Authentication system and authentication method

Abstract

Disclosed is an authentication system enabling accurate task management of an employee in an office. This authentication system is installed in an office and used for authenticating use rights of a plurality of terminal devices (20) for accessing a management system, and comprises: a biometric information input device (21) included in each of the plurality of terminal devices; a first server (30) that authenticates an employee in the office on the basis of biometric information input from the biometric information input device into one of the terminal devices; and a second server (40) that, after the first server authenticates the employee, authenticates the use right of the terminal device on the basis of the device identifier of the biometric information input device: The second server creates task management data of the employee whose use right of the terminal device is authenticated on the basis of the device identifier and transmits the task management data to a production management system (50).

Description

[Technical field]

[0001] The present invention relates to an authentication system and method for authenticating employees in a business establishment such as a manufacturing plant. [Background technology]

[0002] In recent years, many business establishments have adopted computer-based management systems. Production management systems used in manufacturing plants, which are business establishments in the manufacturing industry, consist of a production planning system, a manufacturing execution system that manages manufacturing instructions and manufacturing performance records based on the production plan, and a manufacturing equipment control system.

[0003] The technology described in Patent Document 1 is known as a conventional technology related to such a production management system. In this conventional technology, the right to use is determined by the user ID and password entered from the manufacturer terminal used in the production management system. If the right to use is available, a menu selection screen is sent to the manufacturer terminal, and the relevant management information is searched for based on the search conditions entered from the manufacturer terminal. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] JP 2004-30061 A Summary of the Invention [Problem to be solved by the invention]

[0005] In fields such as pharmaceuticals where maintaining high product quality is required, it is sometimes necessary to properly manage the work of employees involved in the manufacturing process in addition to managing the manufacturing process. However, with the above-mentioned conventional technology, the reliability of the authentication of terminal usage rights is not necessarily sufficient, making proper work management difficult.

[0006] Therefore, the present invention provides an authentication system and authentication method that enable accurate work management of employees in business establishments such as pharmaceutical factories. [Means for solving the problem]

[0007] In order to solve the above problems, an authentication system according to the present invention is an authentication system for authenticating the use authority of a plurality of terminal devices that are installed in a business establishment and access a management system, comprising: In the business establishment, a plurality of processes are carried out, and the terminal device is operated by an employee to transmit and receive process management data relating to the processes in which the employee is involved between the terminal device and the management system. The system comprises a biometric information input device provided in each of a plurality of terminal devices, a first server that authenticates employees of the business based on the biometric information input from the biometric information input device to the terminal device, and a second server that authenticates the authority to use the terminal device based on the device identifier of the biometric information input device when the first server authenticates the employee, and the second server creates business management data for the employee whose authority to use the terminal device has been authenticated based on the device identifier, and transmits the created business management data to the management system. The biometric information input device is one of a fingerprint information input device, a face information input device, an iris information input device, a voice information input device, a finger vein information input device, and a palm vein information input device, depending on the work clothes or protective equipment worn by the employee for each process. The terminal device adds the device identifier of the biometric information input device to the input biometric information and transmits it to the first server. Upon authenticating the employee, the first server transmits the employee identifier of the employee and the device identifier of the biometric information input device to the second server. The second server stores first data indicating the correspondence between the employee identifier of the employee at the business establishment and the device identifier of the biometric information input device provided in the terminal device used in the process the employee is responsible for, and authenticates the use authority of the terminal device by referring to the first data. Furthermore, the second server stores second data indicating the correspondence between a plurality of processes and a plurality of device identifiers of a plurality of biometric information input devices provided in a plurality of terminal devices, and creates work management data based on the second data. .

