Admission management device, admission management method, and computer program

Abstract

This entry management device is provided with a pre-authentication unit and a notification unit, in order to have a function of displaying guidance information for supporting a person who is unaccustomed to an authentication process, while providing a means for avoiding problems caused by the display of the guidance information. The pre-authentication unit executes a pre-authentication process of determining whether or not a person to be authenticated is a registered person, by cross-referencing pre-authentication information regarding the person to be authenticated and registered information for pre-authentication stored in a database. The notification unit determines, using the result of the pre-authentication process, the content to be issued to the person to be authenticated as guidance information, and outputs the guidance information to a display device for displaying the guidance information. The guidance information notifies the person to be authenticated of an authentication process for determining whether or not the person to be authenticated is permitted to enter a restricted area.

Description

Technical Field

[0001] The present invention relates to a technique for managing entry into a restricted area where only authorized persons can enter, using authentication technology.

Background Art

[0002] At the entrance to a restricted area where only authorized persons can enter, for example, a flap gate may be installed, and entry into the restricted area may be regulated by this flap gate. The opening and closing of the flap gate is controlled, for example, using authentication technology. That is, information (such as a password, user ID (Identification), biometric information such as a face or fingerprint) presented by an entry requester who requests entry into the restricted area is compared with information of a registered person registered in advance. As a result, when the information presented by the entry requester (in other words, the authentication target person) matches or is similar to the information of the registered person, the entry requester is determined to be a registered person, and the flap gate opens and entry is permitted.

[0003] Patent Document 1 (Japanese Patent Application Laid-Open No. 2006-293913) discloses a technique for presenting guidance information corresponding to a person when it is determined from a face image of a person entering or leaving that the person is a person registered in advance. Further, Patent Document 2 (Japanese Patent Application Laid-Open No. 2005-346345) discloses a configuration in which authentication is performed using an authentication number recorded in an IC tag carried by a user when entering a venue.

Prior Art Documents

Patent Documents

[0004]

Patent Document 1

Patent Document 2

Summary of the Invention

Problems to be Solved by the Invention

[0005] Incidentally, for the authentication process of determining whether to permit entry into the restricted area, for example, a message (hint information) such as "Please press your middle finger against the reading device" may be notified by the display device to an applicant for entry approaching the flap gate. That is, information that is desired to be presented to the applicant for entry (the person to be authenticated) for the authentication process may be notified to the applicant for entry by the display device on the front side of the flap gate.

[0006] The display of such hint information is helpful for those who are not accustomed to the authentication process when passing through the flap gate, but may cause the following situation. That is, since the hint information is always the same, the applicant for entry may become accustomed to the display of the hint information. In this case, the applicant for entry may stop looking at the hint information. Assume that the information that the applicant for entry must present for the authentication process (hereinafter referred to as the presentation required information) is changed in such a situation. In this case, although the content of the hint information is changed according to the change of the presentation required information, the applicant for entry who has become accustomed to the display of the hint information presents the presentation required information before the change without looking at the hint information and fails the authentication. In this case, for example, the applicant for entry will look at the hint information again, notice the change in the presentation required information, and present the presentation required information again. For this reason, since the applicant for entry will stop in front of the flap gate, it is conceivable that a situation will occur in which the subsequent applicants for entry will stay on the front side of the flap gate.

[0007] In addition, there is also a problem that the display of the hint information may give a hint for breaking the authentication to a person who tries to pass through the flap gate by pretending to be a registered person (also referred to as an attacker).

[0008] The present invention has been conceived to solve the above problems. That is, the main object of the present invention is to provide a technology that has a function of displaying guidance information (hint information) for assisting those who are not accustomed to the authentication process and avoids problems caused by the display of the guidance information (hint information).

Means for Solving the Problem

[0009] In order to achieve the above object, in one aspect, the entrance management device according to the present invention A pre-authentication unit that executes a pre-authentication process for determining whether the authentication target person is the registered person by collating the pre-authentication information regarding the authentication target person for whom the admissibility of entry into the restricted area is determined with the pre-authentication registered information stored as the authentication registration information in a database in which the authentication registration information indicating that the person is a registered person permitted to enter the restricted area is stored; A notification unit that determines, as guidance information, the content to be notified to the authentication target person regarding the authentication process for determining the admissibility of entry of the authentication target person into the restricted area, using the result of the pre-authentication process, and outputs the guidance information to a display device that displays the information; is provided.

[0010] Also, in one aspect, the entrance management method according to the present invention by a computer, executes a pre-authentication process for determining whether the authentication target person is the registered person by collating the pre-authentication information regarding the authentication target person for whom the admissibility of entry into the restricted area is determined with the pre-authentication registered information stored in a database in which the authentication registration information indicating that the person is a registered person permitted to enter the restricted area is stored, determines, as guidance information, the content to be notified to the authentication target person regarding the authentication process for determining the admissibility of entry of the authentication target person into the restricted area, using the result of the pre-authentication process, and outputs the guidance information to a display device that displays the information.

[0011] Furthermore, in one aspect, the program storage medium according to the present invention By collating pre - authentication registration information stored in a database storing pre - authentication information regarding an authentication target person whose permission to enter a restricted area is determined and authentication registration information indicating that the person is a registered person permitted to enter the restricted area, a pre - authentication process for determining whether the authentication target person is the registered person is executed; Regarding the authentication process for determining whether the authentication target person can enter the restricted area, the content to be notified to the authentication target person is determined as guidance information using the result of the pre - authentication process, and the process of outputting it to a display device that displays the guidance information is A computer program that causes a computer to execute is stored.

Effect of the Invention

[0012] According to the present invention, it is possible to avoid problems caused by the display of guidance information (hint information) while having a function of displaying guidance information (hint information) to assist those who are not accustomed to the authentication process.

Brief Description of the Drawings

[0013]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Figure 6

Figure 7

Figure 8

Figure 9

Figure 10

Figure 11

Figure 12

Figure 13

Figure 14

Figure 15

Figure 16

Embodiments for Carrying Out the Invention

[0014] Hereinafter, embodiments according to the present invention will be described with reference to the drawings.

[0015] <First Embodiment> FIG. 1 is a block diagram for explaining the configuration of the admission management device of the first embodiment according to the present invention. This admission management device 2 is incorporated into the admission management system 1 and is a device for managing admission to a restricted area. Here, the restricted area is an area where only those who have been permitted to enter can enter.

[0016] FIG. 2 is a diagram for explaining the admission management system 1 into which the admission management device 2 is incorporated. The admission management system 1 is configured to include an admission management device 2, a photographing device 3, a display device 4, a reading device 5, an opening / closing device 6, and a flap gate 7.

