Usage management support device, system, method, and program

Abstract

A utilization management assistance device (1) comprises: an identification unit (11) that refers to a database in which pieces of facial feature information of users and authorized floors for which utilization by each of the users has been authorized are associated with one another, so as to identify a first authorized floor associated with a first user who has succeeded in first face authentication for a first facial image that has been imaged as a result of entering an elevator; an operation control unit (12) that performs operation control for the elevator according to the first authorized floor; a determination unit (13) that refers to the database, performs second face authentication for a second facial image obtained by imaging a second user who exits at a stop floor at which the elevator has stopped according to the operation control, so as to determine whether it is possible for the second user to exit at the stop floor; and an output unit (14) that outputs first alert information if it has been determined that the second user cannot exit.

Description

[Technical Field]

[0001] The present disclosure relates to a usage management support device, a system, a method, and a program. [Background technology]

[0002] Patent Document 1 discloses a technology related to an elevator control system. The system in Patent Document 1 photographs candidates getting on and off elevators in a building, performs image authentication of the candidates based on the photographed images, learns the movement patterns of the candidates to each floor for each candidate, and controls the elevator based on the learning results.

[0003] Patent Document 2 discloses technology related to an alarm device installed at the elevator entrance of each floor. In Patent Document 2, when a person carrying a name tag with an IC (Integrated Circuit) tag gets off the elevator, the alarm device installed at the elevator entrance reads the floor information on the IC tag, and if the floor is not permitted, it activates an alarm. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Japanese Patent Publication No. 2020-132410 [Patent Document 2] Japanese Patent Application Laid-Open No. 2000-306050 Summary of the Invention [Problem to be solved by the invention]

[0005] However, the technology disclosed in Patent Document 2 has the problem that it is difficult to implement because it requires the installation of physical security gates on each floor to prevent unauthorized persons from entering each floor.

[0006] In view of the above-mentioned problems, the object of the present disclosure is to provide a usage management support device, system, method, and program for helping to prevent unauthorized users from entering each floor without the need for a physical gate. [Means for solving the problem]

[0007] The usage management support device according to the present disclosure includes: an identification means for identifying a first permitted floor associated with a first user who has successfully passed first face authentication on a first face image captured while riding in an elevator, by referring to a database that associates facial feature information of the user with permitted floors that the user is permitted to use; an operation control means for controlling the operation of the elevator in accordance with the first permitted floor; a determination means for determining whether a second user is permitted to disembark at a stop floor where the elevator has stopped in accordance with the operation control by performing second facial authentication on a second facial image of the second user disembarking at the stop floor, with reference to the database; an output means for outputting first warning information when it is determined that the second user is not allowed to get off the vehicle; Equipped with.

[0008] The usage management support system according to the present disclosure includes: a database that associates facial feature information of a user with a permitted floor that the user is permitted to use; a usage management support device connected to the database, The usage management support device an identification means for identifying a first permitted floor associated with a first user who has succeeded in first face authentication for a first face image captured while boarding an elevator, by referring to the database; an operation control means for controlling the operation of the elevator in accordance with the first permitted floor; a determination means for determining whether a second user is permitted to disembark at a stop floor where the elevator has stopped in accordance with the operation control by performing second facial authentication on a second facial image of the second user disembarking at the stop floor, with reference to the database; an output means for outputting first warning information when it is determined that the second user is not allowed to get off the vehicle; Equipped with.

[0009] The usage management support method according to the present disclosure includes: The computer By referring to a database in which facial feature information of users is associated with permitted floors that the users are authorized to use, a first permitted floor that is associated with a first user who has successfully passed first face authentication on a first face image captured while boarding the elevator is identified; Controlling the operation of the elevator according to the first permitted floor; referring to the database, and performing second facial authentication on a second facial image of a second user who gets off at a stop floor where the elevator has stopped in accordance with the operation control, to determine whether the second user is allowed to get off at the stop floor; If it is determined that the second user is not allowed to get off, first warning information is output.

[0010] The usage management support program disclosed herein is a process of identifying a first permitted floor associated with a first user who has successfully passed first face authentication on a first face image captured while riding in an elevator, by referring to a database that associates facial feature information of the user with permitted floors that the user is permitted to use; an operation control process for controlling the operation of the elevator according to the first permitted floor; a determination process of determining whether a second user is allowed to disembark at a stop floor where the elevator has stopped in accordance with the operation control by performing second facial authentication on a second facial image of the second user who disembarks at the stop floor, with reference to the database; an output process of outputting first warning information when it is determined that the second user is not allowed to get off the vehicle; to be executed by the computer. [Effects of the Invention]

[0011] The present disclosure provides a usage management support device, system, method, and program for helping prevent unauthorized users from entering each floor without the need for a physical gate. [Brief explanation of the drawings]

[0012] [Figure 1] 1 is a block diagram showing a configuration of a usage management support device according to a first embodiment. [Figure 2] 1 is a flowchart showing the flow of a usage management support method according to the first embodiment. [Figure 3] FIG. 10 is a block diagram showing the configuration of a usage management support system according to a second embodiment. [Figure 4] FIG. 10 is a block diagram showing the configuration of an authentication device according to a second embodiment. [Figure 5] 10 is a flowchart showing the flow of a face information registration process performed by the authentication device according to the second embodiment. [Figure 6] FIG. 10 is a block diagram showing the configuration of a usage management support device according to a second embodiment. [Figure 7] 10 is a flowchart showing the flow of operation control processing when boarding an elevator according to the second embodiment. [Figure 8] 10 is a flowchart showing the flow of face authentication processing by the authentication device according to the second embodiment. [Figure 9] FIG. 10 is a diagram showing an example of the situation inside the elevator when boarding according to the second embodiment. [Figure 10] 10 is a flowchart showing the flow of a warning determination process when a passenger gets off an elevator according to Example 2-1 of the second embodiment. [Figure 11] 10 is a flowchart showing the flow of a warning determination process when a passenger gets off an elevator according to Example 2-2 of the second embodiment. [Figure 12] FIG. 10 is a diagram showing an example of warning information displayed when getting off the vehicle according to the second embodiment. [Figure 13] FIG. 10 is a diagram showing an example of warning information displayed on the administrator terminal when disembarking according to the second embodiment. [Figure 14] 10 is a flowchart showing the flow of operation control processing when boarding an elevator according to the third embodiment. [Figure 15] FIG. 11 is a diagram showing an example of pressing a designated button in an elevator according to the third embodiment. [Figure 16] FIG. 11 is a diagram showing an example of a warning message displayed when a designated button in an elevator is pressed according to the third embodiment. [Figure 17] FIG. 10 is a block diagram showing the configuration of a usage management support system according to a fourth embodiment. [Figure 18] 10 is a flowchart showing the flow of a warning determination process when calling an elevator according to Example 4-1 of the fourth embodiment. [Figure 19] 10 is a flowchart showing the flow of a warning determination process when calling an elevator according to Example 4-2 of the fourth embodiment. [Figure 20] FIG. 11 is a diagram showing an example of an elevator call according to the fourth embodiment. [Figure 21] FIG. 13 is a diagram showing an example of a display of warning information when calling an elevator according to the fourth embodiment. [Figure 22] FIG. 11 is a diagram showing an example of warning information displayed on a manager terminal when an elevator is called according to the fourth embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0013] Hereinafter, embodiments of the present disclosure will be described in detail with reference to the drawings. In each drawing, the same or corresponding elements are designated by the same reference numerals, and for clarity of explanation, duplicate explanations will be omitted as necessary.

[0014] <Embodiment 1> FIG. 1 is a block diagram showing the configuration of a usage management support device 1 according to the first embodiment. The usage management support device 1 is an information processing device for supporting management of users entering each floor by monitoring getting on and off elevators in a specified building. As a premise, the usage management support device 1 is capable of referencing a database stored in an internal storage device (not shown) or a connected external storage device (not shown). The database manages information associating facial feature information of users with permitted floors that the users are permitted to use. In addition, at least a photographing device (not shown) is installed inside or outside the elevator, and the usage management support device 1 acquires images photographed by the photographing device. The usage management support device 1 includes an identification unit 11, an operation control unit 12, a determination unit 13, and an output unit 14.

[0015] The identification unit 11 refers to the database and identifies a first permitted floor associated with the first user. Here, the "first user" refers to a passenger (user) who has successfully passed the first facial authentication for a first facial image taken while boarding the elevator. The phrase "photographed while boarding the elevator" refers to, for example, a photograph taken outside the elevator or inside the elevator (near the entrance / exit) while boarding the elevator, or a photograph taken of the passenger inside the elevator after boarding. The "facial authentication" is a process of comparing facial feature information calculated from the facial image with facial feature information stored in the database, determining that authentication is successful if the degree of match is equal to or greater than a threshold, and identifying a user associated with the matched facial feature information. The facial authentication process may be performed inside the utilization management support device 1 or outside the utilization management support device 1. The identification unit 11 identifies, from the database, at least, a first permitted floor associated with the first user identified by the successful first facial authentication.

