System, method, program, and device for ensuring authenticity of measured biological information

Abstract

To provide a system or the like for ensuring the authenticity of measured biological information.SOLUTION: A system for ensuring authenticity of measured biological information acquires user authentication information for authenticating a user performing biological information measurement, authenticates the user on the basis of the acquired user authentication information and the user authentication information previously stored in a user information storage device, can measure the biological information of the authenticated user, acquires validity maintenance determination information for determining whether validity of the user authentication is maintained after initiating the measurement of the biological information of the authenticated user by using a measurement device associated with the authenticated user, determines maintenance of the validity on the basis of the acquired validity maintenance determination information, and maintains a measurement possibility when it is determined that the validity is maintained.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to a system, a method, a program, and an apparatus for ensuring the authenticity of measured biometric information. [Background technology]

[0002] In recent years, the importance of objective medical data obtained at home has been increasing. For example, the 2018 Hypertension Guidelines state that home blood pressure should be used to diagnose hypertension. Data obtained at home is more suitable for estimating daily living environments than outpatient data. However, there are issues with the credibility of this data, such as the inability to distinguish it from data measured by someone other than the individual. As a result, there are issues with home medical data being difficult to use as the primary endpoint in clinical trials, or in situations where the individual's health level is related to their interests, such as life insurance. Sphygmomanometers that perform identity authentication of blood pressure measurements have been developed (Prior Reference 1). [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Patent No. 2022 / 86396 Summary of the Invention [Problem to be solved by the invention]

[0004] This blood pressure monitor acquires characteristic information about the cuff pressure change pattern over time from the start of inflation for the subject to be authenticated during the cuff inflation process, and compares the acquired characteristic information with registered characteristic information for a pre-registered user to perform personal authentication for the subject. However, it cannot confirm the authenticity of the person being measured after measurement has begun. [Means for solving the problem]

[0005] 1. The present invention has been made in view of the above problems, and has the following features: That is, a system in one embodiment of the present invention is a system for ensuring the authenticity of measured biometric information, which acquires user authentication information for authenticating a user who measures the biometric information, authenticates the user based on the acquired user authentication information and user authentication information pre-stored in a user information storage device, enables measurement of the biometric information of the authenticated user, acquires validity maintenance determination information for determining whether the validity of the user authentication is maintained after starting measurement of the authenticated user's biometric information using a measurement device associated with the authenticated user, determines whether the validity is maintained based on the acquired validity maintenance determination information, and maintains the measurability when it is determined that the validity is maintained by the determination.

[0006] 2. The system described in section 1 may be configured such that prior to commencing the measurement, the system associates the measurement device with the authenticated user, and determining that the validity is maintained includes determining whether the association is maintained, and if it is determined that the association is maintained, determining that the validity is maintained.

[0007] 3. The system described in paragraph 2 may be configured such that the acquired user authentication information is a facial image of the user captured by an imaging device, and associating the measuring device with the authenticated user includes capturing an image of the authenticated user and the measuring device in one image, identifying the measuring device in the captured image, and associating the authenticated user with the identified measuring device, and the acquiring information for determining whether or not the association between the authenticated user and the measuring device is maintained includes identifying a position of the user and a position of the measuring device in each of the repeatedly captured images, determining whether or not the position of the user and the position of the measuring device satisfy a predetermined relationship, and determining that the association is maintained if it is determined that the predetermined relationship is satisfied, and determining that the association is not maintained if it is determined that the predetermined relationship is not satisfied.

[0008] 4. In the system described in Section 2, the user authentication information and the validity maintenance determination information are biometric authentication information indicating a vein pattern or a fingerprint of a user, a biometric authentication information reading device that acquires the user authentication information and the validity maintenance determination information is capable of measuring a pulse, and the measurement device is a blood pressure measurement device that is capable of measuring a pulse, and associating the measurement device with the authenticated user includes performing the association when it is determined that the user's pulse measured by the blood pressure measurement device and the user's pulse measured by the biometric authentication information reading device are synchronized, and determining whether the association is maintained or not may include determining whether the user's pulse re-measured by the blood pressure measurement device and the user's pulse re-measured by the biometric authentication information reading device are synchronized or not.

[0009] 5. In the system described in any of paragraphs 1 to 4, the user authentication information and the validity maintenance determination information are information indicating a user's vein pattern, a vein sensor for reading the vein pattern and the measuring device are connected by a connection unit, the connection unit fixes the vein sensor to a position on the user's body for reading the vein pattern and fixes the measuring device to a measurement position of the user, and the measuring device connected to the vein sensor by the connection unit is a measuring device associated with the authenticated user.

[0010] 6. In the system described in any one of sections 1 to 5, when a user is authenticated, the measurable state of the user's biometric information may be set to a measurable state, and when it is determined that the validity of the user's authentication is not maintained, the measurable state may be set to a non-measurable state.

[0011] 7. In a system described in any one of paragraphs 1 to 6, measurement data including biometric information measured by the measurement device and a timestamp indicating the time of measurement is received, and it is determined whether the timestamp included in the measurement data is measurement data including biometric information measured while a measurement was not possible, and if it is determined that the measurement data is measurement data including biometric information measured while a measurement was not possible, the authenticity of the measurement data may be determined to be false.

[0012] 8. In the system described in any one of items 1 to 7, measurement of biological information by the measuring device may be performed while the measurement is possible.

[0013] 9. In the systems described in paragraphs 1 to 8, when a measurement is disabled, the function of measuring vital signs by the measuring device can be stopped.

[0014] 10. In the system described in any one of paragraphs 1 to 9, when a measurement is possible, information indicating that the measurement is possible can be presented to the user, and when a measurement is not possible, information indicating that the measurement is not possible can be presented to the user.

[0015] 11. In a system described in any of paragraphs 1 to 10, if the user is not authenticated, information indicating that the user has not been authenticated is presented to the user, and if it is determined that the validity of the user's authentication is not being maintained, information indicating that the validity of the user's authentication is not being maintained is presented to the user.

[0016] 12. A method in one embodiment of the present invention is a method for ensuring the authenticity of measured biometric information, which causes a computer to acquire user authentication information for authenticating a user who measures the biometric information, authenticate the user based on the acquired user authentication information and user authentication information pre-stored in a user information storage device, make the biometric information of the authenticated user measurable, and after starting measurement of the authenticated user's biometric information using a measurement device associated with the authenticated user, acquire validity maintenance determination information for determining whether the validity of the user authentication is maintained, determine whether the validity is maintained based on the acquired validity maintenance determination information, and if it is determined that the validity is maintained by the determination, maintain the measurability.

[0017] 13. A program according to one embodiment of the present invention is a program for causing a computer to execute the method described in item 12.

