Behavior management program, behavior management system, and behavior management method

Abstract

Whether or not each person can take a specific action is managed without registering personal information such as their name. [Solution] A behavior management program for controlling a behavior management system, the behavior management system comprising a processor and a storage device, the storage device holds biometric authentication information including biometric information collected and registered from each person and a history of authentication using the registered biometric information, and the behavior management program causes the processor to execute the following steps when new biometric information is acquired from a target person: a first step of performing authentication by comparing the new biometric information with the biometric information registered in the biometric authentication information; and, if authentication is successful, a second step of determining whether the target person is capable of performing a specified behavior based on the history of authentication using the registered biometric information that was successfully authenticated.

Description

[Technical Field]

[0001] The present invention relates to a technique for managing the behavior of an individual using biometric information. [Background technology]

[0002] Background of the present invention is the technology described in Japanese Patent Laid-Open No. 2019-20918 (Patent Document 1).

[0003] Patent Document 1 states that the device includes: "a storage unit that stores combination information indicating a combination of a user's biometric information and the identification information of a terminal and the number of times biometric authentication has been successful; a first acquisition unit that acquires the identification information from the terminal; a second acquisition unit that acquires biometric information from a target user; a control unit that controls a threshold that determines whether authentication of the target user has been successful based on the acquired identification information and the combination information; an authentication processing unit that, if the combination information contains a combination of the acquired identification information and the acquired biometric information, performs authentication based on a result of matching the acquired biometric information with the user's biometric information and a threshold; and an update processing unit that updates the number of successes for combinations of biometric information and identification information that have been successfully authenticated. When the first acquisition unit acquires the identification information, if the identification information contains a combination with a number of successes equal to or greater than a predetermined number, the control unit sets the threshold so that the false acceptance rate is lower than when there is no combination." [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Japanese Patent Application Publication No. 2019-20918 Summary of the Invention [Problem to be solved by the invention]

[0005] There is a need to manage the permissibility of a specific behavior for each person based on a predetermined restriction. One example is managing the number of purchases per person for a product that has a limit on the number of purchases per person in order to prevent the same person from purchasing a large quantity for the purpose of resale, etc. Another example is managing the permissibility of re-entry for each person in a theme park, amusement park, event venue, etc., where a person who pays a predetermined fee to enter the venue is allowed to re-enter as many times as they like on that day. To achieve this, it is conceivable to identify individuals and manage their behavior within the restrictions based on their behavioral history.

[0006] Generally, personal information such as name and age is used to identify an individual, but many people are reluctant to do so due to the cumbersome registration process and security concerns. However, by using biometric information instead of name, etc., it is expected that the cumbersome registration process and security concerns will be reduced.

[0007] Patent Document 1 describes registering biometric information and setting an authentication threshold based on the authentication history (specifically, the number of successful authentications). However, it does not describe eliminating the need to register personal information such as names. [Means for solving the problem]

[0008] In order to solve at least one of the above problems, the present invention provides a behavior management program for controlling a behavior management system, the behavior management system comprising a processor and a storage device, the storage device holding biometric authentication information including biometric information collected and registered from each person and a history of authentication using the registered biometric information, the behavior management program causing the processor to execute the following steps: when new biometric information is acquired from a target person, authenticating the target person by comparing the new biometric information with the biometric information registered in the biometric authentication information; and, if the authentication is successful, determining whether the target person is capable of performing a specified behavior based on the authentication history using the registered biometric information that was successful in the authentication. [Effects of the Invention]

[0009] According to one aspect of the present invention, it is possible to manage whether or not each person can perform a specific action without registering personal information such as their name. Problems, configurations, and effects other than those described above will become clear from the following description of the embodiment. [Brief explanation of the drawings]

