Authentication device, authentication method, and authentication system

Abstract

To provide authentication technology that enables enhanced authentication accuracy while allowing users to enjoy the benefits of facial recognition-enabled gate devices.SOLUTION: An authentication device performs a predetermined subtraction operation on an authentication threshold to be compared with a score corresponding to the collation result between a face registration image linked to registration information and face image information of an entering person, allowing the collation result between the face registration image linked to the registration information and the face image information of the entering person to be prioritized over the collation result between the face registration image not linked to the registration information and the face image information of the entering person. The authentication device authenticates whether the person corresponding to the face registration image used to obtain the collation result with the highest difference between the score and the authentication threshold, among collation results favored because the face registration image is linked to the registration information and collation results not favored because the face registration image is not linked to the registration information, is the same person as the entering person.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present disclosure relates to an authentication device, an authentication method, and an authentication system. [Background technology]

[0002] There is known a technology that uses facial recognition to manage the entry and exit of people passing through gate devices installed at stations, airports, etc. For example, Patent Document 1 discloses a gate device that can perform facial recognition of an entrant based on facial feature amounts registered in correspondence with an identifier transmitted from a wireless tag carried by the entrant entering the gate device. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Patent No. 6816821 Summary of the Invention [Problem to be solved by the invention]

[0004] Incidentally, if an authentication system including a gate device that supports facial recognition is deployed in stations and other locations with a large number of users in the future, the number of people registered with the authentication system may become enormous. As the number of registered people increases, the number of people with similar facial features also increases, which could lead to incorrect recognition in the facial recognition of people entering the gate device.

[0005] The advantage of a gate device that supports facial recognition is that entrants can pass through without using special equipment for the authentication process. However, as mentioned above, there is a certain limit to the accuracy of authentication when authentication is performed based solely on facial features. Therefore, there is a need to find ways to further improve authentication accuracy while still enjoying this advantage.

[0006] An object of the present disclosure is to provide an authentication device, an authentication method, and an authentication system that can improve authentication accuracy while enjoying the benefits of a gate device that supports facial authentication. [Means for solving the problem]

[0007] An authentication device according to the present disclosure includes: a processing unit that performs processing to associate registration information indicating a user of the portable terminal with one of a plurality of face registration images when the portable terminal is present near the gate device; an authentication process for authenticating an entrant based on a comparison result between an authentication threshold and a score, the score being a value indicating a possibility that a person corresponding to each of the plurality of face registration images is the same person as the entrant, corresponding to a comparison result between each of the plurality of face registration images and face image information of the entrant entering the gate device; By performing a predetermined subtraction process on the authentication threshold value to be compared with a score corresponding to a matching result between the face registration image linked to the registration information and the face image information of the intruder, the matching result between the face registration image linked to the registration information and the face image information of the intruder is given higher priority than the matching result between the face registration image not linked to the registration information and the face image information of the intruder, an authentication unit that authenticates whether the person corresponding to the face registration image used to obtain the matching result with the highest difference between the score and the authentication threshold, out of a matching result that is favored because the face registration image is linked to the registration information and a matching result that is not favored because the face registration image is not linked to the registration information, and authenticates whether the trespasser is the same person as the person corresponding to the face registration image used to obtain the matching result with the highest difference between the score and the authentication threshold; Equipped with.

[0008] The authentication method according to the present disclosure includes: The processing unit of the authentication device When the portable terminal is located near the gate device, a process is performed to associate registration information indicating a user of the portable terminal with one of a plurality of facial registration images; The processing unit of the authentication device an authentication process for authenticating an entrant based on a comparison result between an authentication threshold and a score corresponding to a comparison result between each of the plurality of face registration images and face image information of an entrant entering the gate device, the score being a value indicating a possibility that the person corresponding to each of the face registration images is the same person as the entrant, By performing a predetermined subtraction process on the authentication threshold value to be compared with a score corresponding to a matching result between the face registration image linked to the registration information and the face image information of the intruder, the matching result between the face registration image linked to the registration information and the face image information of the intruder is given higher priority than the matching result between the face registration image not linked to the registration information and the face image information of the intruder, The system authenticates whether the person corresponding to the facial registration image used to obtain the matching result with the highest difference between the score and the authentication threshold, out of a matching result in which the facial registration image is favored because it is linked to the registration information, and a matching result in which the facial registration image is not favored because it is not linked to the registration information, and the person corresponding to the facial registration image used to obtain the matching result with the highest difference between the score and the authentication threshold, is the same person as the intruder.

[0009] The authentication system according to the present disclosure includes: a gate device through which an intruder can enter; an imaging device provided in correspondence with the gate device, for capturing facial image information of the entrant; a beacon device provided corresponding to the gate device and transmitting beacon information to a mobile terminal; In response to the mobile terminal receiving the beacon information, the mobile terminal associates registration information indicating a user of the mobile terminal with one of a plurality of face registration images; an authentication process for authenticating an entrant based on a comparison result between an authentication threshold and a score, the score being a value indicating a possibility that a person corresponding to each of the plurality of face registration images is the same person as the entrant, corresponding to a comparison result between each of the plurality of face registration images and face image information of the entrant entering the gate device; By performing a predetermined subtraction process on the authentication threshold value to be compared with a score corresponding to a matching result between the face registration image linked to the registration information and the face image information of the intruder, the matching result between the face registration image linked to the registration information and the face image information of the intruder is given higher priority than the matching result between the face registration image not linked to the registration information and the face image information of the intruder, an authentication device that authenticates whether the person corresponding to the facial registration image used to obtain a matching result with the highest difference between the score and an authentication threshold, out of a matching result that is favored because the facial registration image is linked to the registration information and a matching result that is not favored because the facial registration image is not linked to the registration information, and determines whether the trespasser is the same person as the person corresponding to the facial registration image used to obtain a matching result with the highest difference between the score and an authentication threshold; Equipped with. [Effects of the Invention]

[0010] According to the present disclosure, it is possible to improve authentication accuracy while enjoying the benefits of a gate device that supports facial authentication. [Brief explanation of the drawings]

[0011] [Figure 1] FIG. 1 is a diagram illustrating a configuration example of an authentication system according to the present disclosure. [Figure 2] 10 is a diagram illustrating an example of linking a face registration image with beacon catch information in a user management server. FIG. [Figure 3] FIG. 10 illustrates post-processing scores for each of a number of authentication candidates. [Figure 4] 10 is a flowchart illustrating an example of an authentication control operation in the authentication device. [Figure 5] 10 is a flowchart illustrating an example of an operation of registering beacon catch information in the authentication device. [Figure 6] 10 is a flowchart illustrating an example of an operation of controlling transmission of beacon catch information in a mobile terminal. [Figure 7] 10 is a diagram showing post-processing scores for each of a plurality of authentication candidates in an authentication device according to a modified example. FIG. [Figure 8] 10 is a flowchart illustrating an example of an operation of authentication control in an authentication device according to a modified example. [Figure 9] FIG. 10 is a diagram showing the arrangement relationship of beacon devices in a configuration having a plurality of beacon devices. [Figure 10] FIG. 10 is a diagram showing the arrangement relationship of beacon devices in a configuration having a plurality of beacon devices. DETAILED DESCRIPTION OF THE INVENTION

[0012] (Embodiment) DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment of the present disclosure will now be described in detail with reference to the accompanying drawings. Fig. 1 is a diagram illustrating an example of the configuration of an authentication system according to the present disclosure.