[0018] 14. A blood pressure measurement device in one embodiment of the present invention is a blood pressure measurement device for ensuring the authenticity of measured blood pressure measurement value information, and is equipped with a blood pressure measurement sensor, a vein sensor for reading a vein pattern as user authentication information, and a connection unit for connecting the blood pressure measurement sensor and the vein sensor, wherein the connection unit fixes the vein sensor to a position on a user's body for reading the vein pattern, and fixes the blood pressure measurement sensor to a measurement position of the user. Effect of the Invention

[0019] By using the present invention, it is possible to measure biological information of a subject with the authenticity guaranteed even after measurement has started. [Brief description of the drawings]

[0020] [Figure 1] 1 is a configuration diagram of a system according to an embodiment of the present invention. [Diagram 2] 2 is a hardware configuration diagram of a measurement device, an authentication device, and a server according to an embodiment of the present invention. [Diagram 3] 2 is a functional block diagram of a measurement device, an authentication device, and a server according to an embodiment of the present invention. [Figure 4] 2 is a flowchart according to an embodiment of the present invention. [Diagram 5] 2 is a flowchart according to an embodiment of the present invention. [Figure 6A] FIG. 2 is a conceptual diagram of an authentication operation according to the present invention. [Figure 6B] FIG. 2 is a conceptual diagram of a re-authentication operation of the present invention. [Figure 7] 2 is a flowchart according to an embodiment of the present invention. [Figure 8] 1 is a schematic diagram of a measurement device and an authentication device according to an embodiment of the present invention; [Figure 9] 2 is a flowchart according to an embodiment of the present invention. [Figure 10] 1 is a measured pulse waveform according to an embodiment of the present invention. [Figure 11] 1 is a schematic diagram of a measurement device and an authentication device according to an embodiment of the present invention; DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0021] [First embodiment] FIG. 1 shows an example of a system configuration diagram of one embodiment of the present invention. The system 100 is used to ensure the authenticity of measured biometric information, and includes a network 110, an authentication device 130 connected thereto, and a server 140. The system 100 further includes a measurement device 120 for measuring biometric information. In this embodiment, the measurement device is a blood pressure monitor, but it can be other devices for measuring biometric information. In this embodiment, the measurement device 120 is wirelessly connected to the authentication device 130, but it may be wired to the authentication device or connected via the network 110.

[0022] Examples of biological information other than blood pressure include, but are not limited to, body weight and blood glucose level, and may include, for example, a carbon monoxide concentration in breath for testing a smoking state and an alcohol concentration in breath for testing a drunk state. In addition, biological samples such as saliva, blood, and urine may be collected, and biological information obtained from these biological samples may be used. For example, the amount of nicotine or cotinine measured from saliva, or the blood glucose level measured from blood may be used as biological information. The biological information may not only be the amount measured, but also information indicating whether or not a predetermined threshold has been exceeded, or whether the result is negative or positive. The measuring device may be a carbon monoxide concentration measuring device, a breath alcohol concentration measuring device, a weight scale, or a blood glucose level measuring device. In addition, instead of the measuring device, a test reagent for measuring biological information from a biological sample may be used. For example, a test reagent for measuring the amount of cotinine from collected saliva may be used.

[0023] 2 is a block diagram showing the hardware configuration of the measurement device 120, authentication device 130, and server 140 according to this embodiment. The measurement device 120 comprises a processing device 121, a display device 122, an input device 123, a storage device 124, a communication device 125, and a measurement sensor 126. In this embodiment, since the measurement device 120 is a blood pressure monitor, the measurement sensor 126 includes at least a blood pressure sensor. Each of these components is connected by a bus 128. Note that an interface is assumed to be interposed between the bus 128 and each of the components as necessary. The same is true for the authentication device 130 and the server 140.

[0024] The authentication device 130 includes a processing device 131, a display device 132, an input device 133, a storage device 134, and a communication device 135. The authentication device 130 further includes a biometric authentication information reading device for reading biometric information for authentication. In this embodiment, the authentication sensor 136 is included as the biometric authentication information reading device. The authentication sensor 136 is a sensor for recognizing the physical characteristics of the user. Different authentication sensors are used depending on the information indicating the physical characteristics used as the authentication information. For example, when a face image of the user is used as the information indicating the physical characteristics, an imaging device is included, and when a vein pattern or a fingerprint is used as the physical characteristics, a sensor for reading the vein pattern or fingerprint information is included. The server 140 includes a processing device 141, a display device 142, an input device 143, a storage device 144, and a communication device 145.

[0025] The processing devices 121, 131, 141 respectively control the operation of the measuring device 120, the authentication device 130, and the server 140, and are, for example, CPUs. The processing devices execute various processes by reading and executing programs and data stored in the respective storage devices. The processing devices may be composed of multiple processors. The display devices 122, 132, 142 display information to the users of the respective devices according to the control of the respective processing devices. The display devices may be liquid crystal displays, displays using organic electroluminescence, plasma displays, etc.

[0026] The input devices 123, 133, 143 are user interfaces that accept input from the user to the measurement device 120, the authentication device 130, and the server 140, and are, for example, operation buttons, a touch panel, a touch pad, a keyboard, or a mouse. When a touch panel is used as an input device, the touch panel also functions as a display device, and the display device and the input device are integrated into one structure.

[0027] The storage devices 124, 134, and 144 are storage devices included in general electronic devices, including storage devices using volatile memory such as RAM and non-volatile memory such as eMMC, UFS, and SSD, as well as magnetic storage devices, etc. The storage devices may also include external memories.

[0028] The communication device 125 of the measurement device 120 performs wireless communication with the communication device 135 of the authentication device 130. For example, short-range wireless communication such as Bluetooth (registered trademark) can be used. The communication device 135 of the authentication device 130 and the communication device 145 of the server 140 exchange data via a network 110 (omitted in FIG. 2). For example, the communication device 135 performs wireless communication such as mobile communication or wireless LAN and connects to the network 110. The communication devices 135 and 145 may perform wired communication using an Ethernet (registered trademark) cable or the like. The communication device 125 of the measurement device 120 may also be connected to the network 110 via wireless communication such as mobile communication or wireless LAN or wired communication.

[0029] 3 shows an example of a functional block diagram of the measurement device 120, authentication device 130, and server 140 according to this embodiment. The measurement device 120 comprises a control unit 321, a display unit 322, an input unit 323, a user information storage unit 324, a measurement feasibility state management unit 326, a communication unit 327, and a measurement unit 328. The authentication device 130 comprises a control unit 331, a display unit 332, an input unit 333, a user information storage unit 334, a measurement feasibility state management unit 336, a communication unit 337, and an authentication information acquisition unit 338. The server 140 comprises a control unit 341, a display unit 342, an input unit 343, a user information storage unit 344, an authentication unit 345, a measurement feasibility state management unit 346, and a communication unit 347.

[0030] In this embodiment, these functions are realized by the processing devices 121, 131, and 141 executing the programs stored in the storage devices 124, 134, and 144. Since various functions are realized by loading programs, a part or all of one part (function) may be possessed by another part. These functions may be realized by hardware by configuring electronic circuits or the like for realizing a part or all of each function. Furthermore, these functional units do not have to be realized on one physical information processing device. They may be realized on multiple information processing devices, or all or a part of each storage unit may be realized as a database. Any of the functional units may be realized on another device.

[0031] Each of the control units 321, 331, and 341 has a function of executing control of information processing required to measure the biometric information of a user whose authenticity is guaranteed, and a function of storing information required for the control. Guaranteed authenticity of the user's biometric information means that it is guaranteed that the true subject of the measured biometric information matches the user (subject) recorded in the system as the measurer of the biometric information. In the present invention, it is not necessary for the authenticity to be guaranteed completely.

[0032] The user information storage units 324, 334, 344 store basic information such as the name and sex of the user whose biometric information is to be measured, user identification information, user authentication information, and information related to the user such as the measured biometric information. It is not necessary for all information related to the user to be stored in all of the user information storage units 324, 334, 344. Necessary user information is stored in each of the user information storage units 324, 334, 344 as appropriate.

[0033] The display units 322, 332, 342 are configured using the display devices 122, 132, 142, and present information to the users of the respective devices. Note that in addition to or instead of the display devices, an output device that presents information by voice, touch, or the like may be provided. The input units 323, 333, 343 are configured using the input devices 123, 133, 143, and accept input from the users of the respective devices. The communication units 327, 337, 347 are configured using the communication devices 125, 135, 145, and transmit and receive information to and from other devices.