[0008] In order to solve the above problems, an authentication method according to the present invention is an authentication method for authenticating use rights of a plurality of terminal devices that are installed in a business establishment and access a management system, the method comprising the steps of: In the business establishment, a plurality of processes are carried out, and the terminal device is operated by an employee to transmit and receive process management data related to the processes in which the employee is involved between the terminal device and the management system. Biometric information input device provided in each of a plurality of terminal devices According to the work clothes or protective equipment worn by the employee according to the process, the biometric information input device is any one of a fingerprint information input device, a face information input device, an iris information input device, a voice information input device, a finger vein information input device, and a palm vein information input device. Next, the employee of the establishment is authenticated based on the biometric information input from With reference to first data indicating a correspondence between an employee identifier of an employee at a business establishment and a device identifier of a biometric information input device provided in a terminal device used in a process in which the employee is in charge, Authenticating the use of terminal devices do. next, Second data indicating a correspondence between a plurality of steps and a plurality of device identifiers of a plurality of biometric information input devices provided in a plurality of terminal devices. Based on this, work management data for employees whose usage rights for the terminal device have been authenticated is created. Effect of the Invention

[0009] According to the present invention, it becomes possible to appropriately manage the work of employees in a business establishment.

[0010] Problems, configurations and effects other than those described above will become apparent from the following description of the embodiments. [Brief description of the drawings]

[0011] [Figure 1] 1 is a layout diagram of a pharmaceutical factory to which an authentication system according to an embodiment of the present invention is applied. [Diagram 2] 1 is a block diagram showing a configuration of an authentication system according to an embodiment of the present invention; [Diagram 3] 4 is a data configuration diagram showing an example of employee biometric data stored in the authentication server. FIG. [Figure 4] FIG. 2 is a data configuration diagram showing an example of entry / exit status data. [Diagram 5] FIG. 4 is a data configuration diagram showing an example of terminal device use authority data. [Figure 6] FIG. 4 is a data configuration diagram showing an example of factory area data stored in a business server. [Figure 7] FIG. 2 is a data configuration diagram showing an example of process data stored in a business server. [Figure 8] FIG. 2 is a data configuration diagram showing an example of employee-specific job data. [Figure 9] FIG. 2 is a data configuration diagram showing an example of business management data stored in the manufacturing execution system. [Figure 10] 4 is a flowchart showing an authentication process in the authentication system of the embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0012] Hereinafter, the embodiments of the present invention will be described with reference to the drawings as follows. In each drawing, the same reference number indicates the same component or a component having similar functions. In the examples, the business establishment to which the authentication system is applied is a pharmaceutical factory. Also, in the examples, the management system is a production management system.

[0013] FIG. 1 is a layout diagram of a pharmaceutical factory to which an authentication system according to an embodiment of the present invention, which will be described later, is applied.

[0014] The pharmaceutical factory 100 is provided with four areas, namely, a clean room 1, a clean room 2, a production line 3, and a staff room 4. The main processes in the clean room 1, the clean room 2, and the production line 3 are a weighing process, a formulation process, and a packaging process, respectively. In the staff room 4, management tasks are performed. The management tasks include, for example, creating, approving, and issuing manufacturing instructions, and checking, approving, and creating reports on the manufacturing status and production results.

[0015] At the entrances and exits of each area, an entrance and exit management device is provided, which includes biometric information input devices (f1 to f5) for biometric authentication and electric locks (lock1 to lock5). Fingerprint information input devices f1 to f5 are used as the biometric information input devices.

[0016] In each zone, terminal devices (T1 to T4) are installed that are operated by employees involved in the work and that transmit and receive process management data to and from the manufacturing execution system. Personal computers (PCs) are used as the terminal devices.

[0017] Each terminal device is provided with a biometric information input device for biometric authentication. The terminal devices T1, T2, T3, and T4 are provided with an iris information input device ir11, a voice information input device v21, a face information input device fa31, and a face information input device fa41, respectively.

[0018] The type of biometric information input device provided in the terminal device is selected based on the type of work clothes and protective equipment used by employees in each area, which allows for highly reliable authentication.

[0019] In clean room 1, employees involved in the weighing process wear dustproof or protective clothing, face masks, and gloves, so an iris information input device IR11 is applied. In clean room 2, employees involved in the formulation process wear dustproof or protective clothing, face masks, face shields, and gloves, so a voice information input device V21 is applied. In production line 3, employees involved in the packaging process wear dustproof coats and dustproof hats, so a face information input device FA31 is applied.

