Authentication system and authentication method

Abstract

The present invention provides an authentication system (10) for a first area and a second area to which entry is allowed after passage through the first area, the authentication system (10) determining whether to allow entry to the second area. The authentication system (10) identifies authentication information used when a user entered the first area, and identifies, according to the identified authentication information, authentication information required for the user to enter the second area.

Description

[Technical field]

[0001] The present invention relates to an authentication system and an authentication method. [Background technology]

[0002] Patent Documents 1 and 2 disclose systems for controlling entrance to a controlled area.

[0003] In the system disclosed in Patent Document 1, an IC (integrated circuit) card reader is installed at the entrance of a building. The system then performs authentication processing based on a person's ID (identifier) ​​read by the IC card reader, and performs entrance management at that location based on the authentication result. In addition, in the system, an IC card reader and a camera are installed at the entrance of an area present in the building. The system first performs face authentication based on an image generated by the camera, and if face authentication fails, performs authentication processing based on the person's ID. The system then performs entrance management at that location based on these authentication results.

[0004] The system disclosed in Patent Document 2 switches detection modes in response to detection of unauthorized entry and exit. In the mode when unauthorized entry and exit is not detected, only authentication based on the data stored in the IC chip is performed. In the mode when unauthorized entry and exit is detected, both authentication based on the data stored in the IC chip and facial authentication are performed. The facial authentication is performed using the user's mobile terminal. Specifically, the user starts a specific application on his / her mobile terminal and takes a picture of his / her face. In response, the application performs facial authentication. Next, the user brings his / her mobile terminal close to the non-contact communication antenna of the system to perform short-range wireless communication. In response, the result of the facial authentication is transmitted from the mobile terminal to the system. In this way, the system obtains the result of the facial authentication. [Prior art documents] [Patent documents]

[0005] [Patent Document 1] JP 2007-280083 A [Patent Document 2] JP 2011-184991 A Summary of the Invention [Problem to be solved by the invention]

[0006] There are cases where multiple authentication points are set up within a facility, and authentication processing is performed at each authentication point to manage entry beyond that point. For example, an authentication point may be set up at the entrance to a facility, and further authentication points may be set up at the entrances to each of multiple areas within the facility. In such a system that performs multiple authentication steps within a single facility, it is desirable to maintain a high level of security without waste.

[0007] An object of the present invention is to realize a technique for efficiently maintaining a high level of security in a system that performs multi-stage authentication. [Means for solving the problem]

[0008] According to the present invention, An authentication system having a first area and a second area to which a person can enter after passing through the first area, the authentication system determining whether or not a person can enter the second area, An authentication system is provided that has an identification means for identifying authentication information used when a user entered the first area, and for identifying authentication information required for the user to enter the second area according to the identified authentication information.

[0009] Further, according to the present invention, a first area and a second area to which a person can enter after passing through the first area, and an authentication system for determining whether or not a person can enter the second area; An authentication method is provided that identifies authentication information used when a user entered the first area, and, depending on the identified authentication information, identifies authentication information required for the user to enter the second area. Effect of the Invention

[0010] According to the present invention, a technique for efficiently maintaining a high level of security in a system that performs multi-stage authentication is realized. [Brief description of the drawings]

[0011] [Figure 1] FIG. 1 is a diagram for explaining an overall view of an authentication system according to an embodiment of the present invention. [Diagram 2] FIG. 2 is a functional block diagram of a local system according to an embodiment of the present invention; [Diagram 3] FIG. 2 is a functional block diagram of a server according to an embodiment of the present invention; [Figure 4] FIG. 1 is a diagram for explaining an overall view of an authentication system according to an embodiment of the present invention. [Diagram 5] FIG. 2 is a diagram illustrating an example of a hardware configuration of the authentication system according to the present embodiment. [Figure 6] FIG. 2 is a functional block diagram of an example of the authentication system according to the present embodiment. [Figure 7] FIG. 2 is a diagram illustrating an example of information processed by the authentication system of the present embodiment. [Figure 8] FIG. 2 is a diagram illustrating an example of information processed by the authentication system of the present embodiment. [Figure 9] 4 is a flowchart showing an example of a process flow of the authentication system of the present embodiment. [Figure 10] 4 is a flowchart showing an example of a process flow of the authentication system of the present embodiment. [Figure 11] 10A and 10B are diagrams for explaining the effects of the authentication system according to the present embodiment. [Figure 12] FIG. 2 is a diagram showing an example of information used in the authentication system of the present embodiment. [Figure 13]FIG. 4 is a diagram illustrating an example of a registration process of the authentication system according to the present embodiment. [Figure 14] FIG. 4 is a diagram illustrating an example of a registration process of the authentication system according to the present embodiment. [Figure 15] FIG. 4 is a diagram illustrating an example of a registration process of the authentication system according to the present embodiment. [Figure 16] FIG. 11 is a diagram illustrating an example of a deletion process of the authentication system of the present embodiment. [Figure 17] FIG. 11 is a diagram illustrating an example of a deletion process of the authentication system of the present embodiment. [Figure 18] FIG. 11 is a diagram illustrating an example of a deletion process of the authentication system of the present embodiment. [Figure 19] FIG. 2 is a functional block diagram of a local system according to an embodiment of the present invention; [Figure 20] FIG. 2 is a functional block diagram of a server according to an embodiment of the present invention; [Figure 21] 4 is a flowchart showing an example of a process flow of the authentication system of the present embodiment. [Figure 22] FIG. 2 is a functional block diagram of an example of the authentication system according to the present embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0012] Hereinafter, embodiments of the present invention will be described with reference to the drawings. In all the drawings, the same components are given the same reference numerals and the description will be omitted as appropriate.

[0013] <First embodiment> "overview" The authentication system of this embodiment will be outlined with reference to Fig. 1. The purpose of the outline is to provide an overall understanding of the authentication system of this embodiment. The authentication system of this embodiment will be described in detail later.

[0014] The authentication system of this embodiment includes a server 200 and a plurality of local systems 100. The server 200 and each of the plurality of local systems 100 are connected to each other so as to be able to communicate with each other via wired and / or wireless communication.

[0015] In this embodiment, a plurality of authentication points are set in a facility, and a local system 100 is set in each of the plurality of authentication points. For example, an authentication point may be set at the entrance of each of a plurality of areas in the facility, but this is not limited thereto. Examples of the facility include, but are not limited to, buildings, companies, amusement facilities, airports, stations, collective housing (condominiums, apartments, etc.), schools, etc. In FIG. 1, a first area and a second area that can be entered after passing through the first area are shown, and an authentication point is set at the entrance of each area. Note that, although the first area and the second area are separated in FIG. 1, the first area may include the second area.

[0016] As shown in FIG. 2, the local system 100 includes an authentication information acquisition device 1 and a passage control device 2.

[0017] The authentication information acquisition device 1 is a device that acquires authentication information for performing authentication processing from a user. Examples of authentication information include user identification information and biometric information. The user identification information is information in which numbers, letters, symbols, etc. are arranged, and is artificially created information. The biometric information is information unique to each user, and examples of the information include face information, iris information, fingerprint information, voiceprint information, and gait information. The configurations of the authentication information acquisition devices 1 installed at each of the multiple authentication points may be different from each other. For example, the number of types of authentication information that can be acquired may be different, and the types of authentication information that can be acquired may be different. For example, the authentication information acquisition devices 1 installed at the other authentication points in FIG. 1 may be configured to be able to acquire user identification information and face information, and the authentication information acquisition device 1 installed at the first authentication point may be configured to be able to acquire user identification information, but is not limited to this.