[0017] The flapper gate 7 is installed at the entrance of the restricted area and opens and closes to open or close the entrance of the restricted area. The opening and closing device 6 is a driving device that opens and closes the flapper gate 7. The opening and closing device 6 opens and closes the flapper gate 7 according to an instruction output from the entrance management device 2.

[0018] The photographing device 3 is a device that photographs a person attempting to enter the restricted area. The entrance management system 1 has a function of determining whether to permit a person attempting to enter the restricted area to enter. That is, here, the person attempting to enter the restricted area is the authentication target person 10, and it is determined whether to permit entry into the restricted area. In the entrance management system 1, two types of authentication processes, namely a pre-authentication process and an authentication process (main authentication process), are executed for the authentication target person 10. In the first embodiment, the photographing device 3 acquires information of the authentication target person 10 used in the pre-authentication process and outputs the information as pre-authentication information. That is, the photographing device 3 is adjusted in terms of installation position and photographing direction so that the authentication target person 10 can be photographed and the information of the authentication target person 10 used in the pre-authentication process can be acquired. For example, when face authentication is performed as pre-authentication, the installation position and photographing direction are adjusted so that a face image of the authentication target person 10, which is pre-authentication information for face authentication, can be acquired. Also, when gait authentication is performed as pre-authentication, the installation position and photographing direction are adjusted so that a video of the way the authentication target person 10 walks, which is pre-authentication information for gait authentication, can be acquired. Thus, the photographing device 3 functions as a pre-authentication information acquisition device that acquires pre-authentication information. Note that examples of pre-authentication processes such as face authentication and gait authentication have been given, but the pre-authentication process is not limited to these. In the first embodiment, the pre-authentication is authentication using an image photographed by the photographing device 3, and any authentication other than face authentication and gait authentication may be adopted as the pre-authentication as long as it is an authentication process using information that can be acquired by the photographing device 3.

[0019] In the entrance management system 1, fingerprint authentication is adopted as the authentication process (this authentication process). The reading device 5 is a device that acquires (reads) an image of the fingerprint of the finger of the person to be authenticated 10. That is, here, the reading device 5 functions as an authentication acquisition device that acquires information used in the authentication process from the person to be authenticated 10.

[0020] The display device 4 is a device that displays the information sent from the entrance management device 2, and is installed with its screen height, orientation, etc. adjusted so that the person to be authenticated 10 heading towards the flap gate 7 can view (read) the displayed information.

[0021] As shown in FIG. 1, the entrance management device 2 is connected to a photographing device 3, a display device 4, a reading device 5, an opening / closing device 6, and a database 8. The database 8 is a storage device that stores authentication registration information of persons (hereinafter also referred to as registered persons) who are permitted to enter the restricted area. The authentication registration information is, here, information used in the process of determining that a person is a registered person (authentication process or pre-authentication process). For example, in the case of face authentication, it is the face image of the registered person, and in the case of fingerprint authentication, it is the fingerprint information of the registered person. Such authentication registration information is associated with, for example, registered person identification information for identifying the registered person. Further, in the database 8, an entry / exit history regarding the restricted area of the registered person is stored in association with the registered person identification information.

[0022] The entrance management device 2 is a computer device and includes a control device 20 and a storage device 22. The storage device 22 includes a storage medium for storing data and a computer program (hereinafter also referred to as a program) 23. There are multiple types of storage devices in the storage device, such as magnetic disk devices and semiconductor memory elements. Furthermore, there are multiple types of semiconductor memory elements, such as RAM (Random Access Memory) and ROM (Read Only Memory). That is, there are many types. The type of the storage device 22 included in the entrance management device 2 is not limited to one. A computer device often includes multiple types of storage devices. Here, the type and number of the storage devices 22 included in the entrance management device 2 are not limited, and the description thereof is omitted. Also, when the entrance management device 2 is provided with multiple types of storage devices 22, they are collectively referred to as the storage device 22.

[0023] In the first embodiment, the storage device 22 stores, as the program 23, a computer program (application) for causing the entrance management device 2 to execute processing related to the entrance management of the restricted area.

[0024] The control device 20 is composed of a processor such as a CPU (Central Processing Unit) or a GPU (Graphics Processing Unit). By reading and executing the program 23 stored in the storage device 22, the control device 20 can have various functions based on the program 23. Here, the control device 20 includes a pre-authentication unit 25, a notification unit 26, an authentication unit 27, and an output unit 28 as functional parts related to the entrance management system 1.

[0025] The pre-authentication unit 25 executes pre-authentication processing using the pre-authentication information, which is the captured image of the person to be authenticated 10 captured by the imaging device 3. That is, as pre-authentication processing, the pre-authentication unit 25 collates the image of the person to be authenticated 10, which is the pre-authentication information acquired by the imaging device 3, with the information corresponding to the pre-authentication information of the registered person included in the authentication registration information in the database 8. For a specific example, when face authentication is set as pre-authentication, the pre-authentication unit 25 collates the face image of the person to be authenticated 10, which is the pre-authentication information acquired by the imaging device 3, with the face image of the registered person in the database 8.

[0026] In the first embodiment, the timing at which the pre-authentication unit 25 starts the pre-authentication processing is before the start of the main authentication processing. For example, it is the timing when the person to be authenticated 10 approaching the flap gate 7 is detected by, for example, the captured image of the imaging device 3 or the human body detection sensor.

[0027] Also, before performing pre-authentication, processing such as extracting the face image of the person to be authenticated 10, which is the pre-authentication information, from the captured image captured by the imaging device 3, and analyzing the walking style of the person to be authenticated 10, which is the pre-authentication information, using the captured image (video) is necessary. Here, the method of such pre-processing for pre-authentication is not limited, and its description is omitted. Also, this pre-processing may be executed by the imaging device 3 or by the entrance management device 2.

[0028] Through such collation processing, the pre-authentication unit 25 determines whether the person to be authenticated 10 is a registered person. And when the pre-authentication unit 25 determines that the person to be authenticated 10 is a registered person, as further pre-authentication processing, it identifies the registered person corresponding to the person to be authenticated 10 and extracts the registration identification information of the identified registered person. Note that there are various processing methods for authentication processing such as face authentication and gait authentication set as pre-authentication and using the information acquired by the imaging device 3. Here, as long as it is possible to determine whether the person to be authenticated 10 is a registered person and further identify the person to be authenticated who is a registered person, the processing method is not limited, and its description is omitted.

