Authentication device, authentication method, and program

Abstract

To provide a technology for improving accuracy of authenticating registered users.SOLUTION: An authentication apparatus 30 includes a storage unit 320, an acquisition unit 301, a specifying unit 302, a determination unit 303, and an update unit 305. The storage unit 320 stores registration information including face images of multiple users registered in advance and a thermometry history of the users. The acquisition unit 301 acquires a captured image obtained by imaging the face of a visitor and a thermometry result of the visitor at the time of imaging. The specifying unit 302 specifies the visitor from among the users on the basis of the captured image and the face images of the users. The determination unit 303 determines whether a result of specifying the visitor is appropriate, on the basis of the thermometry result and the thermometry history of the users. The update unit 305 updates at least one of the face image of the user specified as a visitor and the thermometry history in accordance with a result determined by the determination unit 303.SELECTED DRAWING: Figure 3

Description

[Technical Field]

[0001] The present invention relates to an authentication device, an authentication method, and a program. [Background technology]

[0002] Various technologies for performing identity authentication have been proposed. For example, Patent Document 1 discloses a technology for authentication using biometrics such as fingerprints, faces, irises, and retinas. The authentication technology described in Patent Document 1 suppresses a decrease in authentication accuracy due to changes in biometrics over time or the like by updating registered biometric image data to biometric image data when identity authentication is successful if the registration period for registered biometric image data has passed a specified period. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Publication No. 2018-005329 Summary of the Invention [Problem to be solved by the invention]

[0004] When performing image authentication using biometrics, as in the authentication technology described in Patent Document 1, the accuracy of authentication varies depending on the condition of the person at the time of authentication, and there is a possibility that the person may be mistakenly recognized as a different person. In other words, it is difficult to prevent a decrease in authentication accuracy by simply updating the image data for verification.

[0005] An object of the present invention is to provide a technique that can improve the accuracy of authenticating registered users. [Means for solving the problem]

[0006] The authentication device according to the present invention includes a storage unit, an acquisition unit, an identification unit, a determination unit, and an update unit. The storage unit stores registration information including facial images of multiple users registered in advance and the temperature measurement histories of the multiple users. The acquisition unit acquires a captured image of the face of the visitor and the temperature measurement results of the visitor at the time of capture. The identification unit identifies the visitor from the multiple users based on the captured image and the facial images of the multiple users. The determination unit determines whether the identification result of the visitor is appropriate based on the temperature measurement results and the temperature measurement histories of the multiple users. The update unit updates at least one of the facial image and temperature measurement history of the user identified as the visitor according to the determination result of the determination unit.

[0007] The authentication method of the present invention includes the steps of: acquiring an image of the face of an attendee and the temperature measurement result of the attendee at the time of photographing; identifying the attendee from multiple users based on the image and facial images of multiple users registered in advance; determining the appropriateness of the identification result of the attendee based on the temperature measurement result and the temperature measurement histories of the multiple users; and updating at least one of the facial image of the user identified as the attendee and the temperature measurement history according to the result of determining the appropriateness of the identification result of the attendee.

[0008] The program according to the present invention is a program for causing a computer that stores registration information including pre-registered facial images of multiple users and the temperature measurement histories of the multiple users to execute processing. The processing includes an acquisition step, an identification step, a determination step, and an update step. The acquisition step acquires a captured image of the visitor's face and the temperature measurement result of the visitor at the time of capture. The identification step identifies the visitor from multiple users based on the captured image and the facial images of the multiple users. The determination step determines the appropriateness of the identification result of the visitor based on the temperature measurement result and the temperature measurement histories of the multiple users. The update step updates at least one of the facial image and temperature measurement history of the user identified as the visitor according to the determination result of the determination step. [Effects of the Invention]

[0009] According to the authentication device, authentication method, and program of the present invention, it is possible to improve the authentication accuracy of registered users. [Brief explanation of the drawings]

[0010] [Figure 1] FIG. 1 is a diagram illustrating an example of the configuration of an authentication system according to an embodiment. [Figure 2] FIG. 2 is a block diagram showing a schematic configuration of the reception device. [Figure 3] FIG. 3 is a block diagram showing a schematic configuration of the authentication device. [Figure 4A] FIG. 4A is a diagram showing an example of face image information. [Figure 4B] FIG. 4B is a diagram showing an example of temperature measurement history information. [Figure 5A] FIG. 5A is a flowchart showing an example of the operation of the reception device. [Figure 5B] FIG. 5B is a flow diagram showing an example of the operation of the authentication device. [Figure 5C] FIG. 5C is a flow diagram showing an example of the operation of the authentication device. DETAILED DESCRIPTION OF THE INVENTION

[0011] Hereinafter, an authentication device, an authentication method, and a program according to an embodiment will be described with reference to the drawings. In the drawings, the same or corresponding parts are designated by the same reference characters, and description thereof will not be repeated.