[0018] At an authentication location where an authentication information acquisition device 1 configured to be capable of acquiring multiple types of authentication information is installed, a user inputs one piece of authentication information selected from the multiple pieces of authentication information to the authentication information acquisition device 1. The authentication system then performs authentication processing based on the input piece of authentication information. On the other hand, at an authentication location where an authentication information acquisition device 1 configured to be capable of acquiring only one type of authentication information is installed, a user inputs that authentication information to the authentication information acquisition device 1. The authentication system then performs authentication processing based on the input authentication information.

[0019] The passage control device 2 includes a passage control mechanism (gate, door, etc.) that controls the passage of people, and a device that controls the operation (opening / closing, etc.) of the passage control mechanism with an electric signal. The passage control device 2 controls the operation of the passage control mechanism based on a control signal from an authentication device 3, which will be described later.

[0020] As shown in FIG. 3, the server 200 includes an authentication device 3 and an authentication history management device 4.

[0021] The authentication history management device 4 manages the authentication history of each user. Specifically, the authentication history management device 4 manages, as an authentication history, the type of authentication information used in the authentication process executed at each authentication point that each user passed through in the past period (the same day, during a predetermined time in the past, etc.).

[0022] The authentication device 3 performs authentication processing for the user based on the authentication information acquired by the authentication information acquisition device 1 and the reference information previously stored in the server 200. Then, the authentication device 3 determines for each user whether or not to allow the user to pass through the authentication point based on the result of the authentication processing.

[0023] In this embodiment, at least one of the multiple authentication points is treated as a first authentication point. The first authentication point is set at the entrance of an area to which a person can enter after passing through another area, for example.

[0024] The authentication information acquisition device 1 installed at the first authentication point can acquire the first type of authentication information, but cannot acquire the second type of authentication information. The first type of authentication information is, for example, user identification information, and the second type of authentication information is, for example, biometric information.

[0025] The condition for passing a first authentication point is that "authentication processing using authentication information acquired by the authentication information acquisition device 1 installed at the first authentication point is successful" and "second authentication processing using a second type of authentication information (e.g., biometric information) is successful."

[0026] As described above, the authentication information acquisition device 1 installed at the first authentication point cannot acquire the second type of authentication information (e.g., biometric information). Therefore, the above-mentioned condition "the second authentication process using the second type of authentication information is successful" needs to be realized by, for example, a second authentication process performed at another authentication point during a past period. In other words, if the second authentication process using the second type of authentication information is successful at, for example, another authentication point before coming to the first authentication point, the above-mentioned condition "the second authentication process using the second type of authentication information is successful" is satisfied.

[0027] Considering the above conditions, the authentication device 3 specifies, for each user, authentication information required to pass through the first authentication point based on the authentication history information. Then, the authentication device 3 uses the specified result to decide whether or not to allow each user to pass through.

[0028] For a user whose successful second authentication process using the second type of authentication information is not registered in the authentication history information, the authentication device 3 identifies "authentication information that can be acquired by the authentication information acquisition device 1 installed at the first authentication point" and "second type of authentication information" as authentication information required to pass through the first authentication point. When the authentication device 3 confirms that the authentication process using these two types of authentication information is successful, it permits the user to pass through the first authentication point.

[0029] On the other hand, for a user who is registered in the authentication history information as having succeeded in the second authentication process using the second type of authentication information, the authentication device 3 identifies "authentication information that can be acquired by the authentication information acquisition device 1 installed at the first authentication point" as authentication information required to pass through the first authentication point. When it is confirmed that the authentication process using this authentication information is successful, the authentication device 3 permits the user to pass through the first authentication point.

[0030] However, a user who has not been registered in the authentication history information as having succeeded in the second authentication process using the second type of authentication information needs the second type of authentication information to pass through the first authentication point. However, as described above, the authentication information acquisition device 1 installed at the first authentication point cannot acquire the second type of authentication information (e.g., biometric information).

[0031] Therefore, the authentication system of this embodiment has a function of acquiring the second type of authentication information via a user terminal possessed by the user. A user whose successful second authentication process using the second type of authentication information is not registered in the authentication history information can connect the server 200 and his / her own user terminal 300 via a communication network 400 as shown in FIG. 4, and transmit the second type of authentication information to the server 200. Then, the server 200 performs the authentication process based on the second type of authentication information received from the user terminal 300. This function allows the user to avoid the troublesome task of going to another authentication point to perform the authentication process in order to pass the first authentication point.

[0032] "Hardware Configuration" Next, the configuration of the authentication system of this embodiment will be described in detail. First, an example of the hardware configuration of the authentication system will be described. Each functional part of the authentication system is realized by any combination of hardware and software, centering on a CPU (Central Processing Unit) of any computer, memory, programs loaded into the memory, a storage unit such as a hard disk that stores the programs (programs that are stored before the device is shipped, as well as programs downloaded from storage media such as CDs (Compact Discs) or servers on the Internet, can be stored), and a network connection interface. Those skilled in the art will understand that there are various variations in the method of realizing the system and the device.

[0033] Fig. 5 is a block diagram illustrating a hardware configuration of an authentication system. As shown in Fig. 5, the authentication system has a processor 1A, a memory 2A, an input / output interface 3A, a peripheral circuit 4A, and a bus 5A. The peripheral circuit 4A includes various modules. The authentication system does not have to have the peripheral circuit 4A. The authentication system may be composed of multiple devices that are physically and / or logically separated. In this case, each of the multiple devices can have the above hardware configuration.

[0034] The bus 5A is a data transmission path for the processor 1A, memory 2A, peripheral circuit 4A, and input / output interface 3A to transmit and receive data to each other. The processor 1A is an arithmetic processing device such as a CPU or a GPU (Graphics Processing Unit). The memory 2A is a memory such as a RAM (Random Access Memory) or a ROM (Read Only Memory). The input / output interface 3A includes an interface for acquiring information from an input device, an external device, an external server, an external sensor, a camera, etc., and an interface for outputting information to an output device, an external device, an external server, etc. Examples of the input device include a keyboard, a mouse, a microphone, a physical button, a touch panel, etc. Examples of the output device include a display, a speaker, a printer, a mailer, etc. The processor 1A can issue commands to each module and perform calculations based on the results of those calculations.

[0035] "Function Configuration" Next, a functional configuration of the authentication system 10 will be described. An example of a functional block diagram of the authentication system 10 will be described in Fig. 6. As shown in the figure, the authentication system 10 has an authentication information acquisition unit (first authentication information acquisition unit 11 and second authentication information acquisition unit 18), an authentication unit (first authentication unit 12 and second authentication unit 19), an authentication history acquisition unit 13, an identification unit 14, a pass processing unit 15, a storage unit 16, and an Internet-via authentication unit 17.

[0036] These functional units are included in the server 200 and the local system 100 shown in Figures 1 and 4. There are various variations in which functional units the server 200 and the local system 100 are included, and the configurations are not limited.

[0037] 2 and 3, the server 200 includes a first authentication unit 12, an authentication history acquisition unit 13, an identification unit 14, a pass processing unit 15, a memory unit 16, an Internet-based authentication unit 17, and a second authentication unit 19. The local system 100 installed at a first authentication point includes a first authentication information acquisition unit 11 and a pass processing unit 15. The local system 100 installed at another authentication point includes at least one of the first authentication information acquisition unit 11 and the second authentication information acquisition unit 18, and the pass processing unit 15.

[0038] First, the configuration of each functional unit will be described in detail, and then the process flow will be described assuming an actual usage scenario.

[0039] The storage unit 16 stores authentication information (reference data) used in authentication processing at an authentication point. During authentication processing, authentication information acquired from a user is collated with the authentication information (reference data) stored in the storage unit 16. As described above, the authentication system 10 is configured to be able to execute authentication processing using multiple types of authentication information. For this reason, the storage unit 16 stores multiple types of authentication information (reference data).

[0040] 7 is a schematic diagram showing an example of authentication information (reference data) stored in the storage unit 16. In the example shown in the figure, user identification information, card identification information, and face information are linked to one another.