[0016] The operation control unit 12 controls the operation of the elevator according to the first permitted floor identified by the identification unit 11. For example, the operation control unit 12 instructs the operation controller or operation control system of the elevator to stop at the first permitted floor.

[0017] The determination unit 13 refers to the database and performs second facial authentication on a second facial image taken of the second user to determine whether the second user is permitted to disembark at a stop floor. Here, the second facial image is a facial image taken of the second user disembarking at a stop floor where the elevator stops in accordance with operation control by the operation control unit 12. The phrase "a photograph of the second user disembarking at a stop floor where the elevator stops" refers to, for example, a photograph taken inside the elevator when the second user is about to disembark when the elevator stops at a stop floor, or a photograph of the second user outside the elevator after disembarking. Furthermore, for example, if the second facial authentication on the second facial image is successful and the second permitted floor associated with the second user includes the stop floor, the determination unit 13 may determine that the second user is permitted to disembark at the stop floor. Alternatively, for example, the determination unit 13 may determine that the second user is allowed to disembark at the stopping floor if second facial authentication of the second facial image is successful by comparing the second facial image with candidates of facial feature information associated with the stopping floor as an allowed floor in the database.

[0018] When it is determined that the second user is not allowed to disembark, the output unit 14 outputs first warning information. For example, the output unit 14 outputs the first warning information to a speaker (not shown) or a display device (not shown) installed inside or outside the elevator. Alternatively, the output unit 14 may output the first warning information to a terminal of a manager of the elevator, the stopping floor, or the building.

[0019] 2 is a flowchart showing the flow of the management support method according to the first embodiment. First, a first facial image of a first user is captured when the first user boards an elevator. Then, a first facial authentication is performed on the first facial image by referring to the database, and it is assumed that the first user has succeeded in the first facial authentication. Then, the identification unit 11 refers to the database and identifies a first permitted floor associated with the first user who has succeeded in the first facial authentication (S11). Then, the operation control unit 12 controls the operation of the elevator according to the first permitted floor (S12).

[0020] Next, the elevator stops at a predetermined stopping floor such as the first permitted floor in accordance with the operation control by the operation control unit 12. At this time, a second face image of the second user getting off the elevator at the stopping floor is captured.

[0021] Then, the determination unit 13 refers to the database and determines whether the second user is allowed to get off at the stopping floor by performing second facial authentication on the second facial image (S13). If it is determined in step S13 that the second user is not allowed to get off, the output unit 14 outputs first warning information (S14).

[0022] In this embodiment, facial recognition is used to detect that a first user, whose permitted floor is registered in advance, has boarded an elevator, and the elevator is controlled to operate according to the detected permitted floor of the first user. This prevents a user whose permitted floor is not registered in advance from boarding the elevator alone and attempting to travel to an unauthorized floor. When the second user (not necessarily the first user) attempts to disembark at a stop floor (a permitted floor for a given user) of the operation-controlled elevator, a facial recognition result is obtained for the second user (not necessarily the first user). If the second user fails facial recognition or is successful but the stop floor is not registered as a permitted floor, the second user is determined to be unable to disembark, and an output to that effect is output. This makes it easier for people in the elevator or near the stop floor, or for an administrator, to recognize that the second user is attempting to disembark at an unauthorized floor. This can prevent the second user from disembarking if they have malicious intent. Alternatively, it can make it easier for nearby people, security guards, or the like to call out to the second user. Furthermore, if the second user is not intending to get off the vehicle by mistake, the second user will be more likely to realize this.

[0023] Therefore, without the need for physical gates, it is possible to make it difficult for unauthorized persons to enter each floor, thereby helping to prevent unauthorized users from entering each floor.

[0024] The usage management support device 1 includes a processor, memory, and storage device (not shown). The storage device stores a computer program that implements the processing of the usage management support method according to this embodiment. The processor then loads the computer program from the storage device into the memory and executes the computer program. This allows the processor to implement the functions of an identification unit 11, an operation control unit 12, a determination unit 13, and an output unit 14.

[0025] Alternatively, each component of the usage management support device 1 may be realized by dedicated hardware. Furthermore, some or all of the components of each device may be realized by general-purpose or dedicated circuits, processors, etc., or a combination of these. These may be configured by a single chip, or by multiple chips connected via a bus. Some or all of the components of each device may be realized by a combination of the above-mentioned circuits, etc., and programs. Furthermore, a CPU (Central Processing Unit), GPU (Graphics Processing Unit), FPGA (Field-Programmable Gate Array), quantum processor (quantum computer control chip), etc., may be used as the processor.

[0026] Furthermore, when some or all of the components of the usage management support device 1 are realized by multiple information processing devices, circuits, etc., the multiple information processing devices, circuits, etc. may be centrally or decentralized. For example, the information processing devices, circuits, etc. may be realized as a client-server system, a cloud computing system, or the like, each connected via a communication network. Furthermore, the functions of the usage management support device 1 may be provided in a SaaS (Software as a Service) format.

[0027] <Embodiment 2> The present embodiment 2 is a specific example of the above-described embodiment 1. Fig. 3 is a block diagram showing the configuration of a usage management support system 1000 according to the present embodiment 2. The usage management support system 1000 is an information system for supporting the management of elevators and users on each floor (floor) using images of users captured by floor cameras 101 and cameras 120.

[0028] In the usage management support system 1000, at least the operation controller 110, floor camera 101, authentication device 200, usage management support device 300, and administrator terminal 400 in the elevator 100 are communicably connected via a network N. Here, the network N is a wired or wireless communication line or communication network, such as a LAN (Local Area Network), the Internet, a wireless communication network, a mobile phone network, etc. Furthermore, the network N does not matter what type of communication protocol it uses.

[0029] The elevator 100 is installed and operated in a predetermined building such as a building. In this example, users U1 to U3 are assumed to be inside the elevator 100, but the number of passengers is not limited to this. The elevator 100 includes an operation controller 110, a camera 120, a display device 130, a floor designation unit 140, an open / close designation unit 150, a door 160, and a warning information output device 170.

[0030] The operation controller 110 is a device for controlling general operation of the elevator 100, such as raising and lowering the elevator 100, opening and closing the doors 160, receiving passengers' requests for designated floors and for opening and closing the doors 160, and stopping the elevator at designated floors. In this example, the operation controller 110 is connected to the camera 120, the display device 130, the floor designation unit 140, the opening / closing designation unit 150, the doors 160, and the warning information output unit 170, and transmits and receives data and communicates control signals with each component. In response to instructions from the utilization management support device 300, the operation controller 110 performs operation control such as stopping the elevator 100 at designated permitted floors, not stopping the elevator 100 at floors other than permitted floors, and selecting the designated button in the floor designation unit 140. The operation controller 110 also performs control such as outputting warning information received from the utilization management support device 300 to the warning information output unit 170.

[0031] The camera 120 is a photographing device installed inside the elevator 100. The camera 120 has a photographing range that covers at least a part of the interior space of the elevator 100, including the faces of users U1 to U3 riding in the elevator 100. In other words, the camera 120 photographs an area inside the elevator 100 that includes the faces of users U1 to U3. The camera 120 photographs at least when the door 160 is opened and closed, that is, when users U1 and the like board and disembark. The camera 120 transmits the photographed images to the utilization management support device 300 via the operation controller 110 and the network N. It should be noted that two or more cameras 120 may be provided inside the elevator 100.

[0032] The display device 130 has a screen such as a liquid crystal display, and is installed in a position where the screen can be seen by a user U1 or the like in the elevator 100. The display device 130 displays on the screen a moving image received from the utilization management support device 300 via the network N and the operation controller 110.

[0033] The floor designation unit 140 is configured to receive designation of the stopping floors of the elevator 100 from the user U1 or the like, and is, for example, a set of buttons that receive designation for each floor.

[0034] The open / close designation unit 150 is configured to receive designations for opening and closing the doors 160 of the elevator 100 from the user U1 or the like, and is, for example, a set of buttons for receiving designations for opening and closing the doors 160.

[0035] The door 160 opens and closes at a floor where the elevator 100 has stopped in response to an operation control signal from the operation controller 110. Therefore, even if the elevator 100 has stopped, the door 160 will not close if it receives a control signal from the operation controller 110 to keep the door open.