[0010] [Figure 1] 1 is an explanatory diagram showing an overview of the overall configuration and processing of a behavior management system according to an embodiment of the present invention; [Figure 2] 1 is a block diagram showing an example of the hardware configuration of a computer system that realizes a behavior management system according to an embodiment of the present invention; [Figure 3] FIG. 2 is an explanatory diagram illustrating an example of a database held by the behavior management system according to the embodiment of the present invention. [Figure 4] 10 is a flowchart showing an example of a registration and authentication process executed in the behavior management system according to an embodiment of the present invention. [Figure 5] 10 is a flowchart illustrating an example of a registered information deletion process executed in the behavior management system according to an embodiment of the present invention. [Figure 6] FIG. 2 is an explanatory diagram showing a first example of a user interface provided by the behavior management system according to an embodiment of the present invention. [Figure 7] FIG. 10 is an explanatory diagram showing a second example of a user interface provided by the behavior management system according to the embodiment of the present invention. DETAILED DESCRIPTION OF THE INVENTION

[0011] Hereinafter, an embodiment of the present invention will be described with reference to the drawings.

[0012] FIG. 1 is an explanatory diagram showing an overview of the overall configuration and processing of a behavior management system according to an embodiment of the present invention.

[0013] The behavior management system 100 of this embodiment is composed of a server 101, a PC (Personal Computer) 102, and a biometric information reader 103. The server 101 and PC 102 are a computer system connected via a network, the configuration of which will be described later (see FIG. 2). The biometric information reader 103 is connected to the PC 102, reads a person's biometric information, and inputs that information into the PC 102. In this embodiment, a case will be described in which the biometric information reader 103 is a finger vein reader that reads finger veins, but this is just one example, and other devices that read biometric information may also be used. For example, the biometric information reader 103 may be a fingerprint reader that reads a fingerprint, or a camera that reads a face.

[0014] A visitor 104 is a person who visits a business location run by a business using a behavior management system as a customer of the business provided by the business. For example, a visitor 104 may be a person who visits a store to purchase a product, or a person who visits a facility such as a theme park, an amusement park, or an event venue to use the facility.

[0015] First, the biometric information reader 103 reads biometric information (for example, finger vein information) of the visitor 104 and inputs it into the PC 102 (step S111). The PC 102 transmits the biometric information to the server 101 via the network.

[0016] The server 101 holds a database (DB) in which biometric information acquired so far and information related to the history of authentication using that biometric information are registered, and compares the biometric information registered in the DB with the biometric information currently received from the PC 102 (step S112), and updates the information related to the authentication history according to the result (step S116). The authentication history includes, for example, the number of times authentication has been successful in the past (number of authentication successes) and the date and time of the most recent successful authentication (date and time of the last authentication).

[0017] For example, if the same biometric information as the biometric information currently received from PC 102 is not registered in the DB (i.e., biometric authentication has failed), server 101 newly registers the biometric information currently received from PC 102 in the DB (step S113) and also registers the date and time when the biometric information was acquired as the last authentication date and time (step S116).On the other hand, if the same biometric information as the biometric information currently received from PC 102 is registered in the DB (i.e., biometric authentication has succeeded), server 101 increments the number of successful authentications for that biometric information by 1 and updates the last authentication date and time (step S116).

[0018] Next, the server 101 determines whether or not the visitor 104 is permitted to take an action (for example, purchase a product or re-enter the facility) based on at least one of the last authentication date and time and the number of successful authentications registered in the DB, and outputs the result to the PC 102 (steps S114, S115). The PC 102 displays the determination result of whether or not the visitor 104 is permitted to take an action acquired from the server 101.

[0019] 1 shows one server 101 and one PC 102, this configuration is merely an example. For example, the server 101 and the PC 102 may be configured as an integrated unit, or multiple PCs 102 may be connected to one server 101. In the latter case, each PC 102 may be installed at each base (e.g., each store or each entrance gate in a theme park) operated by a business operator (e.g., a retailer or a theme park operator), transmit the acquired biometric information to the server 101, and obtain information on whether or not the action can be taken from the server and present it to the visitor 104.

[0020] FIG. 2 is a block diagram showing an example of the hardware configuration of a computer system that realizes the behavior management system 100 according to the embodiment of the present invention.

