Authentication system, authentication method, information processing apparatus, and program

The authentication system addresses security weaknesses by managing version numbers for codes and facial images, ensuring only the latest versions are used for authentication, thereby enhancing security across multiple locations.

JP2025078259APending Publication Date: 2025-05-20NEC CORP
View PDF 1 Cites 0 Cited by

Patent Information

Application Number
JP2023190697
Authority / Receiving Office
JP · JP
Patent Type
Applications
Current Assignee / Owner
Filing Date
2023-11-08
Publication Date
2025-05-20

AI Technical Summary

Technical Problem

Existing authentication systems lack effective version number management and security measures for people entering and leaving multiple locations across different projects, leading to potential security vulnerabilities.

Method used

An authentication system that manages version numbers for two-dimensional or one-dimensional codes and facial images, associating them with an information processing device connected to multiple bases, and authenticates individuals by comparing the latest versions of these codes and images.

Benefits of technology

Enhances security by ensuring only up-to-date codes and images are used for authentication, preventing unauthorized access across different locations.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure 2025078259000001_ABST
    Figure 2025078259000001_ABST
Patent Text Reader

Abstract

To provide an authentication system with improved security through version control of codes and face images.SOLUTION: An authentication system includes: registration means which registers a two- or one-dimensional code, a face image, and version numbers of the two- or one-dimensional code and the face image, in one of a plurality of locations; an information processing apparatus which is connected to the locations and stores the two- or one-dimensional code, the face image, and the version numbers registered by the registration means in association with each other; and authentication means which authenticates a person who enters one of the locations, by collating two- or one-dimensional code and a face image carried by the person who enters the location, with a two- or one-dimensional code of the latest version of the person who enters the location, stored in the information processing apparatus.SELECTED DRAWING: Figure 1
Need to check novelty before this filing date? Find Prior Art

Description

[Technical field]

[0001] The present disclosure relates to an authentication system, an authentication method, an information processing device, and a program. [Background technology]

[0002] A system has been developed that uses a printed code and facial recognition to authenticate the entry and exit of people. Patent Document 1 discloses a composite code comprising a first code in which a plurality of cells are arranged in an array, each having a predetermined area, and data is defined by each of the predetermined areas being one of two or more colors that are distinguishable from each other. The composite code comprises a second code in which specific cells are formed in at least a portion of the plurality of cells, each of which has an area excluding the predetermined area, and data is defined by an identifiable mark that is placed at a predetermined position in the area excluding the predetermined area. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2023-60315 A Summary of the Invention [Problem to be solved by the invention]

[0004] However, in Patent Document 1, version number management is not performed, and security is weak in a system that authenticates people who enter and leave multiple locations across multiple projects. Therefore, the purpose of this disclosure is to provide an authentication system with improved security by managing the version number of the code and the face image. [Means for solving the problem]

[0005] The authentication system of the present disclosure comprises: A registration means for registering a two-dimensional or one-dimensional code, a facial image, and a version number of the two-dimensional or one-dimensional code and the facial image at one of a plurality of locations; an information processing device that associates and stores the two-dimensional or one-dimensional code, the face image, and the version number registered by the registration means, and is connected to the plurality of bases; The authentication system includes an authentication means for authenticating a person entering one of the multiple locations by comparing a two-dimensional or one-dimensional code and facial image held by a person entering the location with the latest version of the two-dimensional or one-dimensional code and facial image of the person entering the location stored in the information processing device.

[0006] The authentication method of the present disclosure includes: Registering a two-dimensional or one-dimensional code, a facial image, and version numbers of the two-dimensional or one-dimensional code and the facial image at one of a plurality of locations; An information processing device connected to the plurality of bases stores the two-dimensional or one-dimensional code, the facial image, and the version number registered at any one of the plurality of bases in association with each other; This is an authentication method in which a two-dimensional or one-dimensional code and facial image held by a person entering one of the multiple locations are compared with the latest version of the two-dimensional or one-dimensional code and facial image of the person entering the location stored in the information processing device, thereby authenticating the person entering the location.