[0013] As shown in FIG. 1, an authentication system 1 according to this embodiment is a system for controlling gate devices (entrance gates, ticket gates, etc.) installed at the entrances and exits of facilities such as airports, stations, and event venues.

[0014] In the authentication system 1 according to the present embodiment, the entry and exit of users who use a facility is managed by facial recognition. For example, when an intruder entering a gate device passes through the gate device to enter the facility, facial recognition determines whether or not the intruder is a person permitted to enter the facility. Also, when the intruder passes through the gate device to exit the facility, facial recognition determines whether or not the intruder is a person permitted to exit the facility. Note that "facial recognition" may be considered a concept included in "matching using a facial image."

[0015] The authentication system 1 includes a gate device 10, an imaging device 20, a beacon device 30, a user management server 40, a passage history management server 50, and an authentication device 100.

[0016] The gate device 10 is an automatic ticket gate installed in a facility such as a station, and is configured to allow entry by a trespasser. The gate device 10 includes a CPU (Central Processing Unit), a ROM (Read Only Memory), a RAM (Random Access Memory), and an input / output circuit (not shown).

[0017] The gate device 10 has a face authentication control unit, a ticket gate control unit, a gate opening / closing function unit, etc., and controls the facility to allow entry to persons who are authorized to enter or exit the facility, and to prevent entry to persons who are not authorized to enter or exit the facility.

[0018] The imaging device 20 is a camera that captures a facial image of a person entering the gate device 10, and is provided corresponding to the gate device 10. In the gate device 10, the face authentication control unit transmits information about the facial image captured by the imaging device 20 to the authentication device 100, requesting a match of the facial image of the person entering. The face authentication control unit then obtains the match result of the facial image from the authentication device 100, and the ticket gate control unit controls the gate opening / closing function unit based on the match result, thereby controlling the opening and closing of the gate.

[0019] The beacon device 30 is a device that transmits beacon information, and is provided corresponding to the gate device 10. The beacon information is a signal that enables a receiving device to detect an identification number or the like assigned to the beacon device 30 that transmitted the beacon information by receiving (receiving) the beacon information. The beacon information transmitted by the beacon device 30 is received by a portable terminal 2 carried by a person entering the gate device 10. In this embodiment, the beacon device 30 transmits beacon information using Bluetooth (registered trademark). However, the beacon device 30 may be one that transmits beacon information using other wireless communication methods. Also, as long as the receiving device is always exposed, the beacon device 30 may be one that transmits beacon information using light such as infrared light instead of radio waves.

[0020] Also, the beacon device 30 may be operated by the power supply of the gate device 10. By doing so, unlike a battery-powered beacon device, there is no need to consider the limit of the operating time, so the transmission cycle of the beacon information can be freely set.

[0021] The mobile terminal 2 is, for example, a mobile terminal such as a smartphone carried by the intruder, and is equipped with a CPU, ROM, RAM, and input / output circuits (not shown). The mobile terminal 2 has a dedicated application installed that is compatible with the authentication system 1, and is configured to be able to receive beacon information transmitted by the beacon device 30. When the mobile terminal 2 receives the beacon information, beacon catch information is transmitted to the authentication device 100.

[0022] The beacon catch information is information indicating that the mobile terminal 2 has received the beacon information, and includes the reception time of the beacon information at the mobile terminal 2, the registration information of the entrant, the beacon information of the beacon device 30, etc. The beacon catch information may be transmitted from the beacon device 30 to the authentication device 100, or may be transmitted from the mobile terminal 2 to the authentication device 100. In this embodiment, it is assumed that the beacon catch information is transmitted from the mobile terminal 2 to the authentication device 100.

[0023] The registration information of the intruder is, for example, the registration number of the intruder registered in a dedicated application of the authentication system 1. Note that the registration information may be other numbers, character strings, etc., as long as it is information that can identify the intruder. Furthermore, information that can indirectly identify the individual intruder, such as the identification number of the application or the identification number of the mobile terminal 2, may also be used as the registration information.

[0024] The user management server 40 is a server that manages the identification information of registrants registered in the authentication system 1. Facial images of registrants are pre-registered in the user management server 40. The registered facial images (hereinafter referred to as "facial registration images") are associated with identification information that identifies the individual in the facial registration image and stored in the user management server 40 (see, for example, FIG. 2).

[0025] This identification information is the same as or can be identified as the registration information registered by the intruder (registrant) in a dedicated application installed on the mobile terminal 2, and is, for example, a number composed of multiple alphanumeric characters randomly combined.

[0026] The passage history management server 50 is a server that records information indicating the history of an intruder passing through the gate device 10 after being authenticated by the authentication device 100. The history information recorded in the passage history management server 50 includes information on the time of entry into the gate device 10, information on the time of exit from the gate device 10, etc.

[0027] The authentication device 100 is, for example, a server installed in a location different from the gate device 10, and includes a CPU, ROM, RAM, and input / output circuits (not shown). The authentication device 100 is configured to control the authentication of trespassers based on a preset program. The authentication device 100 includes a receiving unit 110, a processing unit 120, and an authentication unit 130.

[0028] The receiving unit 110 receives the beacon catch information transmitted from the mobile terminal 2. Furthermore, the authentication device 100 converts the beacon information based on the beacon catch information received by the receiving unit 110 into position information of the gate device 10 linked to the beacon information.

[0029] The processing unit 120 performs processing to link the registration information of the entrant registered in the portable terminal 2 with one of the multiple facial registration images. Specifically, when the processing unit 120 acquires the registration information from the portable terminal 2, it refers to the user management server 40 and compares the registration information with the identification information of the registrant linked to the multiple facial registration images in the user management server 40.

[0030] If there is a registrant who matches the intruder, the processing unit 120 performs processing to link the registration information with the face registration image related to the identification information. Specifically, the processing unit 120 links the identification information of the registrant with the beacon catch information related to the registration information that matches the identification information, and registers them in the user management server 40.

[0031] 2, the user management server 40 has a table that links identification information with face registration images and has a beacon catch information column. The beacon catch information column for identification information that is linked to beacon catch information contains, for example, information included in the beacon catch information. The beacon catch information column for identification information that is not linked to beacon catch information contains no information.

[0032] Note that the beacon catch information may be linked in any form as long as it is possible to recognize that the beacon catch information is linked in the face registration image in the user management server 40. In addition, the beacon catch information linked to the face registration image may be registered in the user management server 40 so that the transmission time and / or reception time of the beacon catch information and the location information of the gate device 10 corresponding to the beacon device 30 that transmitted the beacon information can be recognized. In addition, the beacon catch information may include the reception time of the beacon information at the mobile terminal 2.

[0033] The authentication unit 130 authenticates the entrant from among a plurality of registered face images based on the facial image information of the entrant entering the gate device 10. Specifically, when the authentication unit 130 receives a facial image matching request from the gate device 10, it acquires the facial image information of the entrant from the imaging device 20.

