Money handling system, money handling device, and operating state control method

Abstract

To make it possible to perform authentication even if it is not the working time zone of a processing device provided with an authentication unit.SOLUTION: A first processing device 2 includes: an authentication unit 12 that authenticates an operator based on first biological information 38 and outputs an authentication result; a first communication unit 24 that communicates with a second processing device 3; and an activation control unit 35 that can switch the first communication unit 24 and the authentication unit 12 between an operating state and a non-operating state. The second processing device 3 includes a second information acquisition unit that acquires second biological information 38 on the operator who intends to operate the second processing device 3. The authentication unit 12 authenticates the operator based on the second biological information 38 and outputs an authentication result 40. The activation control unit 35 makes the first communication unit 24 and the authentication unit 12 in the operating state when the operator who operates at least the second processing device 3 is authenticated.SELECTED DRAWING: Figure 2

Description

[Technical field]

[0001] The present invention relates to a currency handling system, a currency handling device, and a method for controlling the operating state of an authentication unit provided in these systems. [Background technology]

[0002] Financial institutions and various retail stores are provided with currency handling systems that perform currency processing such as dispensing, storing, etc. In addition to currency handling devices that perform currency processing such as dispensing, storing, etc., the currency handling system may be provided with various other processing devices such as a currency management device and an article management device.

[0003] In addition, some currency handling devices and other handling devices are configured to authenticate the operator who is to operate them, so that only authenticated operators can operate them.

[0004] For example, the article management device disclosed in Patent Document 1 includes an authentication unit that authenticates a user (operator). [Prior art documents] [Patent documents]

[0005] [Patent Document 1] JP 2010-112091 A Summary of the Invention [Problem to be solved by the invention]

[0006] However, the authentication unit requires high processing power, and providing an authentication unit in each of the various processing devices requires the processing devices to have excessively high performance.

[0007] It is also possible to provide a separate dedicated device that performs authentication of the currency processing device and various other processing devices all at once, but this would complicate the overall system configuration.

[0008] Furthermore, when an authentication unit is provided in a device such as a dedicated device that is different from the processing device that needs to perform authentication, the processing device that needs to perform authentication and the device that has the authentication unit may have different operating hours, and if the device in which the authentication unit is provided is not operating, authentication of the operator cannot be performed and the operator cannot use other processing devices.

[0009] The present invention has an object to perform authentication of an operator who operates another processing device even outside the operating hours of the device in which the authentication unit is provided, while suppressing an increase in the performance of the device. [Means for solving the problem]

[0010] In order to achieve the above-mentioned object, a currency handling system according to one embodiment of the present invention is a currency handling system including a first processing device and a second processing device which execute a process in response to an operation of an authenticated operator, wherein at least one of the first processing device or the second processing device is capable of executing a currency process which involves dispensing or storing currency as the process, and the first processing device includes a first information acquisition unit which acquires first biometric information of an operator who is to operate the first processing device, an authentication unit which authenticates the operator based on the first biometric information and outputs an authentication result, a first communication unit which communicates with the second processing device, a process execution unit which executes the predetermined process executed by the first processing device, and a process execution unit which switches the first communication unit and the authentication unit between an operating state and a non-operating state when the first processing device is not in operation. and a startup control unit capable of detecting an occurrence of a problem and detecting a problem caused by the problem, the second processing device comprises a second information acquisition unit that acquires second biometric information of an operator who intends to operate the second processing device, and a second communication unit that communicates with the first processing device, the second communication unit transmits the second biometric information acquired by the second information acquisition unit to the first processing device, the authentication unit authenticates the operator based on the second biometric information received by the first communication unit and outputs an authentication result, the first communication unit transmits the authentication result based on the second biometric information output by the authentication unit to the second processing device, the first processing device and the second processing device have different operating time zones, and the startup control unit puts the first communication unit and the authentication unit into the operating state at least when authenticating an operator who operates the second processing device.

[0011] In addition, a currency processing device according to one embodiment of the present invention is a currency processing device that is connected to other processing devices so that it can communicate with them, and in which an operator who is authorized to operate it dispenses and stores currency as currency processing, and is equipped with an information acquisition unit that acquires first biometric information of the operator, a communication unit that communicates with the other processing devices, an authentication unit that authenticates the operator based on the first biometric information and outputs the authentication result, a processing execution unit that executes the currency processing, and a startup control unit that can switch the communication unit and the authentication unit between an operating state and a non-operating state when the currency processing device is not in operation, and has a different operating time period from the other processing devices, and the startup control unit switches the communication unit and the authentication unit to the operating state when authenticating the operator operating the other processing devices.

[0012] In addition, an operating state control method according to one embodiment of the present invention is an operating state control method for controlling the operating state of a first processing device in a currency processing system including a first processing device and a second processing device that perform processing in response to operation of an authenticated operator, wherein at least one of the first processing device or the second processing device is capable of performing currency processing that dispenses or stores currency as the processing, the first processing device and the second processing device have different operating time periods, and authentication is performed by the first processing device, and the method includes a step of determining whether the first processing device is in operation in response to an operation being performed on the second processing device, a step of the first processing device authenticating the operator operating the second processing device when the first processing device is in operation, a step of sending an authentication request from the second processing device to the first processing device when the first processing device is not in operation, and a step of the first processing device becoming capable of authentication and authenticating the operator operating the second processing device upon receiving the authentication request.

[0013] The first processing device (currency processing device) authenticates the operator who operates it, and also receives biometric information from the second processing device (another processing device) to authenticate the operator who operates the second processing device. Since the first processing device and the second processing device have different operating hours, when the second processing device is operating and the first processing device is not operating, the operator who operates the second processing device cannot be authenticated.

[0014] With the above-described configuration, the authentication process is performed centrally in the first processing device, thereby suppressing the increase in performance of the device, while when the first processing device is not operating, the communication unit and authentication unit of the first processing device can be put into operation, so that authentication of the operator operating the second processing device can be properly performed even when the first processing device is not in operating hours.