[0007] The information processing device of the present disclosure includes: The information processing device stores a two-dimensional or one-dimensional code, a facial image, and the version numbers of the two-dimensional or one-dimensional code and the facial image in association with each other, and is connected to a plurality of bases.

[0008] The program of the present disclosure is storing a two-dimensional or one-dimensional code, a facial image, and a version number of the two-dimensional or one-dimensional code and the facial image in association with each other; This is a program that causes an information processing device to connect to multiple locations. Effect of the Invention

[0009] The present disclosure provides an authentication system with improved security by managing the version numbers of the code and the facial image. [Brief description of the drawings]

[0010] [Figure 1] 1 is a block diagram showing a configuration of an authentication system according to the present disclosure. [Diagram 2] 1 is a flow chart of an authentication method according to the present disclosure. [Diagram 3] 4 is a flowchart of a program according to the present disclosure. [Figure 4] FIG. 1 is a schematic diagram of an authentication system according to the present disclosure. [Diagram 5] 1 is a block diagram showing a configuration of an information processing device according to the present disclosure. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0011] (Description of Authentication System According to an Embodiment) An example of the configuration of the authentication system 100 will be described below with reference to FIG. 1. The authentication system 100 is a system that authenticates people who enter and leave multiple bases across multiple projects. For example, when a person wants to enter and leave bases B and C for a certain project, the system registers a code and a face image at base A, and the person takes the code to bases B and C to be authenticated. In another project, the person will enter and leave base D, and registers a code and a face image different from those in the previous project at base A, and takes the code registered at base D to be authenticated. That is, the codes are different between one project and another, and are managed by version number. Here, a project refers to each stage of a construction site, such as assembling scaffolding, solidifying the foundation, construction, and interior construction.

[0012] 1, an authentication system 100 includes a registration unit 101, an information processing device 102, and an authentication unit 103. The registration unit 101 registers a two-dimensional or one-dimensional code, a facial image, and the version numbers of the two-dimensional or one-dimensional code and the facial image at one of a plurality of locations.

[0013] The multiple bases may be, for example, bases A, B, and C, such as a head office, a branch office, and a factory. A construction site may also be a base. A server is installed in one of the multiple bases, for example, the head office. A two-dimensional or one-dimensional code, a facial image, and the version numbers of the two-dimensional or one-dimensional code and the facial image are registered in this server.

[0014] Two-dimensional or one-dimensional codes include barcodes, QR codes (registered trademarks), and chameleon codes (registered trademarks). Barcodes are one-dimensional codes that consist of multiple vertical lines of different thicknesses arranged horizontally. QR codes are two-dimensional codes that consist of multiple black-filled squares arranged in an area. Chameleon codes are two-dimensional codes that consist of multiple squares with added color elements arranged in an area.

[0015] The face image is a face image of the person who should be allowed to enter the base. By registering the face image of the person, the person can be authenticated without having to present anything when trying to enter the base.

[0016] The version number is the version number of the two-dimensional or one-dimensional code and the facial image. Every time the two-dimensional or one-dimensional code and the facial image are updated and re-registered, the version number increases by one, that is, is incremented.

[0017] The information processing device 102 stores the two-dimensional or one-dimensional code, the face image, and the version number registered in the registration unit in association with each other, and is connected to a plurality of bases. The information processing device 102 is, for example, a cloud server. The information processing device 102 is connected to a plurality of bases by wire or wirelessly. It is preferable that the connection is wired from the viewpoint of security. FIG. 5 is a block diagram showing a configuration of an information processing device 500 of the present disclosure. As shown in FIG. 5, the information processing device 102 is represented as, for example, an information processing device 500. The information processing device 500 includes a processor 501, such as a CPU (Central Processing Unit) that executes a program to perform processing, and a memory 502 that stores the program. The information processing device 500 may be configured as one device or may be configured as a plurality of devices. The information processing device 500 may be a cloud server that distributes and processes a part or all of its functions.