[0036] The warning information output device 170 outputs the warning information received from the usage management support device 300 via the network N and the operation controller 110 so that it can be perceived by the user U1, etc. The warning information output device 170 may include a speaker, a lamp, a display panel, etc. For example, if the warning information is audio data of an alarm sound or a warning message, the warning information output device 170 outputs the audio of the alarm sound or warning message via a speaker. Furthermore, if the warning information is a warning signal, the warning information output device 170 turns on or blinks a lamp, etc. Furthermore, if the warning information is text information or an image of a warning message, etc., the warning information output device 170 displays the warning message on a display panel or the display device 130.

[0037] The floor camera 101 is a photographing device installed on each floor of a building, and is installed near the entrance and exit of the elevator 100 in the elevator hall. The floor camera 101 is installed in a position where it can photograph an area including the faces of users getting on and off the elevator 100. The floor camera 101 may also be a camera of an authentication terminal installed at the entrance gate of the building's entrance floor. The above-mentioned camera 120 and floor camera 101 may also be called a first camera.

[0038] The authentication device 200 is an information processing device that manages facial feature information of users and performs facial authentication. In response to a facial authentication request received from the outside, the authentication device 200 compares the facial image or facial feature information included in the request with the facial feature information of each user and returns the comparison result (authentication result) to the request source.

[0039] FIG. 4 is a block diagram showing the configuration of an authentication device 200 according to the second embodiment. The authentication device 200 includes a face information database (DB) 210, a face detection unit 220, a feature point extraction unit 230, a registration unit 240, and an authentication unit 250. The face information DB 210 stores a user ID 211 and facial feature information 212 for the user ID in association with each other. The facial feature information 212 is a collection of feature points extracted from a facial image. The authentication device 200 may delete the facial feature information 212 from the face information DB 210 in response to a request from a user or the like corresponding to the facial feature information 212. Alternatively, the authentication device 200 may delete the facial feature information 212 after a certain period of time has elapsed since registration.

[0040] The face detection unit 220 detects a face area included in a registration image for registering face information and outputs the detected face area to the feature point extraction unit 230. The feature point extraction unit 230 extracts feature points from the face area detected by the face detection unit 220 and outputs face feature information to the registration unit 240. The feature point extraction unit 230 also extracts feature points included in a face image received from the usage management support device 300 or the like and outputs the face feature information to the authentication unit 250.

[0041] The registration unit 240 issues a new user ID 211 when registering facial feature information. The registration unit 240 associates the issued user ID 211 with facial feature information 212 extracted from the registered image and registers the associated user ID 211 in the facial information DB 210. The authentication unit 250 performs facial authentication using the facial feature information 212. Specifically, the authentication unit 250 compares the facial feature information extracted from the facial image with the facial feature information 212 in the facial information DB 210. If the comparison is successful, the authentication unit 250 identifies the user ID 211 associated with the compared facial feature information 212. The authentication unit 250 returns a match of the facial feature information to the request source as a facial authentication result. The match of the facial feature information corresponds to the success or failure of authentication. Note that the facial feature information matches (matches) when the degree of match is equal to or greater than a threshold. If the facial authentication is successful, the facial authentication result includes the identified user ID.

[0042] FIG. 5 is a flowchart showing the flow of face information registration processing by the authentication device 200 according to the second embodiment. First, the authentication device 200 receives a face information registration request (S201). For example, the authentication device 200 receives the face information registration request from the usage management support device 300 via the network N. Next, the face detection unit 220 detects a face area from a face image included in the face information registration request (S202). Then, the feature point extraction unit 230 extracts feature points (facial feature information) from the face area detected in step S202 (S203). Then, the registration unit 240 issues a user ID 211 (S204). Then, the registration unit 240 associates the extracted facial feature information 212 with the issued user ID 211 and registers them in the face information DB 210 (S205). Thereafter, the registration unit 240 returns the issued user ID 211 to the request source (for example, the usage management support device 300) (S206). The authentication device 200 may perform the face information registration process in response to a face information registration request received from an arbitrary information registration terminal. For example, the information registration terminal is an information processing device such as a personal computer, a smartphone, or a tablet terminal.

[0043] Returning to FIG. 3, the explanation continues. The usage management support device 300 is an example of the usage management support device 1 described above. The usage management support device 300 is an information processing device that controls the operation of the elevator 100. The usage management support device 300 controls first facial recognition using a captured image of a passenger (user) boarding the elevator 100 and controls the operation of the elevator 100's stopping floors based on the authentication result. The usage management support device 300 also controls second facial recognition using a captured image of a passenger (user) exiting the elevator 100, determines whether the passenger is permitted to exit based on the authentication result, and controls the output of warning information according to the determination result. The usage management support device 300 can also control the camera 120, the display device 130, the floor designation unit 140, the opening / closing designation unit 150, the door 160, and the warning information output unit 170 via the network N and the operation controller 110. The usage management support device 300 may also control the operation of two or more elevators. The usage management support device 300 may be configured redundantly with a plurality of servers, and each functional block may be realized by a plurality of computers.

[0044] The administrator terminal 400 is an information processing device operated by a building, elevator, or floor manager. The administrator terminal 400 is an information terminal such as a personal computer, a smartphone, or a tablet terminal. The administrator terminal 400 outputs warning information received from the usage management support device 300 via the network N. Warning Information If the warning information is audio data of an alarm sound or a warning message, the administrator terminal 400 outputs the audio of the alarm sound or warning message through a speaker. If the warning information is a warning signal, the administrator terminal 400 turns on or blinks a lamp. If the warning information is text information or an image of a warning message, the administrator terminal 400 displays the warning message on the screen.

[0045] 6 is a block diagram showing the configuration of a usage management support device 300 according to the second embodiment. The usage management support device 300 includes a storage unit 310, a memory 320, a communication unit 330, and a control unit 340. The storage unit 310 is an example of a storage device such as a hard disk or flash memory. The storage unit 310 stores a program 311 and a user management DB 312. The program 311 is a computer program (usage management support program) in which the usage management support process according to the second embodiment and the like are implemented.

[0046] The user management DB 312 is a database that manages permitted floors for each user. The user management DB 312 stores a user ID 3121 and a permitted floor 3122 in association with each other. The user ID 3121 is identification information for the target user. The permitted floor 3122 is information indicating the floor that the target user is permitted to use. There may be multiple permitted floors 3122 per user.

[0047] Here, the user ID 3121 is information that is identical to or uniquely corresponds to the user ID 211 that is managed in association with the facial feature information 212 in the facial information DB 210 of the authentication device 200. Therefore, the user management DB 312 and the facial information DB 210 can be said to be databases in which the user's registration feature information (biometric information, personal authentication information, personal identification information, etc.) is associated with the permitted floors 3122 via the user ID 3121. In other words, the user management DB 312 and the facial information DB 210 can be said to be databases in which the user's facial feature information is associated with the permitted floors that the user is permitted to use.

[0048] It is sufficient that the storage unit 310 stores at least the program 311. Therefore, the user management DB 312 may be saved in an external storage device connected to the usage management support device 300.

[0049] The memory 320 is a volatile storage device such as a RAM (Random Access Memory), and is a storage area for temporarily storing information during operation of the control unit 340. The communication unit 330 is a communication interface with the network N.

[0050] The control unit 340 is a processor, i.e., a control device, that controls each component of the usage management support device 300. The control unit 340 loads the program 311 from the storage unit 310 into the memory 320 and executes the program 311. In this way, the control unit 340 realizes the functions of a registration unit 341, an authentication control unit 342, an identification unit 343, an operation control unit 344, a determination unit 345, and an output unit 346.

[0051] The registration unit 341 registers the permitted floor 3122 for a specific user in the user management DB 312. For example, the registration unit 341 receives a pair of a specific user ID and a permitted floor indicating a specific floor from the administrator terminal 400 of the administrator of a specific floor via the network N. Then, the registration unit 341 associates the received user ID 3121 with the permitted floor 3122 and registers them in the user management DB 312. The registration unit 341 may also register facial information of the user. For example, the registration unit 341 receives a pair of a facial image of a specific user and a permitted floor from the administrator terminal 400. Then, the registration unit 341 transmits a facial information registration request including the received facial image to the authentication device 200 via the network N. Then, the registration unit 341 receives the user ID issued when the facial information was registered from the authentication device 200. Then, the registration unit 341 associates the issued user ID 3121 with the received permitted floor 3122 and registers them in the user management DB 312.