[0034] The authentication information acquisition unit 338 acquires user authentication information for authenticating a user who measures the biometric information. In order to ensure that the biometric information measured using the measurement device 120 is the measurement data of a true subject, the authentication unit 345 of the server 140 authenticates the user of the measurement device based on the acquired user authentication information and the user authentication information stored in advance in the user information storage unit 344. Here, the authentication unit is provided in the server 140, but it may be provided in the authentication device 130 or the measurement device 120. In that case, the authentication information may be stored in the server 140 and transmitted from the server 140 as appropriate, or may be stored in a device that has the authentication unit.

[0035] The measurement availability status management units 326, 336, 346 have a function of managing the measurement availability status of the user, and the measurement availability status of the user is set to the measurement unavailable status until the user is authenticated by the authentication unit 345, and is set to the measurement available status when the authentication is successful, and is set to the measurement unavailable status when the authentication is unsuccessful. After the measurement is completed, the measurement unavailable status can be set. Also, if it is determined that the validity of the user authentication is maintained, the measurement available status is maintained, and if it is determined that the validity is not maintained, the measurement unavailable status is set. In this embodiment, the measurement device 120, the authentication device 130, and the server 140 all have a measurement availability status management unit, but they may be managed in any one of the devices. Note that the measurement availability status management unit is not an essential component in this embodiment.

[0036] The measurement unit 328 of the measurement device 120 is realized using the measurement sensor 126, and measures the biological information of the person being measured. In this embodiment, the measurement device 120 is a blood pressure monitor, the biological information is blood pressure, and the blood pressure of the person being measured is measured by the measurement sensor 126. The measurement unit 328 is capable of measurement when the measurement availability state is a measurable state, and is not capable of measurement when the measurement availability state is a non-measurable state. In the present invention, an authenticated user is associated with the measurement device 120. This means that an authenticated user is associated with the measurement device 120 used by the user to measure biological information.

[0037] The authentication information acquisition unit 338 acquires validity maintenance judgment information used to judge whether the validity of the authentication of the authenticated user is maintained after starting measurement of the biometric information of the authenticated user using the measurement device associated with the authenticated user. The validity maintenance judgment information may be user authentication information, may be information including user authentication information, or may be information not including user authentication information. The authentication unit 345 judges whether the validity of the authentication of the user is maintained based on the acquired validity maintenance judgment information. If it is determined by the validity maintenance judgment that the user authentication is maintained, the measurement is maintained as possible, and if it is determined that the user authentication is not maintained, the measurement is not possible. The user authentication process and the validity maintenance judgment process may be executed by different devices. For example, the user authentication process may be executed in the server 140, and the validity maintenance judgment process may be executed in the authentication device 130.

[0038] When the measurement availability status management unit 326 is provided, the measurement device 120 transmits the measured biometric information to the authentication device 130 together with timestamp information indicating the measurement time of the biometric information, and determines whether or not the biometric information was measured during the time when the biometric information was in the measurable state recorded in the measurement availability status management unit of the authentication device 130 or the server 140. If it is determined that the biometric information was measured during the measurable state, the data is determined to be genuine, and otherwise the data is determined to be inauthentic. When the measurement availability status management unit 326 is not provided, if the user authentication is successful, the measurement device 120 may start the measurement as measurable, and if it is determined that the validity of the user authentication is not maintained, the measurement device 120 may simply stop the measurement as not measurable. The measurement device 120 may start and stop the measurement by an operational input from the user.

[0039] Next, the overall flow of process 400 for ensuring the authenticity of the measured biometric information in this embodiment will be described with reference to FIG. 4. In process 400, the measurement feasibility state management unit does not manage the measurement feasibility state, but the measurement feasibility state can be managed as the measurement feasibility state in the measurement feasibility state management unit. If the measurement is possible, the measurement feasibility state is set to the measurement feasibility state, and if the measurement is not possible, the measurement feasibility state management unit can store the measurement feasibility state. First, the authentication information of the user (subject) whose biometric information is to be measured is stored in a user information storage device in association with the user identification information (S401). Here, the user information storage device is the user information storage unit 344 of the server 140, but may be the user information storage units of the authentication device 130 and the measurement device 120, or one or a combination of these. For example, if a face image is used as the user authentication information, the user's face image is stored in the user information storage device in association with the user identification information.

[0040] Next, in order to measure the biometric information, the authentication device 130 is used to acquire user authentication information for authenticating the user who will measure the biometric information (S402). The authentication unit 345 of the server 140 authenticates the user based on the acquired user authentication information and the user authentication information previously stored in the user information storage device (S404). When the user is authenticated, the biometric information of the authenticated user is made measurable (S406), and the measurement device 120 measures the biometric information (S408). If the authentication fails, information indicating that the authentication has failed may be presented to the user and the process 400 may be terminated, or the process may return to the authentication information acquisition process (S402) and the authentication process (S404) may be repeatedly executed until the authentication is successful.

[0041] The measurement of the biological information may be started automatically when the measurement becomes possible, or may be started based on an input operation by the user to the measurement device 120. The measurement possible / not possible state may be managed using a measurement possible / not possible state management unit, and information indicating that the measurement is possible may be presented to the user. For example, this presentation may be displayed on the display device of the measurement device 120, or on the display device of the authentication device 130. For example, the measurement possible / not possible state may be presented to the user by turning on the LED lamp in green during the measurement possible state, and blinking in red for a predetermined period of time when the measurement is transitioned to the measurement impossible state, and then turning on the red light. In addition to or instead of the display on the display device, the presentation may be made by voice or tactile signal using an output device such as a speaker. The same applies to other displays in this specification.

[0042] After starting measurement of biometric information using the measurement device 120 associated with the authenticated user, the authentication device 130 is used to acquire information for determining whether or not the authentication validity of the authenticated user is maintained (S410), and based on the acquired information for determining whether or not the authentication validity of the user is maintained (S412). If it is determined that the validity is maintained, measurement is maintained as possible. If it is determined that the validity is not maintained, measurement is made impossible (S414). In this embodiment, after it is determined that measurement is impossible, authentication information is acquired again (S402) and user authentication (S404) is executed, but the process 400 may be ended as the measurement cannot be ended correctly. If it is determined that measurement is impossible, the measurement by the measurement device may be stopped, or the authenticity of data including data measured while measurement is impossible may be determined to be false.

[0043] The acquisition of information for validity maintenance determination and the validity maintenance determination process may be performed continuously after the start of measurement, or may be performed at predetermined intervals. The acquisition of information for validity maintenance determination and the validity maintenance determination process may be performed in parallel with the measurement of biological information. The information for validity maintenance determination may be information different from the authentication information acquired before the start of measurement, or different information may be acquired in addition to the same information. The validity maintenance determination process is performed based on the information for validity maintenance determination acquired by the acquisition process.

[0044] The measurement device 120 associated with an authenticated user is a measurement device that is treated as being used by the authenticated user. The measurement device may be associated with the user by a process of associating the measurement device with the user before starting measurement of biometric information, or the measurement device may be associated in advance by providing a physical structure that allows the measurement device and the authentication device to be in a predetermined arrangement. When adopting a structure that allows the measurement device and the authentication device to be in a predetermined arrangement, the two devices are structurally arranged in a positional relationship such that, based on the structure of the human skeleton, the authentication device cannot read authentication information while the measurement device cannot measure biometric information by the same person.

[0045] If the user authentication validity maintenance determination is successful (validity is determined to be maintained), it is determined whether or not the measurement has been completed (S416). Measurement of biometric information may require measurement for a predetermined period of time. If sufficient measurement information has been acquired, it is determined that the measurement has been completed, the measured biometric information is stored (S418), and the measurement process is terminated. If it is determined that the measurement has not been completed (S416), the process returns to S408, and the measurement and validity maintenance determination process (S408 to S416) are repeatedly executed.