[0015] Furthermore, during a non-operating time period of the first processing device, when the second processing device authenticates an operator, it may send an authentication request to the first processing device, and upon receiving the authentication request, the startup control unit may bring the first communication unit and the authentication unit into the operating state.

[0016] In addition, during non-operating hours of the currency processing device, when the other processing device authenticates an operator, it may send an authentication request to the currency processing device, and when the startup control unit receives the authentication request, it may put the communication unit and the authentication unit into the operating state.

[0017] By having the communication unit and authentication unit of the first processing device (currency processing device) be put into operation based on an authentication request sent from the second processing device (another processing device), the communication unit and authentication unit are prevented from being put into operation during times when they are not needed, while properly authenticating the operator operating the second processing device.

[0018] Furthermore, the start-up control unit may maintain the operating states of the first communication unit and the authentication unit even during a non-operating time period of the first processing device.

[0019] In addition, the startup control unit may maintain the operating state of the communication unit and the authentication unit even during non-operating hours of the currency processing device.

[0020] With this configuration, when authenticating a second processing device (another processing device), the communication unit and authentication unit of the first processing device (currency processing device) are in operation, so that authentication of the operator operating the second processing device can be properly performed with a simple configuration without the need for an authentication request, etc.

[0021] Furthermore, the startup control unit may maintain the operating state of the first communication unit and the authentication unit during an operating time period of the second processing device, even if the first processing device is not in operation.

[0022] In addition, the startup control unit may maintain the operating state of the communication unit and the authentication unit during operating hours of the other processing devices, even when the currency processing device is not in operation.

[0023] The communication unit and authentication unit of the first processing device (currency processing device) are maintained in an operating state during the operating hours of the second processing device (other processing device), so that a simple configuration can be used to appropriately authenticate the operator operating the second processing device while limiting the hours during which the communication unit and authentication unit of the first processing device are in an operating state. [Brief description of the drawings]

[0024] [Figure 1] 1 is a diagram illustrating a schematic configuration of a currency processing system. [Diagram 2] FIG. 2 is a diagram illustrating functional blocks of a currency processing device. [Diagram 3] FIG. 11 is a diagram illustrating an example of an authentication table. [Figure 4] FIG. 2 is a diagram illustrating an example of a functional block of an item management device. [Diagram 5] FIG. 11 is a diagram illustrating a user registration table. [Figure 6] FIG. 11 is a diagram illustrating the process steps of an authentication process. [Figure 7] FIG. 11 is a diagram illustrating a processing step of an authentication unit startup process. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0025] [Currency Handling System] First, a currency handling system 1 will be described with reference to FIG.

[0026] The currency handling system 1 performs currency processing (treasury processing) that at least dispenses and stores currency, and is installed in financial institutions and retail stores. The currency handling system 1 is composed of multiple processing devices, and the processing devices include a currency processing device 2 (treasury machine, equivalent to the "first processing device") that performs currency processing, and one or more other processing devices 3 (equivalent to the "second processing device"). The other processing devices 3 include any of the processing devices such as an item management device 5, a currency management device 6, and a key management device 7. Each processing device is communicatively connected via a wired or wireless communication line 9 such as a LAN.

[0027] [Currency handling device] Next, the configuration of the currency handling device 2 included in the currency handling system 1 will be described using Figs. 2 and 3 while referring to Fig. 1.

[0028] The currency handling device 2 includes a control unit 10, an imaging device 20 (corresponding to a "first information acquisition unit"), an operation unit 22, a card reader 23, a communication unit 24 (corresponding to a "first communication unit"), a memory unit 25, a start-up control unit 35, a banknote processing unit 28, a coin processing unit 29, an unfit / new note processing unit 31, a damaged currency processing unit 32, and a printing unit 33. The currency handling is performed by a processing execution unit. The processing execution unit includes at least the banknote processing unit 28, the coin processing unit 29, the unfit / new note processing unit 31, and the damaged currency processing unit 32, and may include at least a part of the functional blocks of the control unit 10 that control these. The currency handling device 2 performs currency handling in response to an operation by an operator, and only authorized operators are authenticated and can operate the currency handling device 2.

[0029] The imaging device 20 captures an image of the face of an operator who is to operate the currency handling device 2 in order to authenticate the operator. A captured image 38 of the operator's face is used to authenticate the operator as biometric information of the operator (corresponding to "first biometric information"). The captured image 38 is stored in the memory unit 25.

[0030] The operation unit 22 is an interface through which an operator operates the currency handling device 2. For example, the operation unit 22 includes an operating tool and a touch panel 22A which is a display unit, and the operator operates the currency handling device 2 by operating a software switch or an operating tool displayed on the touch panel 22A while checking the contents displayed on the touch panel 22A.

[0031] The card reader 23 reads the identification information 39 unique to the operator from the ID card of the operator or the like, and stores it in the storage unit 25. The storage unit 25 stores the captured image 38, the identification information 39 of the operator, and various other information to be described later.

[0032] The communication unit 24 transmits and receives data to and from the other processing devices 3 via the communication line 9. Note that the communication line 9 may be connected to various devices within the financial institution or distribution store, and even to devices outside the financial institution or distribution store, so as to be capable of communicating with each other; however, from the viewpoint of security, it is appropriate that only the currency processing device 2 and the other processing devices 3 are connected to each other.

[0033] The banknote processing unit 28 deposits and dispenses loose banknotes, bundles banknotes and dispenses bundled banknotes. The coin processing unit 29 deposits and dispenses loose coins, wraps coins and dispenses wrapped coins.

[0034] The unfit / new note processing unit 31 accepts unfit notes, which are damaged banknotes, takes an image of the unfit note, and determines the denomination based on the image analysis result. If the denomination cannot be determined by image analysis or the denomination is incorrect, the unfit / new note processing unit 31 accepts input from the operator, and the operator can also input the denomination. The unfit / new note processing unit 31 stores the denomination and number (amount) of the stored unfit notes in the memory unit 25. The unfit / new note processing unit 31 also dispenses new notes that are pre-loaded. The unfit coin processing unit 32 accepts unfit coins and commemorative coins, which are damaged coins, takes an image of the unfit coins and commemorative coins, and determines the denomination based on the image analysis result. If the denomination cannot be determined by image analysis or the denomination is incorrect, the unfit coin processing unit 32 accepts input from the operator, and the operator can also input the denomination. The unfit coin processing unit 32 stores the denomination and number (amount) of the stored unfit coins in the memory unit 25.