[0041] User identification information is artificially created information consisting of an arrangement of numbers, letters, symbols, etc. For example, information that identifies users who use a facility, such as an employee ID (identifier), a member ID, or a student number, is user identification information. Card identification information is identification information unique to the storage medium that stores the user identification information. Although it is called "card" identification information, the storage medium that stores the user identification information is not limited to an IC card, and may be other devices that can be used as a substitute for an IC card, such as an IC tag, a smartphone, a smart watch, or a mobile phone.

[0042] Facial information is information (image, feature amount) that indicates the external characteristics of a face. Instead of or in addition to facial information, other biometric information such as iris information, fingerprint information, voiceprint information, and gait information may be used as authentication information (reference data).

[0043] An example of a process in which each user registers such authentication information (reference data) in the authentication system 10 will be described in the third embodiment.

[0044] The second authentication information acquisition unit 18 acquires a second type of authentication information. The second type of authentication information is, for example, biometric information such as face information, iris information, fingerprint information, voiceprint information, and gait information. The second authentication information acquisition unit 18 is configured to be able to acquire such biometric information. For example, the second authentication information acquisition unit 18 is configured to include a camera, a fingerprint sensor, a microphone, and the like.

[0045] The authentication information acquisition device 1 installed at any one of the multiple authentication points includes a second authentication information acquisition unit 18. It should be noted that the authentication information acquisition device 1 installed at the first authentication point does not include the second authentication information acquisition unit 18. The second authentication information acquisition unit 18 inputs the acquired second type of authentication information to a second authentication unit 19. The information input to the second authentication unit 19 may include information indicating at which of the multiple authentication points the information was acquired.

[0046] The second authentication unit 19 executes the second authentication process based on the second type of authentication information acquired by the second authentication information acquisition unit 18. Specifically, the second authentication unit 19 compares the second type of authentication information acquired by the second authentication information acquisition unit 18 with the second type of authentication information (reference data) stored in the storage unit 16. Then, when there is reference data that matches (has a similarity equal to or greater than a threshold value) with the second type of authentication information acquired by the second authentication information acquisition unit 18, the second authentication unit 19 determines that the authentication is successful. On the other hand, when there is no reference data that matches the second type of authentication information acquired by the second authentication information acquisition unit 18, the second authentication unit 19 determines that the authentication is unsuccessful. The authentication result is input to the pass processing unit 15.

[0047] Furthermore, if the authentication is successful, the second authentication unit 19 registers this fact in the authentication history information. The authentication history information indicates the contents of the authentication processes performed at authentication points that the user passed through in the past period. In the following, the authentication history information indicates the type of authentication information (face information, user identification information, etc.) used in the authentication processes performed at each authentication point. However, the authentication history information may indicate other contents, such as the type of authentication processes performed at each authentication point (face authentication process, authentication process using user identification information, etc.). Examples of the past period include, but are not limited to, "today" and "within a specified period of time in the past."

[0048] The storage unit 16 stores the authentication history information. FIG. 8 shows an example of the authentication history information. The illustrated authentication history information is linked to the user identification information, and the type of authentication information used in the authentication process executed at each point where authentication was successful is registered. The "authentication information used in the authentication process" can also be rephrased as "authentication information referenced in the authentication process." The authentication history information indicates what type of authentication information was used to execute the authentication process at each point. For example, the illustrated authentication point B is the first authentication point. In the illustrated example, it is registered that the user identified by the user identification information P778721 was successfully authenticated at authentication points A and C. Then, at authentication point A, the first type of authentication information was used. certification The process is executed, and it is registered that the authentication process using the second type of authentication information has been executed at the authentication point C.

[0049] The first authentication information acquisition unit 11 acquires the first type of authentication information. The first type of authentication information is, for example, user identification information. As described above, the user identification information is information in which numbers, letters, symbols, etc. are arranged, and is artificially created information. The first authentication information acquisition unit 11 is configured to be able to acquire such user identification information. For example, the first authentication information acquisition unit 11 includes a communication device (reader, etc.) that acquires the user identification information by short-distance wireless communication with a storage medium (IC card, IC tag, smartphone, smart watch, mobile phone, etc.) that stores the user identification information, a device that accepts manual input (touch panel, physical button, keyboard, mouse, etc.), a microphone that accepts voice input, a camera that accepts image input (recognizing the user identification information in an image by character analysis), etc. In addition, NFC, Bluetooth (registered trademark), Wi-Fi, next-generation ultra-wideband wireless (UWB: Ultra Wide Band), etc. can be used as the short-distance wireless communication when acquiring the user identification information.

[0050] An authentication information acquisition device 1 installed at an arbitrary authentication point among the multiple authentication points includes a first authentication information acquisition unit 11. The authentication information acquisition device 1 installed at the first authentication point includes a first authentication information acquisition unit 11. The first authentication information acquisition unit 11 inputs the acquired first type of authentication information to a first authentication unit 12. The information input to the first authentication unit 12 may include information indicating at which of the multiple authentication points the information was acquired.

[0051] The first authentication unit 12 executes a first authentication process based on the first type of authentication information acquired by the first authentication information acquisition unit 11. Specifically, the first authentication unit 12 compares the first type of authentication information acquired by the first authentication information acquisition unit 11 with the first type of authentication information (reference data) stored in the storage unit 16. Then, the first authentication unit 12 determines that the authentication is successful when there is reference data that matches (matches) the first type of authentication information acquired by the first authentication information acquisition unit 11. On the other hand, the first authentication unit 12 determines that the authentication is unsuccessful when there is no reference data that matches the first type of authentication information acquired by the first authentication information acquisition unit 11. The authentication result is input to the pass processing unit 15.

[0052] If the authentication is successful, the first authentication unit 12 registers that fact in the authentication history information. The storage unit 16 stores the authentication history information.

[0053] The Internet authentication unit 17 acquires the second type of authentication information from the user terminal via a communication network 400 such as the Internet. For example, the user inputs the second type of authentication information to the user terminal 300 via a second type of authentication information acquisition means (camera, fingerprint sensor, microphone, etc.) included in the user terminal 300. Then, the user performs a predetermined operation on the user terminal 300 and transmits the second type of authentication information input to the user terminal 300 to the authentication system 10. There is no particular restriction on the means for transmitting the second type of authentication information from the user terminal 300 to the authentication system 10. For example, data may be uploaded from the user terminal 300 to the authentication system 10 via a predetermined application, may be transmitted by e-mail, or other means may be adopted.

[0054] Then, the via-the-Internet authentication unit 17 executes a second authentication process based on the acquired second type of authentication information. Specifically, the via-the-Internet authentication unit 17 compares the acquired second type of authentication information with the second type of authentication information (reference data) stored in the storage unit 16. Then, if there is reference data that matches the acquired second type of authentication information (the similarity is equal to or greater than a threshold), the via-the-Internet authentication unit 17 determines that the authentication is successful. On the other hand, if there is no reference data that matches the acquired second type of authentication information, the via-the-Internet authentication unit 17 determines that the authentication is unsuccessful.

[0055] If the second authentication process via the Internet is successful, the authentication unit 17 registers that fact in the authentication history information. The storage unit 16 stores the authentication history information. FIG. 8 shows an example of the authentication history information. The "Second authentication process via the Internet" field shown in the figure is filled in by the authentication unit 17 via the Internet. The value "Completed" is associated with users who have succeeded in the second authentication process by the authentication unit 17 via the Internet, and the value "Not yet" is associated with users who have not succeeded in the second authentication process by the authentication unit 17 via the Internet.

[0056] The authentication history acquisition unit 13 acquires, from the authentication history information (see FIG. 8) stored in the memory unit 16, authentication history information associated with a user who has been successfully authenticated by the first authentication unit 12 or the second authentication unit 19.