[0046] By using this embodiment, it is possible to ensure that the biological information measured by the measurement device is the measurement information of an authenticated user even after measurement has started.

[0047] As one variation, the measurement device 120 and the authentication device 130 may be integrated. The authentication information and measurement values ​​may be stored in the authentication device 130, and authentication may also be performed in the authentication device 130. In this case, no server is required, so the present invention can be implemented with a simpler configuration.

[0048] [Second embodiment] Next, as a more specific embodiment of the first embodiment, an example of processing when an authentication device 130 including an imaging device is used as an authentication sensor will be described with reference to the flow of Fig. 5. Here, a smartphone of a user (subject) whose biological information is to be measured is used as the authentication device 130. In this embodiment, a measurement feasibility status management unit is used.

[0049] First, a user who uses this system to measure biometric information transmits a user registration request to the server 140 via his / her authentication device 130 (smartphone) (S531). The user registration request includes basic information such as the user's name and gender, as well as an image of the user's face captured using an imaging device. Upon receiving the user registration request, the server 140 creates a user account based on the basic information, and executes user registration by storing the user's face image as user authentication information in association with user identification information in the user information storage device (S561).

[0050] For example, when an application is installed in advance in the authentication device 130, user identification information is assigned, and input of basic information such as the user's name and transmission of an authentication image are instructed. After inputting the user's name and the like, the user takes a picture of his or her face using the authentication device 130 as shown in Fig. 6A. A user registration request including the user's name and the photographed image of the user's face together with the user identification information is then transmitted to the server, and the user identification information, user name, and face image are associated with each other and the user is registered.

[0051] In this embodiment, the measurement device 120 is managed by the measurement availability management unit 326, and measurement cannot be started unless the measurement device 120 is in a measurement availability state. When the measurement availability state of the measurement device 120 is in a measurement unavailable state, if the user performs a user operation on the measurement device 120 to measure biological information, the measurement device 120 transmits an authentication request to the authentication device 130 (S501). Upon receiving this, the authentication device 130 starts taking an authentication video including the user's face and the measurement device 120 using an imaging device, and transmits an authentication request including the captured video together with user identification information to the server 140 (S532). Upon receiving the authentication request, the server 140 executes user authentication processing (S562) and association processing (S564).

[0052] Here, the moving image to be transmitted may be the whole or a part of the captured moving image, or may be a still image of one frame included in the moving image. It is sufficient that the moving image contains information that can be authenticated by the authentication process. In this specification, the term "image" includes moving images and still images unless there is a particular contradiction. The same applies to other moving images in this specification.

[0053] As one modified example, the authentication information acquisition and authentication request process may be executed in response to a user's input operation on authentication device 130, without transmitting an authentication request from measurement device 120 (S532).

[0054] More specifically, the authentication process (S562) reads out a face image stored in association with user identification information included in the authentication request from the user information storage unit 344, and determines whether or not the same person as the user of the acquired face image is included in the video included in the authentication request. The process of determining whether or not the user of the face image associated with the user identification information is included in the video can be performed by a commonly known image recognition process. For example, it can be performed by performing image recognition process using a machine learning model on an image of one frame constituting the video.

[0055] The association process (S564) executes a process of associating the user authenticated by the authentication process (S562) with the measurement device 120. In the video included in the authentication request, the measurement device is identified, and the identified device is associated with the authenticated user. The process for identifying the measurement device in the video can be performed using a commonly known image recognition process or the like. The process of associating the authenticated user with the identified measurement device includes determining that the user and the measurement device are in a predetermined relationship.

[0056] The predetermined relationship is a relationship in which the user is in a situation where he or she can perform measurements using the measurement device. If a user other than the authenticated user can perform measurements using the measurement device, it can be said that there is no predetermined relationship. Here, it is considered that there is a predetermined relationship between the recognized user and the measurement device when it is recognized that the authenticated user and the measurement device are included in one frame image in a video included in the authentication information. The process of determining whether the user and the identified measurement device are in a predetermined relationship can be performed by image recognition processing using a commonly known machine learning model, or the like.

[0057] The predetermined relationship may further require that the position of the measurement site of the user and the position of the measurement unit of the measurement device are in a predetermined relationship. For example, the position of the measurement unit of the measurement device and the position of the measurement site of the user may be within a distance that can be measured by the measurement unit. By using such a requirement, the authenticity of the measurement value measured by the measurement device can be further improved. In this case, the position of the measurement site of the user and the position of the measurement unit of the measurement device are identified in the captured video, and it is determined whether the position of the measurement site of the user and the position of the measurement unit of the measurement device satisfy the predetermined relationship. Furthermore, if a person other than the authenticated user is recognized in the captured video, it can be determined that there is no predetermined relationship.

[0058] For example, when the measurement device is a blood pressure monitor and the measurement site is the upper arm of the user, if the upper arm where the blood pressure monitor and cuff identified in the video included in the authentication request are measuring is recognized as a part of the body of the person determined to be the user, it is determined that the user and the measurement device have a predetermined relationship. If it can be identified that the upper arm recognized as the measurement site is continuously captured in the image from the user's face, it can be determined that the user and the measurement device have a predetermined relationship. An example of a shooting state in which it is possible to determine that the user has a predetermined relationship is shown in FIG. 6B. If it is determined that the part recognized as the user's body from the user's face to the upper arm is not continuous because it exists outside the angle of view, it is not determined that the user has a predetermined relationship. It is possible to prevent association when a person outside the angle of view, different from the genuine user, measures by capturing only the measurement unit within the angle of view.

[0059] If the image quality is poor and the face, measurement site, and measurement device cannot be recognized accurately due to reasons such as the measurement position being too far from the camera or being out of focus, it is not determined that the relationship is predetermined. For example, the degree of recognition of the user can be scored, a threshold value can be set, and if the degree of recognition is less than the threshold, it is not determined that the relationship is predetermined. The same applies to the user authentication process (S562) and the validity maintenance determination process (S568) described later.

[0060] If the authentication process in server 140 determines that the user is a genuine user and that the user and the measurement device have a predetermined relationship, the authentication is deemed successful, the measurability state of the user's biometric information is set to a measurable state, and an instruction to transition to the measurable state is sent to authentication device 130 (S566). The instruction to transition to the measurable state may be information indicating a successful authentication result. The same applies to other transition instructions. In server 140, measurability state management unit 346 stores and manages the measurable state together with timestamps indicating the start and end times of the measurable state in association with user identification information.

[0061] In this embodiment, since the measurement device 120 is provided with a function for guaranteeing authentic results by restricting its measurement function as described below, the server 140 does not necessarily need a function for managing the measurement feasibility state. However, there is a risk that a user may fraudulently modify the measurement device, making it possible to perform measurements even when the measurement is not possible. By managing the measurement feasibility state in the server 140, it is possible to prevent fraudulent acts by users and obtain more reliable measurement results.

[0062] When the authentication device 130 receives the measurement possible state transition instruction, it transitions the measurement possible state in the measurement possible state management unit 336 of the authentication device 130 to the measurement possible state, and transmits the measurement possible state transition instruction to the measurement device 120 (S534). When the measurement device 120 receives this, it transitions the measurement possible state in the measurement possible state management unit 326 to the measurement possible state, and measurement of the biological information is performed (S502).