[0034] The authentication unit 130 refers to the user management server 40, compares the multiple facial registration images in the user management server 40 with the facial image information, and calculates multiple scores for each of the multiple facial registration images. This score is a value that indicates the matching result, and in this embodiment, it is explained that the better the matching result (i.e., the higher the possibility that it is the same person), the higher the score. Note that a publicly known method is used to calculate the score for the facial registration image.

[0035] The authentication unit 130 then extracts authentication candidates based on the calculated scores. More specifically, the authentication unit 130 excludes face registration images with scores below the authentication threshold from the authentication candidates and selects face registration images with scores equal to or greater than the authentication threshold as authentication candidates. In this embodiment, as described below, score addition may be performed based on beacon catch information linked to the portable device 2. Therefore, even if an authentication candidate has a very low score, the score addition may result in the intruder being recognized as a person permitted to enter the facility. However, if the score is extremely low, there is a high possibility that the intruder is a different person who is carrying the portable device 2 for some reason. Therefore, if such a different person is recognized as the person by adding the score, erroneous authentication may occur. Therefore, in this embodiment, face registration images with clearly low scores are excluded from the authentication candidates in advance, thereby suppressing the occurrence of such erroneous authentication. Note that the same effect can be achieved by excluding face registration images with low scores from the score addition process without excluding them from the authentication candidates.

[0036] The authentication threshold is a reference value of a score that can determine that the face image information and the face registration image are at least similar to each other, and can be set appropriately.

[0037] If there is no facial registration image with a score equal to or greater than the authentication threshold, the authentication unit 130 authenticates the entrant as a non-registrant who is not registered in the authentication system 1. If there is one facial registration image with a score equal to or greater than the authentication threshold, the authentication unit 130 authenticates the entrant as a registrant linked to that facial registration image.

[0038] When there are multiple facial registration images with scores equal to or greater than the authentication threshold, the authentication unit 130 checks whether any of the multiple facial registration images is linked to beacon catch information whose time information included in the beacon catch information is from the current time to a certain time ago.

[0039] If such a facial registration image exists, the authentication unit 130 performs a predetermined addition process on the score of the facial registration image. That is, in the authentication process for authenticating an intruder, the authentication unit 130 prioritizes the result of matching the facial registration image linked to the registration information with the intruder's facial image information over the result of matching the facial registration image not linked to the registration information with the intruder's facial image information. The time information used in this process may be any time information included in the beacon catch information. For example, the time when the beacon information was received by the mobile terminal 2, the time when the beacon catch information was transmitted from the mobile terminal 2, or the time when the user management server 40 received the beacon catch information. In this embodiment, as an example, information on the time when the beacon information was received by the mobile terminal 2 is used. Furthermore, an example of the certain time period is set based on the standard travel time from the beacon device 30 corresponding to the beacon information to the authentication device 100. This is because the person currently being authenticated is unlikely to be the person corresponding to extremely old beacon information. However, if the distance from the beacon device 30 to the authentication device 100 is long or there are other facilities, the person may get lost or stop at other facilities, so the certain time may be set longer.

[0040] In addition, if the location information of the gate device 10 converted by the beacon information contained in the beacon catch information linked to the facial registration image matches the location information of the gate device 10 that requested the facial image matching, the score of the facial registration image will be subject to addition processing.

[0041] The authentication unit 130 authenticates the entrant as a registered person associated with the face registration image associated with the highest score among the multiple scores including the score that has been subjected to the addition process.

[0042] 3, assume that an authentication candidate A1 with a score of 659, an authentication candidate A2 with a score of 630, and an authentication candidate A3 with a score of 627 have been extracted. In this case, if the identification information of the face registration image of the authentication candidate A2 is linked to the beacon catch information, the authentication unit 130 adds, for example, 100 as an additional score to the score of 630 of the authentication candidate A2.

[0043] As a result, the post-processing score of authentication candidate A2 becomes 730, making authentication candidate A2 the highest score among the multiple authentication candidates. As a result, the authentication unit 130 authenticates the entrant as a registrant linked to authentication candidate A2.

[0044] When the authentication unit 130 authenticates the entrant as a registered person or an unregistered person, it transmits the authentication result to the gate device 10. When the gate device 10 acquires the authentication result from the authentication unit 130, it controls the opening and closing of the gate in accordance with the authentication result.

[0045] Specifically, the gate device 10 performs control to close the gate if the authentication result indicates that the entrant is an unregistered person, and performs control to open the gate if the authentication result indicates that the entrant is a registered person.

[0046] By doing so, the presence or absence of beacon catch information can be taken into consideration when authenticating an intruder, and therefore the authentication accuracy in the authentication system 1 can be improved.

[0047] Now, let us assume that beacon catch information is linked to at least two of the multiple authentication candidates. Specifically, for example, let us assume that a situation occurs in which two entrants (e.g., twins) with similar facial features are trying to enter the gate device 10 side by side in the direction of travel, and the portable terminals 2 of the two entrants receive the beacon information of the beacon device 30.

[0048] In this case, the authentication unit 130 may extract authentication candidates according to the time of reception of the beacon information. Specifically, the authentication unit 130 extracts, from among a plurality of authentication candidates, the one that received the beacon information earlier as the authentication candidate. This is because it is determined that, of two entrants, the one who received the beacon information earlier will arrive at the gate device 10 first.

[0049] By doing so, for example, it is possible to easily extract authentication candidates when multiple entrants with similar faces enter the gate device 10 at the same time. In other words, by taking into consideration the reception time of the beacon catch information, even if at least two of the multiple authentication candidates are linked to beacon catch information, it is easy to estimate the authentication candidate that arrived at the gate device 10 first. Therefore, by determining that the authentication candidate that arrived at the gate device 10 first is highly likely to pass through the gate device 10, it is possible to estimate the authentication candidate as the entrant, which in turn makes it easier to authenticate the entrant.

[0050] The authentication unit 130 may also extract authentication candidates according to the electric field strength of the beacon information. Specifically, the authentication unit 130 extracts, from among a plurality of authentication candidates, the one with the stronger electric field strength of the beacon information related to the beacon catch information as the authentication candidate. This is because the authentication unit 130 determines that, of the two trespassers, the one with the stronger electric field strength of the beacon information is located closer to the gate device 10.

[0051] The information on the field strength of the beacon information may be included in the beacon catch information. Also, the information on the field strength may be identified by receiving it at the mobile terminal 2, for example.

[0052] By doing so, for example, it is possible to easily extract authentication candidates when multiple entrants with similar faces enter the gate device 10 at the same time. In other words, by taking the electric field strength of the beacon information into consideration, even if at least two of the multiple authentication candidates are linked to beacon catch information, it becomes easier to estimate the authentication candidate that arrived at the gate device 10 first. Therefore, by determining that the authentication candidate that arrived at the gate device 10 first is highly likely to pass through the gate device 10, it is possible to estimate the authentication candidate as the entrant, which in turn makes it easier to authenticate the entrant.