[0021] The server 101 and PC 102 constituting the behavior management system 100 of this embodiment shown in Fig. 1 can be realized by a computer system, Fig. 2 shows a computer system 200 as an example.

[0022] The computer system 200 includes a CPU (Central Processing Unit) 201, a memory 202, a monitor 203, a non-volatile storage 204, and an interface (I / F) 205. These components are connected to one another via a bus. The memory 202 and the non-volatile storage 204 are storage devices that store programs and data used by the CPU 201. Data in a database held by the server 101, which will be described later, is stored in the non-volatile storage 204, for example, and at least a portion of the data may be stored in the memory 202 as needed for processing.

[0023] The memory 202 is a main storage device formed, for example, from a semiconductor memory, and is mainly used to hold programs and data currently being executed. For example, programs and data stored in the nonvolatile storage 204 are loaded into the memory 202 at startup or when needed. The CPU 201 executes various processes in accordance with the programs stored in the memory 202. The CPU 201 operates in accordance with the programs to realize various functional units (for example, the processing functions shown in FIGS. 4 and 5, which will be described later).

[0024] The non-volatile storage 204 is configured with a large-capacity non-volatile storage device such as a hard disk drive or a solid-state drive, and is used to store programs and data for a long period of time.

[0025] CPU 201 may be configured with a single processing unit or multiple processing units, and may include single or multiple arithmetic units or multiple processing cores. CPU 201 may be implemented as one or more central processing units, microprocessors, microcomputers, microcontrollers, digital signal processors, state machines, logic circuits, graphics processing units, systems on a chip, and / or any device that manipulates signals based on control instructions.

[0026] The monitor 203 is a hardware device that displays various images for input and output, and is, for example, a display device or a printing device.

[0027] The I / F 205 is an interface device for connecting the computer system 200 to external devices. For example, the I / F 205 may include a network interface device connected to a network. Furthermore, the I / F 205 of the computer system 200 that realizes the PC 102 may include a peripheral device interface device connected to the biometric information reader 103.

[0028] The computer system 200 may include two or more processors 121. The functions of the behavior management system 100, particularly the server 101, may be implemented in multiple computer systems 200. In this case, the multiple computer systems 200 communicate with each other via a network. For example, some of the functions of the server 101 in this embodiment may be implemented in one computer system 200, and other functions may be implemented in other computer systems 200. The computer system 200 (particularly the computer system 200 that realizes the server 101) may be a virtual server on a cloud. In this case, the computer system 200 shown in FIG. 2 is realized by computer resources on the cloud.

[0029] FIG. 3 is an explanatory diagram showing an example of a database held by the behavior management system 100 according to the embodiment of the present invention.

[0030] Specifically, FIG. 3 shows biometric authentication information 300 as an example of information contained in a database (DB) held by the server 101.

[0031] The biometric authentication information 300 includes biometric information 301, a number of successful authentication attempts 302, and a last authentication date and time 303. The biometric information 301 is biometric information (e.g., finger vein information) acquired from the visitor 104. For example, the acquired biometric information data itself, or a file path indicating the location of the data, etc., is stored as the biometric information 301. The number of successful authentication attempts 302 and the last authentication date and time 303 are examples of the authentication history of each piece of biometric information. The number of successful authentication attempts 302 indicates the number of times authentication has been successful for each piece of biometric information. The last authentication date and time 303 indicates the date and time when authentication was last successful for each piece of biometric information. Note that in the case of biometric information that has never been successfully authenticated since it was first acquired, the last authentication date and time 303 indicates the date and time when the biometric information was acquired.

[0032] In the example of Fig. 3, biometric information 301 in records 311 to 314 of biometric authentication information 300 is registered with biometric information data acquired from different visitors 104 (i.e., not matching each other). Of these, biometric information 301 in record 311 has already been successfully authenticated once, at 12:05 on April 2, 2023. On the other hand, biometric information 301 in records 312 to 314 has never been successfully authenticated since it was acquired from the visitor 104 and registered in biometric authentication information 300. In this case, information indicating the date and time when each piece of biometric information 301 was acquired is registered in last authentication date and time 303.