[0057] The identification unit 14 identifies authentication information required to pass through the first authentication point based on the authentication history information acquired by the authentication history acquisition unit 13. Conditions for passing through the first authentication point are determined in advance and stored in the storage unit 16. The identification unit 14 identifies the type of authentication information required to pass through the first authentication point based on the conditions. Note that the "process of identifying the type of authentication information (face information, user identification information, etc.) required to pass through the first authentication point" is equivalent to the "process of identifying the type of authentication processing (face authentication processing, authentication processing using user identification information, etc.) required to pass through the first authentication point." In other words, the process of the identification unit 14 can be rephrased as "identifying the type of authentication processing required to pass through the first authentication point based on the authentication history information acquired by the authentication history acquisition unit 13."

[0058] For example, the condition for passing a first authentication point is that "authentication processing using authentication information acquired by the authentication information acquisition device 1 installed at the first authentication point has been successful" and "second authentication processing using the second type of authentication information has been successful." Note that "authentication processing using authentication information" can also be rephrased as "authentication processing based on authentication information" or "authentication processing with reference to authentication information."

[0059] The identification unit 14 identifies "authentication information that can be acquired by the authentication information acquisition device 1 installed at the first authentication point" and "second authentication information" as authentication information required for a user whose successful second authentication process is not registered in the authentication history information to pass through the first authentication point.

[0060] On the other hand, for a user who is registered in the authentication history information as having succeeded in the second authentication process, the identification unit 14 identifies "authentication information that can be acquired by the authentication information acquisition device 1 installed at the first authentication point" as the authentication information required to pass through the first authentication point.

[0061] The pass processing unit 15 executes a process of passing a user who has been successfully authenticated using the type of authentication information identified by the identification unit 14. When multiple types of authentication information are identified by the identification unit 14, the pass processing unit 15 Authentication process using A user who has succeeded in all of the above is allowed to pass through. The process of allowing a user to pass through involves inputting a predetermined control signal to a passage control mechanism (gate, door, etc.) that controls the passage of people, activating the passage control mechanism, and setting the state so that the person can pass through (gate open, door open, door unlocked, etc.).

[0062] "Processing flow" Next, the flow of processing in the authentication system 10 will be described with reference to FIGS.

[0063] First, a user who arrives at another authentication point (the entrance to the first area) in FIG. 4 inputs authentication information into the authentication information acquisition device 1 included in the local system 100.

[0064] When an authentication information acquisition device 1 configured to be capable of acquiring multiple types of authentication information is installed at another authentication point shown in the figure, the user inputs one piece of authentication information selected from the authentication information acquisition device 1. On the other hand, when an authentication information acquisition device 1 configured to be capable of acquiring only one type of authentication information is installed, the user inputs that authentication information to the authentication information acquisition device 1. When the authentication information acquisition device 1 (first authentication information acquisition unit 11 or second authentication information acquisition unit 18) acquires the authentication information (S30 in FIG. 21), it transmits the acquired authentication information to the server 200.

[0065] The server 200 includes a first authentication unit 12 and a second authentication unit 19. The server 200 executes authentication processing using authentication information acquired from the local system 100 (S31 in FIG. 21). When the server 200 acquires a first type of authentication information from the local system 100, the first authentication unit 12 executes the first authentication processing. On the other hand, when the server 200 acquires a second type of authentication information from the local system 100, the second authentication unit 19 executes the second authentication processing.

[0066] If the authentication fails (No in S32 in FIG. 21), the server 200 and the local system 100 execute error processing (S33 in FIG. 21). For example, the server 200 notifies the local system 100 that the authentication has failed. The local system 100 then notifies the user that the authentication has failed by turning on a warning lamp, outputting a buzzer sound, or displaying information on a display.

[0067] On the other hand, if the authentication is successful (Yes in S32 in FIG. 21), the passage processing unit 15 executes a process of letting the user who has been successfully authenticated pass through (S34 in FIG. 21).

[0068] Although not shown, if the authentication process is successful in S31 of FIG. 21, the type of authentication information used in the authentication process is registered in authentication history information as shown in FIG. 8 at any given time.

[0069] After being permitted to pass through other authentication points and entering the first area, the user then comes to the first authentication point shown in Fig. 4. Note that the user may or may not have passed through other authentication points before coming to the first authentication point shown in the figure.

[0070] A user who arrives at the first authentication point in FIG. 4 inputs authentication information into an authentication information acquisition device 1 provided in a local system 100.

[0071] At the illustrated first authentication point, an authentication information acquisition device 1 (first authentication information acquisition unit 11) configured to be able to acquire only the first type of authentication information is installed. A user inputs the first type of authentication information to the authentication information acquisition device 1. Upon acquiring the first type of authentication information (S10 in FIG. 9), the authentication information acquisition device 1 (first authentication information acquisition unit 11) transmits the acquired first type of authentication information to the server 200.

[0072] The server 200 executes a first authentication process using the first type of authentication information acquired from the local system 100 (S11 in FIG. 9). Specifically, the first authentication unit 12 executes the first authentication process.

[0073] If the authentication fails (No in S12 in FIG. 9), the server 200 and the local system 100 execute error processing (S13 in FIG. 9). For example, the server 200 notifies the local system 100 that the authentication has failed. Then, the local system 100 notifies the user that the authentication has failed by turning on a warning lamp, outputting a buzzer sound, or displaying information on a display.

[0074] On the other hand, if the authentication is successful (Yes in S12 in FIG. 9), the authentication history acquisition unit 13 retrieves the authentication history information associated with the user from the storage unit 16 (S14 in FIG. 9).

[0075] Then, the identifying unit 14 identifies authentication information required to pass through the first authentication point based on the extracted authentication history information (S15 in FIG. 9).

[0076] The conditions for passing the first authentication point shown in the figure are, for example, "successful authentication processing using authentication information acquired by the authentication information acquisition device 1 installed at the first authentication point" and "successful second authentication processing using a second type of authentication information."

[0077] The identification unit 14 identifies "authentication information that can be acquired by the authentication information acquisition device 1 installed at the first authentication point" and "a second type of authentication information" as authentication information required to pass through the first authentication point for a user whose successful second authentication process is not registered in the authentication history information.

[0078] On the other hand, for a user who is registered in the authentication history information as having succeeded in the second authentication process, the identification unit 14 identifies "authentication information that can be acquired by the authentication information acquisition device 1 installed at the first authentication point" as the authentication information required to pass through the first authentication point.

[0079] Then, the passage processing unit 15 executes a process of passing a user who has succeeded in all authentication processes using the specified authentication information (Yes in S16, S17 in FIG. 9). On the other hand, the passage processing unit 15 executes the above-mentioned error process for a user who has not succeeded in authentication processes using at least one of the specified authentication information (S13 in FIG. 9). In this error process, the passage processing unit 15 may notify the user of the reason why the user cannot pass. For example, a message such as "The authentication process using the input first type of authentication information was successful, but the authentication process using the second type of authentication information was not successful, so the user cannot pass" or "The authentication process using the input first type of authentication information failed, so the user cannot pass" may be output via a predetermined output device.

[0080] Although not shown, if the authentication process is successful in S11 of FIG. 9, the type of authentication information used in the authentication process is registered in authentication history information as shown in FIG. 8 at any given time.

[0081] A user who is permitted to pass through the first authentication point passes through the first authentication point shown in Fig. 4 and enters the second area. On the other hand, a user who fails the authentication process using the first type of authentication information re-inputs the first type of authentication information into the authentication information acquisition device 1 and performs the authentication process again.

[0082] Furthermore, a user who is unable to pass because the authentication process using the second type of authentication information is unsuccessful operates the user terminal 300, and inputs the second type of authentication information to the user terminal 300 via a second type of authentication information acquisition means (camera, fingerprint sensor, microphone, etc.) provided in the user terminal 300. Then, the user performs a predetermined operation on the user terminal 300, and transmits the second type of authentication information input to the user terminal 300 to the authentication system 10.