[0052] The authentication control unit 342 extracts the recognized face area from the captured image as a face image. At this time, the authentication control unit 342 may extract face images of multiple people from one captured image. The authentication control unit 342 controls face authentication using the authentication device 200 for the recognized face area or the extracted face image. Specifically, the authentication control unit 342 transmits a face authentication request including a face image corresponding to the face area to the authentication device 200, and receives a face authentication result from the authentication device 200. Then, the authentication control unit 342 notifies the determination unit 345 of the face authentication result received from the authentication device 200. Note that the authentication control unit 342 may extract face feature information from the face area and include the face feature information in the face authentication request.

[0053] The identification unit 343 is an example of the above-mentioned identification unit 11. When the determination unit 345 determines that the face authentication is successful, the identification unit 343 identifies the user ID included in the face authentication result. Then, the identification unit 343 identifies the permitted floor 3122 associated with the identified user ID 3121 from the user management DB 312. That is, when the first face authentication performed on the first face image captured of the first user when boarding the elevator 100 using the facial feature information 212 of the face information DB 210 is successful, the identification unit 343 identifies the first permitted floor 3122.

[0054] The operation control unit 344 is an example of the operation control unit 12 described above. The operation control unit 344 controls the operation of the elevator 100 according to the first permitted floor identified by the identification unit 343. Specifically, the operation control unit 344 controls the operation of the elevator 100 so that the elevator 100 stops at the first permitted floor. For example, the operation control unit 344 controls the operation by selecting a designation button for designating a stop at the first permitted floor in the elevator 100. Specifically, the operation control unit 344 transmits a selection instruction for the designation button corresponding to the first permitted floor to the operation controller 110 via the network N. Alternatively, the operation control unit 344 controls the operation by selecting a designation button for designating a stop at the first permitted floor in the elevator 100 (activating it). Specifically, the operation control unit 344 transmits an activation instruction for the designation button corresponding to the first permitted floor and an inactivation instruction for the designation buttons corresponding to floors other than the first permitted floor to the operation controller 110 via the network N. For example, if a first user is permitted to use multiple floors, the operation control unit 344 may activate multiple designated buttons that the first user can designate and deactivate designated buttons for other floors to prevent them from being selected, i.e., to control operation.

[0055] The determination unit 345 is an example of the above-mentioned determination unit 13. The determination unit 345 determines whether authentication has been successful or not based on the face authentication result notified from the authentication control unit 342. Furthermore, the determination unit 345 determines whether a second user who is about to get off at a stopping floor is allowed to get off, based on the face authentication result.

[0056] Here, when the elevator 100 stops at a predetermined stopping floor and the second user succeeds in the second facial authentication, the identification unit 343 and the determination unit 345 may refer to the user management DB 312 and identify the second permitted floor 3122 associated with the user ID 3121 of the second user who succeeded in the second facial authentication. Then, the determination unit 345 determines whether the stopping floor is included in the identified second permitted floors. If the stopping floor is included in the second permitted floors, the determination unit 345 determines that the second user is allowed to disembark, and if the stopping floor is not included in the second permitted floors, the determination unit 345 determines that the second user is not allowed to disembark.

[0057] Alternatively, when the elevator 100 stops at a predetermined stopping floor, the identification unit 343 and the determination unit 345 may identify the user ID 3121 associated with the stopping floor as the permitted floor 3122 from the user management DB 312. In this case, the authentication control unit 342 and the determination unit 345 control the second face authentication for the facial feature information 212 associated with the identified user ID 211 in the face information DB 210. Then, when the second face authentication is successful, the determination unit 345 determines that the second user is allowed to disembark, and when the second face authentication is unsuccessful, the determination unit 345 determines that the second user is not allowed to disembark.

[0058] The output unit 346 is an example of the output unit 14 described above. When it is determined that the second user is not allowed to disembark, the output unit 346 outputs first warning information. Specifically, the output unit 346 transmits the first warning information to the warning information output unit 170 via the network N and the operation controller 110. The output unit 346 may also transmit the first warning information to the manager terminal 400 via the network N. Furthermore, the output unit 346 may output the first warning information including the second facial image to the manager terminal 400 of the manager of the stop floor.

[0059] 7 is a flowchart showing the flow of operation control processing when boarding an elevator according to the second embodiment. First, the elevator 100 stops at a predetermined floor and opens the door 160. Then, the user U1 or the like boards the elevator 100. At this time, the camera 120 captures an image including the face of the user U1 or the like when boarding the elevator 100, and transmits the captured image to the usage management support device 300 via the network N. Therefore, the captured image includes the facial area of ​​the user U1 or the like.

[0060] In response to this, the usage management support device 300 acquires a captured image of the user when boarding the elevator 100 (S301). For example, the usage management support device 300 acquires the captured image from the camera 120 via the operation controller 110 and the network N. Alternatively, the usage management support device 300 may acquire the captured image from the camera 120 via the network N without going through the operation controller 110. Furthermore, the captured image may be one captured by the floor camera 101 instead of the camera 120. In this case, the usage management support device 300 acquires the captured image from the floor camera 101 via the network N.

[0061] Next, the usage management support device 300 extracts a facial image of the user from the captured image (S302). Specifically, the usage management support device 300 recognizes a person's facial area from the captured image and extracts a facial image corresponding to the recognized facial area. Then, the usage management support device 300 transmits a facial authentication request including the extracted facial image to the authentication device 200 via the network N (S303). In response to this, the authentication device 200 performs facial authentication processing.

[0062] FIG. 8 is a flowchart showing the flow of face authentication processing by the authentication device 200 according to the second embodiment. First, the authentication device 200 receives a face authentication request from the usage management support device 300 via the network N (S211). Next, the authentication device 200 extracts facial feature information from the face image included in the face authentication request, similar to steps S202 and S203 described above. Then, the authentication unit 250 of the authentication device 200 compares the facial feature information extracted from the face image included in the face authentication request with the facial feature information 212 in the face information DB 210 (S212) and calculates the degree of match. Then, the authentication unit 250 determines whether the degree of match is equal to or greater than a threshold (S213). If the facial feature information matches, that is, if the degree of match of the facial feature information is equal to or greater than the threshold, the authentication unit 250 identifies the user ID 211 associated with the facial feature information 212 (S214). Then, the authentication unit 250 returns the face authentication result, including the fact that the face authentication was successful and the identified user ID 211, to the usage management support device 300 via the network N (S215). If the degree of match is less than the threshold in step S213, the authentication unit 250 returns the face authentication result, including the fact that the face authentication was unsuccessful, to the usage management support device 300 via the network N (S216).

[0063] Returning to FIG. 7, the explanation continues. The usage management support device 300 receives the facial authentication result from the authentication device 200 via the network N (S304). Then, the usage management support device 300 determines whether the facial authentication has been successful (S305). Specifically, the usage management support device 300 refers to the facial authentication result, and if the facial authentication result includes a user ID, determines that the facial authentication has been successful. Then, the usage management support device 300 identifies the user ID included in the facial authentication result (S306). Then, the usage management support device 300 identifies the first permitted floor 3122 associated with the identified user ID 3121 from the user management DB 312 (S307). Then, the usage management support device 300 changes the designation button for the identified first permitted floor to a selected state (S308). Specifically, as described above, the usage management support device 300 transmits an instruction to select the designation button corresponding to the first permitted floor to the operation controller 110 via the network N. As a result, the operation controller 110 selects the corresponding designation button of the floor designation unit 140. On the other hand, if it is determined in step S305 that face authentication has failed, the usage management support device 300 outputs warning information (S309). As a result, the warning information output unit 170 outputs the warning information.

[0064] If two or more facial images are extracted in step S302, the usage management support device 300 repeatedly executes steps S303 to S309 for each facial image.

[0065] Note that, instead of step S308 in FIG. 7, the utilization management support device 300 may change the designation button for the identified first permitted floor to a selectable state, i.e., activate the designation button. In this case, the utilization management support device 300 also changes the designation buttons other than the identified first permitted floor to an unselectable state, i.e., deactivates the designation buttons. After that, the user U1 may press the designation button 141 for "10F." In this case, the user U1 can only select permitted floors and cannot select other floors, which prevents the user from pressing the wrong button. In addition, the user can independently BoardingBy not allowing passengers to select unauthorized floors when boarding, disembarking at unauthorized floors can be prevented, improving the deterrent effect of malicious boarding and unauthorized disembarking.