[0033] FIG. 4 is a flowchart showing an example of the registration and authentication process executed in the behavior management system 100 according to the embodiment of the present invention.

[0034] When a customer 104 arrives at a store or the like, processing starts (step S401).

[0035] First, it is determined whether finger vein authentication is required for the visitor 104 (step S402). For example, if the visitor 104 is attempting to purchase a product in a store that has a limit on the number of purchases per person, or if the visitor 104 is attempting to enter a place (e.g., a facility such as a theme park) that has a limit on the period of admission, it is determined that finger vein authentication is required (step S402: YES). Otherwise, it is determined that finger vein authentication is not required (step S402: NO, step S403). This determination may be made automatically by the PC 102 or by a staff member or the like serving the visitor 104.

[0036] If it is determined that finger vein authentication is necessary (step S402: YES), finger vein authentication of the visitor 104 is performed, and the success or failure of the authentication is determined (step S404). For example, the visitor 104 uses the biometric information reader 103 to read his or her own finger vein information, and the PC 102 acquires the finger vein information from the biometric information reader 103 and transmits it to the server 101. The server 101 compares the acquired finger vein information with the finger vein information registered in the biometric information 301 of the biometric authentication information 300, and determines whether the authentication is successful. This series of processes corresponds to steps S111 and S112 shown in FIG. 1.

[0037] In step S404, the same type of biometric information from the same body part is acquired from each customer 104. For example, "finger vein information" from the "right index finger" may be acquired. Specifically, a message instructing the customer 104 to place the index finger of their right hand on the biometric information reader 103 may be displayed on the monitor 203 of the PC 102. Alternatively, a store clerk or other person present may ask the customer 104 to place the index finger of their right hand on the biometric information reader 103 and visually confirm that the customer 104 has actually placed the index finger of their right hand on the biometric information reader 103. This prevents impersonation, such as when one person pretends to be multiple people and attempts to purchase more items than the limit, for example, when there is a limit on the number of purchases per person.

[0038] Furthermore, the authentication in step S404 may use a public biometric infrastructure (see JP 2023-000782 A). However, this is just one example, and any biometric authentication technology can be used as long as it can provide authentication with sufficient accuracy.

[0039] If the acquired finger vein information does not match any of the finger vein information registered in the biometric information 301, the server 101 determines that the authentication has failed (step S404: NO), and registers the acquired finger vein information as new biometric information 301 (step S405). This corresponds to steps S113 and S116 shown in Fig. 1. At this time, the number of successful authentication attempts 302 corresponding to the newly registered finger vein information is left blank (or 0), and the last authentication date and time 303 is set to the date and time when the finger vein information was acquired.

[0040] If the acquired finger vein information matches any of the finger vein information registered in the biometric information 301, the server 101 determines that the authentication is successful (step S404: YES), and determines whether the last authentication date and time 303 corresponding to the value of the biometric information 301 that matches the acquired finger vein information is today (i.e., the last authentication date and time 303 and the acquisition date and time of the acquired finger vein information are the same day) (step S406). If the last authentication date and time 303 is not today (step S406: NO), the server 101 determines that the target action (e.g., entry to a theme park) is not permitted (step S407). This corresponds to step S115 shown in FIG. 1.

[0041] If the last authentication date and time 303 is today (step S406: YES), the server 101 determines whether the value of the authentication success count 302 corresponding to the value of the biometric information 301 that matches the acquired finger vein information is equal to or less than a specified number of times (step S408). If the value of the authentication success count 302 exceeds the specified number of times (step S408: NO), the server 101 increments the value of the authentication success count 302 by 1 (step S409) and determines that the target action (for example, purchasing a limited edition product) is not permitted (step S410). This corresponds to steps S115 and S116 shown in FIG. 1.

[0042] Here, even if the value of the number of successful authentications 302 exceeds the specified number, by updating the value of the number of successful authentications 302, it becomes possible to identify a customer 104 who is trying to purchase a product whose number of purchases is limited, exceeding the limit.