[0083] When the Internet-based authentication unit 17 acquires the second type of authentication information transmitted from the user terminal 300 via the Internet (S20 in FIG. 10), it performs authentication processing based on the second type of authentication information (S21 in FIG. 10). If the authentication is successful (Yes in S22 in FIG. 10), the Internet-based authentication unit 17 registers the fact that the authentication was successful in the authentication history information as shown in FIG. 8 (S23 in FIG. 10). Next, the Internet-based authentication unit 17 transmits the authentication result to the user terminal 300 (S24 in FIG. 10).

[0084] After that, the user again inputs the first type of authentication information into the authentication information acquisition device 1 at the first authentication point shown in Fig. 4 and performs authentication processing. This time, since it is registered that the second authentication processing was successful, the condition for passing through the first authentication point that "the second authentication processing using the second type of authentication information is successful" is satisfied. Therefore, if the condition "the authentication processing using the authentication information acquired by the authentication information acquisition device 1 installed at the first authentication point is successful" is satisfied in this authentication processing, the user can pass through the first authentication point.

[0085] "Specific case description" A specific case will be described with reference to Fig. 11. The illustrated authentication point A corresponds to another authentication point installed at the entrance of the first area in Fig. 4. The illustrated authentication point B corresponds to the first authentication point installed at the entrance of the second area in Fig. 4.

[0086] At authentication point A, face authentication and authentication processing using user identification information stored in an IC card or the like can be selectively used. At authentication point B, only authentication processing using user identification information stored in an IC card or the like can be used.

[0087] The condition for passing through the authentication point A is that "authentication processing using authentication information acquired by the authentication information acquisition device 1 installed at the authentication point A has been successful."

[0088] The conditions for passing through authentication point B are that "authentication processing using authentication information acquired by authentication information acquisition device 1 installed at authentication point B has been successful" and "facial authentication has been successful."

[0089] Person A passes through authentication point A using face authentication. After that, without undergoing face authentication via the Internet, Person A performs authentication processing using his / her own user identification information stored in an IC card or the like at authentication point B, and is successful. For such Person A, the identification unit 14 identifies authentication information that can be acquired by the authentication information acquisition device 1 installed at authentication point B as authentication information required to pass authentication point B and enter the second area. Then, Person A, who has succeeded in the authentication processing using the identified authentication information, is permitted to pass authentication point B and enter the second area.

[0090] Person B passes through authentication point A through authentication processing using his / her own user identification information stored in an IC card or the like. After that, person B performs face authentication via the Internet, and then performs authentication processing using his / her own user identification information stored in an IC card or the like at authentication point B, which is successful. For such person B, the identification unit 14 identifies authentication information that can be acquired by the authentication information acquisition device 1 installed at authentication point B as authentication information required to pass authentication point B and enter the second area. Then, person B, who has succeeded in the authentication processing using the identified authentication information, is permitted to pass authentication point B and enter the second area.

[0091] C passed through authentication point A by performing authentication processing using his / her own user identification information stored in an IC card or the like. After that, C performed authentication processing using his / her own user identification information stored in an IC card or the like at authentication point B without performing face authentication via the Internet, and succeeded. For such C, the identification unit 14 identifies authentication information that can be acquired by the authentication information acquisition device 1 installed at authentication point B and face information as authentication information required for passing authentication point B and entering the second area. Then, C, who has not succeeded in the authentication processing using face information, is not allowed to pass authentication point B and enter the second area. Note that, if C subsequently succeeds in face authentication via the Internet, for example, and then succeeds in authentication again at authentication point B, C is allowed to pass authentication point B and enter the second area.

[0092] Person D passed through authentication point A through authentication processing using person A's user identification information stored in an IC card or the like. After that, without performing face authentication via the Internet, person D performed authentication processing using person A's user identification information stored in an IC card or the like at authentication point B, and was successful. Person D, who entered the first area using person A's user identification information, is not registered as having entered the first area, or more specifically, as having entered the first area using face information. For such person D, the identification unit 14 identifies the authentication information and face information that can be acquired by the authentication information acquisition device 1 installed at authentication point B as the authentication information required to pass through authentication point B and enter the second area. Then, when the authentication processing using face information was not successful, D is not allowed to pass through authentication point B and enter the second area.

[0093] Person E passed through authentication point A by face authentication. However, due to a computer error, face authentication was successful in a state where person A was mistakenly recognized as person A. Therefore, in the authentication history information, it is registered that person A passed through authentication point A by face authentication, but it is not registered that person E passed through authentication point A by face authentication. After that, person E performed authentication processing using his / her own user identification information stored in an IC card or the like at authentication point B without performing face authentication via the Internet, and succeeded. Person E, who entered the first area in a state where person E was mistakenly recognized as person A, has not been registered as having entered the first area, and more specifically, has not been registered as having entered the first area using face information. For such person E, the specification unit 14 specifies the authentication information and face information that can be acquired by the authentication information acquisition device 1 installed at authentication point B as authentication information required to pass authentication point B and enter the second area. Then, person E, who has not been successful in authentication using face information, is not permitted to pass authentication point B and enter the second area. Furthermore, if face authentication is subsequently successful, for example via the Internet, and then authentication is again successful at authentication point B, Mr. E will be permitted to pass through authentication point B and enter the second area.

[0094] In this way, the identification unit 14 can identify the user identification information read by the reader (authentication information that can be acquired by the authentication information acquisition device 1 installed at the entrance to the second area) as the authentication information required for a user whose facial information was identified as the authentication information used when entering the first area to enter the second area.

[0095] In addition, for a user whose user identification information read by the reader has been identified as the authentication information used when entering the first area, the identification unit 14 can identify the user identification information read by the reader (authentication information that can be acquired by the authentication information acquisition device 1 installed at the entrance to the second area) and face information as authentication information required for entering the second area.

[0096] Furthermore, for a user whose authentication information used to enter the first area has not been identified as facial information, the identification unit 14 can identify the user identification information read by the reader (authentication information that can be acquired by the authentication information acquisition device 1 installed at the entrance to the second area) and facial information as the authentication information required to enter the second area.

[0097] In addition, for a user who is not registered as having entered the first area, the identification unit 14 can identify the user identification information read by the reader (authentication information that can be acquired by the authentication information acquisition device 1 installed at the entrance to the second area) and facial information as authentication information required to enter the second area.

[0098] "Action and effect" As described above, the authentication system 10 of the present embodiment is a system that performs multi-stage authentication within a facility, and is capable of identifying for each user the type of authentication information required to pass through a certain authentication point based on the types of authentication processes that have been performed up to that point at other authentication points, etc. This configuration can avoid the inconvenience of unnecessarily performing authentication processes using a certain type of authentication information redundantly at multiple authentication points. On the other hand, successful authentication processes using a certain type of authentication information at any authentication point or via the Internet can be set as a condition for passing through any authentication point. As a result, a technology that maintains a high level of security without waste is realized in a system that performs multi-stage authentication.

[0099] Furthermore, when a user is allowed to pass through the first authentication point when a predetermined condition is satisfied in multiple stages of authentication as in this embodiment, the degree of freedom in the configuration of the authentication information acquisition device 1 installed at each authentication point is increased. That is, as described in the above embodiment, a condition can be set such that, for example, "face authentication" is required to pass through the first authentication point, but even in this case, it is not necessary to install the authentication information acquisition device 1 that acquires face information at the first authentication point. For example, if face authentication has been successful at another authentication point, the condition for passing through the first authentication point is satisfied.