[0018] The authentication unit 103 authenticates a person entering one of the multiple locations by comparing a two-dimensional or one-dimensional code and a facial image held by the person entering one of the locations with the latest version of the two-dimensional or one-dimensional code and a facial image of the person entering the location stored in the information processing device. The authentication unit may be, for example, an imaging device for capturing a facial image. The authentication unit 103 also includes a server for performing authentication processing. However, the processing of the authentication unit 103 can also be performed by the information processing device 102, so a server is not essential.

[0019] For example, when a worker at a construction site attempts to enter the construction site, the imaging device captures the two-dimensional or one-dimensional code held by the worker. The imaging device then reads the two-dimensional or one-dimensional code and the worker's facial image, and the authentication unit 103 compares it with the two-dimensional or one-dimensional code and facial image stored in the information processing device 102. When the authentication unit 103 finds that the latest version of the two-dimensional or one-dimensional code and facial image match the two-dimensional or one-dimensional code and facial image held by the worker, the authentication unit 103 allows the worker to enter the base.

[0020] The latest version of the 2D or 1D code and face image is used here to ensure security. Even if the same person enters the same construction site, if the project is different and the version number is old, the person must be prohibited from entering. Therefore, the version number increases when the project is changed.

[0021] The registration unit 101 and the authentication unit 103 can be read as a registration means and an authentication means, respectively.

[0022] In this way, an authentication system with enhanced security is provided by managing the version numbers of the code and the face image.

[0023] (Description of Authentication Method According to the Embodiment) The flow of the authentication method will be described with reference to FIG. 2. As shown in FIG. 2, first, a two-dimensional or one-dimensional code, a face image, and a version number are registered (step S201). The registration unit 101 registers the two-dimensional or one-dimensional code, face image, and its version number of the person who wants to enter the base. Next, the two-dimensional or one-dimensional code, face image, and version number are linked and stored (step S202). The information processing device 102, such as a cloud server, links and stores the registered two-dimensional or one-dimensional code, face image, and version number. Finally, the two-dimensional or one-dimensional code, face image, and version number are collated to authenticate the person who is entering the base (step S203). The authentication unit 103 collates the two-dimensional or one-dimensional code and face image held by the person who wants to enter the base with the stored two-dimensional or one-dimensional code and face image, and authenticates the person when they match.

[0024] In this way, by managing the version numbers of the code and the face image, an authentication method with enhanced security is provided.

[0025] (Description of Authentication Program According to the Embodiment) A flowchart of the program of the information processing device 102 will be described with reference to Fig. 3. As shown in Fig. 3, the program causes the information processing device 102 to associate and store a two-dimensional or one-dimensional code, a facial image, and a version number (step S301). The program also causes the information processing device 102 to connect to a plurality of locations (step S302). The order of steps 301 and 302 may be reversed.

[0026] The program may also cause the information processing device 102 to register a two-dimensional or one-dimensional code and a face image captured at one of a plurality of locations.

[0027] The program may also cause the information processing device 102 to compare a two-dimensional or one-dimensional code and facial image held by a person entering one of a plurality of locations with the latest version of the two-dimensional or one-dimensional code and facial image of the person entering the location stored in the information processing device, thereby authenticating the person entering the location.

[0028] In this way, a program with enhanced security is provided by managing the version numbers of the code and the face image.

[0029] (Outline of authentication system according to embodiment) An overview of the authentication system 100 will be described with reference to Fig. 4. As shown in Fig. 4, at a site 401, an imaging device 403 captures an image of a person 405 who wishes to enter a site 402 and a two-dimensional or one-dimensional code 406 held by the person 405.

[0030] The server 404 registers a two-dimensional or one-dimensional code 406 held by a person 405 captured by an image capture device 403, the face image of the person 405, and its version number.

[0031] A cloud server 407 connected to the server 404 stores a two-dimensional or one-dimensional code 406 held by a person 405, a facial image of the person 405, and its version number.