[0053] Furthermore, for example, even if a plurality of entrants (passersby) with similar faces approach the gate device 10 and some of the passersby do not enter the gate device 10, by taking into consideration the change in the electric field strength of the beacon information, it is possible to exclude the passersby who do not enter the gate device 10 from the authentication candidates. In other words, by taking into consideration the electric field strength of the beacon information, it is possible to improve the accuracy of extracting authentication candidates, and ultimately make it easier to authenticate entrants.

[0054] Furthermore, the authentication unit 130 may determine the entrant who will arrive at the gate apparatus 10 first based on acceleration sensor information of the portable terminal 2.

[0055] The acceleration sensor information of the mobile terminal 2 is, for example, information on a movement vector obtained by an acceleration sensor built into the mobile terminal 2, and may be included in the beacon catch information.

[0056] By doing this, even if two pieces of beacon catch information are received at approximately the same time, it is possible to estimate that the authentication candidate with the faster movement speed will arrive at the gate device 10 first, thereby making it easier to authenticate the entrant.

[0057] The authentication unit 130 may also extract authentication candidates based on the number of times the gate device 10 is used and determine a facial registration image that will be given preferential treatment in the authentication process. Specifically, the authentication unit 130 records and accumulates the number of times beacon catch information is received for each gate device 10 each time it is received. The number of times may be recorded in the authentication unit or in a recording unit other than the authentication unit. If beacon catch information is not associated with any of the multiple authentication candidates, the authentication unit 130 authenticates the entrant using the facial registration image of the authentication candidate that has received the most beacon catch information corresponding to the same gate device through which the entrant is attempting to enter. The authentication unit may also perform similar processing using the number of times beacon catch information is received corresponding to a gate device installed in the same location as the gate device through which the entrant is attempting to enter. This is because, in facilities such as stations where multiple gate devices are installed in the same location, it is unlikely that the same gate device will be used every time. The authentication unit 130 may also extract authentication candidates based on the frequency of use of the gate device 10 by performing the above processing based on the number of times beacon catch information is received within a certain period of time.

[0058] This makes it easier to perform authentication even if the intruder forgets to carry the portable terminal 2 or if the portable terminal 2 is turned off. Note that, in the above description, the facial registration image of the authentication candidate for which beacon catch information has been received the most is extracted, but facial registration images of multiple authentication candidates may be extracted based on the number of times or frequency of reception. For example, it is possible to extract a facial registration image for which the number of times or frequency of reception is equal to or greater than a predetermined threshold, or to extract a facial registration image whose ranking in number of times or frequency of reception is within a predetermined rank from the top.

[0059] Furthermore, processing may be performed using the number or frequency of reception of beacon catch information even when an intruder is carrying a normally operating mobile terminal 2. For example, the more times or frequency of past reception of beacon catch information, the higher the added score may be, and a negative added score may be added when the number or frequency of reception is low.

[0060] Furthermore, the processing unit 120 may perform a process of deleting the beacon catch information (registration information) linked to the face registration image from the user management server 40 after the entrant has passed through the gate device 10.

[0061] By doing so, it is possible to prevent the beacon catch information from continuing to be linked to the face registration image after authentication of the entrant has been completed.

[0062] An example of the operation of authentication control in the authentication system 1 configured as above will be described. First, an example of the operation of authentication control in the authentication device 100 will be described. Fig. 4 is a flowchart showing an example of the operation of authentication control in the authentication device 100. The processing in Fig. 4 is executed as appropriate while the gate device 10 is in operation, for example.

[0063] 4, the authentication device 100 determines whether or not a facial image matching request has been made (step S101). If the determination result shows that there is no facial image matching request (step S101, NO), the processing of step S101 is repeated. On the other hand, if there is a facial image matching request (step S101, YES), the authentication device 100 acquires facial image information (step S102).

[0064] Next, the authentication device 100 compares the acquired face image information with the face registration image and determines whether or not there is an authentication candidate (step S103). If the determination result shows that there is no authentication candidate (step S103, NO), the authentication device 100 authenticates the trespasser as an unregistered person (step S104). On the other hand, if there is an authentication candidate (step S103, YES), the authentication device 100 determines whether or not there are multiple authentication candidates (step S105).

[0065] If the determination result shows that there is one authentication candidate (step S105, NO), the process proceeds to step S108. On the other hand, if there are multiple authentication candidates (step S105, YES), the authentication device 100 determines whether or not there is an authentication candidate that is linked to beacon catch information among the multiple authentication candidates (step S106).

[0066] If the determination result shows that there is no authentication candidate associated with beacon catch information (step S106, NO), the process proceeds to step S108. On the other hand, if there is an authentication candidate associated with beacon catch information (step S106, YES), the authentication device 100 performs an addition process on the score of the authentication candidate (step S107).

[0067] Then, the authentication device 100 authenticates the entrant using the authentication candidate with the highest score (step S108). After step S104 or step S108, this control ends.

[0068] Next, a description will be given of an example of operation of registration control of beacon catch information in the authentication device 100. Fig. 5 is a flowchart showing an example of operation of registration control of beacon catch information in the authentication device 100. The processing in Fig. 5 is executed as appropriate while the gate device 10 is in operation, for example.

[0069] 5, the authentication device 100 determines whether or not beacon catch information has been received (step S201). If the determination result shows that beacon catch information has not been received (step S201, NO), the processing of step S201 is repeated. On the other hand, if beacon catch information has been received (step S201, YES), the authentication device 100 determines whether or not there is identification information that matches the registration information based on the beacon catch information (step S202).

[0070] If the determination result shows that there is no identification information that matches the registration information (step S202, NO), this control ends. On the other hand, if there is identification information that matches the registration information (step S202, YES), the authentication device 100 converts the beacon information based on the beacon catch information into position information of the gate device 10 (step S203), and links the beacon catch information to the face registration image and registers it (step S204). After step S204, this control ends.

[0071] Finally, a description will be given of transmission control of beacon catch information in the mobile terminal 2. Fig. 6 is a flowchart showing an example of operation of transmission control of beacon catch information in the mobile terminal 2. The processing in Fig. 6 is executed as appropriate while the power of the mobile terminal 2 is on, for example.

[0072] 6, the mobile terminal 2 determines whether or not beacon information has been received (step S301). If the determination result shows that beacon information has not been received (step S301, NO), the process proceeds to step S305. On the other hand, if beacon information has been received (step S301, YES), the mobile terminal 2 determines whether or not the beacon information is for the system of this embodiment (this system) (step S302).

[0073] As a result of the determination, if the beacon information is not for the system of this embodiment (step S302, NO), the process proceeds to step S305. This is because there may be beacons for systems other than the system of this embodiment in the facility, and such beacons are ignored. On the other hand, if the beacon information is for the system of this embodiment (step S302, YES), the mobile terminal 2 transmits beacon catch information (step S303).

[0074] Next, the portable terminal 2 determines whether or not a predetermined time has elapsed (step S304). If the result of the determination is that the predetermined time has not elapsed (step S304, NO), the process of step S304 is repeated. On the other hand, if the predetermined time has elapsed (step S304, YES), the portable terminal 2 determines whether or not a power-off command has been issued (step S305).

[0075] The predetermined time is set appropriately in consideration of the timing of transmitting the beacon catch information. By setting this predetermined time, it is possible to prevent the beacon catch information from being transmitted frequently, and thus to reduce the power consumption of the mobile terminal 2.

