 2 is connected to a payment server (not shown) that performs payment processing based on the user's electronic payment information (information on credit cards, electronic money, etc.), and the management server 2 performs personal authentication. In particular, payment processing is performed by notifying a payment server of an authentication result in which an individual is specified by face authentication. As a result, the user can settle the usage fee without performing any special operation when picking up the package. Further, the user's electronic payment information may be registered in advance, specifically at the time of user registration using the register 8 .

As described above, the embodiment has been described as an example of the technology disclosed in this application. However, the technology in the present disclosure is not limited to this, and can also be applied to embodiments with modifications, replacements, additions, omissions, and the like. Further, it is also possible to combine the constituent elements described in the above embodiments to create new embodiments.

The vault system and vault management method according to the present disclosure are user-friendly when taking out items deposited in the vault, and have the effect of ensuring high security for personal authentication. When taking out an item from an electronically locked storage, identity authentication is performed to confirm that the user is the same person as the registrant, and if the identity authentication succeeds, the electronic lock of the storage is unlocked. It is useful as a locked storage system and storage management method.

1 Security locker (storage device, registration device, authentication device)
2 Management server (server device)
3 Management terminal 4 Mobile terminal 5 Locker box (storage part)
7 Security locker (storage device, authentication device)
8 register (registration device)
11 camera 12 human sensor 13 display 14 display 15 printer (printing device)
16 electronic lock 17 communication unit 18 storage unit 19 processor 21 communication unit 22 storage unit 23 processor

Claims

a storage device that is locked and unlocked by an electronic lock;
a registration device that performs processing related to user registration for registering user information necessary for personal authentication;
a server device that acquires a face image for registration by photographing the user's face and issues a code image to be issued to the user via the registration device when the user is registered;
an authentication device that acquires at least one of an authentication face image of a user's face and the code image presented by the user;
When unlocking the storage device, as the personal authentication, face matching for comparing the face image for registration and the face image for authentication, and the code image delivered to the user and presented by the user. and code verification for comparing the code image obtained by the verification, and determining whether or not the storage device can be unlocked based on the result of the verification.
The collation unit
2. The storage system according to claim 1, wherein the identification information of the storage unit of the storage device, the facial image for registration, and the code image issued to the user are managed in association with each other.
The collation unit
As a setting related to a determination method for determining whether or not unlocking is possible based on each matching result of the face matching and the code matching, authentication is successful when matching results are obtained from both the face matching and the code matching. and OR authentication, in which it is determined that authentication is successful when a matching result is obtained from either the face collation or the code collation. The storage system according to claim 1.
The storage device is
including the registration device and the authentication device;
The server device
Acquiring the facial image for registration through the storage device that also serves as the registration device when the user is registered,
The face image for authentication and the code image presented by the user are acquired via the storage device that also serves as the authentication device when taking out the contents of the storage device. The storage system according to claim 1.
The server device
2. The storage system according to claim 1, wherein the issued code image is transmitted to a mobile terminal owned by the user in order to deliver the issued code image to the user.
The registration device
2. The storage system according to claim 1, wherein a sheet on which said code image is printed is output by a printing device in order to deliver said issued code image to a user.
The storage system according to claim 1, wherein the code image is a two-dimensional code or a one-dimensional code.
a storage device that is locked and unlocked by an electronic lock;
a registration device that performs processing related to user registration for registering user information necessary for personal authentication;
a server device that acquires a face image for registration by photographing the user's face and issues a code image to be issued to the user via the registration device when the user is registered;
A storage system comprising an authentication device that acquires at least one of an authentication face image of a user's face and the code image presented by the user,
When unlocking the storage device, as the personal authentication, face matching for comparing the face image for registration and the face image for authentication, and the code image delivered to the user and presented by the user. code collation for comparing the code image obtained from the code image, and judging whether or not the storage apparatus can be unlocked based on the result of the collation.