[0029] The notification unit 26 determines, using the authentication result by the pre-authentication unit 25, the content to be notified to the authentication target person 10 by the display device 4 as guidance information. That is, the storage device 22 stores guidance notification data that is referred to when determining the notification content. FIG. 3 shows a specific example of the guidance notification data. In the example of FIG. 3, three types of notification contents are set as the guidance information, and different categories are associated with each type. An example of the classification contents of categories A, B, and C shown in FIG. 3 is shown in FIG. 4. The data shown in FIG. 4 is also stored in the storage device 22. When the data shown in FIGS. 3 and 4 is referred to by the notification unit 26, the notification unit 26 determines the following notification content as the content to be notified to the authentication target person 10. That is, when it is determined by the pre-authentication unit 25 that the authentication target person 10 is a registered person (pre-authentication OK) and the number of entries of the authentication target person 10 (that is, the registered person) into the restricted area is equal to or more than the threshold value, the notification unit 26 determines not to display the guidance (there is no content to notify). The number of entries is calculated from the entry / exit history associated with the registered person identification information in the database 8 regarding the authentication target person 10 (that is, the registered person).

[0030] When it is determined not to display the guidance, the notification unit 26 outputs, to the display device 4, information indicating that the guidance is not to be displayed as the guidance information. In this case, the display device 4 does not display the guidance information regarding the authentication process, and if the screen display was off, it maintains the off state as it is, or if a landscape image indicating a standby state or the like was being displayed, it maintains the display of the landscape image as it is. That is, since a registered person whose number of entries into the restricted area is equal to or more than the threshold value has performed the authentication process many times enough to be able to perform the authentication process smoothly even without the guidance regarding the authentication process (this authentication process), it is assumed that the guidance regarding the authentication process is unnecessary. For this reason, the notification unit 26 determines not to notify the guidance and outputs information indicating that fact as the guidance information to the display device 4.

[0031] Also, when the pre-authentication unit 25 determines that the person to be authenticated 10 is a registered user (pre-authentication OK), and the number of times the person to be authenticated 10 enters the restricted area is less than the threshold value, the notification unit 26 determines the notification content "Please press your middle finger against the reading device" in the example of FIG. 3. Then, the notification unit 26 outputs the information representing the notification content to the display device 4 as guidance information. As a result, the display device 4 displays the notification content. That is, it is assumed that it is preferable for a registered user whose number of entries into the restricted area is less than the threshold value to display information guiding the authentication process for smooth authentication processing (this authentication process). Therefore, the notification unit 26 outputs information leading to smooth authentication processing to the display device 4 as guidance information.

[0032] Furthermore, when the pre-authentication unit 25 determines that the person to be authenticated 10 is not a registered user (pre-authentication NG), the notification unit 26 determines the notification content (in the example of FIG. 3, "This is a fingerprint authentication gate") predetermined as the notification content in the case of pre-authentication NG. Then, the notification unit 26 outputs the information representing the notification content to the display device 4 as guidance information. As a result, the display device 4 displays the notification content.

[0033] As described above, the fact that the guidance information is not displayed on the display device 4 for the person to be authenticated 10 who has entered many times and is used to authentication can prevent the person to be authenticated 10 who is used to authentication from getting used to the state where the guidance information is displayed on the display device 4. As a result, for example, when information that wants the person to be authenticated 10 who is used to authentication to pay attention to is displayed on the display device 4, the person to be authenticated 10 who is used to authentication notices the display of the information and can prevent overlooking the confirmation of the information. That is, for example, when information notifying that the finger used for fingerprint authentication has been changed is displayed on the display device 4, the person to be authenticated 10 who is used to authentication can confirm the display content and correctly press the changed finger against the reading device 5. As a result, the need to redo the operations related to the authentication process can be reduced, and the stay of the person to be authenticated 10 in front of the flapper gate 7 due to overlooking the display on the display device 4 can be prevented.

[0034] Also, for the authentication target person 10 who is not used to authentication, the content guiding the authentication process (in other words, hints about authentication) being displayed on the display device 4 enables the authentication target person 10 who is not used to authentication to smoothly perform operations for the authentication process without being confused or making mistakes.

[0035] Furthermore, the fact that the content guiding the authentication process (in other words, hints about authentication) is not displayed on the display device 4 for those whose pre-authentication fails prevents, for example, a person (attacker) who tries to enter by pretending to be a registered person from being given information about the authentication process.

[0036] The authentication unit 27 executes a predetermined authentication process (this authentication process). Here, as described above, fingerprint authentication is set as the authentication process. That is, the authentication unit 27 acquires an image of the fingerprint of the finger of the authentication target person 10 obtained by the reading device 5, and as the authentication process, collates the fingerprint information including the feature amount extracted from the acquired fingerprint image with the fingerprint information of the registered person included in the authentication registration information in the database 8. Then, the authentication unit 27 determines whether to permit the entry of the authentication target person 10 into the restricted area by using the result of the collation. There are various processing methods for fingerprint authentication, and here, the processing method is not limited and its description is omitted.

[0037] Note that there is an authentication method of performing authentication in multiple stages. This authentication method narrows down candidates for registered persons who are considered to be the authentication target person while sequentially performing a plurality of authentication processes, and finally identifies the registered person corresponding to the authentication target person. The plurality of authentication processes are a series of processes. Here, two types of authentication processes, namely pre-authentication processing and authentication processing, are performed, but the result of the pre-authentication processing is not directly related to the authentication processing (this authentication processing), and is different from the multi-stage authentication as described above.

[0038] The output unit 28 outputs information representing the result of the authentication process by the authentication unit 27. That is, when the authentication unit 27 permits the entry of the person to be authenticated 10, the output unit 28 outputs information indicating permission of entry toward the opening / closing device 6. As a result, the opening / closing device 6 operates to open the flap gate 7. The flap gate 7 opened in this way is then closed by the opening / closing device 6 at a predetermined closing timing. Examples of the closing timing include, for example, the timing when a predetermined time has elapsed since the flap gate 7 was opened. Another example of the closing timing is the timing when the human body detection sensor detects the passage of the person to be authenticated 10 when the human body detection sensor is provided at the location where the flap gate 7 has been passed through.

[0039] The output unit 28 further outputs information including information representing the result of the authentication process by the authentication unit 27, the time when the authentication process was executed, and, when the person to be authenticated 10 is a registered person, the registration identification information of the registered person, to the database 8 for addition as an entry / exit history.

[0040] The entry management device 2 of the first embodiment is configured as described above. Next, an example of the operation related to entry management in the entry management device 2 will be described with reference to FIG. 5. FIG. 5 is a flowchart for explaining an example of the operation related to entry management in the entry management device 2.