[0012] 1 is a diagram showing an example of the configuration of an authentication system 1 according to this embodiment. In this embodiment, the authentication system 1 is used to authenticate employees (an example of users) entering (admitting to) a facility such as a company or a factory.

[0013] 1, authentication system 1 includes accepting device 10 and authentication device 30. Accepting device 10 and authentication device 30 are connected for communication.

[0014] 2 is a block diagram showing a schematic configuration of the reception device 10. As shown in FIG. 2, the reception device 10 includes a thermal camera 10a, an IC card reader 10b, a control unit 100, a notification unit 110, a communication unit 120, and an operation unit 130.

[0015] The thermal camera 10a includes an imaging unit and a far-infrared sensor. Under the control of the control unit 100, the thermal camera 10a captures an image of a subject with the imaging unit and detects far-infrared rays emitted by the captured image of the subject with the far-infrared sensor.

[0016] The IC card reader 10b supplies power to the IC chip mounted on the contactless IC card and transmits and receives data to and from the IC chip. Specifically, the IC card reader 10b reads employee information stored in the IC chip of the IC card held by the employee. The employee information includes information such as an employee ID (an example of identification information) for identifying the employee and the employee's name.

[0017] The notification unit 110 includes a display 111 and a speaker 112. The display 111 displays an image under the control of the control unit 100. The speaker 112 outputs sound under the control of the control unit 100.

[0018] The communication unit 120 is a wired or wireless communication interface. The communication unit 120 communicates with the authentication device 30 under the control of the control unit 100. Specifically, the communication unit 120 transmits to the authentication device 30 an image of the subject captured by the thermal camera 10a (hereinafter referred to as the captured image), the surface temperature of the subject based on the detection results, and the time of temperature measurement (hereinafter referred to as the temperature measurement result), and also transmits to the authentication device 30 employee information read by the IC card reader 10b. The communication unit 120 also receives a notification instruction from the authentication device 30. The notification instruction is an instruction to output an image and sound requesting the presentation of an IC card.

[0019] The operation unit 130 includes operation buttons such as a power switch (not shown), etc. The operation unit 130 outputs to the control unit 100 an operation signal indicating which operation button has been pressed.

[0020] The control unit 100 includes a CPU (Central Processing Unit) and memory (ROM (Read Only Memory) and RAM (Random Access Memory)). The control unit 100 controls each unit connected to the control unit 100 by having the CPU execute a control program stored in the ROM. Specifically, the control unit 100 transmits the image captured by the thermal camera 10a and the temperature measurement results obtained by the thermal camera 10a to the authentication device 30 via the communication unit 120. In addition, in response to a notification instruction from the authentication device 30, the control unit 100 displays an image on the display 111 requesting the presentation of an IC card and outputs a sound from the speaker 112 requesting the presentation of the IC card. Furthermore, the control unit 100 transmits the employee information read by the IC card reader 10b to the authentication device 30 via the communication unit 120.

[0021] Fig. 3 is a block diagram showing an example of the configuration of authentication device 30. As shown in Fig. 3, authentication device 30 includes a control unit 300, a communication unit 310, a storage unit 320, and an operation unit 330. Using the captured image and detection results from thermal camera 10a, authentication device 30 identifies the entrant from among pre-registered employees. The configuration of authentication device 30 will be specifically described below.

[0022] The communication unit 310 is a communication interface such as Ethernet (registered trademark) or wireless LAN. The communication unit 310 receives captured images and temperature measurement results for each visitor from the thermal camera 10a. The communication unit 310 also receives employee information from the IC card reader 10b.

[0023] The storage unit 320 includes a non-volatile storage medium such as a hard disk. The storage unit 320 stores data including registration information 321. The registration information 321 includes facial image information 3211 and temperature measurement history information 3212 of each employee. FIG. 4A is a diagram showing an example of the facial image information 3211. FIG. 4B is a diagram showing an example of the temperature measurement history information 3212.