[0076] If the result of the determination is that there is no power-off command (step S305, NO), the process returns to step S301. On the other hand, if there is a power-off command (step S305, YES), this control ends.

[0077] According to the present embodiment configured as described above, when authenticating an intruder, it is possible to take into consideration whether or not beacon catch information has been acquired. For example, if there are multiple face registration images with very similar facial features, when an intruder associated with one of the face registration images enters the gate device 10, the mobile terminal 2 of the intruder receives beacon information transmitted from the beacon device 30, and the authentication device 100 acquires the beacon catch information transmitted from the mobile terminal 2.

[0078] This allows the registration information of the entrant in the beacon catch information to be compared with the identification information in the face registration image, and the identification information in the face registration image is linked to the registration information. As a result, it becomes easier to authenticate the entrant as the registrant of the face registration image linked with the beacon catch information, and ultimately improves the authentication accuracy in the authentication system 1.

[0079] Furthermore, by using a smartphone or the like as the entrant's portable terminal 2, the entrant can pass through the gate device 10 without carrying a special device compatible with the authentication system 1. That is, in this embodiment, it is possible to improve authentication accuracy while enjoying the benefits of the gate device 10 that supports face authentication.

[0080] In a configuration that does not use beacon catch information, suppose that a first entrant of two entrants with similar facial features enters through gate device 10. In this case, an entry record for the first entrant is recorded in passage history management server 50. Then, before the first entrant exits through gate device 10, if a second entrant of the two entrants with similar facial features attempts to enter through gate device 10, and is mistakenly identified as the first entrant, a problem may arise in which the second entrant is unable to enter gate device 10.

[0081] In contrast, in this embodiment, the first entrant and the second entrant can be accurately authenticated by taking the beacon catch information into consideration, thereby preventing the above-mentioned problems from occurring. For example, when the second entrant carrying the portable terminal 2 attempts to enter the gate device 10, the authentication score of the correct face registration image is added in consideration of the beacon catch information, thereby reducing the possibility of the second entrant being mistakenly identified as the same person as the first entrant.

[0082] Furthermore, if the facial features of the first and second entrants are similar, there is a possibility that the first entrant will be mistakenly recognized as the second entrant, but by using the beacon catch information of the first entrant, the possibility of the first authenticated person being mistakenly recognized as the second entrant can be reduced. This makes it less likely that the second authenticated person will be unable to enter the gate device 10 as a result of the first entrant being mistakenly recognized as the second entrant.

[0083] In the above embodiment, the score is added depending on whether the beacon catch information is linked to the face registration image, but the present disclosure is not limited to this. For example, the entrant may be authenticated based on information on the passage history of the gate device 10.

[0084] For example, suppose a situation occurs in which there are multiple authentication candidates, and beacon catch information has been linked to the facial registration images of the multiple authentication candidates within a certain period of time, and an intruder attempts to enter the gate device 10.

[0085] In this case, the authentication unit 130, for example, refers to the passage history management server 50, excludes authentication candidates that have already passed through the gate device 10, and performs authentication processing on authentication candidates that have not passed through the gate device 10. Note that if all of the multiple authentication candidates have passed through the gate device 10, the authentication may be treated as multiple entries, or the authentication may be processed as usual.

[0086] Also, suppose that there are multiple authentication candidates, and beacon catch information has been linked to the facial registration images of the multiple authentication candidates within a certain period of time, and an intruder attempts to exit the gate device 10.

[0087] In this case, the authentication unit 130 refers to the passage history management server 50, excludes authentication candidates who have no entry history to the gate device 10, and performs authentication processing on authentication candidates who have an entry history to the gate device 10. Note that if all of the multiple authentication candidates have no entry history to the gate device 10, they may be denied exit, or may be subjected to normal authentication processing.

[0088] According to this configuration, the authentication process can be simplified by using information on the passing history of the entrant. Furthermore, by making a judgment based on the passing history of the entrant, for example, when multiple entrants with closely spaced scores are present on both the entrance and exit sides of the gate device 10, it becomes easier to distinguish between the entrance and exit. As a result, the accuracy of authentication in the authentication system 1 can be improved.

[0089] In the above embodiment, when there are multiple authentication candidates, the processing result of the processing unit 120 is always used, but the present disclosure is not limited to this. For example, the authentication unit 130 may determine whether to use the processing result of the processing unit 120 based on the score difference between the multiple authentication candidates.

[0090] Specifically, when there are multiple facial registration images with scores equal to or greater than the authentication threshold, the authentication unit 130 extracts a predetermined number of facial registration images as authentication candidates from among the multiple scores in descending order of score.

[0091] The predetermined number can be set appropriately, for example, to 3. In this embodiment, the predetermined number is set to 3.

[0092] The authentication unit 130 determines whether to use the processing result of the processing unit 120 based on the score difference between the extracted multiple authentication candidates. If there is an authentication candidate among the multiple authentication candidates whose score difference from the authentication candidate with the highest score is equal to or greater than a threshold, the authentication unit 130 determines not to use the processing result of the processing unit 120. In other words, if the score difference is equal to or greater than a threshold, the authentication unit 130 performs authentication processing without favoring the result of matching between the facial registration image linked to the registration information and the facial image information of the entrant.

[0093] In this case, the authentication unit 130 authenticates the entrant as the registered person associated with the face registration image of the authentication candidate with the highest score among the multiple authentication candidates. The threshold is a very small value that results in a small difference in score, and is set appropriately.

[0094] If the score difference between the authentication candidate with the highest score among the multiple authentication candidates is less than a threshold, the authentication unit 130 determines to use the processing result of the processing unit 120. If there is a face registration image among the multiple authentication candidates that is linked by the processing unit 120 to the registration information of the trespasser, the authentication unit 130 performs a predetermined addition process on the score of the authentication candidate related to the face registration image.

[0095] 7, assume that an authentication candidate B1 with a score of 568 and an authentication candidate B2 with a score of 569 have been extracted. In this case, if the identification information of the face registration image of the authentication candidate B1 is linked to the beacon catch information, the authentication unit 130 adds, for example, 5 to the score of 568 of the authentication candidate B1.

[0096] As a result, the score of authentication candidate B1 becomes 573, which is the highest score among the multiple authentication candidates. As a result, the authentication unit 130 authenticates the entrant as a registrant linked to authentication candidate B1.

[0097] Furthermore, if beacon catch information is linked to at least two of the multiple authentication candidates with small score differences, the authentication unit 130 may authenticate the entrant based on the registration date of the face registration image.

[0098] The older the registration date of the face registration image, the more likely it is that the facial features of the registrant have changed. Therefore, by extracting the face registration image with the newer registration date as the authentication candidate, it becomes easier to extract authentication candidates.

[0099] An example of the operation of authentication control in the authentication system 1 configured as above will be described. First, an example of the operation of authentication control in the authentication device 100 will be described. Fig. 8 is a flowchart showing an example of the operation of authentication control in the authentication device 100. The processing in Fig. 8 is executed as appropriate while the gate device 10 is in operation, for example.