[0041] For example, when the pre-authentication unit 25 of the entry management device 2 acquires the pre-authentication information included in the captured image by the imaging device 3 (step 101 in FIG. 5), the pre-authentication process is executed (step 102). That is, when the person to be authenticated 10 approaching the flap gate 7 is imaged by the imaging device 3 and the pre-authentication unit 25 acquires the pre-authentication information regarding the person to be authenticated 10 included in the captured image by the imaging device 3, the pre-authentication unit 25 executes the pre-authentication process.

[0042] After the pre-authentication process is completed, the notification unit 26 determines, using the result of the pre-authentication process, the content to be notified to the authentication target person 10 by the display device 4 as guidance information, and outputs the guidance information to the display device 4 (step 103). Thereby, the display device 4 executes a display operation based on the guidance information.

[0043] On the other hand, when the authentication unit 27 acquires, from the reading device 5, information regarding the authentication target person 10 and used in the authentication process (this authentication process) (in the first embodiment, an image of a fingerprint) (step 104), the authentication unit 27 executes the authentication process. That is, the authentication unit 27 determines whether to authenticate the authentication target person 10 by comparing the fingerprint information extracted from the fingerprint image of the authentication target person 10 with the fingerprint information of the registered person stored in the database 8. In other words, it determines whether to permit the authentication target person 10 to enter the restricted area (step 105). According to this determination, if the entry of the authentication target person 10 into the restricted area is permitted, it is determined that the flap gate 7 is to be opened (step 106), and the output unit 28 outputs information indicating that the entry is permitted to the opening / closing device 6. Thereby, the flap gate 7 is opened by the opening / closing device 6. Also, if the authentication unit 27 determines that the entry of the authentication target person 10 into the restricted area is not permitted, it is determined that the flap gate 7 remains closed (step 107), and the entry of the authentication target person 10 is blocked.

[0044] Since the admission management device 2 of the first embodiment is configured as described above, it can achieve the following effects. That is, the admission management device 2 causes the display device 4 to display guidance information for the authentication target person 10 for whom guidance information for authentication processing is assumed, with reference to the result of the pre-authentication process. On the other hand, the admission management device 2 performs display control of the display device 4 such that the guidance information is not displayed on the display device 4 for the authentication target person 10 who is used to the authentication process and for whom guidance information is not considered necessary. That is, the admission management device 2 can support those who are not used to the authentication process by displaying on the display device 4, so that those who are not used to the authentication process can perform the operations for the authentication process without being confused by referring to the guidance information. That is, the admission management device 2 can prevent a situation where a person who is not used to the authentication process stops in front of the flap gate 7 due to unfamiliarity with the authentication process, causing the subsequent person (authentication target person) to be detained. Also, regarding those who are used to the authentication process, the admission management device 2 can prevent those who are used to the authentication process from getting used to the guidance information being displayed on the display device 4 by not displaying the guidance information on the display device 4. For this reason, as described above, for example, when information that is intended to be noticed by an authentication target person 10 who is used to the authentication process is displayed on the display device 4, the authentication target person 10 who is used to the authentication process can notice the display of the information and prevent overlooking the information. That is, for example, when information notifying that the finger used for fingerprint authentication has changed is displayed on the display device 4, the authentication target person 10 who is used to the authentication process can check the display content and correctly press the changed finger against the fingerprint reading device 5. Thereby, since the redoing of the operations related to the authentication process can be reduced, the admission management device 2 can prevent the authentication target person 10 from staying in front of the flap gate 7 due to overlooking the display on the display device 4. In this way, the admission management device 2 can suppress the occurrence of detention of the authentication target person 10 in front of the flap gate 7 by controlling the display of the display device 4.

[0045] Furthermore, when the pre-authentication process determines that the person to be authenticated 10 is not a registered person, the entrance management device 2 does not cause the display device 4 to display guidance information (in other words, hints about authentication) for guiding the authentication process. Thereby, the entrance management device 2 prevents, for example, a person (attacker) who tries to enter by pretending to be a registered person from being given information about the authentication process.

[0046] Therefore, while having the function of displaying guidance information (hint information) to assist a person who is not familiar with the authentication process, the entrance management device 2 can avoid problems caused by the display of the guidance information (hint information).

[0047] Also, since the pre-authentication process by the pre-authentication unit 25 can be said to be a process of acquiring information used for controlling the display of the guidance information by the display device 4, even if the authentication accuracy is lower than that of the authentication process by the authentication unit 27, the processing time can be shortened, and an inexpensive authentication method can be adopted.

[0048] <Second Embodiment> Hereinafter, a second embodiment according to the present invention will be described. In the description of the second embodiment, the same reference numerals are given to the parts having the same names as the components constituting the entrance management system of the first embodiment, and the overlapping description of the common parts is omitted.

[0049] FIG. 6 is a block diagram for explaining the configuration of the entrance management device 2 according to the second embodiment. In the second embodiment, the authentication process executed by the authentication unit 27 is set to RFID (Radio Frequency Identification) authentication as the main authentication process (first authentication process). Further, when the authentication target person 10 fails to be authenticated by RFID authentication (in the case of authentication failure (authentication NG)), keypad authentication is set as the re-challenge authentication process (second authentication process) that the authentication unit 27 executes. RFID authentication is an authentication in which the user ID (Identification) stored in the RF (Radio Frequency) tag held by the authentication target person is read by the receiver 12 using RFID technology, and an authentication process regarding the authentication target person 10 is performed using the read user ID. Keypad authentication is an authentication in which, for example, the user ID and password of the authentication target person 10 are acquired by an input device 13 such as a keyboard or a touch panel, and an authentication process regarding the authentication target person 10 is performed using the acquired user ID and password.

[0050] That is, in the second embodiment, the receiver 12 and the input device 13 are installed near the flap gate 7 installed at the entrance of the restricted area. The entrance management device 2 according to the second embodiment is connected to each of the receiver 12 and the input device 13. Further, in the second embodiment, since fingerprint authentication is not performed, the reading device 5 that acquires the fingerprint image shown in the first embodiment is omitted. Furthermore, in the second embodiment, the shooting range of the shooting device 3 is set so that a plurality of authentication target persons 10 approaching the flap gate 7 can be shot.

[0051] The authentication unit 27 of the entrance management device 2 can execute RFID authentication using the user ID received by the receiver 12 and keypad authentication using the user ID and password input by the input device 13.