[0024] The operation unit 330 includes operation buttons such as a power switch, etc. The operation unit 330 outputs an operation signal indicating which operation button has been pressed to the control unit 300.

[0025] As shown in FIG. 4A, face image information 3211 stores the following data for each employee: employee ID, employee name, face image ID, image update date, and misrecognition information, each associated with the other. The employee ID and employee name are identification information and name that identify the employee. The face image ID is identification information that indicates registered image data that captures the employee's face. The registered image data indicated by the face image ID is stored in storage unit 320. The image update date is the date the registered image data was updated. The misrecognition information indicates the employee ID of the employee who was mistakenly recognized as the employee during authentication at the time of temperature measurement. In FIG. 4A, "Y01300" is stored as misrecognition information for employee ID "Y00350." This indicates that the employee assigned employee ID "Y00350" was previously mistakenly recognized as the employee assigned employee ID "Y01300."

[0026] As shown in Figure 4B, the temperature measurement history information 3212 stores the employee ID, employee name, temperature measurement value, and temperature measurement time for each employee in association with each other. The temperature measurement value indicates the temperature measured by the thermal camera 10a. The temperature measurement time indicates the date and time (timing) when the temperature was measured by the thermal camera 10a.

[0027] 2, the control unit 300 includes a CPU and memory (ROM and RAM). The control unit 300 functions as an acquisition unit 301, an identification unit 302, a determination unit 303, a notification unit 304, and an update unit 305 by the CPU executing a control program stored in the ROM.

[0028] The acquisition unit 301 acquires the captured image and temperature measurement results of the visitor from the reception device 10 via the communication unit 310. The acquisition unit 301 also acquires employee information from the reception device 10 via the communication unit 310.

[0029] The identification unit 302 identifies the visitor from among the employees stored in the registration information 321 based on the photographed image of the visitor acquired by the acquisition unit 301 and the registration information 321 stored in the storage unit 320. Specifically, the identification unit 302 reads from the storage unit 320 each registered image data indicated by each facial image ID in the facial image information 3211 of the registration information 321, compares it with the photographed image, and extracts the registered image data that has the highest similarity to the photographed image. The identification unit 302 identifies the employee ID associated with the facial image ID of the extracted registered image data from the facial image information 3211, and identifies the employee assigned the identified employee ID as the visitor.

[0030] The determination unit 303 uses the temperature measurement history information 3212 to determine whether the identification result of the entrant by the identification unit 302 is appropriate. Specifically, the determination unit 303 performs verification using the temperature measurement history information 3212 when the similarity between the registered image data extracted by the identification unit 302 and the captured image is equal to or greater than a threshold.

[0031] In this embodiment, the appropriateness of the identification result of the entrant is determined as follows: The determination unit 303 determines whether the temperature measurement interval between the most recent temperature measurement time in the temperature measurement history information 3212 of the employee identified as the entrant and the temperature measurement time of the temperature measurement result acquired by the acquisition unit 301 satisfies a certain condition. The certain condition is, for example, that the temperature measurement interval is several days (e.g., 3 days) or more, and that the temperature measurement interval is within a predetermined time (e.g., 30 minutes). The determination unit 303 determines that the identification result of the entrant is inappropriate if a temperature measurement has not been taken for several days or more, or if a temperature measurement was taken within the predetermined time, even if the similarity between the registered image data and the captured image is equal to or greater than a threshold value.

[0032] Furthermore, the determination unit 303 determines whether the ID of the employee identified as the entrant matches the employee ID included in the employee information acquired by the acquisition unit 301.

[0033] If the facial similarity between the registered image data and the captured image is less than a threshold, or if the determination unit 303 determines that the identification result of the visitor is inappropriate, the notification unit 304 sends a notification instruction to the reception device 10 via the communication unit 310, and causes the reception device 10 to output an image and sound requesting the presentation of an IC card. Note that even if the facial similarity is not less than the threshold, that is, even if the facial similarity exceeds the threshold, as long as the range by which it exceeds the threshold is within a predetermined range, the notification unit 304 may send a notification instruction to the reception device 10, and cause the reception device 10 to output an image and sound requesting the presentation of an IC card.