[0020] An employee working in any of the clean rooms 1, 2, and production line 3 enters the anteroom after being permitted to enter through fingerprint authentication at the entrance to each area. In the anteroom, the employee puts on the above-mentioned work clothes and protective equipment, enters the work site, and operates the terminal device and the biometric information input device provided in the terminal device. After going through this operation, the employee is authenticated as an employee authorized to work in each area, and can receive management data such as work instructions from the manufacturing execution system in the production management system through the terminal device, and can also input work status and work results and send them to the manufacturing execution system.

[0021] In addition, since employees in the staff room 4 do not wear the work clothes and protective equipment described above, various types of biometric information input devices can be applied in addition to the face information input device fa41.

[0022] FIG. 2 is a block diagram showing a configuration of an authentication system according to an embodiment of the present invention.

[0023] An entrance / exit management device 10 including a biometric information input device 11 and an electric lock 12 is provided at the entrance / exit of each zone in a factory. In this embodiment, the biometric information input device 11 corresponds to the fingerprint information input devices f1 to f5 shown in Fig. 1, and the electric lock 12 corresponds to the electric locks lock1 to lock5 shown in Fig. 1. The biometric information input devices 11 are provided outside the zone near the entrance / exit and inside the zone, respectively.

[0024] The entrance / exit management device 10 is communicably connected to an authentication server 30 consisting of a computer system. Biometric information input from a biometric information input device 11 provided in the entrance / exit management device 10 is transmitted to the authentication server 30. The authentication server 30 compares the received biometric information with employee biometric data previously stored in the authentication server 30, and determines whether or not there is biometric data that matches the received biometric information. This makes it possible to confirm that the operator of the biometric information input device 11 is an employee of the pharmaceutical factory 100 (FIG. 1).

[0025] When the authentication server 30 determines that there is biometric data that matches the received biometric information, it sends a command to the entrance / exit control device 10 to unlock the electric lock 12. This unlocks the electric lock 12, allowing the employee to enter the area where the entrance / exit control device 10 that was operated is installed.

[0026] Similarly, when an employee leaves each area, the authentication server 30 compares the biometric information sent from the biometric information input device 11 with the biometric data stored in the authentication server 30, and if it authenticates that the employee is an employee of the pharmaceutical factory 100, it unlocks the electric lock 12.

[0027] FIG. 3 is a data configuration diagram showing an example of the biometric data of an employee stored in the authentication server 30. As shown in FIG.

[0028] In the biometric data, an employee ID, which is an identifier unique to each employee, is associated with the voice data, iris data, fingerprint data, and face data of the employee having the employee ID.

[0029] The authentication server 30 compares the fingerprint information input to any one of the fingerprint information input devices f1-f5, which are the biometric information input devices 11 of the entrance / exit management device 10 provided in each area, with the fingerprint data FIA, FIB, FIC, and FID in the biometric data. If the result of the comparison shows that the fingerprint information matches any one of the fingerprint data, the authentication server 30 authenticates that the operator of the fingerprint information input device is an employee of the pharmaceutical factory 100.

[0030] 2, the authentication server 30 is communicatively connected to a business server 40, which is a computer system. The business server 40 stores data on the areas and processes in which each employee can work, as described below.

[0031] The authentication server 30 transmits the entrance / exit status data for each area of ​​the authenticated employee to the business server 40. The business server 40 stores the received entrance / exit status data as business management data.

[0032] FIG. 4 is a data configuration diagram showing an example of the entry / exit status data.

[0033] The entry / exit status data is composed of an employee ID and the entry / exit status of the employee who has this employee ID.

[0034] The authentication server 30 sets an employee ID corresponding to the biometric data that matches the biometric information from the biometric information input device 11 in the entry / exit status data.

[0035] The biometric information input device 11 has a device ID that is an identifier unique to the device. When the biometric information input device 11 transmits biometric information to the authentication server 30, the device ID is also transmitted. The authentication server 30 stores data indicating the correspondence between the device ID of the biometric information input device 11 and the installation location (area and inside or outside the area). By referring to this data, the authentication server 30 can determine the entrance and exit of an employee and the area to which the employee will enter and exit, from the received device ID.