[0035] The printing unit 33 prints the details of the process performed, etc., on a slip as necessary, and outputs the slip.

[0036] The currency handling device 2 may be configured to perform the currency handling described above, or to perform other processes besides currency handling. In this case, necessary functional blocks are added in addition to the banknote handling device 28, coin handling device 29, unfit / new note handling device 31, damaged coin handling device 32, and printing device 33. The currency handling device 2 may be configured not to have any of the currency handling functions described above. In this case, the currency handling device 2 does not have any of the banknote handling device 28, coin handling device 29, unfit / new note handling device 31, damaged coin handling device 32, and printing device 33.

[0037] The control unit 10 includes a processor such as a CPU, and controls the operation of the currency handling device 2. Specifically, the control unit 10 controls currency handling and executes various functions associated with currency handling. For example, the control unit 10 includes a deposit / withdrawal control unit 11, an authentication unit 12, an authorization unit 13, and a log collection control unit 14.

[0038] The deposit / withdrawal control unit 11 controls the operation of the banknote processing unit 28, coin processing unit 29, unfit note / new note processing unit 31, unfit coin processing unit 32 and printing unit 33 in accordance with operations performed by an operator on the operation unit 22, thereby controlling the execution of currency processing.

[0039] The authentication unit 12 is a face recognition engine that authenticates the operator attempting to operate the currency processing device 2 based on the operator's identification information 39 acquired by the card reader 23, the captured image 38 captured by the imaging device 20, and an authentication table 41 stored in the memory unit 25, and outputs the authentication result 40 and stores it in the memory unit 25.

[0040] 3, the authentication table 41 is a table in which, for each operator, identification information 39, authentication feature information of the face corresponding to the photographed image 38, and the contents of the permitted (authorized) processing are linked. The authentication feature information is, for example, an image in which the shape of the eyes, the shape of the nose, the shape of the mouth, the shape of the ears, the contour of the face, etc. are extracted, or information indicating the distance between the eyes, the positional relationship between the eyes and the ears, the positional relationship between the mouth and the nose, etc., or any combination of these. The authentication feature information may also be one or more photographed images of the operator's face.

[0041] The authentication table 41 may be a table in which unique information capable of identifying an operator, authentication characteristic information, and the content of a process are linked together, instead of the operator's identification information 39 acquired by the card reader 23. In this case, a numeric keypad or the like may be provided instead of the card reader 23, and the operator may input information such as the identification information 39 or a PIN number from the numeric keypad. In addition, when the processing device grants authority to the operator for each more detailed process, such a process may be specified as the content of the process. For example, when the currency processing device 2 grants authority for each more detailed process of currency processing, the authentication table 41 may specify detailed processes in currency processing, such as banknote processing and coin processing, as the content of the process.

[0042] The authentication unit 12 checks whether the operator corresponding to the identification information 39 matches the operator identified from the photographed image 38. Specifically, the authentication unit 12 first identifies the operator corresponding to the identification information 39 from the authentication table 41. Then, it extracts authentication feature information of the identified operator from the authentication table 41, performs face authentication on the extracted authentication feature information and the photographed image 38, and checks whether the operator corresponding to the identification information 39 matches the operator corresponding to the photographed image 38. If they match, the authentication unit 12 outputs the identification information 39 of the identified operator as the authentication result 40, and if they do not match, it outputs an authentication error as the authentication result 40.

[0043] The authentication result 40 is not limited to the identification information 39, and any information capable of identifying the authenticated operator may be output.

[0044] The authentication feature information may be registered in the currency handling device 2. The currency handling device 2 is often installed in financial institutions and retail stores, and is usually equipped with a large touch panel 22A, which makes registration convenient. During registration, the imaging device 20 photographs the face of the operator to be registered, and the authentication unit 12 extracts the authentication feature information from the photographed image 38 and registers it in the authentication table 41 together with the identification information 39 of the photographed operator and the permitted processes.

[0045] The permission unit 13 identifies the content of the process corresponding to the identification information 39 output as the authentication result 40 from the authentication table 41, and permits the authenticated operator to execute the identified process. In other words, the authenticated operator can execute only the processes permitted by the permission unit 13. At this time, if the operator performs an operation to execute a process that is not permitted, the permission unit 13 performs control so as not to accept the operation, and may also display an error message or the like on the touch panel 22A of the operation unit 22 to the effect that the operation cannot be performed.

[0046] The log collection control unit 14 stores the contents of the executed processing as log data 43 in the storage unit 25. The log data 43 is stored by linking the contents of the processing with information on the operator who performed the processing. The log data 43 may further be linked with the date and time when the processing was performed. The information on the operator may be the photographed image 38 or the identification information 39, or may be other information that can identify the operator. The log data 43 may include information on an authentication error or an operation without authorization. The log data 43 may be stored when the operation (processing) is completed, or when a predetermined process is performed. For example, the log data 43 is stored when a door provided in the banknote processing unit 28 is opened or closed.

[0047] By storing such log data 43 in a searchable state, it is possible to analyze the log data 43 at a later date and perform security management. In addition, by taking statistics on the processed contents, the data can be used for maintenance and function improvement.

[0048] Basically, all functional blocks of the currency processing device 2 are in an inactive state when the currency processing device 2 is not in operation, and all functional blocks are activated and in an active state when the currency processing device 2 is in operation. The activation control unit 35 is configured to be able to switch the communication unit 24 and the authentication unit 12 between an active state and an inactive state. Therefore, even when the currency processing device 2 is in an inactive state, the activation control unit 35 can activate the communication unit 24 and the authentication unit 12 to switch them to an active state without activating the control unit 10 and the processing execution unit other than the authentication unit 12.