[0100] 8, the authentication device 100 determines whether or not a facial image matching request has been made (step S401). If the determination result shows that there is no facial image matching request (step S401, NO), the processing of step S401 is repeated. On the other hand, if there is a facial image matching request (step S401, YES), the authentication device 100 acquires facial image information (step S402).

[0101] Next, the authentication device 100 extracts three authentication candidates (step S403). Note that this flowchart is based on the premise that there is an authentication candidate with a score equal to or greater than authentication formula 1.

[0102] After extracting the three authentication candidates, the authentication device 100 determines whether the difference between the first score of the authentication candidate with the highest score and the third score of the authentication candidate with the third highest score is less than the threshold value (step S404). If the result of the determination shows that the difference between the first score and the third score is less than the threshold value (step S404, YES), the process proceeds to step S406.

[0103] On the other hand, if the difference between the first score and the third score is equal to or greater than the threshold (step S404, NO), the authentication device 100 determines whether the difference between the first score and the second score of the authentication candidate with the second highest score is less than the threshold (step S405). If the result of the determination is that the difference between the first score and the second score is equal to or greater than the threshold (step S405, NO), the process proceeds to step S408.

[0104] On the other hand, if the difference between the first score and the second score is less than the threshold (step S405, YES), the authentication device 100 determines whether or not there is an authentication candidate among the three authentication candidates who is linked to beacon catch information (step S406).

[0105] If the determination result shows that there is no authentication candidate associated with beacon catch information (step S406, NO), the process proceeds to step S408. On the other hand, if there is an authentication candidate associated with beacon catch information (step S406, YES), the authentication device 100 performs an addition process on the score of the authentication candidate (step S407).

[0106] Then, the authentication device 100 authenticates the trespasser using the authentication candidate with the highest score (step S408), after which this control ends.

[0107] With this configuration, whether or not the beacon catch information is linked is taken into consideration only when the score difference is small, thereby eliminating unnecessary processing. Also, when an entrant other than the owner of the portable terminal 2 attempts to pass through the gate device 10 while carrying the portable terminal 2, the facial registration image to which the beacon catch information is linked is that of the owner of the portable terminal 2, and is not linked to that of the entrant. Therefore, when the entrant enters the gate device 10, it is possible to prevent addition processing from being applied to the score of the facial registration image related to the entrant.

[0108] Furthermore, by performing an addition process by linking beacon catch information to facial registration images with small score differences, the correct facial registration image can be selected to authenticate the entrant, thereby improving the accuracy of authentication.

[0109] The threshold may also be varied according to the score level of the extracted authentication candidate. For example, when the score level is low, the threshold range may be widened. When the score level is low, it is highly likely that the accuracy of face authentication itself has decreased due to factors such as facial orientation, lighting, and facial occlusion. Therefore, when the score level is low, a more accurate authentication result is more likely to be obtained by making a judgment that also uses beacon catch information rather than making a judgment that relies solely on face authentication, which has decreased accuracy. Here, in this embodiment, when it is determined that the scores are close, a judgment that also uses beacon catch information is made. Therefore, by widening the threshold range when the score level is low, it is possible to control so that a judgment that also uses beacon catch information is more likely to occur. Note that when the score level is high and the accuracy of face authentication is sufficiently reliable, it is highly likely that an accurate judgment is made even if the score difference between the authentication candidates is small. Therefore, since performing an addition process using beacon catch information may result in an erroneous judgment, the threshold range may be narrowed when the score level is high to make the addition process less likely to occur.

[0110] In addition, in the above embodiment, one beacon device 30 is provided corresponding to one gate device 10, but the present disclosure is not limited to this. For example, a plurality of beacon devices 30 may be provided corresponding to one gate device 10.

[0111] For example, the gate device 10 shown in Fig. 9 is provided with four beacon devices 31, 32, 33, and 34. The gate device 10 in Fig. 9 has an entrance 11 and an exit 12, and in Fig. 9, the direction from the entrance 11 to the exit 12 is the direction in which an approaching person enters the gate device 10.

[0112] The first beacon device 31 is provided on the near side (upstream side in the direction of entry of an approaching person) of the entrance 11 of the gate device 10. The first beacon device 31 is provided on the ceiling or the like in the facility where the gate device 10 is installed.

[0113] The second beacon device 32 is provided at a location corresponding to the entrance 11 of the gate device 10. The third beacon device 33 is provided at a location corresponding to the exit 12 of the gate device 10. In other words, the third beacon device 33 is provided downstream of the second beacon device 32 in the entrance direction of the entrant in the gate device 10.

[0114] The fourth beacon device 34 is provided further back (downstream in the direction of entry of the person) than the exit 12 of the gate device 10. The fourth beacon device 34 is provided on the ceiling or the like within the facility where the gate device 10 is installed.

[0115] According to this configuration, it becomes easier to determine the direction of travel of a pedestrian passing near the gate device 10, and it becomes easier to determine whether or not the pedestrian is an intruder.

[0116] For example, based on the reception time of the beacon catch information based on the beacon information transmitted from each of the beacon devices 31, 32, 33, and 34, the authentication unit 130 can easily determine the traveling direction of a passerby.

[0117] Specifically, when the beacon information transmitted from each beacon device 31, 32, 33, 34 is received by a passerby's mobile terminal 2 and the authentication device 100 acquires the beacon catch information, the authentication device 100 records the first reception time, second reception time, third reception time, and fourth reception time of the beacon catch information.

[0118] The first reception time is the reception time of the beacon catch information based on the first beacon device 31. The second reception time is the reception time of the beacon catch information based on the second beacon device 32. The third reception time is the reception time of the beacon catch information based on the third beacon device 33. The fourth reception time is the reception time of the beacon catch information based on the fourth beacon device 34.

[0119] When a passerby enters the gate device 10, the authentication device 100 acquires beacon catch information in the order of, for example, the first reception time, the second reception time, the third reception time, and the fourth reception time, and therefore it can be assumed that the passerby is an intruder.

[0120] Furthermore, if a passerby approaches the gate device 10 but turns back without entering the gate device 10, the authentication device 100 only acquires the beacon catch information at the first reception time and the second reception time, and therefore it can be assumed that the passerby is not an intruder.

[0121] That is, with this configuration, when beacon catch information is linked to the facial registration images of at least two people among multiple authentication candidates, it is possible to easily exclude the authentication candidates related to the facial registration images that are not estimated to be intruders, thereby improving the accuracy of intruder authentication.

[0122] In addition, in this configuration, depending on the transmission range of the beacon information of the beacon device, even if a passerby does not pass through the gate device 10, multiple reception times from the first reception time to the fourth reception time may be recorded in the authentication device 100.

[0123] Therefore, the authentication device 100 may estimate an intruder by taking into consideration the electric field strength of the beacon information transmitted from each of the beacon devices 31, 32, 33, and .

[0124] For example, suppose that a passerby C passes near the first beacon device 31 in the gate device 10. In this case, the authentication device 100 records beacon catch information related to the first beacon device 31 and beacon catch information related to the second beacon device 32.

[0125] Since the first beacon device 31 is located closer to the passerby C than the second beacon device 32, the electric field strength of the beacon information of the first beacon device 31 is greater than the electric field strength of the beacon information of the second beacon device 32. Therefore, it can be estimated that the passerby C is located at the position before entering the gate device 10.