[0036] The authentication server 30 also sets the entrance / exit status (either entry or exit) determined from the received device ID to the entrance / exit status data. Note that the authentication server 30 may set the area determined from the received device ID to the entrance / exit status data in addition to the employee ID and the entrance / exit status.

[0037] As shown in Fig. 2, the terminal device 20 installed in each area includes a biometric information input device 21. The terminal device 20 is communicably connected to the authentication server 30. In this embodiment, the terminal device 20 corresponds to the terminal devices T1, T2, T3, and T4 shown in Fig. 1. The biometric information input device 21 corresponds to the iris information input device ir11, the voice information input device v21, the face information input device fa31, and the face information input device fa41 shown in Fig. 1.

[0038] An employee who enters each area inputs his / her employee ID into the terminal device 20, and also inputs biometric information using the biometric information input device 21. The terminal device 20 sends the input employee ID and biometric information to the authentication server 30, together with a device ID that is a unique identifier of the biometric information input device 21.

[0039] The authentication server 30 compares the received biometric information with the biometric data shown in Fig. 3 described above, and determines whether there is any biometric data that matches the received biometric information. If the authentication server 30 determines that there is any matching biometric data, it authenticates that the operator of the biometric information input device 21 is an employee of the pharmaceutical factory 100 (Fig. 1). Note that the authentication server 30 may compare the biometric information only with the biometric data that corresponds to the received employee ID.

[0040] When the authentication server 30 authenticates the employee using the biometric information, it transmits the employee ID and the device ID of the biometric information input device 21 to the business server 40. Based on the received employee ID and device ID, the business server 40 determines whether the employee who input the employee ID into the terminal device 20 has the authority to use the terminal device 20, based on terminal device usage authority data previously stored in the business server 40.

[0041] FIG. 5 is a data configuration diagram showing an example of terminal device use authority data.

[0042] In the terminal device use authority data, an employee ID is associated with a device ID of a biometric information input device 21 included in a terminal device 20 that an employee having the employee ID has use authority over. Note that in Fig. 5, the device IDs are indicated by the symbols (ir11, v21, fa31, fa41) shown in Fig. 1.

[0043] For example, an employee with an employee ID of A has the authority to use terminal devices T1, T2, and T4 equipped with biometric information input devices 21 with device IDs of ir11, v21, and fa41.

[0044] The business server 40 refers to the terminal device use authority data and determines whether the received device ID is included in the device IDs corresponding to the received employee ID. If the business server 40 determines that the received ID is included, it authenticates that the employee has the authority to use the terminal device.

[0045] When the business server 40 authenticates the employee's terminal use authority, it permits the terminal device 20 to log in to the manufacturing execution system 50 (MES). This enables transmission and reception of manufacturing execution management data between the terminal device 20 and the manufacturing execution system 50 (MES). For example, the terminal device 20 can receive manufacturing instruction data from the manufacturing execution system 50 (MES) and transmit manufacturing performance data to the manufacturing execution system 50 (MES).

[0046] Furthermore, when business server 40 authenticates the employee's terminal usage authority, it extracts the employee's work management data (work area, work to be performed) by referring to the factory area data and process data stored in business server 40 based on the device ID of the terminal whose usage authority has been authenticated and the employee ID of the employee. Business server 40 transmits the work management data, including the extracted data and employee ID, to manufacturing execution system 50 (MES).

[0047] In this embodiment, the business server 40 transmits to the manufacturing execution system 50 (MES) the date and time of authentication by the authentication server 30 and the date and time of authentication by the business server 40 when the authority to use the terminal device 20 is authenticated, as business management data of the authenticated employee.

[0048] FIG. 6 is a data configuration diagram showing an example of the factory area data stored in the business server 40. As shown in FIG.

[0049] In the factory area data, the device ID of the biometric information input device 21 included in the terminal device 20 is associated with the area in which the terminal device 20 including the biometric information input device 21 having the device ID is installed. Note that in Fig. 6, the device IDs are indicated by the symbols (ir11, v21, fa31, fa41) shown in Fig. 1. Note that in the factory area data, the device ID is associated with the biometric type of the biometric information input device 21 having the device ID.