[0032] When a person 405 attempts to enter the location 402, an imaging device 408 captures an image of the two-dimensional or one-dimensional code 406 held by the person 405 and a facial image of the person 405. Although not shown, an authentication device equipped with the imaging device 408 or connected to the imaging device 408 is disposed at the location 402. The authentication device compares the captured two-dimensional or one-dimensional code 406 held by the person 405 and the facial image of the person 405 with the stored latest version of the two-dimensional or one-dimensional code 406 and the facial image of the person 405 held by the person 405. If the comparison matches, the person 405 is permitted to enter or exit the location 402. For this reason, the authentication result is displayed on the authentication device.

[0033] The authentication device may also be a cloud server 407. The cloud server 407 compares the two-dimensional or one-dimensional code 406 and the facial image of the person 405 held by the captured person 405 with the two-dimensional or one-dimensional code 406 and the facial image of the person 405 held by the most recent version of the stored person 405. If the comparison matches, the person 405 is permitted to enter and leave the location 402.

[0034] A part or all of the processes in the information processing device 102 and the information processing device 500 described above can be realized as a computer program. Such a program can be stored and supplied to a computer using various types of non-transitory computer-readable media. The non-transitory computer-readable medium includes various types of tangible recording media. Examples of the non-transitory computer-readable medium include magnetic recording media (e.g., flexible disks, magnetic tapes, hard disk drives), magneto-optical recording media (e.g., magneto-optical disks), CD-ROMs (Read Only Memory), CD-Rs, CD-R / Ws, and semiconductor memories (e.g., mask ROMs, PROMs (Programmable ROMs), EPROMs (Erasable PROMs), flash ROMs, and RAMs (Random Access Memory)). The program may also be supplied to a computer by various types of temporary computer-readable media. Examples of the temporary computer-readable medium include electrical signals, optical signals, and electromagnetic waves. The temporary computer-readable medium can supply the program to a computer via a wired communication path such as an electric wire and an optical fiber, or via a wireless communication path.

[0035] Although the present disclosure has been described above with reference to the embodiments, the present disclosure is not limited to the above-mentioned embodiments. Various modifications that can be understood by a person skilled in the art can be made to the configuration and details of the present disclosure within the scope of the present disclosure. Furthermore, each embodiment can be appropriately combined with other embodiments.

[0036] Each drawing is merely an example for describing one or more embodiments. Each drawing may relate not only to one particular embodiment, but to one or more other embodiments. As can be understood by those skilled in the art, various features or steps described with reference to any one drawing may be combined with features or steps shown in one or more other drawings to create an embodiment not explicitly shown or described, for example. Not all features or steps shown in any one drawing are necessary to describe an exemplary embodiment, and some features or steps may be omitted. The order of steps described in any drawing may be changed as appropriate.

[0037] A part or all of the above-described embodiments can be described as, but is not limited to, the following supplementary notes. (Appendix 1) A registration means for registering a two-dimensional or one-dimensional code, a facial image, and a version number of the two-dimensional or one-dimensional code and the facial image at one of a plurality of locations; an information processing device that associates and stores the two-dimensional or one-dimensional code, the face image, and the version number registered by the registration means, and is connected to the plurality of bases; and an authentication means for authenticating a person entering one of the plurality of locations by comparing a two-dimensional or one-dimensional code and a facial image held by the person entering the location with the latest version of the two-dimensional or one-dimensional code and the facial image of the person entering the location stored in the information processing device. (Appendix 2) 2. The authentication system according to claim 1, wherein the registration means is a server. (Appendix 3) 2. The authentication system according to claim 1, wherein the authentication means uses an imaging device. (Appendix 4) 2. The authentication system according to claim 1, wherein the authentication means is a server. (Appendix 5) The authentication system according to claim 1, wherein the information processing device is a cloud server. (Appendix 6) 2. The authentication system of claim 1, wherein the version number is incremented when the two-dimensional or one-dimensional code and the facial image of a person entering any one of the plurality of locations are re-registered. (Appendix 7) Registering a two-dimensional or one-dimensional code, a facial image, and version numbers of the two-dimensional or one-dimensional code and the facial image at one of a plurality of locations; An information processing device connected to the plurality of bases stores the two-dimensional or one-dimensional code, the facial image, and the version number registered at any one of the plurality of bases in association with each other; An authentication method for authenticating a person entering one of the multiple locations by comparing a two-dimensional or one-dimensional code and facial image held by a person entering the location with the latest version of the two-dimensional or one-dimensional code and facial image of the person entering the location stored in the information processing device. (Appendix 8) An information processing device that stores a two-dimensional or one-dimensional code, a facial image, and version numbers of the two-dimensional or one-dimensional code and the facial image in association with each other, and is connected to a plurality of bases. (Appendix 9) storing a two-dimensional or one-dimensional code, a facial image, and a version number of the two-dimensional or one-dimensional code and the facial image in association with each other; A program that causes an information processing device to connect to multiple locations. (Appendix 10) The program described in Appendix 9 further causes an information processing device to compare a two-dimensional or one-dimensional code and a facial image held by a person entering any one of the multiple locations with the latest version of the two-dimensional or one-dimensional code and the facial image of the person entering the location stored in the information processing device, thereby authenticating the person entering the location.