[0063] After starting measurement, the authentication device 130 continuously executes a validity maintenance judgment process for user authentication in order to maintain a state in which measurement is possible. In the validity maintenance judgment process in this embodiment, it is judged whether the validity of the user authentication and the association between the measurement device 120 and the authenticated user are maintained, and if the user authentication is successful again and it is judged that the association is maintained, it is judged that the validity of the user authentication is maintained. In order to judge whether the association is maintained, the authentication device 130 acquires validity maintenance judgment information and transmits a validity maintenance judgment request including the acquired validity maintenance judgment information to the server 140 (S536).

[0064] In this embodiment, the imaging device is used to continue photographing the user, the user's measurement site, and the measurement device to obtain validity maintenance determination information, and a validity maintenance determination request including the photographed video is transmitted to the server 140 (S536). The authentication device 130 may display on the display unit 332 that measurement is in progress, and may display information on the display unit instructing the user, the user's measurement site, and the measurement device to be within the angle of view, so that the user can appropriately photograph the video.

[0065] Based on the video included in the received validity maintenance determination request, the server 140 performs authentication processing to determine whether the user's face matches the person in the registered user's face image, and determines whether the association between the user and the measurement device is maintained (S568). The authentication processing and the determination processing to determine whether the association between the user and the measurement device is maintained can be performed by the same determination processing as S562 and S564. That is, in the captured video, it can be determined whether the user captured is a genuine user, and whether the user and the measurement device have a predetermined relationship. Since the predetermined relationship needs to be continuously maintained, it can be determined that the predetermined relationship has not been maintained if at least one of the user's face, the measurement site, and the measurement device is out of the field of view in a part of the captured video. However, even if the user is not captured for a short time, such as when the user turns away, it may be determined that the relationship is maintained if the continuity of the measurement site with other body parts is maintained. In addition, the validity maintenance determination processing does not need to include the user authentication processing. For example, if the user's face and the measurement device are not outside the angle of view, it may be determined whether the association between the user and the measurement device is maintained.

[0066] Since the validity maintenance judgment process is executed after the start of measurement, it is preferable to identify the user's measurement position and the position of the measurement device in each of the repeatedly captured images and judge whether the user's measurement position and the position of the measurement device satisfy a predetermined relationship. In particular, it is judged whether the user's measurement part and the measurement part of the measurement device are located within a predetermined distance, and if the distance is greater than the predetermined distance, it can be judged that the predetermined relationship is not satisfied.

[0067] If it is determined that the validity is not maintained, the measurement availability status of the user in the measurement availability status management unit 346 is transitioned to a measurement unavailable status, and information instructing the transition to the measurement unavailable status is transmitted to the authentication device 130 (S570). If it is determined that the validity is maintained, the validity maintenance determination is successful, and a determination process is executed to determine whether the measurement result has been received in order to determine whether the measurement has been completed (S572).

[0068] After transmitting the validity maintenance judgment request, the authentication device 130 waits for a measurement-disabled state transition instruction for a predetermined period of time, and when it is determined that information instructing a transition to the measurement-disabled state has been received (S538), it transitions the state of the measurement feasibility state management unit 336 of the authentication device 130 to the measurement-disabled state, and further transmits information instructing a transition to the measurement-disabled state to the measurement device 120 (S540). The authentication device 130 can display on the display device that the validity maintenance judgment has failed (when it is determined that the validity is not maintained) and that the measurement has stopped. Furthermore, it can display an instruction such as making sure that the user's face is included in the angle of view in order to resume the measurement. When it is determined that the measurement-disabled state transition instruction has not been received, it executes a process of determining whether or not the measurement result has been received (S542). When the measurement result has not been received, it returns to the validity maintenance judgment request process (S536).

[0069] If the server 140 succeeds in determining whether or not the validity is maintained (if the validity is determined to be maintained), the server 140 may transmit an instruction to maintain the measurable state to the authentication device 130, and if the authentication device 130 does not receive the instruction to maintain the measurable state within a specified period of time, the server 140 may assume that it has received an instruction to transition to the measurement-disabled state and execute the measurement-disabled state transition process.

[0070] The measurement device 120 determines whether or not information instructing a transition to a measurement-disabled state has been received (S504). If a transition instruction is received, the measurement availability state is changed to a measurement-disabled state, the measurement is stopped (S506), and the process returns to the authentication request process (S501) to perform the measurement again. If a measurement stop command is issued, the measurement process may be terminated (S512) without transmitting the measurement results.

[0071] As one modified example, if the validity maintenance judgment fails, the measurement device 120 may suspend measurement in a measurement-unavailable state and wait until the validity maintenance judgment is successful, and the authentication device 130 may repeatedly acquire validity maintenance judgment information and execute the validity maintenance judgment process in the server 140, and if the validity maintenance judgment is successful, the measurement device 120 may transition to a measurement-enabled state and resume measurement. In this case, the server 140 may record the measurement-unavailable state, and data measured during the measurement-unavailable state may not be used as a measurement result.

[0072] If it is determined that the measurement disable state transition instruction has not been received (S504), it is determined whether the measurement satisfies the end condition (S508). For example, the end condition is that a predetermined measurement time of the biological information has elapsed. If it is determined that the measurement does not satisfy the end condition, the process returns to S502 to continue the measurement. If it is determined that the end condition is satisfied, the measurement device 120 transmits a measurement end notification including data indicating the measurement result to the authentication device 130 (S510). After that, the measurement device 120 transitions to a measurement disable state and ends the measurement process. The data indicating the measurement result includes a timestamp indicating the measurement time. The measurement time may include the start time and end time of the measurement, or may include the measurement time of each measurement data constituting the measurement result. If the measurement is temporarily stopped, the time when it was stopped and the time when it was resumed may be included.

[0073] When the authentication device 130 receives the measurement end notification, it transmits the measurement end notification including the measurement result to the server 140, and the measurement availability status of the user is changed to the measurement unavailable status in the measurement availability status management unit 336 (S546). When the server 140 receives the measurement end notification, it judges whether the measurement result was measured during the measurement available status (S572), and if it judges that the measurement result was measured during the measurement available status, it stores it as the measurement result of the user in the user information storage device, and changes the measurement availability status of the user in the measurement availability status management unit 346 to the measurement unavailable status (S574). For example, it can be judged by whether the timestamps indicating the measurement start time and end time included in the measurement result are included between the start time and end time of the measurement available status stored in the measurement availability status management unit 346 of the server 140. If the measurement data measured during the measurement unavailable status is included, it transmits a measurement data rejection notification to the authentication device 130, and displays that fact on the display unit 332 of the authentication device 130, and can urge the user to perform a remeasurement.

[0074] By using this embodiment, it is possible to realize a system that guarantees the authenticity of measured biometric information by using an electronic device equipped with an imaging device, such as a smartphone, as an authentication device.

[0075] [Third embodiment] This embodiment differs from the second embodiment in that the measurement device 120 does not have a function for managing the measurement availability state and a function for restricting measurement in a measurement unavailable state. Other points are the same as those of the second embodiment. Below, the points that are different from the second embodiment will be mainly described, and a description of similar processes may be omitted. An example of the processing flow of this embodiment is shown in FIG. 7. Processes similar to those in FIG. 5 are given the same reference numerals as in FIG. 5.

[0076] In this embodiment, after user registration (S531, S561), when starting biometric measurement, no authentication request is made from the measurement device 120, and the user starts authentication processing using the authentication device 130 (S732). As in the second embodiment, the authentication method is the same as that of the second embodiment, where the server 140 executes authentication processing and association processing using images of the user's face, measurement site, and measurement device captured by the authentication device 130 (S562, S564), and if authentication and association are successful, a measurement possible state transition instruction is sent to the authentication device 130, and the measurement possibility state is changed to the measurement possible state (S566).