[0034] The update unit 305 updates at least one of the facial image information 3211 and the temperature measurement history information 3212 based on the determination result of the determination unit 303. Specifically, the update unit 305 updates the temperature measurement history in the temperature measurement history information 3212 that corresponds to the employee ID identified by the identification unit 302 or the employee ID included in the employee information acquired by the acquisition unit 301. Furthermore, if the determination unit 303 determines that the identification result of the entrant is inappropriate, or if the identification result of the entrant is appropriate and erroneous recognition information is stored for the identified employee ID in the facial image information 3211, the update unit 305 updates the registered image of the identified employee to a photographed image.

[0035] (operation) Next, the operation of authentication system 1 will be described with reference to Figures 5A to 5C. Figure 5A is a flow diagram showing an example of the operation of accepting device 10. Figures 5B and 5C are flow diagrams showing an example of the operation of authentication device 30.

[0036] Visitors entering the facility stand in front of the reception device 10 and are photographed and their temperature is measured by the reception device 10 before entering the facility. In step S101 of FIG. 5A, the reception device 10 photographs the visitor's face with the thermal camera 10a and measures the visitor's temperature.

[0037] The reception device 10 causes the control unit 100 to transmit the image captured by the thermal camera 10a and the temperature measurement result measured by the thermal camera 10a to the authentication device 30 via the communication unit 120 (step S102).

[0038] In step S301 of FIG. 5B, the authentication device 30 acquires, by the acquisition unit 301, the photographed image and temperature measurement result of the visitor transmitted from the reception device 10 via the communication unit 310.

[0039] The authentication device 30 uses the identification unit 302 to identify the visitor based on the photographed image acquired by the acquisition unit 301 and the registered image data stored in the registration information 321 in the storage unit 320 (step S302). Specifically, the identification unit 302 reads from the storage unit 320 registered image data corresponding to the facial image ID of each employee stored in the facial image information 3211 (FIG. 4A) in the registration information 321. The identification unit 302 compares each read registered image data with the photographed image and extracts the registered image data that has the highest similarity to the photographed image. The identification unit 302 identifies the employee ID corresponding to the facial image ID associated with the extracted registered image data in the facial image information 3211 as the visitor.

[0040] The extraction of registered image data having the highest similarity to the photographed image may use a trained model for extracting registered image data. For example, such a trained model may learn feature points such as the position, size, and shape of the employee's head parts (eyes, nose, mouth, face, etc.) for each piece of registered image data of an employee, calculate the similarity with the input feature points, and output the registered image data having the highest similarity.

[0041] If the facial similarity between the registered image data of the employee identified as the entrant and the captured image is greater than or equal to a threshold (step S303: Yes), the authentication device 30 determines, via the judgment unit 303, whether the identification result of the entrant is appropriate based on the temperature measurement result acquired by the acquisition unit 301 and the temperature measurement history of the employee identified as the entrant (step S304).

[0042] Specifically, the determination unit 303 extracts the temperature measurement history corresponding to the employee ID identified as the entrant from the temperature measurement history information 3212 (FIG. 4B). Then, if the temperature measurement interval between the most recent temperature measurement time in the extracted temperature measurement history and the temperature measurement time included in the acquired temperature measurement result is less than several days (e.g., 3 days) and the temperature measurement interval is equal to or longer than a predetermined time (e.g., 30 minutes), the determination unit 303 determines that the identification result of the entrant is appropriate.

[0043] If the judgment unit 303 of the authentication device 30 determines that the identification result of the entrant is correct (step S305: Yes), the update unit 305 checks whether or not erroneous recognition information is stored in the facial image information 3211 for the employee ID identified as the entrant (step S306).

[0044] If false recognition information is stored for the employee ID identified as a visitor in the facial image information 3211 (step S306: Yes), the update unit 305 updates the registered image data of the employee identified as a visitor to a photographed image (step S307). That is, the update unit 305 replaces the registered image data associated with the facial image ID corresponding to the employee ID identified as a visitor in the facial image information 3211 with the photographed image, and updates the image update date.

[0045] Thereafter, the authentication device 30 causes the update unit 305 to register the temperature measurement result in the temperature measurement history of the employee identified as the entrant (step S308). That is, the update unit 305 newly registers the acquired temperature measurement result (temperature measurement value and temperature measurement time) in the temperature measurement history information 3212 in association with the employee ID identified as the entrant.

[0046] If no misrecognition information is stored in the face image information 3211 for the employee ID identified as the entrant (step S306: No), the update unit 305 performs the process of step S308.