[0049] As described below, the authentication unit 12 of the currency handling device 2 not only authenticates an operator who is attempting to operate the currency handling device 2, but also authenticates an operator who is attempting to operate another processing device 3. Furthermore, the operating hours of the currency handling device 2 may differ from the operating hours of the other processing devices 3. For example, even if the other processing devices 3 are in an operating hour, the currency handling device 2 may not be in an operating hour. In this case, it is not possible to authenticate the operator who is attempting to operate the other processing devices 3, and it becomes impossible to use the other processing devices 3.

[0050] According to this embodiment, the currency processing device 2 is equipped with a startup control unit 35, so that when authenticating another processing device 3, the currency processing device 2 can put the communication unit 24 and the authentication unit 12 into an operating state even during non-operating hours of the currency processing device 2.

[0051] Specifically, when the other processing device 3 communicates with the currency processing device 2 for authentication, the start-up control unit 35 activates at least the communication unit 24 and the authentication unit 12. For example, the start-up control unit 35 may activate the communication unit 24 and the authentication unit 12 in response to the other processing device 3 transmitting the captured image 38 and the identification information 39, or may activate the communication unit 24 and the authentication unit 12 in response to the other processing device 3 transmitting an authentication request. When the communication unit 24 and the authentication unit 12 are activated in response to the other processing device 3 transmitting an authentication request, the other processing device 3 may transmit the captured image 38 and the identification information 39 together with the authentication request, or may transmit the captured image 38 and the identification information 39 after transmitting the authentication request, for example, after receiving a start-up completion signal from the start-up control unit 35.

[0052] With this configuration, when an operator attempts to operate another processing device 3, the other processing device 3 transmits at least one of a captured image 38, identification information 39, and an authentication request, and the start-up control unit 35 can activate the communication unit 24 and the authentication unit 12. Then, the communication unit 24 receives the captured image 38 and the identification information 39 from the other processing device 3, and the authentication unit 12 performs authentication based on the captured image 38 and the identification information 39, and can transmit the authentication result 40 to the other processing device 3 via the communication unit 24.

[0053] As a result, even when the currency handling device 2 is not in operating hours, the authentication unit 12 can authenticate an operator attempting to operate another handling device 3.

[0054] [Other Processing Devices] Next, the configurations of the currency handling device 2 and the other handling device 3 will be described using Fig. 4 and Fig. 5 while referring to Fig. 1. As an example of the other handling device 3, the configuration of an article management device 5 will be described using Fig. 4.

[0055] An article management device 5, which is an example of the other processing device 3, includes a control unit 50, an imaging device 60 (corresponding to a "second information acquisition unit"), an operation unit 62, a card reader 63, a communication unit 64 (corresponding to a "second communication unit"), a memory unit 65, and a storage unit 71. The article management device 5 executes article management processing in response to operations by an operator, and only authorized operators can operate the article management device 5.

[0056] The imaging device 60 captures an image of the face of an operator who is to operate the article management device 5 in order to authenticate the operator. A captured image 38 of the operator's face is used to authenticate the operator as biometric information of the operator (corresponding to "second biometric information"). The captured image 38 is stored in the storage unit 65.

[0057] The operation unit 62 is an interface through which an operator operates the article management device 5. For example, the operation unit 62 includes an operating tool and a touch panel 62A, and the operator operates the article management device 5 by operating a software switch or an operating tool displayed on the touch panel 62A while checking the contents displayed on the touch panel 62A.

[0058] The card reader 63 reads the identification information 39 unique to the operator from the ID card of the operator or the like, and stores it in the storage unit 65. The storage unit 65 stores various information, which will be described later, in addition to the captured image 38 and the identification information 39 of the operator. The identification information 39 is not limited to being obtained from the card reader 63, and may be obtained by any means. For example, a numeric keypad or the like may be provided instead of the card reader 63, and the identification information 39 or information such as a PIN number may be input by the operator from the numeric keypad.

[0059] The communication unit 64 transmits and receives data between the currency processing device 2 and other processing devices 3 via the communication line 9.

[0060] The storage unit 71 includes a plurality of storage cabinets 72, and each storage cabinet 72 stores and manages important documents, unissued bankbooks, etc. (stored items) (item management process). An operator who is authorized to operate the item management device 5 can take in and out the stored items stored in the storage unit 71.

[0061] Furthermore, the storage unit 71 limits the operators who can put items in and take items out of each storage unit 72. For this reason, each storage unit 72 is provided with an electronic key 73. The electronic key 73 unlocks only the storage units 72 that are permitted for an authenticated operator to put items in and take items out of, and keeps the other storage units 72 locked. This allows the worker to put items in and take items out only from storage units 72 for which he or she has permission.

[0062] Furthermore, each storage unit 72 may be equipped with an article sensor 74. The article sensor 74 detects whether or not an article is stored in the storage unit 72. By providing the article sensor 74 in each storage unit 72, the storage unit 71 can manage the articles stored in the storage unit 72.

[0063] The control unit 50 includes a processor such as a CPU, and controls the operation of the item management device 5. Specifically, the control unit 50 controls the item management process and executes various functions associated with the item management process. For example, the control unit 50 includes a lock / unlock control unit 51, an authentication communication control unit 52, a permission unit 53, and a log collection control unit 54.

[0064] The locking / unlocking control unit 51 controls the operation of the storage unit 71 in response to an operation performed by an operator on the operation unit 62. For example, when an authorized operator attempts to operate the article management device 5, the locking / unlocking control unit 51 permits the opening and closing of the storage unit 72. Furthermore, the locking / unlocking control unit 51 unlocks the electronic key 73 of the storage unit 72 that the authenticated operator is permitted to use to put in and take out stored items.

[0065] The authentication communication control unit 52 transmits the captured image 38 and the identification information 39 stored in the memory unit 65 to the currency processing device 2 via the communication unit 64, receives the authentication result 40 from the currency processing device 2 and stores it in the memory unit 65. The authentication communication control unit 52 may transmit an authentication request to the currency processing device 2 in addition to the captured image 38 and the identification information 39.