[0100] In this way, when the degree of freedom in the configuration of the authentication information acquisition device 1 installed at each authentication point is high, the cost burden due to the installation of the authentication information acquisition device 1 can be reduced. For example, when considering changing from an existing system, the cost burden increases if new authentication information acquisition devices 1 are reinstalled at all authentication points. In the case of this embodiment, it is possible to reinstall authentication information acquisition devices 1 that acquire new types of authentication information only at some of the multiple authentication points, and continue to use the existing authentication information acquisition devices 1 at the other authentication points. Also, even at authentication points where an authentication information acquisition device 1 that acquires new types of authentication information is not installed, the passing condition can be that the authentication process using the new types of authentication information has been successful.

[0101] In addition, in this embodiment, since there is a degree of freedom in the type of authentication process performed at each authentication point and the order in which the user passes through the authentication points, the type of authentication process performed up to that point may differ for each user when the user arrives at a certain authentication point. Therefore, in this embodiment, the type of authentication process performed in the past is managed for each user using authentication history information. Therefore, when the user arrives at a certain authentication point, the type of authentication process performed up to that point can be accurately known.

[0102] <Second embodiment> The authentication system 10 of this embodiment differs from the first embodiment in that the authentication system 10 has a function for preventing spoofing in the authentication process by the Internet authentication unit 17.

[0103] The Internet-based authentication unit 17 acquires, in addition to the second type of authentication information, location information of the user terminal 300 from the user terminal 300. The location information is information indicating the current location of the user terminal 300, and can be, for example, GPS (global positioning system) information.

[0104] The Internet-based authentication unit 17 judges whether the location information of the user terminal 300 is within a predetermined area. The predetermined area is, for example, the whole or part of the area of ​​the facility in which the authentication system 10 is installed.

[0105] Then, if the location indicated by the location information of the user terminal 300 is within a specified area and the second authentication process using the second type of authentication information obtained from the user terminal 300 is successful, the Internet-based authentication unit 17 registers in the authentication history information that the second authentication process has been successful.

[0106] The other configuration of the authentication system 10 is similar to that of the first embodiment.

[0107] According to the authentication system 10 of the present embodiment, the same operational effects as those of the first embodiment are achieved. Furthermore, according to the authentication system 10 of the present embodiment, it is possible to prevent user spoofing. As a result, it is possible to maintain a high level of security.

[0108] <Third embodiment> In this embodiment, an example of a process of registering authentication information (reference data) in the authentication system 10 will be described. As shown in Fig. 22, the authentication system 10 of this embodiment differs from the first and second embodiments in that it further includes a registration management unit 20.

[0109] In this embodiment, the user will possess a digital membership card and an admission pass as shown in Fig. 12. The user can obtain a digital membership card as shown in the figure by installing a dedicated application on the user terminal 300 and following the instructions of the application to perform registration tasks (such as registering face information and user identification information). The user can also register and use an IC card that he or she possesses, such as a transportation IC card, as an admission pass.

[0110] -Registering an IC card as an admission pass- 13 to 15, an example of the process of registering an IC card possessed by a user as an admission pass and the process of registering the user's biometric information as authentication information (reference data) will be described. The process executed by the authentication system 10 described below is realized by the registration management unit 20. Here, an example of the process of registering an admission pass for an employee of NN Corporation to enter a facility of NN Corporation will be described.

[0111] First, as shown in 1 of Fig. 13, a user operates a predetermined terminal device to select a predetermined menu (a service menu for NN Corporation). The predetermined terminal device may be a device for general use installed in convenience stores, train stations, airports, etc., or may be other devices. The predetermined terminal device is connected to an authentication system 10 so as to be able to communicate with it.

[0112] Next, as shown in FIG. 13-2, the user selects a service (card registration) for registering an IC card as an admission pass from the service menu for NN Corporation.

[0113] Next, as shown in 3 of FIG. 13, the user holds the IC card (or a smartphone, a smartwatch, a mobile phone, etc. that stores IC card information) to be registered as an admission pass over a reader of a predetermined terminal device, and the predetermined terminal device reads the IC card information (information indicating the type of IC card, card identification information, etc.). The predetermined terminal device transmits the input IC card information to the authentication system 10. The authentication system 10 then judges whether the input IC card information is appropriate for the IC card to be registered. For example, if the IC card is not a predetermined type (e.g., a transportation IC card) or if the IC card is already registered, the authentication system 10 judges that the IC card is inappropriate. If it is judged to be inappropriate, the authentication system 10 transmits a notice to that effect to the predetermined terminal device. In response to this, as shown in 10 of FIG. 13, the predetermined terminal device notifies the user of an error.

[0114] On the other hand, if it is determined to be appropriate, the authentication system 10 notifies the predetermined terminal device of that effect. In response to this, the predetermined terminal device starts the registration process of face information, as shown in FIG.

[0115] When a specific terminal device photographs a user and generates a facial image, it transmits the facial image to authentication system 10. Authentication system 10 judges whether the received facial image is appropriate as an image to be registered (whether the face size is appropriate, whether specific features can be extracted, etc.). If appropriate, authentication system 10 associates the received facial image with the information on the IC card and stores it in a storage device. Then, authentication system 10 notifies the specific terminal device of the judgment result.

[0116] If the received face image is appropriate as an image to be registered, the specified terminal device notifies the user that registration of the face image has been completed, as shown in FIG. 14, 5, and then outputs a receipt output guide and a guide for ending the service, as shown in FIG. 14, 7 and 8. The specified terminal device also transmits the information printed on the receipt to the authentication system 10. The authentication system 10 associates the received information with the face image and IC card information, and stores it in a storage device. The information printed on the receipt includes, but is not limited to, information indicating the location where the specified terminal device is installed (store information, station information, etc.), registration date and time, processing number, etc.

[0117] On the other hand, if the received face image is not suitable as an image to be registered, the predetermined terminal device notifies the user of that effect, and photographs the face image again, as shown in 9 of FIG.

[0118] After executing the processes shown in Figs. 13 and 14, the user operates the user terminal 300 and logs in to the authentication system 10 via a dedicated application, as shown in Fig. 15, 1 and 2. After that, as shown in Fig. 15, 3, the user selects a screen for registering an IC card from the menu screen of the application. In response to this, the authentication system 10 reads out the user's information from the "information linking IC card information with face information" registered in the authentication system 10 in the processes shown in Figs. 13 and 14. There are various means for reading out the user's information. For example, this may be achieved by matching face information registered as a digital membership card with face information registered in association with IC card information.

[0119] After that, as shown in 4 of FIG. 15, the information read from the "information linking IC card information and face information" registered in the authentication system 10 in the process shown in FIG. 13 and FIG. 14 is transmitted from the authentication system 10 to the user terminal 300 and displayed on the screen of the user terminal 300. The user verifies the information against the receipt information output in 7 of FIG. 14, and if the information is correct, inputs that fact into the user terminal 300 (touching Yes as shown). Next, the user terminal 300 transmits the input contents to the authentication system 10. In response to the input, the authentication system 10 registers the read "information linking IC card information and face information" by linking it to the membership information of the user. Thereafter, the user can use the registered IC card as an admission pass. Note that the face information used as reference data for the matching process in the face authentication in the authentication area described in the first and second embodiments may be face information registered when the digital membership card was created, or may be face information registered when the IC card was registered.

[0120] -Process 1 for deleting an IC card registered as an admission pass- Next, an example of a process for deleting (deregistering) an IC card registered as an admission pass will be described with reference to Figures 16 and 17. Here, too, an example of a process for deleting an admission pass used by an employee of NN Corporation to enter a facility of NN Corporation will be described.

[0121] First, as shown in 1 of Fig. 16, a user operates a predetermined terminal device to select a predetermined menu (a service menu for NN Corporation). The predetermined terminal device may be a device for general use installed in convenience stores, train stations, airports, etc., or may be other devices. The predetermined terminal device is connected to an authentication system 10 so as to be able to communicate with it.