[0047] Furthermore, if the similarity between the registered image data of the employee identified as the entrant and the captured image is not equal to or greater than the threshold in step S303 (step S303: No), or if the identification result of the entrant is determined to be inappropriate in step S305 (step S305: No), the authentication device 30 proceeds to the processing of step S310 (FIG. 5C). That is, the authentication device 30 causes the notification unit 304 to send a notification instruction to the reception device 10 via the communication unit 310.

[0048] 5A, when the reception device 10 receives a notification instruction via the communication unit 120 (step S103: Yes), the control unit 100 notifies the entrant to present an IC card (step S104). That is, based on the notification instruction, the control unit 100 causes the display 111 to display an image requesting the entrant to present an IC card, and causes the speaker 112 to output a sound requesting the entrant to present an IC card.

[0049] If the IC card is detected by the IC card reader 10b within a predetermined time (step S105: Yes), the reception device 10 causes the control unit 100 to transmit the employee information read by the IC card reader 10b to the authentication device 30 via the communication unit 120 (step S106).

[0050] When the acquisition unit 301 acquires employee information via the communication unit 310 (step S311: Yes), the authentication device 30 determines whether the employee ID identified as the entrant matches the employee ID included in the employee information (step S312).

[0051] If the determination unit 303 determines that the employee ID identified as the entrant matches the employee ID included in the employee information (step S312: Yes), the authentication device 30 proceeds to the process of step S306.

[0052] Furthermore, if the determination unit 303 of the authentication device 30 determines that the employee ID identified as the entrant does not match the employee ID included in the employee information (step S312: No), the update unit 305 performs the process of step S313. Specifically, the update unit 305 registers the temperature measurement result acquired in step S301 (FIG. 5B) in the temperature measurement history for the employee ID acquired in step S305 (FIG. 5B) in the temperature measurement history information 3212. Furthermore, the update unit 305 registers the employee ID acquired in step S305 (FIG. 5B) in the misrecognition information for the employee ID identified as the entrant in the face image information 3211.

[0053] In other words, if the employee ID identified as the entrant differs from the employee ID on the presented IC card, the employee ID on the presented IC card is recognized as the entrant, and the temperature measurement result is registered in the temperature measurement history for the employee ID on the IC card.Then, in the face image information 3211, the employee ID on the IC card is registered as misrecognition information for the employee ID identified as the entrant.

[0054] Following step S313, the authentication device 30 causes the update unit 305 to update the registered image data for the acquired employee ID in the face image information 3211 to the photographed image acquired in step S301 (FIG. 5B) (step S314).

[0055] 5B, authentication device 30 repeats the processes of steps S301 to S308 and steps S310 to S315 until control unit 300 receives an operation signal to turn off the power switch (not shown) from operation unit 330 (step S309: No). When control unit 300 receives an operation signal to turn off the power switch (not shown) from operation unit 330 (step S309: Yes), authentication device 30 ends its operation.

[0056] 5A, the reception device 10 repeats the processes of steps S101 to S106 and step S108 until the control unit 100 receives an operation signal to turn off the power switch (not shown) from the operation unit 130 (step S107: No). When the control unit 100 receives an operation signal to turn off the power switch (not shown) from the operation unit 130 (step S107: Yes), the reception device 10 ends the operation.

[0057] In step S103, if the reception device 10 does not receive a notification instruction via the communication unit 120 (step S103: No), the reception device 10 proceeds to the process of step S107.

[0058] Furthermore, in step S105, if an IC card is not detected in IC card reader 10b after a predetermined time has elapsed (step S105: No), reception device 10 performs the process of step S108. That is, reception device 10 causes control unit 100 to send error information indicating that an IC card has not been presented to authentication device 30, and displays an error message on display 111. In step S311 of FIG. 5C, authentication device 30 waits until acquisition unit 301 acquires either employee information or error information via communication unit 310 (step S311: No, step S315: No). If authentication device 30 acquires error information via communication unit 310 (step S315: Yes), it proceeds to the process of step S309 (FIG. 5B).

[0059] Note that even if the facial similarity exceeds the threshold in step S303, if the range in which the threshold is exceeded is within a predetermined range, the authentication device 30 may proceed to the process of step S310. In other words, even if the facial similarity exceeds the threshold, if the facial similarity is close to the threshold, there is a possibility that the visitor has been misidentified, and therefore the visitor may be asked to present an IC card.