[0066] In other words, the other processing device 3 such as the goods management device 5 does not have an authentication unit 12, and acquires information necessary for authentication such as a photographed image 38 and identification information 39, and authentication is performed in the authentication unit 12 of the currency processing device 2. The other processing device 3 such as the goods management device 5 then receives the authentication result 40 output by the authentication unit 12 of the currency processing device 2, and controls whether or not the operator can operate the other processing device 3.

[0067] Since the goods management device 5 manages stored items, the control unit 50 does not require high performance. In contrast, the authentication unit 12 requires high processing power, so if the authentication unit 12 is to be installed in the goods management device 5, it becomes necessary to improve the performance of the control unit 50. According to this embodiment, the other processing devices 3 such as the goods management device 5 do not have an authentication unit 12, and authentication of an operator attempting to operate the other processing devices 3 can be performed collectively by the authentication unit 12 of the currency processing device 2, so that the other processing devices 3 can perform appropriate authentication while preventing excessive increase in performance.

[0068] The permission unit 53 identifies the content of the process corresponding to the identification information 39 output as the authentication result 40 from the user registration table 45, and permits the authenticated operator to execute the identified process. In other words, the authenticated operator can only execute processes permitted by the permission unit 53.

[0069] As shown in Fig. 5, the user registration table 45 is a table in which the identification information 39 of each operator is linked to the content of processing permitted for each operator. Instead of the identification information 39 of the operator acquired by the card reader 63, the user registration table 45 may be a table in which unique information for identifying the operator is linked to the content of processing. The user registration table 45 may specify information related to only the operator whose permitted processing content includes processing on the item management device 5, but may also include information on operators who are permitted to process processing devices 3 other than the item management device 5, as in the authentication table 41 shown in Fig. 3. In this case, the user registration table 45 does not need to include authentication feature information, but may include authentication feature information in the sense that the user registration table 45 is used as the authentication table 41.

[0070] When an unauthorized operation is performed, the permission unit 53 may control the operation so as not to accept it, and may also display an error message or other message on the touch panel 62A of the operation unit 62 to indicate that the operation cannot be performed.

[0071] The log collection control unit 54 stores the processed contents as log data 46 in the storage unit 65. The log data 46 is stored by linking the processed contents with information on the operator who performed the process. The log data 46 may further be linked with the date and time when the process was performed. The information on the operator may be the photographed image 38 or the identification information 39, or may be other information that can identify the operator. The log data 46 may include the authentication result 40 corresponding to the authentication error obtained from the authentication unit 12 of the currency processing device 2, or information that an operation without authority has been performed. The log data 43 may be stored when the operation (processing) is completed, or when a predetermined process is performed. For example, the log data 46 is stored when a door provided in the storage 72 is opened or closed.

[0072] By storing such log data 46 in a searchable state, it is possible to analyze the log data 46 at a later date and perform security management. In addition, by taking statistics on the processed contents, the data can be used for maintenance and function improvement.

[0073] The other processing devices 3 constituting the currency handling system 1 may include at least one of the goods management device 5, the currency management device 6, and the key management device 7.

[0074] The currency management device 6 executes currency management processing to store and manage bundles of banknotes and wrapped coins. The currency management device 6 is equipped with a sensor in a removable storage 72 to detect the balance of the stored bundles of banknotes and wrapped coins. When a bundle of banknotes or wrapped coins is inserted or removed, the currency management device 6 accepts input of the denomination and quantity to be inserted or removed, and after processing, verifies the difference between the input value and the balance. The currency management device 6 limits the operators who execute the currency management processing, and performs authentication processing in the same way as the goods management device 5.

[0075] The key management device 7 has multiple holding units, and holds and manages key holders to which keys are connected in the holding units. The key management device 7 manages which keys are being held and which keys have been taken out. The key management device 7 is provided with an electromagnetic lock for each holding unit, and the doors covering the holding units are also locked. The key management device 7 grants authority to unlock the electromagnetic locks and doors of the holding units to specific operators, and when the operator unlocks the electromagnetic locks and doors of the holding units, an authentication process is performed in the same way as the goods management device 5.

[0076] [Authentication process] Next, the operation flow of the processing devices (the currency processing device 2 and the other processing device 3) including the authentication process will be described using FIG. 6 while referring to FIG. 1, FIG. 2 and FIG.

[0077] When an operator attempts to operate the currency handling device 2 (step #1 in FIG. 6), first, the card reader 23 reads the operator's ID card to obtain the operator's identification information 39 (step #2 in FIG. 6). Next, the imaging device 20 of the currency handling device 2 photographs the operator's face to obtain biometric information (captured image 38), and the authentication unit 12 of the currency handling device 2 identifies the operator corresponding to the biometric information (step #3 in FIG. 6).

[0078] Next, the authentication unit 12 of the currency handling device 2 checks whether the operator corresponding to the identification information 39 matches the operator identified from the biometric information (step #4 in FIG. 6).

[0079] If the operators match (Step #4 Yes in FIG. 6), the authentication unit 12 of the currency handling device 2 refers to the authentication table 41 to identify the content of the processing granted to the operator (Step #5 in FIG. 6). If the content of the processing permitted for this operator on the currency handling device 2 is not specified in the authentication table 41 (Step #5 No in FIG. 6) or if the operators do not match (Step #4 No in FIG. 6), the authentication unit 12 outputs and notifies an authentication error (Step #6 in FIG. 6).

[0080] If the content of the process is specified (step #5 Yes in FIG. 6), the permission unit 13 of the currency processing device 2 permits the execution of currency processing within the scope of the specified content of the process in accordance with the operation of the operator, and the process is executed (step #7 in FIG. 6). Note that if the operator performs an operation to execute a process that is not permitted, the permission unit 13 may output an authentication error.

[0081] Furthermore, when a process is executed, the storage unit 25 may store log data 43 in which the processed content is linked to information about the operator who performed the process.

[0082] Next, when the operator attempts to operate another processing device 3 (step #8 in FIG. 6), the card reader 63 of the other processing device 3 first reads the operator's ID card to obtain the operator's identification information 39 (step #9 in FIG. 6). Furthermore, the imaging device 60 of the other processing device 3 captures an image of the operator's face to obtain biometric information (captured image 38) (step #10 in FIG. 6).