[0122] Next, as shown in 2 of Fig. 16, the user selects a service for deleting the registered IC card (card deletion) from the service menu for NN Corporation. Then, face authentication is started as shown in 3 of Fig. 16.

[0123] 16-4, a predetermined terminal device takes an image of a user and generates a facial image, and then transmits the facial image to the authentication system 10. The authentication system 10 identifies the user by facial authentication using the received facial image.

[0124] If the face authentication fails, the authentication system 10 notifies a predetermined terminal device of the failure. In response, the predetermined terminal device notifies the user of the failure of the face authentication, as shown in 8 of Fig. 17, and guides the user to perform face authentication again.

[0125] On the other hand, if the face authentication is successful, the authentication system 10 notifies the predetermined terminal device accordingly. In response, the predetermined terminal device accepts the input of a password as shown in 5 of FIG. 17. Then, the predetermined terminal device transmits the input password to the authentication system 10. If the input password is correct, the authentication system 10 deletes the information of the IC card registered in association with the user, and notifies the predetermined terminal device that the deletion has been completed. The predetermined terminal device notifies the user that the deletion of the IC card has been completed as shown in 6 of FIG. 17, and then outputs a guide for terminating the service as shown in 7 of FIG. 17. Thereafter, the user will no longer be able to use the deleted IC card as an admission pass.

[0126] The password may be set in advance for each user. The password may be set when registering the digital membership card, when registering the IC card shown in Fig. 13 and Fig. 14, or when linking the IC card information with the digital membership card information shown in Fig. 15.

[0127] -Process 2 for deleting an IC card registered as an admission pass- Next, another example of the process of deleting (deregistering) an IC card registered as an admission pass will be described with reference to Fig. 18. Here, too, the process of deleting an admission pass used by an employee of NN Corporation to enter a facility of NN Corporation will be described as an example.

[0128] As shown in 1 and 2 of Fig. 18, the user operates the user terminal 300 and logs in to the authentication system 10 via a dedicated application. After that, as shown in 3 of Fig. 18, the user selects a screen for deleting the IC card from the menu screen of the application.

[0129] Thereafter, the authentication system 10 reads out the information of the IC card registered in association with the user, and transmits it to the user terminal 300. The user terminal 300 displays the received IC card information as shown in 4 of FIG. 18, and prompts the user to confirm. Then, when the user inputs that the IC card is indeed the one to be deleted, the user terminal 300 notifies the authentication system 10 of that fact. In response to that notification, the authentication system 10 deletes the information of the IC card registered in association with the user, and then notifies the user terminal 300 of the completion of the deletion. The user terminal 300 notifies the user of the completion of the deletion of the IC card as shown in 5 of FIG. 18. Thereafter, the user will no longer be able to use the deleted IC card as an admission pass.

[0130] As described above, after acquiring the card identification information and the first facial image, the registration management unit 20 compares the second facial image contained in the digital membership card data with the first facial image, and based on the comparison result, can link the acquired card identification information and digital membership card data and store them in the memory unit 16.

[0131] When the registration management unit 20 associates the acquired card identification information with the digital membership card data and stores them in the storage unit 16, the registration management unit 20 may transmit information notifying the completion of the association to the terminal associated with the digital membership card data to which the acquired card identification information is associated. For example, these processes may be realized via the above-mentioned dedicated application.

[0132] In addition, the registration management unit 20 can display a button for dissolving the link with the card identification information on the screen displayed after logging in using the digital membership card data, as shown in Figures 15, 16 and 18.

[0133] According to the authentication system 10 of the present embodiment, the same effects as those of the first and second embodiments are realized. Also, according to the authentication system 10 of the present embodiment, the user can register or delete an IC card by adopting various methods. As a result, the user's convenience is improved.

[0134] <Modification> The following describes modified examples that can be applied to the first to third embodiments. The modified examples also achieve the same effects as the first to third embodiments.

[0135] -First modified example- 19 and 20 , the local system 100 may include an authentication information acquisition device 1, a passage control device 2, and an authentication device 3, and the server 200 may include an authentication history management device 4. That is, the local system 100 may include the authentication device 3.

[0136] -Second modified example- The authentication system 10 may not include the server 200 and may be composed of only a plurality of local systems 100. In this case, the local system 100 includes an authentication information acquisition device 1, a passage control device 2, an authentication device 3, and an authentication history management device 4. Each local system 100 manages authentication history information and registers the history of authentication processing executed by each local system 100. Then, a synchronization process is performed by any means to match the contents of the authentication history information managed by the plurality of local systems 100.

[0137] -Third variant- In the above embodiment, the authentication information acquisition device 1 that acquires the second type of authentication information is not installed at the first authentication point. As a modified example, the authentication information acquisition device 1 that acquires the second type of authentication information may be installed at the first authentication point as well. Furthermore, when multiple first authentication points are installed within a facility, the authentication information acquisition device 1 that acquires the second type of authentication information may be installed at some of the multiple first authentication points, or the authentication information acquisition device 1 that acquires the second type of authentication information may be installed at all of the multiple first authentication points.

[0138] As described in the first embodiment, the authentication system 10 of this embodiment increases the degree of freedom in the configuration of the authentication information acquisition device 1 installed at each authentication point. Therefore, the configuration described as the above modified example can also be adopted.

[0139] -Fourth modified example- The authentication system 10 does not need to have the Internet authentication unit 17. In this case, the second authentication process using the user terminal 300 may be performed, for example, by the following method.

[0140] The user starts a predetermined application of the user terminal 300 and inputs the second authentication information. For example, the user takes a picture of his / her face, takes a picture of his / her eyes, inputs a fingerprint, or inputs a voice. In response, the application executes a second authentication process using the input second authentication information. Next, the user brings the user terminal 300 close to the non-contact communication antenna of the local system 100 and performs short-range wireless communication. In response, the result of the second authentication process is transmitted from the user terminal 300 to the local system 100. The local system 100 transmits the input result of the second authentication process to the server 200. The server 200 updates the authentication history information based on the received result of the second authentication process.

[0141] Although the embodiments of the present invention have been described above with reference to the drawings, these are merely examples of the present invention, and various configurations other than those described above can also be adopted.

[0142] In this specification, "acquisition" includes at least one of the following: "the device itself goes to retrieve data stored in another device or storage medium (active acquisition)" based on user input or based on program instructions, such as receiving data by making a request or inquiry to another device, or accessing another device or storage medium and reading it, and "the device itself inputs data output from another device (passive acquisition)" based on user input or based on program instructions, such as receiving data that is distributed (or transmitted, push notification, etc.), and selecting and acquiring data from among the received data or information, and "editing data (converting it to text, rearranging data, extracting some data, changing the file format, etc.) to generate new data and acquiring the new data."