[0066] FIG. 9 is a diagram showing an example of the situation inside the elevator 100 at the time of boarding according to the second embodiment. It is assumed that the user management DB 312 associates at least the user ID of user U1 with "10F" as the permitted floor. The cameras 120-1 and 120-2 are examples of imaging devices that capture images of the interior space of the elevator 100. It is to be noted that a single camera may be used. The camera 120-2 is capable of capturing images including the faces of users U1 to U3 when they board the elevator 100. Furthermore, the camera 120-1 is capable of capturing images including the faces of users U1 to U3 when they face outward (toward the rear of FIG. 9 , toward the door 160) after boarding the elevator 100. It is assumed that the usage management support device 300 performs the process of FIG. 7 described above using images captured by either the camera 120-1 or 120-2. Then, for example, assume that user U1 has succeeded in the first face authentication, and the utilization management support device 300 has identified "10F" as the permitted floor for user U1, and controlled the operation of the elevator 100 by selecting the designation button 141 for "10F." Alternatively, the designation button 141 may be activated to a selectable state, and the other designation buttons may be deactivated to an unselectable state. The display device 130 indicates that a message "Moving to 10F" is being displayed. Thereafter, the elevator 100 closes the door 160 and moves to the designated floor (for example, the 10th floor).

[0067] Next, the warning determination process when getting off the elevator using the second facial authentication will be described below in Examples 2-1 and 2-2. In Example 2-1, the utilization management support device 300 identifies permitted floors for the second user who has succeeded in the second facial authentication, similar to the operation control process when boarding, and if the identified permitted floors include a stop floor, determines that the second user is allowed to get off.

[0068] 10 is a flowchart showing the flow of a warning determination process when users disembark from an elevator according to Example 2-1 of the second embodiment. First, the elevator 100 stops at a predetermined floor and opens the door 160. Then, the user U1 or the like disembarks from the elevator 100. At this time, the camera 120 captures an image including the face of the user U1 or the like as they disembark from the elevator 100, and transmits the captured image to the usage management support device 300 via the network N. Therefore, the captured image includes the facial region of the user U1 or the like.

[0069] In response to this, the usage management support device 300 acquires a photographed image of the user when getting off the elevator 100 (S321). Note that the photographed image may be taken by a floor camera 101 installed in the elevator hall of the stop floor instead of the camera 120.

[0070] Next, steps S302 to S305 are executed as in FIG. 7 described above. If the second face authentication is successful, steps S306 and S307 are executed as in FIG. 7 described above. Then, the usage management support device 300 determines whether the stopping floor of the elevator 100 is included in the permitted floors identified in step S307 (S328). If the stopping floor is included in the permitted floors for the second user, the usage management support device 300 determines that the second user can disembark at the stopping floor. In this case, the usage management support device 300 performs normal operation control on the elevator 100. That is, after the disembarking user has finished disembarking, the elevator 100 closes the door 160 and starts moving to the next specified floor.

[0071] On the other hand, if the second user fails the second facial authentication in step S305, or if the stop floor is not included in the second user's permitted floors in step S328, the usage management support device 300 determines that the second user is not allowed to disembark at the stop floor and outputs warning information (S329). As a result, the warning information output unit 170 outputs the warning information. At this time, the usage management support device 300 may output the warning information including a second facial image of the second user who failed the second facial authentication. In particular, the usage management support device 300 may transmit the second facial image to the administrator terminal 400 including the second facial image in the warning information. This allows the administrator or security guard to visually recognize the face of the second user who is not permitted to disembark, making it easier to call out to the second user, etc.

[0072] If two or more facial images are extracted in step S302, the usage management support device 300 repeatedly executes steps S303 to S307, S328, and S329 for each facial image.

[0073] Next, in Example 2-2, when the elevator stops, the usage management support device 300 narrows down the users who have set the stopping floor as an allowed floor, and uses the facial feature information of the narrowed down users as the target for comparison in the second face authentication.If the second face authentication is successful, it determines that the second user is allowed to disembark.

[0074] 11 is a flowchart showing the flow of a warning determination process when an elevator user disembarks according to Example 2-2 of the second embodiment. First, when the elevator 100 stops at a predetermined stopping floor, the usage management support device 300 identifies the user ID 3121 associated with the stopping floor as an allowed floor 3122 from the user management DB 312 (S320). Then, similar to step S321 in FIG. 10 described above, the usage management support device 300 acquires a captured image of the user disembarking from the elevator 100. Then, similar to step S302 in FIG. 7 described above, the usage management support device 300 extracts a facial image of the second user from the captured image.

[0075] Then, the usage management support device 300 transmits a face authentication request targeted at the user ID identified in step S320 (S323). For example, if multiple user IDs are identified in step S320, the usage management support device 300 transmits a face authentication request specifying the identified multiple user IDs and including the face image of the second user extracted in step S302 to the authentication device 200 via the network N.

[0076] In response to this, the authentication device 200 extracts facial feature information from the facial image of the second user included in the facial authentication request. The authentication device 200 also narrows down the facial feature information 212 associated with the user ID 211 specified in the received facial authentication request from the facial information DB 210. The authentication device 200 then performs facial authentication processing by matching the facial feature information of the second user with each of the narrowed-down facial feature information 212. Here, in normal facial authentication processing, one-to-N authentication is performed between the facial feature information of the second user and all of the facial feature information 212 in the facial information DB 210. In contrast, in Example 2-2, although one-to-N authentication is performed, the target to be matched with the facial feature information of the second user is narrowed down to some of the facial feature information 212 in the facial information DB 210. Therefore, the facial authentication processing of Example 2-2 requires less facial feature information to be authenticated than normal facial authentication processing, thereby reducing authentication costs, such as the authentication processing load and processing time. In other words, the authentication processing can be made more efficient. Then, the authentication device 200 transmits the face authentication result to the usage management support device 300.

[0077] In response to this, the usage management support device 300 receives the face authentication result from the authentication device 200 via the network N (S304). Then, the usage management support device 300 determines whether or not the face authentication is successful (S305). If the face authentication of the second user is successful, the usage management support device 300 determines that the second user can disembark at the stopping floor. In this case, the usage management support device 300 performs normal operation control of the elevator 100.

[0078] On the other hand, if the second user fails the second facial authentication in step S305, the usage management support device 300 determines that the second user is not allowed to disembark at the stop floor and outputs warning information (S329). As a result, the warning information output unit 170 outputs the warning information. Furthermore, similar to the above-described Example 2-1, the usage management support device 300 may output the warning information including the second facial image of the second user who failed the second facial authentication.

[0079] If two or more facial images are extracted in step S302, the usage management support device 300 repeatedly executes steps S323, S304, S305, and S329 for each facial image.

[0080] FIG. 12 is a diagram showing an example of the display of warning information when disembarking according to the second embodiment. Here, the elevator 100 stops on the 10th floor, and users U1 and U2 have successfully passed the second facial authentication. It has been determined that disembarking is permitted on the 10th floor, but user U3 is not permitted to disembark on the 10th floor. Disembarking may not be permitted if facial authentication of user U3 has failed, or if facial authentication of user U3 has succeeded but the 10th floor is not included in the permitted floors for user U3. The display device 130 displays the warning information output in step S329 of FIG. 10 or 11 when user U3 disembarks after users U1 and U2 have disembarked. The warning information displayed on the display device 130 includes, for example, a message indicating "Disembarkation not permitted!", a facial image captured when user U3 disembarked, and the date, time, and location (10F) of the third facial authentication. However, the warning information is not limited to these examples. Furthermore, if the user U3 has succeeded in the third face authentication, the face image included in the warning information may be a face image registered for verification.

[0081] FIG. 13 is a diagram showing an example of warning information displayed on the administrator terminal when disembarking according to the second embodiment. Here, it is assumed that when the elevator 100 stops at the fifth floor, users moving from inside the elevator 100 toward the door 160 to disembark are photographed by the camera 120-1 on the door 160 side inside the elevator 100. Then, it is assumed that face authentication is performed on each user in the photographed image, and one user is determined to be NO in step S305 or NO in S328, and warning information is output (S329). As described above, the administrator terminal 400 displays the warning information output in step S329 on a screen. The warning information displayed on the screen of the administrator terminal 400 includes, for example, a photographed image taken by the camera 120-1 on the door 160 side inside the elevator 100, a facial image of a person who is the target of a warning in the image, and a warning message. The facial image may be an enlarged image of the facial area of ​​the person who is the target of a warning in the photographed image. The warning message includes the floor to be warned, the date and time, etc. In this example, the warning message reads, "An unauthorized user disembarked (entered) the fifth floor at 2:30 PM," but is not limited to this. This makes it easier for a building manager or security guard, or a company manager using the disembarking floor, to grasp the number and facial photographs of unauthorized people among those attempting to disembark from the elevator, based on the warning information displayed on the administrator terminal 400.

[0082] The warning information may also include the floor on which the person to be warned boarded. For example, when each user U1, etc., boards, the usage management support device 300 associates the facial image and facial feature information with the floor on which the user boarded (boarding floor) and stores them in the memory 320, etc., regardless of whether the first face authentication of each user was successful. Then, when the elevator 100 stops and warning information is generated for step S329, the usage management support device 300 may include in the warning information the boarding floor associated with the facial image and facial feature information of the person to be warned. Then, the usage management support device 300 outputs warning information including the person to be warned and the boarding floor.