[0077] When the authentication device 130 receives the measurement possible state transition instruction, it transitions the measurement possible state to the measurement possible state and displays information on the display device indicating that the authentication has been successful and that measurement can be started (S734). After checking this display, the user operates the measurement device 120 to perform measurement (S502).

[0078] In the authentication device 130 and the server 140, as in the second embodiment, the acquisition of information for validity maintenance judgment, the request for validity maintenance judgment, and the validity maintenance judgment are repeatedly executed (S536, S538, S568, S570). When the authentication device 130 receives the measurement impossible state transition instruction (S570), it transitions the measurement possible / important state to the measurement impossible state, displays the failure of the validity maintenance judgment, and displays information encouraging the user to capture an image so that the face, the measurement site, and the measurement device are included in the angle of view in order to re-execute the authentication process (S740). The authentication device 130 returns to S732 and resumes the process of transmitting an authentication request including the captured image, etc. to the server 140. It is also possible to return to S734 and repeatedly execute the validity maintenance judgment process.

[0079] When the user confirms the information indicating the failure of the validity maintenance judgment displayed on the display device of authentication device 130, a measurement stop operation is executed on measurement device 120. When measurement device 120 receives the measurement stop operation (S704), it stops the measurement (S506). The authentication process is executed again, and if the authentication is successful, the user executes the measurement start operation again and the measurement is carried out again (S502).

[0080] If the validity maintenance determination is successful, the measurement is continued (S502), and if it is determined that a predetermined condition for ending the measurement is met (S508), the measurement is ended and the measurement result is transmitted to the authentication device (S510). The authentication device 130, which has received the measurement result, transitions the measurement availability state to a measurement disabled state and transmits the measurement result to the server 140 (S546). When the server 140 receives the measurement result (S572), it transitions the measurement availability state to a measurement disabled state, and if it determines that the measurement result was measured in a measurement enabled state, it records the result in association with the user identification information (S574).

[0081] By using this embodiment, the measurement device 120 can ensure the authenticity of the measurement results with a simpler configuration than the second embodiment.

[0082] As one modification, the measurement feasibility state may not be managed by server 140, but may be managed only by authentication device 130, and measurement results may be received from measurement device 120 only when the measurement is possible. As a further modification, server 140 may record the measurement result as a genuine result when it receives a measurement result that was measured when the measurement feasibility state was a measurement possible state.

[0083] As another modified example, the measurement device 120 may not have a measurement result transmission function. When the measurement is completed, the measurement device 120 displays the measurement result on the display device of the measurement device 120. When the measurement result is displayed on the measurement device 120, the user can operate the authentication device 130 to end the validity maintenance determination process, and further use the imaging device to capture the displayed measurement result, thereby replacing the reception of the measurement result. The authentication device 130 may identify numbers or the like indicating the measurement result from the captured measurement result image, generate measurement result data as numerical data, and transmit it to the server 140, or the captured measurement result image may be transmitted, and the server 140 may identify numbers or the like indicating the measurement result and register the measurement result.

[0084] In order to determine whether the measurement result was measured while the measurement was possible in server 140, the measurement date and time can be displayed on the measurement result displayed on measuring device 120, and it can be determined whether the measurement was measured while the measurement was possible. It is preferable that the measurement time includes at least one of the measurement start time and the measurement end time. Since the time required for measurement is generally within a predetermined range, it is also possible to estimate the measurement start and end times from the measurement start time or the measurement end time. The measurement start and end times may also be estimated based on the time when the image was taken.

[0085] By using this modified example, it becomes possible to guarantee the authenticity of the measurement data with a certain degree of reliability, even when a commonly used measurement device is used.

[0086] It is clear that in this embodiment, instead of a measuring device such as a blood pressure monitor, a test reagent for measuring biological information from a biological sample can be used. For example, an authenticated user and a test reagent can be imaged and associated in the authentication device 130, the user can collect his / her own biological sample and perform a test using the test reagent, the validity maintenance determination of the user authentication can be continued until the test result is shown on the test reagent, and the test reagent with the test result shown can be imaged by the authentication device 130 and the test result can be transmitted to the server 140. For example, the timestamp of the image can be set as the measurement end time. By using this embodiment, it is possible to guarantee the authenticity of the measurement result with a certain degree of reliability even if a commonly used test reagent is used.

[0087] [Fourth embodiment] This embodiment differs from the second and third embodiments in that the authentication information acquisition unit 338 of the authentication device 130 includes a biometric authentication sensor and a pulse sensor, and the measurement device 120 includes a pulse sensor in addition to the biometric information measurement sensor. That is, the authentication information acquisition unit 338 included in the authentication device 130 is capable of reading information indicating a vein pattern or a fingerprint and measuring a pulse. The measurement device 120 is a blood pressure measurement device capable of measuring a pulse.

[0088] Associating the measurement device 120 with the authenticated user includes performing the association when it is determined that the user's pulse measured by the blood pressure measurement device 120 and the user's pulse measured by the authentication device 130 are synchronized. Determining whether the association is maintained or not includes determining whether the user's pulse re-measured by the blood pressure measurement device and the user's pulse re-measured by the authentication device 130 are synchronized or not. The following mainly describes the points that are different from the second embodiment, and a description of similar processes may be omitted.

[0089] An example of the authentication device 130 and the biometric information measuring device in this embodiment is shown in FIG. 8. Here, the authentication device 130 is an electronic device 801 including a fingerprint sensor and a pulse sensor, but may be configured by an authentication sensor unit including a fingerprint sensor and a pulse sensor and an electronic device such as a smartphone that controls the authentication sensor unit. When the authentication sensor unit including the fingerprint sensor and the pulse sensor is used in combination with a separate control electronic device, they are connected to each other by wireless communication such as Bluetooth (registered trademark) or by wired connection. When a user performs an operation input to the control electronic device, the control electronic device and the authentication sensor unit communicate with each other, an authentication process is executed, and the process result is displayed on the display unit of the control electronic device. A vein pattern is used as biometric authentication information, and the device can be configured as a wearable device that can be attached to a part of the body where the vein pattern can be read, such as the palm or wrist.

[0090] An example of the processing flow of this embodiment is shown in FIG. 9. The same processes as in FIG. 5 are given the same reference numerals. First, the user uses the authentication device 130 to transmit a user registration request to the server 140 to perform user registration (S931 and S961). Unlike the second and third embodiments, the user registration request does not need to include a facial image of the user. It is sufficient that basic information such as the user's name is included. The server 140 performs user registration by creating a user account based on the information included in the user registration request and storing basic information such as the user's name in association with user identification information in the user information storage device.

[0091] The authentication device 130 further reads a fingerprint as user authentication information using a biometric authentication sensor, and stores data indicating the fingerprint in association with the user identification information of the registered user in a storage device of the authentication device 130. When the server 140 performs user registration, it transmits a user registration completion notice including the user identification information to the authentication device 130, and the authentication device 130 may store the fingerprint upon receiving the user registration completion notice. The user's fingerprint data may be included in a user registration request, registered in the server 140, and read out from the server 140 during authentication processing.

[0092] When a user performs a user operation on the measurement device 120 to start measuring biometric information, the measurement device 120 transmits an authentication request to the authentication device 130 (S501), performs pulse measurement for a predetermined period, and transmits data indicating the measured pulse (S902). Upon receiving the authentication request, the authentication device 130 reads the user's fingerprint and performs pulse measurement for a predetermined period (S932). The measurement is performed so that the times when the measurement device 120 and the authentication device 130 perform pulse measurements overlap for at least the predetermined period.