[0052] In the second embodiment, when the authentication target person 10 fails to be authenticated by RFID authentication, the display device 4 displays guidance information for guiding the authentication target person 10 to keypad authentication. The pre-authentication unit 25 executes pre-authentication processing in order to provide the notification unit 26 with information related to the display control of the guidance information on the display device 4. That is, the pre-authentication unit 25 starts the pre-authentication processing when it detects that the authentication unit 27 has not authenticated the authentication target person 10 by RFID authentication. The pre-authentication unit 25 uses pre-authentication information that can be obtained from the captured image by the imaging device 3 to execute pre-authentication processing for the authentication target person 10 captured in the captured image. In the second embodiment, the imaging range of the imaging device 3 is set so that a plurality of authentication target persons 10 approaching the flapper gate 7 can be imaged. Therefore, when a plurality of authentication target persons 10 are captured in the same captured image, the pre-authentication unit 25 determines whether each of those authentication target persons 10 is a registered person. Further, the pre-authentication unit 25 detects the number of authentication target persons 10 captured in the same captured image (hereinafter also referred to as the waiting number). The configuration of the pre-authentication unit 25 in the second embodiment other than the above is the same as that in the first embodiment.

[0053] In the second embodiment, the notification unit 26 determines, as the guidance information, the content to be notified to the authentication target person 10 by the display device 4 using the result of the processing by the pre-authentication unit 25 and the data as shown in FIGS. 7 and 8. Note that the data as shown in FIGS. 7 and 8 referred to by the pre-authentication unit 25 is stored in the storage device 22.

[0054] Here, a specific example of the notification content of the guidance information determined by the notification unit 26 when referring to the result of the processing by the pre-authentication unit 25 and the data shown in FIGS. 7 and 8 is shown. That is, when the main authentication (RFID authentication) by the authentication unit 27 is NG and the waiting number of the authentication target persons 10 captured in the captured image is equal to or greater than the threshold value (category A), the notification content "RFID authentication failed. Please go to the window" is determined by the notification unit 26. The threshold value here is a determination reference value for determining whether the front of the flapper gate 7 is congested with the authentication target persons 10.

[0055] In a crowded situation, the distance between the authentication target person 10 and another authentication target person 10 becomes narrow. For this reason, when the authentication target person 10 (hereafter referred to as target person A) inputs a password or the like into the input device 13 for keypad authentication, there is a risk that another authentication target person 10 (hereafter referred to as target person B) may be able to read the password of target person A from the input operation. For these reasons, in a crowded situation, keypad authentication is considered not preferable. Thus, when the number of waiting people is equal to or more than the threshold value and the situation is crowded, if the RFID authentication fails, the re-challenge authentication process is not executed, and a notice guiding the authentication target person 10 to the window (that is, the response of the staff member) is displayed on the display device 4.

[0056] Also, there is a case (category B) where the main authentication (RFID authentication) by the authentication unit 27 fails and it is determined that among the plurality of authentication target persons 10 captured in the captured image, there is a person (suspicious person) who is not determined to be a registered person by pre-authentication. In this case, the notification content indicating "RFID authentication failed. Caution: A person not permitted to enter has been detected. Do not perform keypad authentication" is determined by the notification unit 26. In this case, it is assumed that there is a suspicious person near the authentication target person 10 who has failed the RFID authentication and is the target of re-challenge authentication. In this case, if a password or the like is input into the input device 13 for keypad authentication, there is a risk that the password may be read by the suspicious person. For this reason, the notification content to inform thereof is determined by the notification unit 26.

[0057] Furthermore, a situation (category C) can be considered where the main authentication (RFID authentication) by the authentication unit 27 fails, the surroundings of the authentication target person 10 are not crowded, and no suspicious person can be seen nearby. In this case, the notification content indicating "RFID authentication failed. Please input the user ID and password using the keypad" is determined by the notification unit 26.

[0058] The notification content determined in this way is output from the notification unit 26 to the display device 4 as guidance information. Thereby, the display device 4 displays the notification content. That is, in the second embodiment, when the authentication target person 10 performs RFID authentication, which is the main authentication process by the authentication unit 27, the display device 4 does not display information, and when the RFID authentication fails, the guidance information is displayed. Thereby, also in the second embodiment, as in the first embodiment, it is possible to prevent a person who is familiar with the authentication process from getting used to the display of the display device 4. For this reason, when information is displayed on the display device 4, both a person who is familiar with the authentication process and a person who is not familiar with the authentication process will pay attention to the displayed information, and in front of the flap gate 7, it is possible to prevent the authentication target person 10 from staying due to overlooking the displayed information.

[0059] In the second embodiment, when the notification content as shown in the above specific example is determined by the notification unit 26, the notification unit 26 also outputs information representing such notification content to the authentication unit 27. Thereby, when the authentication unit 27 receives information on the notification content corresponding to category A or category B shown in FIG. 7 from the notification unit 26, for example, it does not accept an input for keypad authentication.

[0060] The configuration of the entrance management device 2 in the second embodiment other than the above is the same as the configuration of the entrance management device 2 in the first embodiment.

[0061] Next, an example of the operation related to entrance management in the entrance management device 2 of the second embodiment will be described with reference to FIG. 9. FIG. 9 is a flowchart for explaining an example of the operation related to entrance management in the entrance management device 2.

[0062] For example, when the receiver 12 receives the user ID from the RF tag of the person to be authenticated 10, the authentication unit 27 executes RFID authentication, which is the present authentication process, for the person to be authenticated 10 (step 201 in FIG. 9). Thereby, it is determined whether to permit the entry of the person to be authenticated 10 into the restricted area (step 202). If the entry is permitted, it is determined that the flapper gate 7 is to be opened (step 203), and the output unit 28 outputs information indicating that the entry is permitted to the opening / closing device 6. Thereby, the flapper gate 7 is opened by the opening / closing device 6.

[0063] On the other hand, if the entry is not permitted in step 202, the pre-authentication unit 25 executes a pre-authentication process (step 204). Thereafter, the notification unit 26 determines whether the number of waiting people detected by the process of the pre-authentication unit 25 is equal to or greater than the threshold value (step 205). If it is determined that the number of waiting people is equal to or greater than the threshold value as a result of this determination, the notification unit 26 refers to the data shown in FIG. 7 and determines the notification content indicating that "RFID authentication has failed. Please go to the counter" corresponding to category A (step 206). Then, the notification unit 26 outputs information representing the notification content to the display device 4. Thereby, the notification content is displayed by the display device 4. In this case, the access control device 2 maintains the state in which the flapper gate 7 is closed (step 207).