[0083] Then, the authentication communication control unit 52 of the other processing device 3 transmits the identification information 39 and the biometric information to the currency processing device 2 via the communication unit 64 (step #11 in FIG. 6).

[0084] When the communication unit 24 of the currency handling device 2 receives the identification information 39 and the biometric information, the authentication unit 12 of the currency handling device 2 first identifies the operator corresponding to the identification information 39 from the authentication table 41 (step #12 in FIG. 6).

[0085] Next, the authentication unit 12 of the currency processing device 2 identifies the authentication feature information of the operator corresponding to the identification information 39 from the authentication table 41, and performs facial authentication on the authentication feature information and the biometric information (facial photograph 38) to confirm whether the operator corresponding to the biometric information and the operator corresponding to the identification information 39 are the same person (match) (step #13 in Figure 6).

[0086] If the operator matches (step #13 Yes in FIG. 6), the authentication unit 12 of the currency processing device 2 refers to the authentication table 41 to identify the content of the processing assigned to the operator (step #14 in FIG. 6). If the operator is not specified in the authentication table 41 (step #14 No in FIG. 6) or if the operator does not match (step #13 No in FIG. 6), the authentication unit 12 sends an authentication error to the other processing device 3 (step #15 in FIG. 6). When the communication unit 64 of the other processing device 3 receives the authentication error, the other processing device 3 notifies the authentication error (step #16 in FIG. 6). This notification can be made by displaying it on the touch panel 62A of the operation unit 62 of the other processing device 3.

[0087] The authentication communication control unit 52 may transmit an authentication request command in addition to the identification information 39 and biometric information, and the authentication unit 12 of the currency processing device 2 may perform authentication by receiving the authentication request command, the identification information 39, and the biometric information. Furthermore, the authentication communication control unit 52 may be configured to transmit the identification ID of the other processing device 3 that is to perform processing, and the authentication unit 12 of the currency processing device 2 may be configured to confirm from the identification ID whether or not it is the other processing device 3 that it should authenticate, and to perform authentication processing only on information from the other processing device 3 that it should authenticate.

[0088] If the content of the process is identified (step #14 Yes in FIG. 6), the communication unit 24 of the currency processing device 2 transmits the identified content of the process as an authentication result 40 to the other processing device 3 (step #17 in FIG. 6). At this time, a processing device ID that identifies the other processing device 3 that obtained the photographed image 38 and the identification information 39 may be transmitted to the other processing device 3 together with the authentication result 40. This allows the other processing device 3 to confirm whether the authentication result 40 is for itself. In this case, the processing device ID is transmitted from the other processing device 3 together with the photographed image 38 and the identification information 39.

[0089] When the communication unit 64 of the other processing device 3 receives the content of the process, the permission unit 53 of the other processing device 3 permits execution of the process according to the operator's operation within the scope of the specified content of the process, and the process is executed (step #18 in FIG. 6). If an unauthorized operation is performed, the permission unit 53 may output an authentication error. If an authentication error is output in the above process, the operator's operation is rejected.

[0090] Furthermore, when a process is executed, the storage unit 65 may store log data 46 in which the processed content is linked to information about the operator who performed the process.

[0091] [Authentication unit startup process] Next, a process flow of authentication unit startup processing for putting the communication unit 24 and the authentication unit 12 into an operating state will be described using FIG. 7 with reference to FIGS. 1, 2, and 4.

[0092] When an operator attempts to operate another processing device 3, the card reader 63 of the other processing device 3 reads the operator's ID card to obtain the operator's identification information 39, and the imaging device 60 of the other processing device 3 photographs the operator's face to obtain biometric information (captured image 38) (step #1 in FIG. 7).

[0093] Next, the authentication communication control unit 52 of the other processing device 3 checks whether it is within the operating time zone of the currency processing device 2 (step #2 in FIG. 7). For example, the authentication communication control unit 52 is equipped with a clock, and a table listing the operating time zones of the currency processing device 2 is stored in the memory unit 65, and the authentication communication control unit 52 can check whether the currency processing device 2 is within the operating time zone based on the table and the current time. Alternatively, the currency processing device 2 may transmit a start-up signal while in operation, and the authentication communication control unit 52 may check whether it is within the operating time zone of the currency processing device 2 based on whether the communication unit 64 has received the start-up signal.

[0094] If it is during the operating time of the currency processing device 2 (Yes in step #2 of FIG. 7), the authentication communication control unit 52 transmits the captured image 38 and the identification information 39 to the currency processing device 2 via the communication unit 64 (step #3 of FIG. 7). The authentication unit 12 of the currency processing device 2 receives the captured image 38 and the identification information 39 via the communication unit 24, and authenticates the operator attempting to operate the other processing device 3 based on the captured image 38 and the identification information 39 as described above. The authentication unit 12 then transmits the authentication result 40 to the other processing device 3 via the communication unit 24.

[0095] Upon receiving the authentication result 40 from the currency processing device 2, the other processing device 3 allows the operator to operate the other processing device 3 based on the authentication result 40, and the other processing device 3 executes processing according to the operation (step #4 in Figure 7).

[0096] If it is not during the operating hours of the currency handling device 2 (No in step #2 of FIG. 7), the authentication communication control unit 52 of the other processing device 3 sends an authentication request to the currency handling device 2 (step #5 of FIG. 7).

[0097] In response to the authentication request being sent, the start-up control unit 35 of the currency processing device 2 starts up the communication unit 24 and the authentication unit 12 to put them into an operational state (step #6 in Figure 7), and once the communication unit 24 and the authentication unit 12 are in an operational state, the start-up control unit 35 transmits a start-up signal to the other processing device 3 via the communication unit 24 (step #7 in Figure 7).

[0098] Upon receiving the activation signal (step #8 in FIG. 7), the authentication communication control unit 52 of the other processing device 3 transmits the captured image 38 and the identification information 39 to the currency processing device 2 via the communication unit 64 (step #9 in FIG. 7).