[0060] In this embodiment, for example, if employee ID "Y00101" is identified from a photographed image of a visitor (employee ID "Y00101") (step S302 in FIG. 5B), even if the facial similarity between the photographed image and the registered image data is equal to or greater than a threshold, the appropriateness of the visitor's identification result is determined using the identified employee's temperature measurement history (steps S303: Yes, S304 in FIG. 5B). A person's face may change depending on their physical condition, even over a period of several days. Therefore, if the temperature measurement interval between the most recent temperature measurement in the temperature measurement history and the current temperature measurement time is more than several days, the authentication device 30 determines that the visitor's identification result is inappropriate. Furthermore, if the temperature measurement interval is short, there is a possibility that the visitor may have been mistaken for another similar employee, and therefore the authentication device 30 determines that the visitor's identification result is inappropriate. In other words, verifying the employee's image-based authentication result using the temperature measurement result further improves the accuracy of employee authentication.

[0061] If the identification result of the visitor is inappropriate, the authentication device 30 issues a notification instruction to the reception device 10, requesting the visitor to present an IC card (step S103: Yes, S104 in FIG. 5A). Then, the authentication device 30 compares the employee ID on the IC card read by the reception device 10 with the employee ID of the employee identified as the visitor (step S312 in FIG. 5C). If the employee IDs match, the temperature measurement result is registered in the temperature measurement history for the employee ID of the identified employee. If the employee IDs do not match, the temperature measurement result is registered in the temperature measurement history for the employee ID on the IC card, and the employee ID on the IC card is registered as erroneous recognition information for the employee ID identified as the visitor (step S313 in FIG. 5C). Furthermore, the registered image data for the employee ID on the IC card is updated to the captured image (step S314 in FIG. 5C). In other words, if the authentication device 30 determines that the identification result of the visitor is inappropriate, the visitor is identified by the IC card carried by the visitor. Therefore, compared to identifying visitors by simply comparing the captured image with registered image data, the accuracy of authenticating visitors is improved and temperature measurement results can be registered correctly. Also, if the employee ID does not match, the registered image data of the employee who presented the IC card is updated to the captured image, making it less likely that an employee who presented an IC card will be misidentified.

[0062] Furthermore, an employee whose false recognition information contains another person's employee ID is likely to be mistaken for that person. Therefore, when an employee whose false recognition information is registered is authenticated, the registered image data of that employee is updated to an image taken at the time of temperature measurement (step S307 in FIG. 5B), making it less likely that the employee will be mistaken for another employee. Note that the registered image data may be updated if a certain period of time has passed since the image update date in the face image information 3211 until the time of authentication (time of image capture).

[0063] The above describes embodiments of the authentication device, authentication method, and program according to the present invention. However, the authentication device, authentication method, and program are not limited to the above embodiments and can be implemented in various forms without departing from the spirit and scope of the present invention. The drawings mainly show each component in a schematic manner for ease of understanding, and the thickness, length, number, etc. of each component shown in the drawings may differ from the actual components due to the convenience of creating the drawings. Furthermore, the shape, dimensions, etc. of each component shown in the above embodiments are merely examples and are not particularly limited, and various modifications are possible without substantially departing from the effects of the present invention. Below, modifications of the above embodiments are described.

[0064] [Variations] (1) In the embodiment, the reception device 10 is provided with a thermal camera 10a and an IC card reader 10b, and communication is performed between the reception device 10 and the authentication device 30. However, the thermal camera 10a and the IC card reader 10b may be provided independently and communicate with the authentication device 30. Also, instead of the thermal camera 10a, a camera and a temperature measuring device using infrared rays or the like may be used to photograph visitors and measure their body temperatures.

[0065] (2) In the embodiment, the temperature measurement interval was used as a condition for determining whether the identification result of the entrant is appropriate. However, for example, the temperature measurement value included in the temperature measurement result of the employee identified as the entrant and the temperature measurement value stored in the temperature measurement history may be used. Specifically, if the difference between the average temperature measurement value in the temperature measurement history and the temperature measurement value in the temperature measurement result is equal to or greater than a certain value, the identification result of the entrant may be determined to be inappropriate. Alternatively, a condition related to the temperature measurement interval and a condition related to the temperature measurement value may be combined as a condition for determining whether the identification result of the entrant is appropriate.