[0064] Also, when it is determined in step 205 that the number of waiting people is less than the threshold (i.e., the number of waiting people is less than the threshold), the notification unit 26 further refers to the authentication result by the pre-authentication unit 25 and determines whether a suspicious person (i.e., a person determined not to be a registered person by the pre-authentication process) is detected in the captured image (step 208). Thus, when it is determined that a suspicious person has been detected, the notification unit 26 refers to the data shown in FIG. 7 and determines the notification content corresponding to category B, "RFID authentication failed. Attention: A person not permitted to enter has been detected. Do not perform keypad authentication." (step 209). Then, the notification unit 26 outputs the information representing the notification content to the display device 4. As a result, the notification content is displayed by the display device 4. Also, in this case, the access control device 2 maintains the state in which the flapper gate 7 is closed (step 207).

[0065] Furthermore, when it is determined in step 208 that no suspicious person has been detected, the notification unit 26 refers to the data shown in FIG. 7 and determines the notification content corresponding to category C, "RFID authentication failed. Please enter the user ID and password using the keypad." (step 210). Then, the notification unit 26 outputs the information representing the notification content to the display device 4. As a result, the notification content is displayed by the display device 4.

[0066] Thereafter, when the authentication unit 27 receives the user ID and password entered by the person to be authenticated 10 using the input device 13, the authentication unit 27 performs keypad authentication using the received user ID and password. That is, the authentication unit 27 determines whether to permit the person to be authenticated 10 who has entered the user ID and password to enter the restricted area (step 211). If entry is not permitted even by this keypad authentication, the access control device 2 maintains the state in which the flapper gate 7 is closed (step 207). On the other hand, when entry is permitted in step 211, it is determined that the flapper gate 7 is to be opened (step 203), and the output unit 28 outputs information indicating that entry is permitted to the opening / closing device 6. As a result, the flapper gate 7 is opened by the opening / closing device 6.

[0067] Since the entrance management device 2 of the second embodiment is configured as described above, as described above, it is possible to prevent the stay of the authentication target person 10 caused by the display of the display device 4, and it is also possible to prevent an unauthorized person from obtaining information for impersonating a registered person.

[0068] <Other Embodiments> The present invention is not limited to the first and second embodiments, and various embodiments can be adopted. For example, in the first embodiment, the notification unit 26 refers to the data as shown in FIGS. 3 and 4 and the authentication result by the pre-authentication unit 25 to determine the content to be notified to the authentication target person 10 by the display device 4. Instead of this, the notification unit 26 may refer to the data as shown in FIGS. 10 and 9 and the authentication result by the pre-authentication unit 25 to determine the content to be notified to the authentication target person 10 by the display device 4. That is, the authentication unit 27 performs fingerprint authentication as the main authentication process, and the reading device 5 includes a pad on which a finger is placed to capture an image of the fingerprint of the authentication target person 10. Here, as shown in FIG. 12, the surface of the pad 31 (the surface on which the finger is placed) has an area wider than the finger of the authentication target person 10 and is divided into, for example, four sections A to D. When the notification unit 26 refers to the data as shown in FIGS. 10 and 9 and the authentication result by the pre-authentication unit 25, the content to be notified to the authentication target person 10 by the display device 4 is determined as follows. That is, the notification unit 26 detects the activation section based on the date when the pre-authentication process by the pre-authentication unit 25 was executed and the data shown in FIG. 11. For example, in this description, it is assumed that the activation section is "B". Then, when the notification unit 26 determines that the authentication target person 10 is a registered person (pre-authentication OK) by the pre-authentication unit 25, it refers to the data shown in FIG. 10 and determines the notification content (correct hint) to the effect of "Press the registered finger on section B". Further, when the notification unit 26 determines that the authentication target person 10 is not a registered person (pre-authentication NG) by the pre-authentication unit 25, it refers to the data shown in FIG. 10 and determines the notification content (incorrect hint) to the effect of "Press the registered finger on section C".

[0069] In this way, the guidance information representing the notification content determined by the notification unit 26 is output toward the display device 4 and displayed by the display device 4. The authentication unit 27 executes fingerprint authentication, which is this authentication process, using the fingerprint image of the finger captured at the position of the activation section B of the pad in the reading device 5. Further, when the fingerprint of the finger is captured at a position in section A or section C or section D that is not the activation section B of the pad in the reading device 5, the authentication unit 27 does not execute fingerprint authentication.

[0070] Note that in the example of FIG. 11, the activation section is determined by the date. However, for example, different activation sections may be set according to the time zone of a day.

[0071] Also, in the first embodiment and the second embodiment, as the pre-authentication process, an authentication process using the captured image captured by the imaging device 3 is set. However, the pre-authentication process is not limited to the authentication process using the captured image, and an appropriate authentication process may be adopted as appropriate.

[0072] Furthermore, in the first and second embodiments, the control device 20 of the admission management device 2 includes an authentication unit 27. Alternatively, for example, as shown in FIG. 13, the authentication unit 27 may be provided in an authentication device 35 separate from the admission management device 2. Also in this case, as in the first and second embodiments, the authentication unit 27 is realized as a functional unit of the processor 36 when the processor 36 provided in the authentication device (computer device) 35 executes a computer program. Further, in this case, the authentication device 35 is connected to the reading device 5 as described in the first embodiment, or the receiver 12 and the input device 13 as described in the second embodiment (in FIG. 13, the illustration of the reading device 5, the receiver 12, and the input device 13 is omitted). In other words, the admission management device 2 does not necessarily have to be connected to the reading device 5, the receiver 12, or the input device 13. The authentication unit 27 of the authentication device 35 uses the information acquired from the reading device 5, or the information acquired from the receiver 12 and the input device 13, and the information in the database 8 to execute the same authentication process as described in the first and second embodiments. This authentication result is output from the authentication device 35 to the admission management device 2. When the authentication result indicates that entry of the person to be authenticated 10 into the restricted area is permitted, the output unit 28 of the admission management device 2 outputs information indicating permission to enter to the opening / closing device 6. Thereby, the opening / closing device 6 operates to open the flap gate 7.

[0073] Furthermore, as shown by the dotted line in FIG. 13, the authentication device 35 may be provided with an output unit 28. In this case, the output unit 28 in the control device 20 of the admission management device 2 is omitted, and when the authentication unit 27 permits the person to be authenticated 10 to enter the restricted area, information indicating permission to enter is output from the output unit 28 of the authentication device 35 to the opening / closing device 6.