[0093] When the authentication device 130 finishes the pulse measurement and receives the pulse data from the measurement device 120, it executes the authentication process (S934). In the authentication process, it is determined whether or not the fingerprint stored in the authentication device 130 in association with the user identification information of the user matches the fingerprint read in S932. If it is determined that they match, the user is authenticated as a genuine user. The authentication by fingerprint can be performed using a commonly known process. Here, the authentication device 130 is a device dedicated to one user, and only one fingerprint data is stored. However, when the authentication device 130 is used by multiple users, the fingerprint can be stored in association with the user identification information, and the fingerprint stored in association with the user identification information input by the user can be read out at the start of measurement.

[0094] If the authentication is successful, a process of associating the user with the measuring device 120 is executed (S936). It is determined whether the pulse measured by the measuring device 120 and the pulse measured by the authentication device 130 are synchronized, and if it is determined that they are synchronized, it is determined that the association between the measuring device 120 and the authenticated user has been successful. If the pulse measured by the measuring device 120 and the pulse measured by the authentication device 130 are synchronized, it can be considered that the person being measured by the measuring device 120 is the same as the authenticated user. Therefore, it is possible to guarantee the authenticity of the measurement data measured by the measuring device 120 as the user's measurement data.

[0095] If authentication or association fails, information to that effect may be displayed on the display unit of authentication device 130, and the measurement process may then be terminated, or information instructing the user to reacquire authentication information and association information may be displayed on the display unit, and the process may return to S902 and S932.

[0096] An example of the pulse synchronization determination process will be described with reference to FIG. 10. Wave 1001 indicates a pulse waveform measured by the authentication device 130, and wave 1002 indicates a pulse waveform measured by the measurement device 120. The timing of waves 1001 and 1002 is synchronized based on information indicating the measurement time included in the measurement data. The average period (T p ), the average period of the pulse wave measured by the measuring device 120 (T s ) and the average time difference (d) of the pulse rate are calculated as follows:

[0097]

number

number

number

[0098] As shown in Figure 10, T pk is the period of the pulse wave measured by the authentication device 130, and T sk is the period of the pulse wave measured by the measuring device 120, and d k is the time difference between the pulse waves measured by the measurement device 120 and the authentication device 130. Here, it is the time difference between the peaks of the pulse waves. For example, the time difference between the peaks can be determined by synchronizing the timing of the authentication device 130 and the measurement device 120 based on information indicating the measurement time of the pulse wave data measured by both devices. n is the number of measured pulse waves. Here, it is the number of peaks of the pulse wave. Then, T p , T sIf , d, and n satisfy the following conditions, the two are determined to be synchronized.

[0099]

number

number

number

[0100] Here, ε1 is the allowable error regarding the difference in pulse wave period. In principle, the difference in the period of the pulse wave measured by the measurement device 120 and the authentication device 130 is a value that is expected to be zero, but an error may occur due to the accuracy of the measurement device. A predetermined value is appropriately set to allow a certain measurement error. Here, for example, it is set to 10 milliseconds. ε2 is the allowable pulse delay. A pulse delay difference occurs due to the difference in distance from the part of the user's body where the pulse is measured by the measurement device 120 and the authentication device 130 and from the heart. It can be determined based on the pulse wave speed and the expected difference in distance. Here, the pulse wave speed is set to 10 m per second, the distance difference is set to 0.5 m, and ε2 is set to 50 milliseconds. n is the pulse rate to be measured, and N is a predetermined integer. Since the pulse wave has a stable waveform without large fluctuations for about several seconds, the synchronization of the pulse during that time is confirmed. Here, N=5 is set assuming that the pulse wave is measured for about 5 seconds.

[0101] If all the conditions shown in the above formulas 4 to 6 are satisfied, it is determined that the two are synchronized. If the difference between the average periods of the two is within an allowable range, the delay is within an allowable delay, and the pulse has been measured a predetermined number of times or more, it is determined that the two are synchronized, that is, the person being measured by the measurement device 120 and the user of the authentication device 130 are the same person. The present invention is not limited to these conditions, and other conditions may be used for the determination as long as it is possible to confirm that the pulses are synchronized.

[0102] If the authentication is successful, the authentication device 130 changes the measurement availability state to a measurement available state and transmits a measurement available state transition instruction to the measurement device 120 (S938). When the measurement device 120 receives the authentication success information, it transitions to a measurement available state and executes measurement of biological information (blood pressure) (S502). The measurement device 120 and the authentication device 130 continue measuring the pulse even after the measurement starts. The measurement device 120 measures the pulse for a predetermined period and transmits data indicating the measured pulse to the authentication device 130. As information for determining whether the validity of user authentication is maintained, the authentication device 130 also continuously reads the fingerprint and measures the pulse for a predetermined period (S940). Then, as a determination of whether the validity of user authentication is maintained, fingerprint authentication is performed by the same process as S934 and S936, and when data indicating the pulse is received from the measurement device 120, it is re-determined whether the pulse is synchronized with the pulse measured in the authentication device 130 (S942).

[0103] If fingerprint authentication fails or if it is determined that synchronization is not established, it is determined that the association is not maintained, the validity maintenance determination has failed, and the measurement availability state is transitioned to a measurement unavailable state. If the measurement availability state is an unavailable state (S538), a command to stop blood pressure measurement is transmitted to the measurement device 120 (S540). If the measurement device 120 determines that it has received a measurement stop command (S504), it transitions to a measurement unavailable state, stops the measurement (S506), and returns to the authentication request to resume measurement (S501).

[0104] If it is determined that the validity maintenance determination was successful, the measurement availability state is maintained as the measurable state, and a process for determining whether the measurement has been completed is executed (S508). In the authentication device 130, the measurement completion is determined based on whether the measurement result has been received (S542). The biometric information measurement and validity maintenance determination process are repeatedly executed until it is determined that the measurement has been completed. When the measurement is completed, the measurement device 120 transmits data indicating the measurement result to the authentication device 130, and the measurement is terminated (S510).

[0105] When the authentication device 130 determines that it has received the measurement result (S542), it transmits the measurement result together with the user identification information to the server 140 (S546). When the server 140 receives the measurement result, it stores the measurement result in the user information storage unit in association with the user identification information (S574). The server 140 may determine whether the received data was measured while the measurement was possible.

[0106] By using this embodiment, a user can measure biometric information (blood pressure) by, for example, placing his / her finger on the authentication device 130, and a stable validity maintenance determination can be made without having to worry about whether the user is within the field of view of the imaging device, etc., so that it is possible to obtain measured biometric information with guaranteed authenticity without requiring the user to go through complicated procedures.

[0107] [Fifth embodiment] The basic information processing in this embodiment is similar to the flow of the first embodiment shown in Fig. 4, but differs from the first embodiment in that the measurement device 120 and authentication device 130 used have more specific configurations. The authentication information acquisition unit 338 of the authentication device 130 includes a biometric authentication sensor and a pulse sensor. Here, the biometric authentication sensor is a vein sensor for reading a vein pattern. The read vein pattern is used as user authentication information. The vein sensor and pulse sensor can be, for example, an infrared sensor, but any sensor capable of measuring the vein pattern and pulse may be used.

[0108] The authentication device and the measurement device are connected by a connection unit. The connection unit fixes the authentication information reading unit to a position on the user's body for reading biometric information, and fixes the measurement device to the user's measurement position. The measurement device connected to the authentication information reading unit by the connection unit is the measurement device associated with the authenticated user. The following description will focus on the differences from the first embodiment, and descriptions of similar processes may be omitted.