[0099] Upon receiving the captured image 38 and the identification information 39 via the communication unit 24 (step #10 in FIG. 7), the authentication unit 12 of the currency processing device 2 authenticates the operator attempting to operate the other processing device 3 based on the captured image 38 and the identification information 39 as described above (step #11 in FIG. 7). The authentication unit 12 then transmits an authentication result 40 to the other processing device 3 via the communication unit 24 (step #12 in FIG. 7). At this time, as described above, the authentication unit 12 may transmit a processing device ID for identifying the other processing device 3 together with the authentication result 40.

[0100] When the other processing device 3 receives the authentication result 40 from the currency processing device 2 (step #13 in FIG. 7), it determines whether or not the process can be executed based on the authentication result 40. If it is determined that the process can be executed, the other processing device 3 allows the operator to operate the other processing device 3 and executes the process according to the operation. If it is determined that the process cannot be executed, the other processing device 3 does not allow the process to be executed and notifies the operator that it cannot be executed.

[0101] In the above process flow, the authentication request may not be transmitted, but the captured image 38 and the identification information 39 may be transmitted. In this case, upon receiving the transmission of the captured image 38 and the identification information 39, the start-up control unit 35 starts up the communication unit 24 and the authentication unit 12, and performs authentication based on the captured image 38 and the identification information 39.

[0102] [Another embodiment] (1) The configuration is not limited to one in which the currency processing device 2 performs authentication and the other processing device 3 permits the execution of a process, but may instead be one in which the currency processing device 2 performs authentication and permits the execution of a process. In this case, the other processing device 3 does not have a permission unit 53, and upon receiving identification information 39 and photographed image 38 from the other processing device 3, the permission unit 13 of the currency processing device 2 identifies the contents of the authenticated and permitted process and transmits the contents of the permitted process to the other processing device 3 together with or in place of the authentication result 40. Then, the control unit 50 of the other processing device 3 permits the operator to perform an operation corresponding to the contents of the permitted process only when the operator performs an operation corresponding to the contents of the permitted process.

[0103] This makes it possible to further simplify the configuration of the other processing devices 3 and simplify the configuration of the currency processing system 1, while also allowing proper authentication and processing to be performed by authorized operators.

[0104] (2) In each of the above embodiments, the authentication unit 12 is not limited to being provided only in the currency processing device 2, but may be provided in any of the other processing devices 3. Furthermore, the authentication unit 12 is not limited to being provided in only one of the processing devices that make up the currency handling system 1, but may be provided in one or more of the currency processing device 2 and the other processing devices 3. In other words, the authentication unit 12 does not need to be provided in each of the currency processing device 2 and the other processing devices 3, but may be provided in some of the currency processing device 2 and the other processing devices 3.

[0105] An authentication unit 12 is provided only in some of the processing devices depending on the functions of each processing device, and processing devices that do not have an authentication unit 12 are configured to obtain authentication results 40 from a processing device that has an authentication unit 12, thereby making it possible for each processing device to perform appropriate authentication while preventing excessive functions from being given to it.

[0106] (3) In each of the above embodiments, the biometric information is not limited to the captured image 38 of the operator's face, but may be a still image of the operator's skeleton, the operator's whole or part of the body, a retina, a fingerprint, or the like, or a moving image of the operator's gait, etc. Furthermore, the biometric information is not limited to the imaging device 20, and may be acquired by an appropriate information acquisition means according to the biometric information.

[0107] In this way, by using various types of information as biometric information, more appropriate authentication can be performed depending on the situation.

[0108] (4) In each of the above embodiments, the imaging device 20 and the imaging device 60 may be a surveillance camera that monitors the periphery of the installed currency processing device 2 or another processing device 3. The imaging device 20 and the imaging device 60 may constantly capture the front or periphery of the processing device in a standby state in which no processing is being performed. Alternatively, the imaging device 20 and the imaging device 60 may be linked to a human sensor, and capture the front or periphery of the processing device only when a person approaches the periphery of the processing device in a standby state in which no processing is being performed. The imaging device 20 and the imaging device 60 capture the face of the operator when the operator tries to operate the processing device, such as when the identification information 39 is read by the card reader 23 or the card reader 63. When capturing the face, the imaging device 20 and the imaging device 60 may change the angle of view from a state in which the periphery of the processing device is captured at a wide angle to the periphery of the operator's face. The imaging device 20 and the imaging device 60 may also capture the operation performed by the operator while the operator is performing processing. Furthermore, the imaging device 20 and the imaging device 60 are not limited to being installed directly on the currency processing device 2 or other processing devices 3, but may be separately arranged in the vicinity of the currency processing device 2 or other processing devices 3.

[0109] In this way, by using a surveillance camera as the imaging device 20 and the imaging device 60, it is not necessary to provide separate imaging devices 20 and 60, and authentication can be performed appropriately with a simple configuration. By providing the imaging devices 20 and 60 in any state, it is possible to perform optimal imaging depending on the situation.

[0110] (5) In each of the above embodiments, authentication is not limited to a configuration in which identification information 39 and captured image 38 are used to confirm whether the operator corresponding to identification information 39 matches the operator identified from captured image 38. A configuration in which the operator registered in authentication table 41 is identified from captured image 38 without obtaining identification information 39 is also possible.

[0111] With this configuration, authentication can be performed more easily.

[0112] (6) In each of the above embodiments, the other processing device 3 may include a device used by a customer, such as a counter reception machine or an electronic bookkeeping desk, in a financial institution. The other processing device 3 may also be a POS register, an electronic money charging machine, a settlement machine, etc., in a retail store.

[0113] (7) In each of the above embodiments, the authority to operate each processing device may be given to each operator in a lump sum for all the processes performed by the processing device, but if the processing device can execute multiple functions (processes), each operator may be given the authority to operate each function separately. For example, in the case of the item management device 5, an operator who can take in and out items from each storage unit 72 may be set.

[0114] This allows the authority given to the operator to be given for more detailed processing.