[0050] The business server 40 extracts the area corresponding to the received device ID from the in-factory area data. For example, when the received device ID is ir11 (iris information input device), the business server 40 refers to the in-factory area data and extracts clean room 1 as the work area of ​​the authenticated employee.

[0051] FIG. 7 is a data configuration diagram showing an example of the process data stored in the business server 40. As shown in FIG.

[0052] In the process data, the device ID of the biometric information input device 21 included in the terminal device 20 is associated with the process in the area where the terminal device 20 including the biometric information input device 21 having the device ID is installed. Note that in Fig. 7, the symbols (ir11, v21, fa31, fa41) shown in Fig. 1 are used as the device ID.

[0053] The business server 40 extracts the process corresponding to the received device ID from the process data. For example, when the received device ID is ir11, the business server 40 refers to the process data and extracts weighing as the work performed by the authenticated employee.

[0054] The terminal use authority data shown in FIG. 5 can be created from employee-specific process data transmitted from the manufacturing execution system 50 (MES) to the business server 40.

[0055] FIG. 8 is a data configuration diagram showing an example of employee-specific job data.

[0056] In the employee-specific work data, the employee ID is associated with the process for which the employee is responsible.

[0057] The business server 40 creates terminal device use authority data based on the employee-specific process data received from the manufacturing execution system 50 (MES) and the process data shown in FIG.

[0058] This makes it possible to update the terminal device usage authority data (Figure 5) when the process each employee is responsible for changes according to the production plan.

[0059] As described above, the business server 40 authenticates the employee's authority to use the terminal device based on the employee ID unique to the employee authenticated by the authentication server 30 based on the biometric information input by the biometric information input device 21 provided in the terminal device 20, and the device ID unique to the biometric information input device. Furthermore, the business server 40 creates business management data for the authenticated employee based on the employee ID and device ID. The business server 40 transmits the created business management data to a manufacturing execution system 50 (MES) that constitutes a production management system. This enables accurate business management of employees involved in the manufacturing process.

[0060] The manufacturing execution system 50 (MES) stores the received business management data. The manufacturing execution system 50 (MES) uses the business management data in creating work instructions and work schedules, and in creating reports on work status and work results.

[0061] FIG. 9 is a data configuration diagram showing an example of the work management data stored in the manufacturing execution system 50 (MES).

[0062] The business management data stored in the manufacturing execution system 50 (MES) includes employee IDs, work areas, work processes, and authentication times by the authentication server 30 and business server 40 when authenticating the terminal device use authority.

[0063] As shown in FIG. 9, a manufacturing execution system 50 (MES) stores business management data for each authentication process performed by the authentication server 30 and the business server 40.

[0064] FIG. 10 is a flowchart showing the authentication process in the authentication system (FIG. 2) of this embodiment.

[0065] In step S11, biometric information is input to the biometric information input device 11 for the entrance / exit management device 10.

[0066] Next, in step S31, the authentication server 30 judges whether the input biometric information matches the biometric data stored in the authentication server 30, i.e., registered in the authentication server 30. If it does not match the registered biometric data (NO in step S31), then step S12 is executed, and if it matches the biometric data (YES in step S31), then steps S13 and S32 are executed.

[0067] In step S12, the entrance / exit control device 10 does not unlock the electric lock 12. In this case, the entrance / exit control device 10 or the authentication server 30 may generate an alarm.

[0068] In step S13, the entrance / exit control device 10 unlocks the electric lock 12.

[0069] In step S32, the authentication server 30 transmits the entrance / exit status to the business server 40. Once the entrance / exit status has been transmitted, step S43 is then executed.

[0070] When the electric lock is unlocked in step S13, in step S21, the employee who has entered the work area inputs his / her employee ID into the terminal device 20. After the employee ID has been input, step S22 is then executed.

[0071] In step S22, the employee inputs biometric information using the biometric information input device 21 for the terminal device 20. After the biometric information is input, step S33 is then executed.