[0109] An example of the measurement device and authentication device used in this embodiment is shown in Fig. 11. A cuff (blood pressure measurement sensor) 1101 of the measurement device 120, which is a blood pressure monitor, and an authentication information reading unit are connected by a rigid rod-shaped connecting part 1103, and when the person to be measured wears the cuff 1101 for blood pressure measurement, a vein sensor 1102 of the authentication device 130 is arranged at a position (e.g., the palm) where the vein pattern is read.

[0110] With this configuration, the vein pattern can be repeatedly read while blood pressure measurement is being performed. Since the vein sensor and the cuff are connected by a rigid rod-shaped connection part, the vein pattern of a person other than the person wearing the cuff cannot be read. Therefore, before starting blood pressure measurement with the measurement device 120, the vein pattern is read by the vein sensor, user authentication is performed, and then blood pressure measurement is performed. Authentication is repeatedly performed during the measurement to determine whether the validity of the user authentication is maintained. If the user authentication is successful, it is determined that the validity of the user authentication is maintained. If the authentication is successful until the end of the measurement, it is possible to guarantee that the blood pressure measurement data, which is the measured blood pressure measurement value information, is genuine.

[0111] In the above-described processes or operations, the processes or operations can be freely changed as long as no inconsistencies in the processes or operations occur, such as using data that should not yet be available in a certain step. The functional units included in each device described above may be included in other devices, and functional units included in multiple devices, such as the measurement feasibility status management unit, may be provided only in one device, and the other devices may refer to the measurement feasibility status managed by one measurement feasibility status management unit. Furthermore, the above-described embodiments are examples for explaining the present invention, and the present invention is not limited to these embodiments. The present invention can be embodied in various forms without departing from the gist of the present invention. [Explanation of symbols]

[0112] 100: system, 110: network, 120: measuring device, 121: processing device, 122: display device, 123: input device, 124: storage device, 125: communication device, 126: measurement sensor, 128: bus, 130: authentication device, 131: processing device, 132: display device, 133: input device, 134: storage device, 135: communication device, 136: authentication sensor, 140: server, 141: processing device, 142: display device, 143: input device, 144: storage device, 145: communication device, 321: control unit, 322: display unit, 323: input unit, 32 4: User information storage unit, 326: Measurement availability status management unit, 327: Communication unit, 328: Measurement unit, 331: Control unit, 332: Display unit, 333: Input unit, 334: User information storage unit, 336: Measurement availability status management unit, 337: Communication unit, 338: Authentication information acquisition unit, 341: Control unit, 342: Display unit, 343: Input unit, 344: User information storage unit, 345: Authentication unit, 346: Measurement availability status management unit, 347: Communication unit, 400: Processing, 801: Electronic device, 1001, 1002: Pulse wave, 1101: Cuff, 1102: Vein sensor, 1103: Connection unit

Claims

1. A system for ensuring authenticity of measured biometric information, comprising: acquiring user authentication information for authenticating a user who performs measurement of biometric information; authenticating the user based on the acquired user authentication information and user authentication information previously stored in a user information storage device; Measuring biometric information of the authenticated user; After starting measurement of biometric information of the authenticated user using a measurement device associated with the authenticated user, acquiring validity maintenance determination information for determining whether the validity of the authentication of the user is maintained; determining whether the validity is maintained based on the acquired information for determining whether the validity is maintained; If the assessment determines that effectiveness is maintained, then measurability is maintained. system.

2. Associating the measurement device with the authenticated user prior to commencing the measurement; Determining the maintenance of efficacy includes: Determining whether the association is maintained; If it is determined that the association is maintained, it is determined that the validity is maintained. Including, The system of claim 1 .

3. the acquired user authentication information is a face image of the user captured by an imaging device, Associating the measurement device with the authenticated user includes: capturing an image of the authenticated user and the measuring device in a single image; Identifying the measuring device in one of the captured images; Associating the authenticated user with the identified measurement device; Including, acquiring the validity maintenance determination information includes repeatedly capturing images of the authenticated user and the measurement device by an imaging device; Determining whether an association between the authenticated user and the measurement device is maintained includes: Identifying a position of the user and a position of the measuring device in each of the repeatedly captured images; determining whether a position of the user and a position of the measuring device satisfy a predetermined relationship; If it is determined that the predetermined relationship is satisfied, it is determined that the association is maintained; If it is determined that the predetermined relationship is not satisfied, it is determined that the association is not maintained. Including, The system of claim 2.

4. the user authentication information and the validity maintenance determination information are biometric authentication information indicating a vein pattern or a fingerprint of a user, a biometric authentication information reading device that acquires the user authentication information and the validity maintenance determination information is capable of measuring a pulse rate; the measurement device is a blood pressure measurement device capable of measuring a pulse rate, Associating the measurement device with the authenticated user includes performing association when it is determined that the pulse of the user measured by the blood pressure measurement device and the pulse of the user measured by the biometric authentication information reading device are synchronized; determining whether the association is maintained or not includes determining whether the pulse of the user re-measured by the blood pressure measurement device and the pulse of the user re-measured by the biometric authentication information reading device are synchronized or not. The system of claim 2.

5. the user authentication information and the validity maintenance determination information are information indicating a vein pattern of a user, a vein sensor for reading a vein pattern and the measuring device are connected by a connection part; The connection unit fixes the vein sensor to a position on a user's body for reading a vein pattern, and fixes the measurement device to a measurement position on the user; a measurement device connected to the vein sensor by the connection unit is a measurement device associated with the authenticated user; The system of claim 1 .

6. When the user is authenticated, the measurement availability state of the user's biological information is set to a measurement available state; if it is determined that the validity of the authentication of the user is not maintained, the measurement availability state is set to a measurement disabled state. The system of claim 1 .

7. receiving measurement data including biological information measured by the measurement device and a time stamp indicating the time of measurement; determining whether a time stamp included in the measurement data is measurement data including biological information measured during a measurement disabled state; If it is determined that the measurement data includes biological information measured during a measurement-disabled state, the authenticity of the measurement data is determined to be false. The system of claim 6.

8. The system according to claim 6 , wherein the measurement of biological information is performed by the measurement device during a measurement enabled state.

9. The system according to claim 6 , wherein when the measurement is disabled, a function of measuring biological information by the measuring device is stopped.

10. If the measurement is possible, presenting information indicating that the measurement is possible to the user; If the measurement is not possible, present information indicating that the measurement is not possible to the user. The system of claim 6.

11. If the user is not authenticated, presenting information to the user indicating that the user is not authenticated; when it is determined that the validity of the authentication of the user is not maintained, presenting information indicating that the validity of the authentication of the user is not maintained to the user; The system of claim 6.

12. A method for ensuring authenticity of measured biometric information, comprising: acquiring user authentication information for authenticating a user who performs measurement of biometric information; authenticating the user based on the acquired user authentication information and user authentication information previously stored in a user information storage device; enabling measurement of biometric information of the authenticated user; After starting measurement of biometric information of the authenticated user using a measurement device associated with the authenticated user, acquiring validity maintenance determination information for determining whether the validity of the authentication of the user is maintained; determining whether the validity is maintained based on the acquired information for determining whether the validity is maintained; If the assessment determines that effectiveness is maintained, maintain measurability. method.

13. A program for causing a computer to execute the method according to claim 12.

14. A blood pressure measurement device for ensuring authenticity of measured blood pressure measurement value information, A blood pressure measuring sensor; a vein sensor for reading a vein pattern as user authentication information; a connection portion that connects the blood pressure measurement sensor and the venous sensor; Equipped with The connection portion fixes the vein sensor to a position on a user's body for reading a vein pattern, and fixes the blood pressure measurement sensor to a measurement position on the user. Blood pressure measuring device.

Images