[0083] Furthermore, if the person to be warned is a user registered with an organization such as a company on a different floor, attribute information such as the user's name and the organization's department may be registered, and the name, etc., of the person to be warned can be identified through facial recognition. Therefore, if the person to be warned can be identified through facial recognition, the usage management support device 300 may identify attribute information such as the person's name and department, and include the identified attribute information in the warning information. Furthermore, if the person to be warned cannot be identified through facial recognition, the usage management support device 300 may include in the warning information a notice that the person to be warned is unregistered. Furthermore, if the person to be warned can be identified through facial recognition but the person's attribute information cannot be identified, the usage management support device 300 may also include in the warning information a notice that the person to be warned is unregistered.

[0084] In this way, in the second embodiment, the designated button for the permitted floor that is registered in advance for the user boarding the elevator is automatically selected. Therefore, even if the user does not press the designated button, the elevator automatically stops at the floor that the user is permitted to use, allowing the permitted user to smoothly complete their business. In particular, in the case of visitors, even if a guide is not accompanying the visitor, the visitor can go to the permitted floor without getting lost or accidentally getting off at the wrong floor. Alternatively, in the second embodiment, the designated button for the permitted floor may be automatically made selectable, and the designated buttons for floors other than the permitted floor may be automatically made unselectable. This makes it possible to prevent the user from accidentally pressing a floor other than the permitted floor.

[0085] Furthermore, if the second user attempts to get off at a floor where the second user is not permitted, or if the second user actually gets off, warning information is output, so that the second user and other people at the stopping floor can quickly become aware of the situation. This can prevent malicious users from entering unauthorized floors.

[0086] Furthermore, in Example 2-1, even if a second user blends in with other users or boards the vehicle together when boarding, face authentication is performed for each user when disembarking and then an allowed floor is determined, so that a warning can be given to the second user who is not permitted to disembark at the stopping floor. This can prevent tailgating from disembarking. Furthermore, in Example 2-2, the target of the second face authentication is narrowed down, so that the cost of face authentication when disembarking can be reduced.

[0087] In this way, according to the second embodiment, it is possible to reduce the cost of installing a physical gate and to help prevent unauthorized users from entering each floor.

[0088] <Embodiment 3> The third embodiment is a modification of the second embodiment described above. In the third embodiment, a first facial authentication is performed when a user in the elevator attempts to specify the floor at which to get off. Therefore, the elevator 100 according to the third embodiment is assumed to have a second camera installed in a position where the face of the user pressing the specification button can be photographed, for example, around the floor specification unit 140. Note that the overall configuration of the usage management support system according to the third embodiment is the same as that described above, and therefore illustrations and redundant explanations will be omitted, and the following description will focus on the differences from the second embodiment.

[0089] The identification unit according to the third embodiment identifies a first permitted floor when a first face authentication performed using facial feature information in a database on a first face image captured when a first user in an elevator attempts to specify a floor at which the first user will disembark is successful. Here, "when the first user attempts to specify a floor at which the first user will disembark" refers to, for example, when the first user presses a designation button on a floor designation unit in the elevator. Then, when the first face authentication is successful and the floor designated by the first user is included in the first permitted floors, the operation control unit selects a designation button for designating a stop at the designated floor and performs operation control. Alternatively, "when the first user attempts to designate a floor at which the first user will disembark" may refer to, for example, when the first user stands in front of the floor designation unit in the elevator to designate a floor at which the first user will disembark, but before pressing the designation button. If the first face authentication is successful at this time, the operation control unit may select a designation button for designating a stop at the first permitted floor and perform operation control.

[0090] FIG. 14 is a flowchart showing the flow of operation control processing when boarding an elevator according to the third embodiment. Here, it is assumed that the elevator 100 stops at a predetermined floor and a user U1 or the like boards the elevator 100. Then, it is assumed that the user U1 (first user) stands in front of the floor designation unit 140 inside the elevator 100 and presses the designation button corresponding to the floor at which the user U1 will disembark. At this time, the second camera photographs the face of the user U1 in front of the floor designation unit 140 and transmits the photographed image to the utilization management support device 300 via the network N. Here, "photographed when the user U1 specifies the floor at which the user U1 will disembark (by the second camera) inside the elevator 100" is an example of "photographed as a result of boarding the elevator."

[0091] In response to this, the usage management support device 300 accepts the user U1 pressing the designated button for the disembarking floor in the elevator 100 (S331). At the same time, the usage management support device 300 acquires a photographed image of the user U1 in front of the designated button in the elevator 100 (S301a).

[0092] Next, steps S302 to S305 are executed as in FIG. 7 described above, and if the first user succeeds in the first face authentication, steps S306 and S307 are executed as in FIG. 7 described above. Then, the usage management support device 300 determines whether the disembarking floor (designated floor) accepted in step S331 is included in the first permitted floors identified in step S307 (S338). If the designated floor is included in the first permitted floors of the first user, the usage management support device 300 changes the designation button for the identified first permitted floor to a selected state (S308), as described above. As a result, the operation controller 110 selects the corresponding designation button in the floor designation unit 140.

[0093] On the other hand, if it is determined in step S305 that face authentication has failed, or if the designated floor is not included in the first permitted floors of the first user in step S338, the usage management support device 300 outputs warning information (S309). As a result, the warning information output unit 170 outputs the warning information. Note that in step S309 of FIG. 14, the usage management support device 300 does not necessarily output the warning information to the administrator terminal 400. This is because an excessive notification would occur, for example, if the user presses the wrong designation button. Therefore, in step S309 of FIG. 14, the usage management support device 300 may output an alarm sound or audio data or a display message indicating that the designated floor is not a permitted floor as warning information.

[0094] 14, the pressing of the button for specifying the exit floor may be accepted after the face authentication is successful in step S305 and before step S338. If the face authentication fails, the user is not permitted to use the elevator in the first place, and therefore warning information may be output without accepting the specification of the exit floor.

[0095] Alternatively, instead of step S308 in FIG. 14, the utilization management support device 300 may change the designation button for the identified first permitted floor to a selectable state, i.e., activate the designation button. In this case, the utilization management support device 300 also changes the designation buttons other than the identified first permitted floor to an unselectable state, i.e., deactivates the designation buttons. This allows the selectable designation buttons to be narrowed down in advance when there are multiple first permitted floors, thereby preventing erroneous selection by the user. User U1 may then press the designation button 141 for "10F." In response, in step S331 in FIG. 14, the utilization management support device 300 may accept a press of one of the activated designation buttons for the disembarking floors.

[0096] FIG. 15 is a diagram showing an example of pressing a designated button in the elevator 100 according to the third embodiment. Here, it is shown that the user U1 presses the designated button 141 in front of the floor designation unit 140. Alternatively, the user U1 may be standing in front of the floor designation unit 140 and before pressing the designated button 141. The camera 120-3 is an example of a second camera, and captures the face of the user U1 standing in front of the floor designation unit 140. In this example, it is assumed that the first face authentication for the first face image of the user U1 extracted from the image captured by the camera 120-3 has been successful. Therefore, the utilization management support device 300 determines that "10F" corresponding to the designated button 141 pressed by the user U1 is included in the permitted floors 3122 associated with the user U1, and changes the designated button 141 to a selected state. In other words, it is shown that the designated button 141 pressed by the user U1 has been activated.

[0097] FIG. 16 is a diagram showing an example of the display of warning information when a designated button in an elevator is pressed according to the third embodiment. Here, the user U1 is in front of the floor designation unit 140 and presses the designated button 141 corresponding to the 10th floor, or before pressing the designated button, and is not permitted to get off (designate) the 10th floor. Here, if getting off is not permitted, the user U1 If the face authentication fails, U1 The facial recognition was successful, but the user U1The tenth floor may not be included in the permitted floors. The display device 130 displays warning information similar to that shown in Fig. 12 above. However, the warning information is not limited to this.

[0098] In this third embodiment, either of the above-described examples 2-1 and 2-2 can be applied to the warning determination process when getting off the elevator.

[0099] In this way, this embodiment also reduces the cost of installing physical gates and helps prevent unauthorized users from entering each floor. In particular, this third embodiment can prevent a user who boards an elevator from mistakenly specifying a floor other than the permitted floor as the floor where they want to disembark. Furthermore, if only a user whose permitted floor has not been registered in advance boards the elevator, the specification button will not be selected, and the user will not be able to disembark alone at an unauthorized floor. In other words, it is possible to prevent malicious users from boarding the elevator.