[0074] Furthermore, as examples of the authentication process (this authentication process) executed by the authentication unit 27, fingerprint authentication, RFID authentication, and keypad authentication were given. However, the authentication process executed by the authentication unit 27 is not limited to these, and for example, face authentication may be used. For example, assume that the authentication process (this authentication process) executed by the authentication unit 27 in the first embodiment is face authentication. Also, assume that due to the face being sideways in the face authentication by the pre-authentication unit 25, it is determined that the authentication target person 10 is not the registered person. In such a case, the notification unit 26 may output to the display device 4 information for displaying "Please face forward" as guidance information. Also, assume that due to the face authentication by the pre-authentication unit 25, it is determined that the authentication target person 10 is not the registered person because they are wearing a mask or sunglasses. In such a case, the notification unit 26 may output to the display device 4 information for displaying, for example, "Please remove the mask or sunglasses" as guidance information. The guidance information displayed on such a display device 4 can suppress the occurrence of a situation where, despite the authentication target person 10 being the registered person, entry to the restricted area is not permitted in the face authentication by the authentication unit 27 due to the face being sideways or the person wearing a mask or sunglasses. Note that the method by which the pre-authentication unit 25 detects from the captured image that the face of the authentication target person 10 is sideways or that the authentication target person 10 is wearing a mask or sunglasses is not limited here, and the explanation thereof is omitted.

[0075] Furthermore, in the first and second embodiments, the authentication registration information (information including the registration information for pre-authentication and the registration information for authentication) is stored in a database 8 separate from the entry management device 2, and the entry management device 2 acquires the authentication registration information from the database 8. Alternatively, the authentication registration information may be stored in the storage device 22 as a database constituting the entry management device 2.

[0076] Furthermore, the entry management device 2 may have a configuration as shown in FIG. 14. That is, the entry management device 2 may be configured to include a server device 15 and a user-side device 16. The user-side device 16 is, for example, a computer device and is provided near the flap gate 7. Also, the user-side device 16 is connected to the imaging device 3, the display device 4, and the opening / closing device 6, and further connected to the reading device 5, the receiver 12, and the input device 13. The user-side device 16 can have various functions based on a computer program when a control device including a processor such as a CPU reads the computer program from a storage device and executes it. In this example, the control device of the user-side device 16 includes, as functional units, a user-side pre-authentication unit 25T and a user-side authentication unit 27T, and further includes a notification unit 26 and an output unit 28 as described in the first and second embodiments, although not shown in the figure. The user-side device 16 is connected to the server device 15 via, for example, an information communication network. The server device 15 may be a dedicated computer device for the entry management system 1 (entry management device 2) or a shared computer device used for other systems. The server device 15 includes, as functional units realized when a processor such as a CPU executes a computer program, a server-side pre-authentication unit 25S and a server-side authentication unit 27S.

[0077] In this example, the user-side pre-authentication unit 25T and the server-side pre-authentication unit 25S cooperate to operate, thereby realizing the functions of the pre-authentication unit 25 as described in the first and second embodiments. For example, when the user-side pre-authentication unit 25T acquires an image of the authentication target person 10, which is pre-authentication information acquired by the imaging device 3, the user-side pre-authentication unit 25T transmits the image of the authentication target person 10 to the server-side pre-authentication unit 25S. The server-side pre-authentication unit 25S executes pre-authentication processing by collating the image of the authentication target person 10 received from the user-side pre-authentication unit 25T with information corresponding to the pre-authentication information of the registered person included in the authentication registration information in the database 8. Then, the server-side pre-authentication unit 25S transmits the result of the pre-authentication processing to the user-side pre-authentication unit 25T. The notification unit 26 of the user-side device 16 uses the result of the pre-authentication processing received by the user-side pre-authentication unit 25T to determine, in the same manner as in the first and second embodiments, the content to be notified to the authentication target person 10 by the display device 4 as guidance information.

[0078] As described in the first embodiment, preprocessing for pre-authentication processing may be performed. It may be appropriately set which of the user-side pre-authentication unit 25T and the server-side pre-authentication unit 25S executes the preprocessing for pre-authentication processing.

[0079] Furthermore, in the example shown in FIG. 14, the user-side authentication unit 27T and the server-side authentication unit 27S cooperate to operate, thereby realizing the functions of the authentication unit 27 as described in the first and second embodiments. For example, when the user-side authentication unit 27T acquires information for this authentication processing acquired by the reading device 5, the receiver 12, or the input device 13, the user-side authentication unit 27T transmits the information to the server-side authentication unit 27S. The server-side authentication unit 27S executes this authentication processing by collating the information received from the user-side authentication unit 27T with the information of the registered person included in the authentication registration information in the database 8. Then, the server-side authentication unit 27S transmits the result of this authentication processing to the user-side authentication unit 27T.

[0080] In the above example, the configuration in which the user-side device 16 is connected to the imaging device 3, the reading device 5, the receiver 12, and the input device 13 has been described. However, at least one of them may be connected to the server device 15. That is, information used in the pre-authentication process and the main authentication process from at least one of the imaging device 3, the reading device 5, the receiver 12, and the input device 13 may be acquired by the server device 15 without going through the user-side device 16. In this case, the communication volume between the user-side device 16 and the server device 15 can be reduced by the amount of information not transmitted from the user-side device 16 to the server device 15.

[0081] Furthermore, in the example of FIG. 14, an example in which the pre-authentication unit 25 is realized by the user-side pre-authentication unit 25T and the server-side pre-authentication unit 25S, and the authentication unit 27 is realized by the user-side authentication unit 27T and the server-side authentication unit 27S has been described. Instead of this, one of the pre-authentication unit 25 and the authentication unit 27 may be provided in the user-side device 16 with a pre-authentication unit 25 or an authentication unit 27 similar to those in the first and second embodiments without providing a part of the function in the server device 15.

[0082] FIG. 15 is a block diagram showing the minimum configuration of the admission management device according to the present invention. The admission management device 40 shown in FIG. 15 is, for example, a computer device, and by executing a computer program, it includes a pre-authentication unit 41 and a notification unit 42 as functional units. The pre-authentication unit 41 executes a pre-authentication process of determining whether the person to be authenticated is a registered person by collating the pre-authentication information regarding the person to be authenticated with the registered pre-authentication information stored in the database. Here, the person to be authenticated is a person whose permission to enter the restricted area is determined. A registered person is a person who is permitted to enter the restricted area.

[0083] The notification unit 42 determines, as guidance information, the content to be notified to the person to be authenticated using the result of the pre-authentication process, and outputs it to a display device that displays the guidance information. The guidance information is information regarding an authentication process for determining whether the person to be authenticated can enter the restricted area.