[0043] If the value of the authentication success count 302 is equal to or less than the specified count (step S408: YES), the server 101 increments the value of the authentication success count 302 by 1, updates the last authentication date and time to the date and time of the successful authentication in step S406 (step S411), and permits the target action (e.g., purchasing limited edition merchandise or entering a theme park) (step S412). This corresponds to steps S114 and S116 shown in FIG. 1.

[0044] In step S404, there may be cases where the acquired finger vein information is successfully matched with any of the finger vein information registered in the biometric information 301 multiple times in a short period of time. For example, this may occur when the visitor 104 operates the biometric information reader 103 incorrectly. If all of these successful matches are added to the number of successful authentication attempts 302 in step S411, multiple successful authentication attempts will be added even though the visitor has actually only purchased a single product. For this reason, the server 101 may increment the value of the number of successful authentication attempts 302 by 1 in step S411 when multiple successful authentication attempts are made with the same value of the biometric information 301 within a time shorter than a predetermined standard (for example, a few seconds). This makes it possible to prevent errors in counting the number of successful authentication attempts due to operational errors, etc. The same applies to step S409 described above.

[0045] The result of the determination as to whether the above action is possible or not is notified to the PC 102 via the network, and is then notified to the visitor 104 via the user interface of the PC 102. An example of the user interface will be described later.

[0046] This completes the process (step S413).

[0047] In this embodiment, typical examples of restrictions on managed behavior include restrictions on the number of times an action can be performed and restrictions on the period of the action. In the above description, an example of the former is a restriction on the number of times a product can be purchased, and an example of the latter is a restriction on re-entry to a theme park or the like on the same day. However, these are merely examples, and the present invention can be applied to other cases. For example, other examples of restrictions on the number of times an action can be performed include a restriction on the number of times a person can enter a theme park, amusement park, event venue, or some other facility, and a restriction on the number of times a public transportation facility can be used. Furthermore, other examples of restrictions on the period of an action include restricting the purchase of a specific product to the same day, and restricting the use of public transportation to the same day.

[0048] Furthermore, the present invention can also be applied to cases where both the number of times and the period of an action are restricted, such as when a person is permitted to purchase a product or re-enter a theme park a certain number of times on the same day.

[0049] If only the number of times an activity can be performed is limited, and the period is not limited, then the updating of the last authentication date and time in steps S406, S407, and S411 of the process in Fig. 4 is omitted. In this case, the biometric authentication information 300 does not need to include the last authentication date and time 303. On the other hand, if only the period of an activity is limited, and the number of times is not limited, then the adding of the number of successful authentication attempts in steps S408 to S410 and S411 of the process in Fig. 4 is omitted. In this case, the biometric authentication information 300 does not need to include the number of successful authentication attempts 302.

[0050] FIG. 5 is a flowchart showing an example of a registered information deletion process executed in the behavior management system 100 according to the embodiment of the present invention.

[0051] The server 101 starts the process shown in Fig. 5 at a predetermined timing and checks all values ​​registered as the last authentication date and time 303 in the biometric authentication information 300 in the database (step S501). The predetermined timing may be, for example, a predetermined time every day, a predetermined interval, or when a predetermined event occurs. In the example of Fig. 5, the process starts at 4:03 AM every day.

[0052] Next, the server 101 determines whether the checked values ​​of the last authentication date and time 303 include any values ​​older than a predetermined standard (step S502). In the example of Fig. 5, it determines whether the values ​​of the last authentication date and time 303 include any values ​​that are three days or older.

[0053] If the value of the last authentication date and time 303 includes one older than the predetermined standard (step S502: YES), the server 101 deletes the record including the old value of the last authentication date and time 303, including the biometric information 301 (step S503), and ends the process (step S504).If the value of the last authentication date and time 303 does not include one older than the predetermined standard (step S502: NO), step S503 is skipped.