[0100] <Embodiment 4> The fourth embodiment is an improved version of the second or third embodiment described above. According to the second or third embodiment described above, warning information is output when an elevator passenger attempts to disembark at a floor other than the permitted floor, which has the effect of deterring malicious users from boarding the elevator and preventing passengers from accidentally disembarking at floors other than the permitted floor. However, since this embodiment does not use a security gate, it is possible for passengers to disembark at floors other than the permitted floors when accompanied by an authorized user or in a large group. Therefore, the fourth embodiment detects the timing when an elevator is called in the elevator hall so that users who have disembarked at floors other than the permitted floors can return to their original floor, thereby strengthening the warning and deterrence.

[0101] The determination unit according to the fourth embodiment refers to the database and determines whether to stop the elevator at a predetermined floor by performing third facial recognition on a third facial image captured of a third user who is attempting to press the elevator call button at the predetermined floor. If it is determined that the elevator should not be stopped at the predetermined floor, the operation control unit controls the operation so that the elevator does not stop at the predetermined floor. This prevents third users who are staying at floors other than permitted floors from boarding the elevator. Here, "attempting to press the elevator call button at a predetermined floor" refers to, for example, when a third user presses the call button in the elevator hall at the predetermined floor. Alternatively, "attempting to press the elevator call button at a predetermined floor" may refer to, for example, when the third user stands in front of the call button but before pressing the call button.

[0102] Furthermore, it is preferable that the output unit outputs second warning information when it is determined not to stop the elevator at the predetermined floor, so that the third user and people around the elevator hall on the predetermined floor can easily recognize that the third user is staying on the predetermined floor without permission.

[0103] Furthermore, the output unit may output second warning information including the third facial image to a terminal of a manager on a specific floor, which makes it easier for a security guard, manager, or the like on the specific floor to recognize the face of the third user and then call out to or track the third user.

[0104] Furthermore, the determination unit may control the third facial authentication using facial feature information associated with a specific floor in the database, and if the third facial authentication fails, determine that the vehicle should not be stopped at the specific floor. This reduces the amount of facial feature information to be authenticated compared to normal facial authentication processing, thereby reducing authentication costs such as the authentication processing load and processing time. In other words, the authentication processing can be made more efficient.

[0105] Alternatively, the determination unit may refer to the database to identify a third permitted floor associated with the third user who has successfully passed the third facial authentication, and determine not to stop the vehicle at the specified floor if the specified floor is not included in the third permitted floors. This allows the third user and related parties at the specified floor to quickly recognize this. This can prevent malicious users from escaping from unauthorized floors.

[0106] Furthermore, if it is determined that the elevator should not be stopped at a predetermined floor, the operation control unit may control the operation by making the call button unselectable, thereby preventing the elevator from stopping and preventing a third user from boarding the elevator.

[0107] Fig. 17 is a block diagram showing the configuration of a usage management support system 1000b according to the fourth embodiment. Compared to Fig. 3 described above, in the usage management support system 1000b, the floor camera 101-2 is installed at a position where it can capture an image of an area including the face of a user who presses a call button to call the elevator 100 on each floor. For example, it is assumed that the floor camera 101-2 (third camera) is installed above the call button of the elevator 100 in the elevator hall on a predetermined floor. It is also assumed that the user UX (third user) is in front of the call button on the predetermined floor. It is also assumed that the predetermined floor is not registered as a permitted floor for the user UX.

[0108] 18 is a flowchart showing the flow of a warning determination process when calling an elevator according to Example 4-1 of Embodiment 4. First, a user UX presses the call button of the elevator 100 in the elevator hall of a predetermined floor. At this time, the floor camera 101-2 captures an image of the face of the user UX in front of the call button and transmits the captured image to the usage management support device 300 via the network N.

[0109] In response to this, the usage management support device 300 accepts pressing of the call button by the user UX who calls the elevator 100 at a predetermined floor (S341). At the same time, the usage management support device 300 acquires a photographed image of the user UX when calling the elevator 100 (S342).

[0110] Next, steps S302 to S305 are executed as in FIG. 7 described above. If the third user succeeds in the third face authentication, steps S306 and S307 are executed as in FIG. 7 described above. Then, the usage management support device 300 determines whether the predetermined floor accepted in step S341 is included in the third permitted floors identified in step S307 (S347). If the predetermined floor is included in the third permitted floors for the third user, the usage management support device 300 changes the designated button accepted in step S341 to a selected state (S348). Specifically, the usage management support device 300 transmits an instruction to select the call button for the predetermined floor via the network N to a controller (not shown) in the elevator hall of the predetermined floor. As a result, the controller selects the call button, i.e., activates the call button.

[0111] On the other hand, if it is determined in step S305 that facial authentication has failed or if it is determined in step S347 that the predetermined floor is not included in the third permitted floors for the third user, the usage management support device 300 outputs warning information (S349). As a result, a warning information output device (not shown) on the predetermined floor outputs the warning information. For example, the warning information output device outputs an alarm sound or a warning message from a speaker in the elevator hall on the predetermined floor. The warning information output device may also turn on or flash a lamp in the elevator hall on the predetermined floor, or display a warning message on a display panel. Alternatively, the usage management support device 300 may transmit the warning information to the administrator terminal 400 via the network N. Furthermore, the usage management support device 300 may output the warning information including a facial image of the third user. In this case, for example, warning information such as the facial image of the third user may be displayed on a display panel in the elevator hall on the predetermined floor. This allows people around the elevator hall on the predetermined floor to recognize that the third user is a user who is not permitted to stay on the predetermined floor, making it easier to take appropriate action. Furthermore, the usage management support device 300 may transmit warning information in step S349 to the administrator terminal 400 via the network N. In this case, the administrator terminal 400 displays the received warning information, such as a facial image of the third user, on a screen. This allows the building manager or the manager on a specific floor, the person in charge, or the security guard to recognize the face of the third user, making it easier to subsequently call out to or track the third user.

[0112] 18 may be accepted after the face authentication is successful in step S305 and before step S347. If the face authentication fails, the user is not permitted to use the current floor (predetermined floor) in the first place, and therefore warning information can be output without accepting the call button being pressed.

[0113] Alternatively, the usage management support device 300 may make the call button unselectable, that is, inactive, instead of or in addition to step S349 in FIG.

[0114] 19 is a flowchart showing the flow of a warning determination process when calling an elevator according to Example 4-2 of Embodiment 4. First, step S341 is executed as in Example 4-1 described above. Then, the utilization management support device 300 identifies the user ID 3121 associated with the predetermined floor as the permitted floor 3122 from the user management DB 312 (S343).

[0115] Furthermore, step S342 is executed in the same manner as in Example 4-2 described above. Then, the usage management support device 300 extracts a facial image of the user from the captured image (S302). After steps S343 and S302, the usage management support device 300 transmits a facial authentication request targeted at the user ID identified in step S343 (S344). For example, if multiple user IDs are identified in step S343, the usage management support device 300 specifies the identified multiple user IDs and transmits a facial authentication request including the facial image of the third user extracted in step S302 to the authentication device 200 via the network N.

[0116] In response to this, the authentication device 200 performs face authentication processing by comparing the facial feature information of the third user with each of the narrowed-down facial feature information 212. The authentication device 200 transmits the face authentication result to the usage management support device 300. Thereafter, steps S304 to S307 and S347 to S349 are executed in the same manner as in FIG. 18 described above.

[0117] FIG. 20 is a diagram showing an example of calling the elevator 100 according to the fourth embodiment. FIG. 15 shows that the display device 130 is installed outside the elevator 100 (on the elevator hall side), and that the user UX has pressed the call button 180 of the elevator 100 in the elevator hall of a predetermined floor. Alternatively, the user UX may have pressed the call button 180 before pressing the call button 180. The floor camera 101-2 captures an image of the face of the user UX in front of the call button of the elevator 100 in the elevator hall of the predetermined floor. In this example, it is assumed that the third face authentication for the third face image of the user UX extracted from the image captured by the floor camera 101-2 is successful. However, it is assumed that the user ID 3121 of the user UX is not associated with the predetermined floor as the permitted floor 3122 in the user management DB 312. Therefore, the utilization management support device 300 does not activate the call button. For example, the utilization management support device 300 may transmit a control signal to a controller in the elevator hall of the predetermined floor to inhibit activation of the call button. In addition, the usage management support device 300 outputs a warning message to the controller, and the controller displays the warning message "You are not permitted to stay on this floor!" on the display device 130.