[0143] A part or all of the above-described embodiments can be described as, but are not limited to, the following supplementary notes. 1. An authentication system having a first area and a second area to which a person can enter after passing through the first area, the authentication system determining whether or not a person can enter the second area, Identifying authentication information used by a user to enter the first area; an authentication system comprising: a determination unit that determines, in response to the determined authentication information, authentication information required for the user to enter the second area; 2. An authentication system as described in 1, wherein the identification means, when it is identified that the authentication information used when the user entered the first area was a first type of authentication information, identifies that the authentication information required for the user to enter the second area is a second type of authentication information different from the first type of authentication information. 3. An authentication system described in 1 or 2, wherein the identification means identifies the user identification information read by the reader as the authentication information required for the user to enter the second area when the authentication information used when the user entered the first area is identified as facial information. 4. An authentication system described in any one of 1 to 3, wherein the identification means, when it is determined that the authentication information used when the user entered the first area is user identification information read by a reader, identifies the user identification information read by the reader and facial information as the authentication information required for the user to enter the second area. 5. An authentication system described in any one of 1 to 4, wherein the identification means, if the authentication information used when the user entered the first area is not identified as facial information, identifies the user identification information read by a reader and facial information as the authentication information required for the user to enter the second area. 6. An authentication system according to any one of 1 to 5, wherein the identification means identifies the user identification information read by the reader and facial information as authentication information required for the user to enter the second area if the user's entry into the first area is not registered. 7. An internet-based authentication means for acquiring face information from a user terminal via the internet, executing an authentication process using the face information, and registering a success of the authentication process using the face information in authentication history information; The authentication system according to any one of claims 1 to 6, wherein the identification means identifies the user identification information read by the reader as the authentication information required to enter the second area if it is registered in the authentication history information that the user has succeeded in the authentication process via the Internet. 8. The above-mentioned authentication means via the Internet is 8. An authentication system as described in 7, which acquires location information of the user terminal, and if the location indicated by the location information is within a specified area and the authentication process using the facial information is successful, registers in the authentication history information that the authentication process using the facial information was successful. 9. A storage means for storing digital membership card data and card identification information in association with each other; An authentication system described in any one of 1 to 8, which has a registration management means that, after acquiring the card identification information and a first facial image, compares the first facial image with a second facial image contained in the digital membership card data, and based on the comparison result, links the acquired card identification information and the digital membership card data and stores them in the memory means. 10. An authentication system as described in 9, wherein when the registration management means links the acquired card identification information with the digital membership card data and stores them in the storage means, it sends information to the terminal linked to the digital membership card data to which the acquired card identification information is linked, notifying that the linking is complete. 11. An authentication system as described in 9 or 10, wherein the registration management means displays a button for dissolving the link with the card identification information on a screen after logging in using the digital membership card data. 12. A method according to the present invention, comprising the steps of: (a) providing a first area and a second area to which a person can enter after passing through the first area; and (b) providing an authentication system for determining whether or not a person can enter the second area, An authentication method for identifying authentication information used when a user entered the first area, and identifying authentication information required for the user to enter the second area based on the identified authentication information. [Explanation of symbols]

[0144] 1. Authentication information acquisition device 2 Passage control device 3 Authentication Device 4. Authentication History Management Device 10 Authentication System 11 First authentication information acquisition unit 12 First authentication section 13 Authentication History Acquisition Department 14 Specific section 15 Pass-through processing section 16 Memory section 17 Internet Authentication Section 18 Second authentication information acquisition unit 19 Second Authentication Section 20 Registration Management Department 100 Local System 200 Servers 300 User terminals 400 Communication Network 1A Processor 2A Memory 3A input / output I / F 4A Peripheral circuit 5A Bus

Claims

1. An authentication system comprising a first area and a second area to which a user can enter after passing through the first area, the authentication system determining whether or not a user can enter the second area, a specifying means for specifying authentication information used when a user enters the first area, and specifying authentication information required for the user to enter the second area according to the specified authentication information; The identification means is an authentication system that identifies the user identification information read by a reader and facial information as authentication information required for the user to enter the second area when the user's entry into the first area is not registered.

2. An authentication system comprising a first area and a second area to which a user can enter after passing through the first area, the authentication system determining whether or not a user can enter the second area, an identification means for identifying authentication information used when a user enters the first area, and for identifying authentication information required for the user to enter the second area according to the identified authentication information; an internet-based authentication means for acquiring face information from a user terminal via the internet, executing an authentication process using the face information, and registering in authentication history information that the authentication process using the face information has been successful; having The identification means identifies the user identification information read by the reader as the authentication information required to enter the second area when it is registered in the authentication history information that the user has succeeded in the authentication process via the Internet.

3. The internet authentication means comprises:

3. The authentication system according to claim 2, further comprising: acquiring location information of the user terminal; and, if the location indicated by the location information is within a predetermined area and the authentication process using the facial information is successful, registering in the authentication history information that the authentication process using the facial information has been successful.

4. An authentication system comprising a first area and a second area to which a user can enter after passing through the first area, the authentication system determining whether or not a user can enter the second area, an identification means for identifying authentication information used when a user enters the first area, and for identifying authentication information required for the user to enter the second area according to the identified authentication information; A storage means for storing digital membership card data and card identification information in association with each other; a registration management means for, after acquiring the card identification information and the first facial image, comparing a second facial image included in the digital membership card data with the first facial image, and linking the acquired card identification information with the digital membership card data based on the comparison result, and storing them in the storage means; An authentication system having the above configuration.

5. An authentication system as described in claim 4, wherein when the registration management means links the acquired card identification information and the digital membership card data and stores them in the storage means, it sends information to the terminal linked to the digital membership card data to which the acquired card identification information is linked, notifying that the linking is complete.

6. 6. The authentication system according to claim 4, wherein the registration management means displays a button for canceling the association with the card identification information on a screen after logging in using the digital membership card data.

7. An authentication system comprising a first area and a second area to which a user can enter after passing through the first area, the authentication system determining whether or not a user can enter the second area, An authentication system having an identification means for identifying at least one piece of authentication information used in at least one authentication process performed by a user within a predetermined period prior to entering the second area, and for identifying authentication information required for the user to enter the second area in accordance with the identified at least one piece of authentication information.

8. 8. The authentication system according to claim 1, wherein the identification means, when it is identified that the authentication information used when the user entered the first area is a first type of authentication information, identifies that the authentication information required for the user to enter the second area is a second type of authentication information different from the first type of authentication information.

9. 9. The authentication system according to claim 1, wherein the identification means, when it is determined that the authentication information used when the user entered the first area is facial information, identifies the user identification information read by the reader as the authentication information required for the user to enter the second area.

10. An authentication system as described in any one of claims 1 to 9, wherein when the identification means identifies that the authentication information used when the user entered the first area is user identification information read by a reader, it identifies the user identification information read by the reader and facial information as the authentication information required for the user to enter the second area.

11. An authentication system according to any one of claims 1 to 10, wherein the identification means, when the authentication information used when the user entered the first area is not identified as facial information, identifies the user identification information read by a reader and the facial information as the authentication information required for the user to enter the second area.

12. a first area and a second area to which a person can enter after passing through the first area, and an authentication system for determining whether or not a person can enter the second area; Identifying authentication information used when a user entered the first area, and identifying authentication information required for the user to enter the second area according to the identified authentication information; An authentication method for identifying user identification information read by a reader and facial information as authentication information required for a user to enter the second area when the user's entry into the first area is not registered.

13. a first area and a second area to which a person can enter after passing through the first area, and an authentication system for determining whether or not a person can enter the second area; Identifying authentication information used when a user entered the first area, and identifying authentication information required for the user to enter the second area according to the identified authentication information; acquiring face information from a user terminal via the Internet, executing an authentication process using the face information, and registering in authentication history information that the authentication process using the face information was successful; An authentication method in which, if it is registered in the authentication history information that the user has successfully completed the authentication process via the Internet, the user identification information read by a reader is identified as the authentication information required to enter the second area.

14. a first area and a second area to which a person can enter after passing through the first area, and an authentication system for determining whether or not a person can enter the second area; Identifying authentication information used when a user entered the first area, and identifying authentication information required for the user to enter the second area according to the identified authentication information; The digital membership card data is linked to the card identification information and stored. An authentication method in which, after acquiring the card identification information and a first facial image, a second facial image contained in the digital membership card data is compared with the first facial image, and the acquired card identification information and digital membership card data are linked and stored based on the comparison result.

15. a first area and a second area to which a person can enter after passing through the first area, and an authentication system for determining whether or not a person can enter the second area; An authentication method that identifies at least one piece of authentication information used in at least one authentication process performed by a user within a predetermined period prior to entering the second area, and identifies authentication information required for the user to enter the second area according to the identified at least one piece of authentication information.

Images