[0054] This reduces the risk of biometric information leaking, and also reduces the amount of data to be stored, thereby reducing management costs.

[0055] FIG. 6 is an explanatory diagram showing a first example of a user interface provided by the behavior management system 100 according to an embodiment of the present invention.

[0056] FIG. 6 shows an example of a screen displayed on the monitor 203 of the PC 102 when the customer 104 is trying to purchase a product that is limited to three purchases per person.

[0057] When the visitor 104 arrives, a message 601 saying "Confirm your purchase data. Place your finger on the device" is displayed on the monitor 203. This corresponds to step S111 in FIG. 1 and step S402: YES in FIG. 4.

[0058] The server 101 authenticates the finger vein information acquired from the PC 102 and notifies the PC 102 of the result. When the server 101 is notified of successful authentication, a message 602 is displayed on the monitor 203 of the PC 102, stating, "Authentication was successful. Your last authentication was on January 15, 2024, and you have made a total of two purchases to date. You have one purchase remaining." This corresponds to step S114 in FIG. 1 and step S412 in FIG. 4 when step S408: YES is selected.

[0059] On the other hand, if the authentication is successful but the number of successful authentication attempts has already reached the upper limit, a message (not shown) notifying the visitor 104 of this fact is displayed. This corresponds to step S115 in FIG. 1 and step S410 in FIG. 4 when step S408: NO is returned.

[0060] If a notification of authentication failure is received, a message 603 saying "Authentication failed. Your finger vein will be registered. Please place your finger on the device" is displayed on the monitor 203 of the PC 102. This corresponds to step S113 in Fig. 1 and step S405 in Fig. 4. Thereafter, the monitor 203 may display a message indicating the number of purchases remaining for the customer 104 at that time, similar to message 602.

[0061] FIG. 7 is an explanatory diagram showing a second example of a user interface provided by the behavior management system 100 according to an embodiment of the present invention.

[0062] FIG. 7 shows an example of a screen displayed on the monitor 203 of the PC 102 when the visitor 104 is about to re-enter a place (such as a theme park) where re-entry is permitted only on the same day.

[0063] When the visitor 104 arrives, a message 701 saying "Confirm your purchase data. Place your finger on the device" is displayed on the monitor 203. This corresponds to step S111 in FIG. 1 and step S402: YES in FIG. 4.

[0064] The server 101 authenticates the finger vein information acquired from the PC 102 and notifies the PC 102 of the result. If the server 101 is notified of successful authentication, a message 702 saying "Authentication was successful. You will be able to re-enter by authenticating your registered finger within the day" is displayed on the monitor 203 of the PC 102. This corresponds to step S114 in FIG. 1 and step S412 in FIG. 4 when step S406: YES is selected.

[0065] On the other hand, if the authentication is successful but the last authentication date and time is not today, a message (not shown) notifying the visitor 104 of that fact is displayed. This corresponds to step S115 in FIG. 1 and step S407 in FIG. 4 when step S406: NO.

[0066] When a notification of authentication failure is received, a message 703 saying "Authentication failed. Your finger vein will be registered. Please place your finger on the device" is displayed on the monitor 203 of the PC 102. This corresponds to step S113 in Fig. 1 and step S405 in Fig. 4. Thereafter, the monitor 203 may display a message similar to message 702 indicating that re-entry is possible within the day by authenticating the registered finger.

[0067] The system according to the embodiment of the present invention may be configured as follows, for example.

[0068] (1) A behavior management program for controlling a behavior management system (e.g., behavior management system 100), the behavior management system comprising a processor (e.g., CPU 201) and a storage device (e.g., memory 202 and non-volatile storage 204), the storage device holding biometric authentication information (e.g., biometric authentication information 300) including biometric information collected and registered from each person and a history of authentication using the registered biometric information, the behavior management program causes the processor to execute a first procedure (e.g., step S404) of performing authentication when new biometric information is acquired from a target person by comparing the new biometric information with the biometric information registered in the biometric authentication information, and if the authentication is successful, a second procedure (e.g., steps S406 to S412) of determining whether the target person is capable of performing a predetermined behavior based on the history of authentication using the registered biometric information that was successful in the authentication.