[0066] (3) In the authentication device 30, after the processing of step S302 in Fig. 5B, the processing of step S303 may be omitted and step S304 may be performed. In other words, after the processing of identifying the visitor (step S302), the processing of determining whether the identification result of the visitor is appropriate (step S304) may be performed. Regardless of the degree of facial similarity between the registered image data and the captured image, the appropriateness of the identification result of the visitor is determined using the temperature measurement history and temperature measurement results, thereby improving authentication accuracy.

[0067] (4) In the embodiment, the employee ID is transmitted from the reception device 10 to the authentication device 30 by reading the IC card with the IC card reader 10b. However, the employee ID may be input directly into the reception device 10, for example, via the operation unit 130. [Industrial Applicability]

[0068] The present invention can be used to authenticate users who have been registered in advance in facilities such as companies, factories, and schools. [Explanation of symbols]

[0069] 1: Authentication system 10: Reception device 10a: Thermal camera 10b: IC card reader 30: Authentication device 100,300: Control section 110,304: Information Department 111: Display 112: Speaker 120,310: Communications Department 130,330 :Operation unit 301: Acquisition Department 302: Specific part 303: Judgment section 305:Update section 320: Storage section 321: Registration information 3211: Facial image information 3212: Temperature history information

Claims

1. a storage unit that stores registration information including facial images of a plurality of pre-registered users and temperature measurement histories of the plurality of users; an acquisition unit that acquires a photographed image of the visitor's face and the result of the visitor's temperature measurement at the time of photographing; an identification unit that identifies the visitor from the plurality of users based on the captured image and the facial images of the plurality of users; a determination unit that determines whether the identification result of the visitor is appropriate based on the temperature measurement result and the temperature measurement history of the user identified as the visitor; an update unit that updates at least one of the face image and the temperature measurement history of the user identified as the entrant according to the determination result of the determination unit; An authentication device comprising:

2. The authentication device described in claim 1, wherein the judgment unit determines whether the similarity between the facial image of the user identified as the entrant and the captured image is greater than or equal to a threshold, and if the similarity is greater than or equal to the threshold, determines whether the entrant identification result is appropriate.

3. a reception unit that receives input of identification information that identifies the visitor; a notification unit that issues a notification to instruct the user to input the identification information when the determination unit determines that the identification result of the user is inappropriate or when the similarity is less than the threshold value; Furthermore, the storage unit stores the registration information of each user in association with the identification information corresponding to the user; 3. The authentication device of claim 2, wherein, when the identification information of the user identified as the entrant stored in the memory unit matches the identification information accepted as input by the acceptance unit, the update unit updates the facial image in the registration information of the user identified as the entrant to the photographed image and adds the temperature measurement result to the temperature measurement history.

4. 4. The authentication device of claim 3, wherein, when the identification information of the user identified as the entrant stored in the memory unit does not match the identification information accepted as input by the reception unit, the update unit updates the recorded facial image in the registration information corresponding to the identification information accepted as input to the captured image, adds the temperature measurement result to the temperature measurement history, and adds misrecognition information indicating that the user identified as the entrant has been misrecognized.

5. The authentication device according to any one of claims 1 to 4, wherein the determination unit determines whether the identification result of the entrant is appropriate based on the most recent temperature measurement timing in the temperature measurement history of the user identified as the entrant and the temperature measurement timing at the time of the photographing.

6. A step of acquiring a photographed image of the visitor's face and a result of measuring the visitor's temperature at the time of photographing; Identifying the visitor from among the plurality of users based on the photographed image and facial images of a plurality of users registered in advance; A step of determining whether the identification result of the visitor is appropriate based on the temperature measurement result and the temperature measurement history of the user identified as the visitor; updating at least one of the face image and the temperature measurement history of the user identified as the visitor according to the result of determining whether the visitor identification result is correct; Authentication methods, including:

7. A program for causing a computer to execute processing, the program storing registration information including face images of a plurality of pre-registered users and temperature measurement histories of the plurality of users, The process comprises: an acquisition step of acquiring a photographed image of the visitor's face and a temperature measurement result of the visitor at the time of photographing; an identifying step of identifying the visitor from the plurality of users based on the photographed image and the facial images of the plurality of users; a determination step of determining whether the identification result of the visitor is appropriate based on the temperature measurement result and the temperature measurement history of the user identified as the visitor; an updating step of updating at least one of the face image and the temperature measurement history of the user identified as the entrant according to the determination result of the determining step; Including, the program.

Images