[0126] In addition, when passerby C approaches the entrance 11 of the gate device 10, he / she moves away from the first beacon device 31 while approaching the second beacon device 32. Therefore, the electric field strength of the beacon information of the second beacon device 32 becomes greater than the electric field strength of the beacon information of the first beacon device 31. Therefore, it can be estimated that passerby C is located closer to the gate device 10 and is approaching the gate device 10.

[0127] Furthermore, when a passerby C enters the gate device 10, the authentication device 100 records at least the beacon catch information related to the second beacon device 32 and the beacon catch information related to the third beacon device 33.

[0128] When a passerby C is located inside the gate device 10, the passerby C will be located near the midpoint between the second beacon device 32 and the third beacon device 33, so the electric field strength of each beacon information will be similar values. Therefore, it can be estimated that the passerby C is located inside the gate device 10, and it can be easily extracted as an authentication candidate.

[0129] In addition, if the passerby C approaches the gate device 10 but turns back, the beacon catch information related to the third beacon device 33 is not recorded in the authentication device 100, or the electric field strength of the beacon information is weak. Therefore, it can be assumed that the passerby C has no intention of entering the gate device 10, and it can be easily excluded from the authentication candidates.

[0130] Also, when passerby C passes through the gate device 10, he / she moves away from the third beacon device 33 and approaches the fourth beacon device 34. Therefore, the electric field strength of the beacon information of the fourth beacon device 34 becomes greater than the electric field strength of the beacon information of the third beacon device 33. Therefore, it can be estimated that passerby C has passed through the gate device 10.

[0131] This allows the position of passerby C (entrant) to be accurately estimated, and therefore allows accurate management of the entry and exit records of entrants.

[0132] Furthermore, by accurately estimating the position of the passerby C, the authentication result by the authentication device 100 may be determined, for example, when the passerby C has passed through the gate device 10.

[0133] For example, suppose that multiple passersby with similar faces approach the gate device 10 at the same time, and one passerby (entrant) passes through the gate device 10 while the remaining passersby do not pass through the gate device 10.

[0134] In this case, the authentication device 100 may not be able to accurately extract authentication candidates because the beacon catch information of all of the multiple passersby is linked to each face registration image.

[0135] Therefore, when the intruder has not yet passed through the gate device 10, the authentication result of the authentication device 100 is not confirmed, and the authentication device 100 acquires beacon catch information again.

[0136] In this way, it is possible to confirm that the position of a passerby who does not pass through the gate device 10 stops in front of the gate device 10, and that an entering person proceeds to a position behind the gate device 10. As a result, it is possible to make the authentication result of the authentication device 100 more accurate.

[0137] Furthermore, when multiple beacon devices are installed, the application in the mobile terminal 2 may collectively transmit beacon information received within a predetermined time period as beacon catch information. The predetermined time period can be set arbitrarily based on the amount of information that can be transmitted, the operating hours of the facility, etc. For example, in the case of a general facility with set daily business hours, it is unlikely that a situation will arise in which face authentication needs to be performed across days, so the predetermined time period may be set to one day. Furthermore, the predetermined time period may be adjustable based on the relative positions of the beacon devices, the movement speed of passersby, etc.

[0138] Furthermore, if the field intensity of the beacon information changes to a specified value or greater after transmitting the beacon information, the mobile terminal 2 may transmit the beacon information again.

[0139] 9, multiple beacon devices are arranged side by side in the direction of travel of an entering person. However, when multiple gate devices are arranged side by side, multiple beacon devices may be arranged side by side in the direction in which the multiple gate devices are arranged.

[0140] 10, when a plurality of gate devices 10 are arranged side by side in a direction perpendicular to the traveling direction of an entrant, a beacon device 30 is provided corresponding to each gate device 10. The beacon device 30 is provided, for example, on the ceiling of the facility where the gate device 10 is installed.

[0141] In this case, it is possible to estimate which gate device 10 the intruder is trying to enter based on the difference in electric field strength of the beacon information transmitted from each beacon device 30.

[0142] For example, when an approaching person D1 approaches the second gate device 10 from the right in Fig. 10, the electric field strength related to the beacon information of the second beacon device 30 from the right in Fig. 10 is the largest. Therefore, it can be estimated that the approaching person D1 will pass through the second gate device 10 from the right in Fig. 10.

[0143] In addition, when the intruder D2 enters the second gate device 10 from the left in Fig. 10, the electric field strength related to the beacon information of the second beacon device 30 from the left in Fig. 10 is the largest. Therefore, it can be estimated that the intruder D1 will pass through the second gate device 10 from the left in Fig. 10.

[0144] In this way, by estimating the gate device through which the trespasser will pass, it becomes easier to identify the trespasser.

[0145] Furthermore, in the above embodiment, the authentication device 100 acquires beacon catch information based on beacon information, but the present disclosure is not limited to this, and the authentication device may acquire information other than beacon catch information as long as it includes the registration information of the entrant.

[0146] In the above embodiment, if a face registration image associated with beacon catch information is present among the plurality of authentication candidates, a predetermined addition process is performed on the score of the authentication candidate related to the face registration image, but the present disclosure is not limited to this. For example, if a face registration image associated with beacon catch information is present among the plurality of authentication candidates, the entrant may be authenticated by the registrant related to the face registration image.

[0147] Furthermore, in the above embodiment, the authentication unit 130 excludes face registration images with scores below the authentication threshold from the authentication candidates, and sets face registration images with scores equal to or greater than the authentication threshold as authentication candidates, and then determines whether to perform score increment processing on the authentication candidates using beacon catch information. However, the process of excluding face registration images with scores below the authentication threshold from the authentication candidates may be omitted. In other words, all face registration images may be considered as authentication candidates, and it may be determined whether to perform score increment processing on the face registration images.

[0148] Furthermore, in the above embodiment, the gate device 10 has been described as having an opening and closing function, but the present invention is not limited to this. The configuration of the above embodiment may also be applied to a gate device that does not have an opening and closing function. An example of a gate device that does not have an opening and closing function is a pole-shaped device that monitors and records passersby.

[0149] Furthermore, in the above-described embodiment, the receiving unit, the processing unit, and the authentication unit are configured to be included in the authentication device, but the present disclosure is not limited to this, and the receiving unit, the processing unit, and the authentication unit may be provided separately. In particular, many face authentication methods are known, including methods in which a series of processes is completed by a single device and methods in which multiple devices perform processing in cooperation, but the method of the above-described embodiment can be applied to any method that performs face authentication based on a score, regardless of the process or configuration for calculating the score.

[0150] Furthermore, in the above embodiment, an addition process is performed on the score of the face registration image corresponding to the beacon catch information, but other methods may be used. As long as the result of matching the face image information of a user attempting to enter the gate device 10 with the face registration image corresponding to the beacon catch information is treated more favorably than the result of matching the face image information of the user with other face registration images (i.e., the user is more likely to be authenticated as a person permitted to pass through the gate device 10), the method is not limited to adding a score. For example, it is possible to lower the authentication threshold only in the evaluation of the result of matching with the face registration image corresponding to the beacon catch information.