[0069] This makes it possible to manage whether or not each person can perform a specific action without registering personal information such as their name.

[0070] (2) The behavior management program described in (1) above, wherein the authentication history using the registered biometric information includes the number of past authentication successes (e.g., number of authentication successes 302), and the second step includes a step of determining that the target person's predetermined behavior is acceptable if the number of past authentication successes has not reached a predetermined upper limit in the authentication history using the registered biometric information that has been successfully authenticated (e.g., step S412 if step S408: YES), and determining that the target person's predetermined behavior is unacceptable if the number of past authentication successes has reached a predetermined upper limit (e.g., step S410 if step S408: NO).

[0071] This makes it possible to manage actions that are limited in number for each person (for example, purchasing a product that is limited in number of purchases).

[0072] (3) In the behavior management program described in (2) above, the second procedure includes a procedure (e.g., steps S409 and S411) for updating the number of past successful authentications for the registered biometric information that has been successfully authenticated, if the authentication is successful, regardless of whether the number of past successful authentications has reached a predetermined upper limit.

[0073] This makes it possible to identify people who are attempting to purchase limited-edition products beyond the limit.

[0074] (4) In the behavior management program described in (2) above, the second step increases the number of past successful authentications of the biometric information of the same person by one if the biometric information of the same person is successfully authenticated multiple times within a time interval shorter than a predetermined standard.

[0075] This eliminates the effect of an error that may result in multiple successful authentications for a single action due to an incorrect procedure.

[0076] (5) The behavior management program described in (1) above, wherein the authentication history using the registered biometric information includes the last authentication date and time (e.g., last authentication date and time 303), and the second step includes a step of determining that the specified behavior of the target person is acceptable if the last authentication date and time in the authentication history using the registered biometric information that was successfully authenticated is the same as the current time (e.g., step S412 if step S406: YES), and determining that the specified behavior of the target person is unacceptable if the last authentication date and time is not the same as the current time (e.g., step S407 if step S406: NO).

[0077] This makes it possible to manage actions that are permitted for each person on that day (for example, re-entry to a theme park).

[0078] (6) The behavior management program according to (1) above, wherein if the authentication fails, the processor is caused to execute a third procedure (for example, step S405) of registering the new biometric information in the biometric authentication information.

[0079] As a result, the behavior of a person whose biometric information has been newly registered is managed according to the subsequent authentication results.

[0080] (7) A behavior management program as described in (1) above, wherein the history of authentication using the registered biometric information includes the last authentication date and time, and the processor is caused to execute a fourth procedure (e.g., step S503) of deleting from the biometric authentication information the registered biometric information whose last authentication date and time is earlier than a predetermined standard.

[0081] This reduces the risk of biometric information leaking, and also reduces the amount of data to be stored, thereby reducing management costs.

[0082] (8) In the behavior management program according to (1) above, the biometric information is the same type of biometric information obtained from the same body part of each person.

[0083] This prevents one person from impersonating multiple people.

[0084] The present invention is not limited to the above-described embodiments and includes various modifications. For example, the above-described embodiments have been described in detail to provide a better understanding of the present invention, and the present invention is not necessarily limited to those including all of the described configurations. Furthermore, it is possible to replace part of the configuration of one embodiment with the configuration of another embodiment, or to add the configuration of another embodiment to the configuration of one embodiment. Furthermore, it is possible to add, delete, or replace part of the configuration of each embodiment with other configurations.

[0085] Furthermore, the above-described configurations, functions, processing units, processing means, etc. may be partially or entirely implemented in hardware, for example, by designing them as integrated circuits. The above-described configurations, functions, etc. may also be implemented in software, with a processor interpreting and executing a program that implements each function. Information such as the programs, tables, and files that implement each function can be stored in storage devices such as nonvolatile semiconductor memory, hard disk drives, and solid-state drives (SSDs), or in computer-readable, non-transitory data storage media such as IC cards, SD cards, and DVDs.