[0084] Next, an example of the operation related to the admission management in the admission management device 40 will be described with reference to FIG. 16. FIG. 16 is a flowchart for explaining an example of the operation related to the admission management in the admission management device 40.

[0085] For example, when the person to be authenticated approaches the entrance of the restricted area, the pre-authentication unit 41 executes a pre-authentication process using the pre-authentication information acquired by the pre-authentication acquisition device and the registered pre-authentication information in the database (step 301). Then, the notification unit 42 determines the content to be notified to the person to be authenticated using the result of the pre-authentication process, and outputs the determined notification content as guidance information to the display device (step 302).

[0086] The admission management device 40 shown in FIG. 15 is configured as described above. This admission management device 40 does not make the content of the guidance information displayed on the display device the same for any person to be authenticated, but sets the content according to the result of the pre-authentication process. That is, the admission management device 40 detects a person to be authenticated who is considered to be permitted to enter the restricted area by the authentication process through the pre-authentication process, and can control the display of the display device so as to avoid the person to be authenticated overlooking the display of the display device due to unfamiliarity with authentication. Thereby, the admission management device 40 can prevent a situation where the person to be authenticated stops at the entrance of the restricted area due to overlooking the display of the display device and the person to be authenticated stays. In addition, the admission management device 40 can detect a person to be authenticated (that is, a suspicious person) who is considered not to be permitted to enter the restricted area by the authentication process through the pre-authentication process, and can control the display of the display device to deal with the suspicious person. Thereby, the admission management device 40 can prevent a situation where information for obtaining authentication (that is, information for being permitted to enter the restricted area) is read by a suspicious person from the display of the display device, for example. Therefore, the admission management device 40 can have the effect of being able to avoid problems caused by the display of guidance information (hint information) while having the function of displaying guidance information (hint information) that supports those who are not familiar with the authentication process.

Explanation of Reference Numerals

[0087] 2,40 Entrance management device 3 Imaging device 4 Display device 5 Reading device 7 Flapper gate 8 Database 10 Person to be authenticated 12 Receiver 13 Input device 25,41 Pre - authentication unit 26,42 Notification unit 27,43 Authentication unit 28,44 Output unit

Claims

1. Pre - authentication means for executing pre - authentication processing to determine whether the authentication target person is the registered person by collating pre - authentication information regarding the authentication target person for whom it is determined whether entry into the restricted area is permitted and the pre - registration information stored in a database storing authentication registration information indicating that the person is a registered person permitted to enter the restricted area; Notification means for determining, as guidance information, the content to be notified to the authentication target person regarding the authentication processing for determining whether the authentication target person can enter the restricted area, using the result of the pre - authentication processing, and outputting it to a display device that displays the guidance information. Comprising: The notification means further uses the number of times the authentication target person has entered the restricted area to determine the content to be notified to the authentication target person, which is an access control device.

2. Authentication means for determining whether the authentication target person can enter the restricted area using the information obtained by an authentication acquisition device that acquires the information used in the authentication processing from the authentication target person and the authentication registration information stored in the database; Output means for outputting the determination result of whether the authentication target person can enter the restricted area. Further comprising The access control device according to claim 1.

3. When it is determined by the pre - authentication processing that the authentication target person is the registered person, the notification means outputs, as the guidance information, information indicating that there is no content to be notified to the display device. The access control device according to claim 1 or claim 2.

4. The authentication means has a function of performing a first authentication process and a second authentication process that is different from the first authentication process and is executed when the authentication target person's entry into the restricted area is not permitted in the first authentication process; The pre - authentication means executes the pre - authentication processing when the authentication target person's entry into the restricted area is not permitted in the first authentication process; The notification means determines, as the guidance information, the content to be notified to the authentication target person using the result of the pre - authentication processing and outputs it to the display device. The access control device according to claim 2.

5. When it is determined by the pre-authentication process that the person to be authenticated is the registered person, as the guidance information, correct hints regarding the authentication process are output to the display device, and when it is determined by the pre-authentication process that the person to be authenticated is not the registered person, as the guidance information, incorrect hints regarding the authentication process are output to the display device The access control device according to claim 1 or claim 2

6. The pre-authentication process is an authentication process using a captured image captured by a capturing device that captures the person to be authenticated The access control device according to any one of claims 1 to 5

7. By a computer Execute a pre-authentication process to determine whether the person to be authenticated is the registered person by comparing the pre-authentication information regarding the person to be authenticated for whom access to the restricted area is determined with the pre-authentication registration information stored in a database storing authentication registration information indicating that the person is a registered person permitted to enter the restricted area Determine, as guidance information, the content to be notified to the person to be authenticated regarding the authentication process for determining whether the person to be authenticated can enter the restricted area, using the result of the pre-authentication process and information on the number of times the person to be authenticated has entered the restricted area, and output the guidance information to a display device for displaying it Access control method

8. A process of executing a pre-authentication process to determine whether the person to be authenticated is the registered person by comparing the pre-authentication information regarding the person to be authenticated for whom access to the restricted area is determined with the pre-authentication registration information stored in a database storing authentication registration information indicating that the person is a registered person permitted to enter the restricted area A process of determining, as guidance information, the content to be notified to the person to be authenticated regarding the authentication process for determining whether the person to be authenticated can enter the restricted area, using the result of the pre-authentication process and information on the number of times the person to be authenticated has entered the restricted area, and outputting the guidance information to a display device for displaying it A computer program for causing a computer to execute

9. Pre-authentication means for performing pre-authentication processing to determine whether the authentication target person is the registered person by collating pre-authentication information regarding the authentication target person for whom it is determined whether entry into the restricted area is permitted with the pre-registration information stored in a database storing authentication registration information indicating that the person is a registered person permitted to enter the restricted area; Notification means for determining, as guidance information, the content to be notified to the authentication target person regarding the authentication processing for determining whether the authentication target person can enter the restricted area, using the result of the pre-authentication processing, and outputting the guidance information to a display device for displaying the same; Authentication means for determining whether the authentication target person can enter the restricted area by using the information acquired by an authentication acquisition device that acquires the information used in the authentication processing from the authentication target person and the authentication registration information stored in the database; Output means for outputting the determination result of whether entry into the restricted area is permitted; Comprising; The authentication means has a function of performing a first authentication process and a second authentication process that is different from the first authentication process and is executed when entry of the authentication target person into the restricted area is not permitted in the first authentication process; The pre-authentication means executes the pre-authentication process when entry of the authentication target person into the restricted area is not permitted in the first authentication process; The notification means determines, as the guidance information, the content to be notified to the authentication target person using the result of the pre-authentication process, and outputs the same to the display device; An access control device.

Images