[0072] In step S33, the authentication server 30 judges whether the input biometric information matches the biometric data (FIG. 3) stored in the authentication server 30, i.e., whether it matches the registered biometric data in the authentication server 30. If it does not match the registered biometric data (NO in step S33), step S23 is executed next, and if it matches the biometric data (YES in step S33), step S41 is executed next.

[0073] In step S23, the terminal device 20 is prevented from logging in to the manufacturing execution system.

[0074] In step S41, the business server 40 judges whether the employee ID and the device ID of the biometric information input device 21 transmitted from the authentication server 30 match the terminal use authority data (FIG. 5) stored in the business server 40, i.e., registered in the business server 40. If they do not match the registered terminal use authority data (NO in step S41), step S23 is executed next, and if they match the terminal use authority data (YES in step S41), steps S24 and S42 are executed next.

[0075] In step S24, the terminal device 20 is permitted to log in to the manufacturing execution system.

[0076] When step S24 is executed, the terminal device 20 accesses the manufacturing execution system 50 (MES) (step S25), and then in step S26, the terminal device 20 transmits and receives process management data regarding the process in the area where the terminal device 20 is installed between the manufacturing execution system and the MES.

[0077] In step 42, the business server 40 extracts the business management data (work area, performed work) of the employee whose terminal usage authority has been authenticated from the in-factory area data and process data stored in the business server 40, i.e., registered in the business server 40, based on the device ID of the biometric information input device 21 for the terminal device 20. After executing step S42, the business server 40 then executes step S43.

[0078] In step S43, the business server 40 transmits the entrance / exit status received from the authentication server and the business management data extracted in step S42 to the manufacturing execution system 50 (MES).

[0079] A manufacturing execution system (MES) 50 that receives the exit status and work management data transmits and receives process management data related to the process in the area where the terminal device 20 is installed to and from the terminal device 20.

[0080] As described above, the authentication system of this embodiment is provided in a pharmaceutical factory 100, and authenticates the use authority of multiple terminal devices 20 that access a manufacturing execution system 50 included in a production management system. This authentication system includes a biometric information input device 21 provided in each of the multiple terminal devices 20, and an authentication server 30 that authenticates employees of the pharmaceutical factory 100 based on biometric information input from the biometric information input device 21 to the terminal device 20. This authentication system further includes a business server 40 that authenticates the use authority of the terminal device 20 based on the device ID (device identifier) ​​of the biometric information input device 21 when the authentication server 30 authenticates the employee. This business server 40 creates business management data of the employee whose use authority of the terminal device 20 has been authenticated based on the device ID, and transmits the data to the manufacturing execution system 50.

[0081] According to the authentication system of the present embodiment, the authentication server 30 authenticates the terminal use authority of the employee authenticated by biometric authentication based on the device ID of the biometric information raw input device that inputs biometric information for authenticating the employee, and further creates business management data for the employee whose terminal use authority has been authenticated based on this device ID. That is, the terminal use authority of the employee authenticated by highly reliable biometric authentication is authenticated based on the device ID of the biometric information raw input device used for the biometric authentication, and further creates business management data for the employee based on this device ID. This improves the reliability of the business management data, enabling accurate business management of employees involved in the manufacturing process.

[0082] The present invention is not limited to the above-mentioned embodiment, and various modifications are included. For example, the above-mentioned embodiment has been described in detail to easily explain the present invention, and the present invention is not necessarily limited to those including all of the described configurations. In addition, some of the configurations of the embodiment can be deleted, other configurations can be added, or other configurations can be replaced.

[0083] For example, the authentication system according to the present invention is not limited to the above-mentioned pharmaceutical factory, but can be applied to various manufacturing factories equipped with a production management system, such as semiconductor manufacturing factories, etc. Also, the authentication system according to the present invention can be applied not only to the manufacturing industry, but also to the service industry.

[0084] Furthermore, the biometric information used for authentication may be finger veins or palm veins.