[0086] In addition, the control lines and information lines shown are those that are considered necessary for the explanation, and not all control lines and information lines in the product are necessarily shown. In reality, it can be considered that almost all components are interconnected. [Explanation of symbols]

[0087] 100 Behavior Management System 101 Server 102 PC 103 Biometric information reader 200 Computer Systems 201 CPU 202 memory 203 Monitor 204 Non-volatile Storage 205 Interface (I / F) 300 Biometric Information

Claims

1. A behavior management program for controlling a behavior management system, The behavior management system includes a processor and a storage device. the storage device stores biometric authentication information including biometric information collected and registered from each person and a history of authentication using the registered biometric information; The behavior management program a first step of performing authentication by comparing new biometric information obtained from a target person with biometric information registered in the biometric authentication information when the new biometric information is obtained from the target person; A behavior management program characterized by having the processor execute a second procedure in which, if the authentication is successful, the target person is able to perform a specified behavior based on the authentication history using the registered biometric information that was successfully authenticated.

2. 2. The behavior management program according to claim 1, The authentication history using the registered biometric information includes the number of successful authentication attempts in the past, The second step is a behavior management program characterized in that it includes a step of determining that the specified behavior of the target person is acceptable if, in a history of authentications using registered biometric information that have been successfully authenticated, the number of past successful authentications has not reached a predetermined upper limit, and determining that the specified behavior of the target person is unacceptable if the number of past successful authentications has reached a predetermined upper limit.

3. 3. The behavior management program according to claim 2, The behavior management program is characterized in that the second procedure includes a procedure for updating the number of past authentication successes for the registered biometric information that has been successfully authenticated, if the authentication is successful, regardless of whether the number of past authentication successes has reached a predetermined upper limit.

4. 3. The behavior management program according to claim 2, The second step is a behavior management program characterized in that, if authentication of the same person's biometric information is successful multiple times within a time interval shorter than a predetermined standard, the number of past authentication successes for the person's biometric information is increased by 1.

5. 2. The behavior management program according to claim 1, The authentication history using the registered biometric information includes the last authentication date and time, The second step is a behavior management program characterized by including a step of determining that the specified behavior of the target person is acceptable if the last authentication date and time in the authentication history using registered biometric information that was successfully authenticated is the same as the current time, and determining that the specified behavior of the target person is unacceptable if the last authentication date and time is not the same as the current time.

6. 2. The behavior management program according to claim 1, a behavior management program that causes the processor to execute a third procedure of registering the new biometric information in the biometric authentication information if the authentication fails;

7. 2. The behavior management program according to claim 1, The authentication history using the registered biometric information includes the last authentication date and time, a fourth step of deleting from the biometric authentication information the registered biometric information whose last authentication date and time is earlier than a predetermined standard;

8. 2. The behavior management program according to claim 1, A behavior management program, wherein the biometric information is the same type of biometric information obtained from the same body part of each person.

9. 1. A behavior management system, comprising: a processor and a storage device, the storage device stores biometric authentication information including biometric information collected and registered from each person and a history of authentication using the registered biometric information; The processor: When new biometric information is acquired from the target person, authentication is performed by comparing the new biometric information with the biometric information registered in the biometric authentication information; A behavior management system characterized in that, if the authentication is successful, it determines whether the target person is able to perform a specified behavior based on the authentication history using the registered biometric information that was successfully authenticated.

10. A behavior management method executed by a behavior management system, The behavior management system includes a processor and a storage device. the storage device stores biometric authentication information including biometric information collected and registered from each person and a history of authentication using the registered biometric information; The behavior management method includes: a first step in which, when new biometric information is acquired from a target person, the processor performs authentication by comparing the new biometric information with biometric information registered in the biometric authentication information; A behavior management method characterized by including a second step in which, if the authentication is successful, the processor determines whether the target person is capable of performing a specified behavior based on the authentication history using the registered biometric information that was successfully authenticated.

Images