[0038] Some or all of the elements (e.g., configurations and functions) described in Supplementary Note 2 to Supplementary Note 6 that are dependent on Supplementary Note 1 {eg system} may also be dependent on Supplementary Note 6 {eg method}, Supplementary Note 7 {eg information processing device}, and Supplementary Note 9 (eg program) in the same dependent relationship as Supplementary Note 2 to Supplementary Note 6. Some or all of the elements described in any supplementary note may be applied to various hardware, software, recording means for recording software, systems, and methods. [Explanation of symbols]

[0039] 100 authentication system, 101 registration unit, 102 information processing device, 103 authentication unit, 401 base, 402 base, 403 imaging device, 405 person, 406 two-dimensional or one-dimensional code, 408 imaging device

Claims

1. A registration means for registering a two-dimensional or one-dimensional code, a facial image, and a version number of the two-dimensional or one-dimensional code and the facial image at one of a plurality of bases; an information processing device that associates and stores the two-dimensional or one-dimensional code, the face image, and the version number registered by the registration means, and is connected to the plurality of bases; and an authentication means for authenticating a person entering one of the plurality of locations by comparing a two-dimensional or one-dimensional code and a facial image held by a person entering the location with the latest version of the two-dimensional or one-dimensional code and the facial image of the person entering the location stored in the information processing device.

2. 2. The authentication system according to claim 1, wherein the registration means is a server.

3. The authentication system according to claim 1 , wherein the authentication means is an imaging device.

4. The authentication system according to claim 1 , wherein the authentication means is a server.

5. The authentication system according to claim 1 , wherein the information processing device is a cloud server.

6. 2. The authentication system according to claim 1, wherein the version number is incremented when the two-dimensional or one-dimensional code and the face image of a person entering any one of the plurality of locations are re-registered.

7. At one of a plurality of base stations, a two-dimensional or one-dimensional code, a facial image, and version numbers of the two-dimensional or one-dimensional code and the facial image are registered; an information processing device connected to the plurality of bases stores the two-dimensional or one-dimensional code, the facial image, and the version number registered at any one of the plurality of bases in association with each other; An authentication method for authenticating a person entering one of the multiple locations by comparing a two-dimensional or one-dimensional code and facial image held by a person entering the location with the latest version of the two-dimensional or one-dimensional code and facial image of the person entering the location stored in the information processing device.

8. An information processing device that stores a two-dimensional or one-dimensional code, a facial image, and version numbers of the two-dimensional or one-dimensional code and the facial image in association with each other, and is connected to a plurality of bases.

9. storing a two-dimensional or one-dimensional code, a facial image, and a version number of the two-dimensional or one-dimensional code and the facial image in association with each other; A program that causes an information processing device to connect to multiple locations.

10. The program according to claim 9, further causing an information processing device to compare a two-dimensional or one-dimensional code and a facial image held by a person entering any of the plurality of locations with the latest version of the two-dimensional or one-dimensional code and the facial image of the person entering the location stored in the information processing device, thereby authenticating the person entering the location.

Citation Information

Patent Citations

  • Composite code pattern, generating device, reading device, method and program

    JP2023060315A