[0151] In addition, in the above embodiment, the user management server and the passage history management server are provided separately from the authentication device, but the present disclosure is not limited to this, and the user management server and the passage history management server may be included in the authentication device.

[0152] Furthermore, the above-described embodiments are merely examples of specific embodiments for carrying out the present disclosure, and the technical scope of the present disclosure should not be interpreted as being limited by these embodiments. In other words, the present disclosure can be carried out in various forms without departing from its gist or main features. [Industrial Applicability]

[0153] The authentication device of the present disclosure is useful as an authentication device and authentication system that can improve authentication accuracy while enjoying the benefits of a gate device that supports facial authentication. [Explanation of symbols]

[0154] 1. Authentication System 2. Mobile devices 10 Gate device 20 Imaging device 30 Beacon Device 40 User Management Server 50 Passing history management server 100 Authentication Device 110 Receiving unit 120 Processing section 130 Authentication Department

Claims

1. a processing unit that, when a mobile terminal is present in the vicinity of a gate device, performs processing to link registration information of a person entering the gate device, which is registered in the mobile terminal, with one of a plurality of registered face images in response to the mobile terminal receiving beacon information from a plurality of beacon devices provided in sequence along the traveling direction of the gate device; an authentication unit that, in an authentication process for authenticating the intruder based on a result of matching the facial image information of the intruder with the plurality of facial registration images, prioritizes a result of matching the facial registration image linked to the registration information with the facial image information of the intruder over a result of matching the facial registration image not linked to the registration information with the facial image information of the intruder; The authentication unit estimates whether the mobile terminal is an intruder based on the order of the times at which the mobile terminal receives the beacon information of the plurality of beacon devices, and determines a face registration image to prioritize the matching result in the authentication process based on the estimation result. Authentication device.

2. the authentication unit determines a facial registration image to be given priority in comparison results in the authentication process based on the order of reception of each beacon information item and a comparison result of the electric field strength of each beacon information item. The authentication device according to claim 1 .

3. The authentication unit a predetermined addition process is performed on a score corresponding to a result of matching between a face registration image linked to the registration information and the face image information of the trespasser, thereby giving priority to the result of matching between a face registration image linked to the registration information and the face image information of the trespasser over the result of matching between a face registration image not linked to the registration information and the face image information of the trespasser; authenticating whether the person corresponding to the face registration image used to obtain the matching result corresponding to the highest score is the same person as the intruder, out of a matching result that has been prioritized because the face registration image is linked to the registration information and a matching result that has not been prioritized because the face registration image is not linked to the registration information; or By performing a predetermined subtraction process on an authentication threshold value to be compared with a score corresponding to a matching result between a face registration image linked to the registration information and the face image information of the intruder, the matching result between the face registration image linked to the registration information and the face image information of the intruder is prioritized over the matching result between a face registration image not linked to the registration information and the face image information of the intruder, performing at least one of the following processes: authenticating whether the person corresponding to the face registration image used to obtain the matching result with the highest difference between the score and the authentication threshold, out of the matching result that has been prioritized because the face registration image is linked to the registration information and the matching result that has not been prioritized because the face registration image is not linked to the registration information, and determining whether the trespasser is the same person as the person corresponding to the face registration image used to obtain the matching result with the highest difference between the score and the authentication threshold; The authentication device according to claim 1 .

4. The authentication unit extracting authentication candidates according to a score corresponding to a result of matching a face registration image linked to the registration information with face image information of the trespasser; If the face registration image linked to the registration information is not included in the authentication candidates, the authentication process is performed without prioritizing the result of matching the face registration image linked to the registration information with the face image information of the trespasser. The authentication device according to claim 1 .

5. when a score difference between a score corresponding to a matching result between a face registration image linked to the registration information and the face image information of the intruder and a score corresponding to a matching result between a face registration image not linked to the registration information and the face image information of the intruder is equal to or greater than a predetermined threshold, the authentication unit performs the authentication process without prioritizing the matching result between the face registration image linked to the registration information and the face image information of the intruder; The authentication device according to claim 1 .

6. The authentication unit sets the predetermined threshold to a larger value as the level of the score becomes lower. The authentication device according to claim 5 .

7. the authentication device further includes a recording unit that records the number or frequency of association of each of the plurality of face registration images with the registration information, the authentication unit determines a face registration image to be given priority in a matching result in the authentication process according to the number of times or frequency. The authentication device according to claim 1 .

8. The recording unit further records the location of the gate device that triggered the association of the registration information with the face registration image; the authentication unit determines a facial registration image to prioritize in a matching result in the authentication process, depending on the number or frequency of occurrences at the same location as the location of the gate device through which the trespasser is attempting to enter; The authentication device according to claim 7.

9. the registration information is a registration number of a user of the mobile terminal registered in an application of an authentication system installed on the mobile terminal; the plurality of registered face images are face images of persons who are registered in the authentication system and who are permitted to enter and exit a facility in which the gate device is installed; The authentication device according to any one of claims 1 to 7.

10. The processing unit of the authentication device When a portable terminal is present in the vicinity of a gate device, in response to receiving beacon information from a plurality of beacon devices provided in sequence along the direction of travel of the gate device, the portable terminal performs a process of linking registration information of a person entering the gate device, which is registered in the portable terminal, with one of a plurality of registered face images; The processing unit of the authentication device In an authentication process for authenticating an intruder based on a result of matching the facial image information of the intruder with the plurality of facial registration images, the result of matching the facial registration image linked to the registration information with the facial image information of the intruder is given priority over the result of matching the facial registration image not linked to the registration information with the facial image information of the intruder, The portable terminal estimates whether the person is an intruder based on the order of time when the portable terminal receives the beacon information of the plurality of beacon devices, and determines a face registration image to prioritize the matching result in the authentication process based on the estimation result. Authentication method.

11. a gate device through which an intruder can enter; an imaging device provided in correspondence with the gate device, for capturing facial image information of the entrant; A plurality of beacon devices are provided in order along the direction of travel of the gate device, and transmit beacon information to the mobile terminal; In response to the mobile terminal receiving the beacon information, registration information indicating a user of the mobile terminal is associated with one of a plurality of face registration images; an authentication process for authenticating an entrant based on a comparison result between an authentication threshold and a score, the score being a value indicating a possibility that a person corresponding to each of the plurality of face registration images is the same person as the entrant, corresponding to a comparison result between each of the plurality of face registration images and face image information of the entrant entering the gate device; An authentication device that estimates whether the mobile terminal is an intruder based on the order of times when the mobile terminal receives beacon information from the plurality of beacon devices, and determines a face registration image that prioritizes the matching result in the authentication process based on the estimation result. Authentication system.

12. When there are a plurality of face registration images linked to the registration information, the authentication device extracts authentication candidates to be subjected to the authentication process from the plurality of face registration images linked to the registration information according to a reception time of the beacon information at the mobile terminal. The authentication system of claim 11.

13. When there are a plurality of face registration images linked to the registration information, the authentication device extracts authentication candidates to be subjected to the authentication process from the plurality of face registration images linked to the registration information in accordance with the electric field strength of the beacon information in the mobile terminal. The authentication system of claim 12.

Images