[0085] Furthermore, the business management data may be transmitted not only to the manufacturing execution system but also to other systems constituting the production management system, such as a production planning system. [Explanation of symbols]

[0086] 1...clean room, 2...clean room, 3...production line, 4...staff room, 10...entrance / exit management device, 11...biometric information input device, 12...electric lock, 20...terminal device, 21...biometric information input device, 30...authentication server, 40...business server, 50...manufacturing execution system, f1, f2, f3, f4, f5...fingerprint information input device, fa31, fa41...face information input device, ir11...iris information input device, v21...voice information input device, lock1, lock2, lock3, lock4, lock5...electric lock

Claims

1. In an authentication system for authenticating the use authority of a plurality of terminal devices that are installed in a business establishment and access a management system, At the said establishment, a plurality of processes are carried out, The terminal device is operated by an employee to transmit and receive process management data related to the process in which the employee is involved between the terminal device and the management system; a biometric information input device provided in each of the plurality of terminal devices; a first server that authenticates the employee of the establishment based on the biometric information input from the biometric information input device to the terminal device; a second server that authenticates the use authority of the terminal device based on a device identifier of the biometric information input device when the first server authenticates the employee; Equipped with The second server creates business management data of the employee whose use authority of the terminal device has been authenticated based on the device identifier, and transmits the created business management data to the management system; The biometric information input device is any one of a fingerprint information input device, a face information input device, an iris information input device, a voice information input device, a finger vein information input device, and a palm vein information input device, depending on the work clothes or protective equipment worn by the employee according to the process, the terminal device adds the device identifier of the biometric information input device to the input biometric information and transmits the biometric information to the first server; When the first server authenticates the employee, the first server transmits an employee identifier of the employee and the device identifier of the biometric information input device to the second server; The second server, storing first data indicating a correspondence between the employee identifier of the employee at the establishment and the device identifier of the biometric information input device provided in the terminal device used in the process in which the employee is in charge; authenticating the usage authority of the terminal device by referring to the first data; The second server, storing second data indicating a correspondence between the plurality of steps and the plurality of device identifiers of the plurality of biometric information input devices provided in the plurality of terminal devices; An authentication system, comprising: a first data generating unit that generates the business management data based on the second data.

2. 2. The authentication system according to claim 1, An authentication system, wherein the work management data is the work location and work performed by the authenticated employee.

3. 2. The authentication system according to claim 1, The authentication system according to claim 1, wherein the business management data includes a date and time when the second server authenticated the usage right.

4. 2. The authentication system according to claim 1, The second server transmits the business management data to the management system; An authentication system characterized in that the management system uses the received business management data to execute one of a work instruction creation process, a work schedule creation process, a work status report creation process, and a work performance report creation process.

5. 2. The authentication system according to claim 1, Furthermore, it is equipped with an entrance / exit management device that uses biometric authentication, The authentication system is characterized in that the first server unlocks an electric lock provided on the entrance / exit management device when the first server authenticates the employee at the business establishment through the biometric authentication.

6. 6. The authentication system according to claim 5, The first server transmits the entry / exit status of the employee authenticated by the biometric authentication to the second server, The second server transmits the entry / exit status to the management system.

7. An authentication method for authenticating the use authority of a plurality of terminal devices that are installed in a business establishment and access a management system, comprising: At the said establishment, a plurality of processes are carried out, The terminal device is operated by an employee to transmit and receive process management data related to the process in which the employee is involved between the terminal device and the management system; a biometric information input device provided in each of the plurality of terminal devices, the biometric information input device being any one of a fingerprint information input device, a face information input device, an iris information input device, a voice information input device, a finger vein information input device, and a palm vein information input device, depending on the work clothes or protective equipment worn by the employee depending on the process, authenticating the employee of the establishment based on biometric information input from the biometric information input device; Next, authenticating the use authority of the terminal device by referring to first data indicating a correspondence between an employee identifier of the employee at the business establishment and a device identifier of the biometric information input device provided in the terminal device used in the process in which the employee is in charge; Next, an authentication method characterized by creating business management data of the employee whose usage authority of the terminal device has been authenticated based on second data indicating the correspondence between the multiple processes and the multiple device identifiers of the multiple biometric information input devices equipped on the multiple terminal devices.

Images