[0115] (8) In each of the above embodiments, user registration table 45 may be a table in which an operator is linked to the processing content that the operator is authorized to perform, or a table in which operators are assigned to multiple groups and the groups are linked to the processing content that the operators in each group are authorized to perform.

[0116] (9) In each of the above embodiments, the currency handling device 2 and the other processing device 3 are not limited to being configured with the above-mentioned functional blocks, and may be configured with any functional blocks. For example, each functional block of the currency handling device 2 and the other processing device 3 may be further subdivided, or conversely, some or all of the functional blocks may be combined. Furthermore, the functions of the currency handling device 2 and the other processing device 3 are not limited to the above-mentioned functional blocks, and may be realized by a method executed by any functional block. Furthermore, some or all of the functions of the currency handling device 2 and the other processing device 3 may be configured with software. A program related to the software is stored in any storage device such as the storage unit 25, the storage unit 65, etc., and is executed by a processor such as a CPU included in the control unit 10 or the control unit 50, or a processor provided separately.

[0117] (10) In each of the above embodiments, the configuration is not limited to one in which the start-up control unit 35 is provided, and a configuration in which the time period during which the communication unit 24 and the authentication unit 12 are in an active state is controlled may also be used.

[0118] For example, the configuration may be such that the operating states of the communication unit 24 and the authentication unit 12 are maintained even during non-operating hours of the currency handling device 2. Alternatively, the configuration may be such that the operating states of the communication unit 24 and the authentication unit 12 are maintained even during non-operating hours of the currency handling device 2 as long as the other handling device 3 is operating.

[0119] This makes it possible to suppress the need to increase the performance of the currency processing device 2 without setting up a startup control unit 35, and to authenticate operators who attempt to operate other processing devices 3 even during non-operating hours for the currency processing device 2. [Industrial Applicability]

[0120] The present invention can be applied to a currency handling device that processes currency, a currency handling system that includes a currency handling device, and other processing devices that are included in a currency handling system. [Explanation of symbols]

[0121] 1. Currency Handling System 2. Currency processing device (first processing device) 3. Other processing device (second processing device) 10 Control section 12 Authentication Section 20 Imaging device (first information acquisition unit) 24 Communication unit (first communication unit) 25 Memory section 35 Start control section 38 Photographed images (biometric information) 40 Authentication Result 50 Control section 60 Imaging device (second information acquisition unit) 64 Communication unit (second communication unit) 65 Storage section

Claims

1. A currency handling system including a first processing device and a second processing device that execute a process in response to an operation by an authenticated operator, wherein at least one of the first processing device or the second processing device is capable of executing a currency process that dispenses or stores currency as the process; The first processing device includes: a first information acquisition unit that acquires first biometric information of an operator who is to operate the first processing device; an authentication unit that performs authentication of an operator based on the first biometric information and outputs an authentication result; a first communication unit that communicates with the second processing device; a process execution unit that executes the predetermined process executed by the first processing device; a start-up control unit capable of switching the first communication unit and the authentication unit between an operating state and a non-operating state when the first processing device is not in operation; The second processing device includes: a second information acquisition unit that acquires second biometric information of an operator who is to operate the second processing device; a second communication unit that communicates with the first processing device; The second communication unit transmits the second biological information acquired by the second information acquisition unit to the first processing device; the authentication unit performs authentication of an operator based on the second biometric information received by the first communication unit and outputs an authentication result; the first communication unit transmits an authentication result based on the second biometric information output by the authentication unit to the second processing device; The first processing device and the second processing device have different operating time periods, A currency handling system in which the startup control unit puts the first communication unit and the authentication unit into the operating state at least when authenticating an operator who operates the second processing device.

2. during a non-operating time period of the first processing device, the second processing device transmits an authentication request to the first processing device when authenticating an operator; The currency handling system according to claim 1 , wherein the start-up control unit places the first communication unit and the authentication unit in the operating state when the authentication request is received.

3. The currency processing system of claim 1 , wherein the startup control unit maintains the operating state of the first communication unit and the authentication unit even during non-operating hours of the first processing device.

4. The currency processing system of claim 1, wherein the startup control unit maintains the operating state of the first communication unit and the authentication unit during the operating hours of the second processing device, even during the non-operating hours of the first processing device.

5. A currency processing device that is communicably connected to other processing devices and that allows an operator who is authorized to operate it to dispense and store currency as currency processing, an information acquisition unit that acquires first biometric information of an operator; A communication unit that communicates with the other processing device; an authentication unit that performs authentication of an operator based on the first biometric information and outputs an authentication result; A processing execution unit that executes the currency processing; A start-up control unit that can switch the communication unit and the authentication unit between an operating state and a non-operating state when the currency processing device is not in operation, The operating time period is different from that of the other processing devices, The startup control unit of this currency processing device puts the communication unit and the authentication unit into the operating state when authenticating an operator who operates the other processing device.

6. During a non-operating time period of the currency processing device, when authenticating an operator, the other processing device transmits an authentication request to the currency processing device; The currency processing device according to claim 5 , wherein the start-up control unit puts the communication unit and the authentication unit into the operating state when the authentication request is received.

7. The currency processing device according to claim 5 , wherein the startup control unit maintains the operating state of the communication unit and the authentication unit even during non-operating hours of the currency processing device.

8. The currency processing device as described in claim 5, wherein the startup control unit maintains the operating state of the communication unit and the authentication unit during operating hours of the other processing devices, even during non-operating hours of the currency processing device.

9. An operating state control method for controlling an operating state of a first processing device in a currency processing system including a first processing device and a second processing device which execute processes in response to operations by an authenticated operator, wherein at least one of the first processing device and the second processing device is capable of executing currency processing which dispenses or stores currency as the process, the first processing device and the second processing device have different operating time periods, and authentication is performed by the first processing device, determining whether the first processing device is in operation in response to the second processing device being operated; a step of, when the first processing device is in operation, authenticating an operator who operates the second processing device by the first processing device; sending an authentication request from the second processing device to the first processing device if the first processing device is not operational; and when the authentication request is received, the first processing device becomes capable of being authenticated, and authenticates an operator who operates the second processing device.

Images