[0118] FIG. 21 is a diagram showing an example of the display of warning information when calling an elevator according to the fourth embodiment. Here, the user UX is not permitted to stay on the 10th floor when, or before, pressing the call button 180 in the elevator hall on the 10th floor. If disembarking is not permitted, there are cases where facial authentication of the user UX fails, and cases where facial authentication of the user UX is successful but the 10th floor is not included in the permitted floors for user U3. The display device 130 shows that warning information similar to that shown in FIG. 12 above is displayed. However, warning information is not limited to these.

[0119] FIG. 22 is a diagram showing an example of warning information displayed on an administrator terminal when calling an elevator according to the fourth embodiment. Here, the example shows a case where warning information is output to the administrator terminal 400 in step S349 under the same circumstances as in FIG. 21 described above. The administrator terminal 400 displays the warning information output in step S349 on its screen, as described above. The warning information displayed on the screen of the administrator terminal 400 includes, for example, an image captured by the floor camera 101-2 installed above the call button in the elevator hall on the fifth floor, a facial image of a person who is the target of the warning in the image, and a warning message. The facial image may be an enlarged image of the facial area of ​​the person who is the target of the warning in the captured image. The warning message includes the floor to be warned, the date and time, etc. In this example, the warning message states, "A user who is not authorized to be on the fifth floor is in the elevator hall on the fifth floor at 2:30 PM." However, the warning message is not limited to this. This allows the building manager or security guard, or the manager of the company using the disembarking floor, to easily grasp the number and facial photographs of unauthorized persons among those attempting to board the elevator, from the warning information displayed on the manager terminal 400. As described above, the warning information may include the boarding floor of the person to be warned, attribute information such as the name and department to which the person belongs, or a fact that the person is not registered.

[0120] In this way, even if a third user who has not been permitted to use a specific floor in advance or whose face information has not been registered gets off at the specific floor for some reason, the third user can be prevented from getting on the elevator again when the elevator is called to board the elevator again. This also helps the relevant person on the specific floor to call out to and track the third user.

[0121] <Other embodiments> In the above-described first to fourth embodiments, personal authentication (authentication of identity confirmation, identity authentication, identity identification processing, etc.) has been described as face authentication, but other biometric authentication using biometric information may also be used. Other technologies using captured images of a person may be applied to biometric authentication and biometric information. For example, biometric information may be data (features) calculated from physical characteristics unique to an individual, such as fingerprints, voiceprints, veins, retinas, irises, and palm patterns. Furthermore, biometric authentication may involve extracting feature information indicating a person's physical characteristics from a captured image of a part of the user's body, comparing the extracted feature information with pre-registered feature information, and determining that authentication is successful if the degree of match is equal to or greater than a threshold. For example, biometric authentication may be authentication based on a person's external shape. In this case, the feature information may be information about a person's external shape, such as information indicating characteristics such as body shape, height, and clothing.

[0122] In the above-described second to fourth embodiments, the authentication device 200 and the usage management support device 300 have been described as separate information processing devices, but they may be the same. For example, the usage management support device 300 may further associate and register facial feature information with the user ID 3121 in the user management DB 312. In this case, the control unit 340 may further include the functions of the face detection unit 220, feature point extraction unit 230, registration unit 240, and authentication unit 250 in FIG. 4.

[0123] In the above examples, the program includes instructions (or software code) that, when loaded into a computer, cause the computer to perform one or more functions described in the embodiments. The program may be stored on a non-transitory computer-readable medium or a tangible storage medium. By way of example and not limitation, computer-readable medium or tangible storage medium includes random-access memory (RAM), read-only memory (ROM), flash memory, solid-state drive (SSD) or other memory technology, CD-ROM, digital versatile disc (DVD), Blu-ray® disc or other optical disk storage, magnetic cassette, magnetic tape, magnetic disk storage or other magnetic storage device. The program may also be transmitted on a transitory computer-readable medium or communication medium. By way of example and not limitation, transitory computer-readable medium or communication medium includes electrical, optical, acoustic, or other forms of propagated signals.

[0124] The present disclosure is not limited to the above-described embodiments, and may be modified as appropriate without departing from the spirit and scope of the present disclosure. In addition, the present disclosure may be implemented by appropriately combining the respective embodiments.

[0125] Some or all of the above embodiments can be described as, but are not limited to, the following supplementary notes. (Appendix A1) an identification means for identifying a first permitted floor associated with a first user who has successfully passed first face authentication on a first face image captured while riding in an elevator, by referring to a database that associates facial feature information of the user with permitted floors that the user is permitted to use; an operation control means for controlling the operation of the elevator in accordance with the first permitted floor; a determination means for determining whether a second user is permitted to disembark at a stop floor where the elevator has stopped in accordance with the operation control by performing second facial authentication on a second facial image of the second user disembarking at the stop floor, with reference to the database; an output means for outputting first warning information when it is determined that the second user is not allowed to get off the vehicle; A usage management support device comprising: (Appendix A2) the identification means identifies the first permitted floor when the first face authentication performed using the facial feature information in the database on the first face image photographed of the first user when getting on the elevator is successful. 2. The utilization management support device according to claim A1. (Appendix A3) The operation control means controls the operation of the elevator so that the elevator stops at the first permitted floor. 2. The utilization management support device according to claim A2. (Appendix A4) The operation control means performs the operation control by making a designation button for designating a stop at the first permitted floor in the elevator selectable. 2. The utilization management support device according to claim A2. (Appendix A5) the specifying means specifies the first permitted floor when the first face authentication performed using the facial feature information in the database on the first face image taken when the first user is about to specify a floor at which the first user will get off in the elevator is successful. 2. The utilization management support device according to claim A1. (Appendix A6) When the floor designated by the first user is included in the first permitted floors, the operation control means selects a designation button for designating a stop at the designated floor and performs the operation control. 2. The utilization management support device according to claim A5. (Appendix A7) The operation control means performs the operation control by making a designation button for designating a stop at the first permitted floor selectable. 2. The utilization management support device according to claim A6. (Appendix A8) The determination means controlling the second face authentication using the facial feature information associated with the stop floor as the permitted floor in the database; If the second face authentication fails, it is determined that the second user is not allowed to get off the vehicle. 2. A usage management support device according to any one of appendices A1 to A7. (Appendix A9) The determination means referring to the database to identify a second permitted floor associated with the second user who has succeeded in the second face authentication; If the stop floor is not included in the second permitted floor, it is determined that the second user is not allowed to get off the vehicle. 2. A usage management support device according to any one of appendices A1 to A7. (Appendix A10) The output means outputs the first warning information including the second facial image to a terminal of a manager of the stop floor. 2. The usage management support device according to claim 1, wherein the usage management support device is a device for managing a usage management system. (Appendix A11) the determination means refers to the database and determines whether or not to stop the elevator at the predetermined floor by performing third face authentication on a third face image captured of a third user who is about to press a call button for the elevator at the predetermined floor; When it is determined that the elevator should not be stopped at the predetermined floor, the operation control means performs the operation control so as not to stop the elevator at the predetermined floor. 2. The usage management support device according to claim 1, wherein the usage management support device is a device for managing a user. (Appendix A12) The output means outputs second warning information when it is determined that the vehicle should not be stopped at the predetermined floor. 2. The utilization management support device according to claim A11. (Appendix A13) The output means outputs the second warning information including the third facial image to a terminal of a manager of the predetermined floor. 2. The utilization management support device according to claim A12. (Appendix A14) The determination means controlling the third face authentication using the facial feature information associated with the predetermined floor in the database; If the third face authentication fails, it is determined that the vehicle should not be stopped at the predetermined floor. 2. The usage management support device according to claim 1, wherein the usage management support device is a device for managing a usage management system. (Appendix A15) The determination means referring to the database to identify a third permitted floor associated with the third user who has succeeded in the third face authentication; If the predetermined floor is not included in the third permitted floors, it is determined that the vehicle will not stop at the predetermined floor. 2. The usage management support device according to claim 1, wherein the usage management support device is a device for managing a usage management system. (Appendix A16) When it is determined that the elevator should not be stopped at the predetermined floor, the operation control means performs the operation control by making the call button unselectable. 2. The usage management support device according to claim 1, wherein the usage management support device is a device for managing a user. (Appendix B1) a database that associates facial feature information of a user with a permitted floor that the user is permitted to use; a usage management support device connected to the database, The usage management support device an identification means for identifying a first permitted floor associated with a first user who has succeeded in first face authentication for a first face image captured while boarding an elevator, by referring to the database; an operation control means for controlling the operation of the elevator in accordance with the first permitted floor; a determination means for determining whether a second user is permitted to disembark at a stop floor where the elevator has stopped in accordance with the operation control by performing second facial authentication on a second facial image of the second user disembarking at the stop floor, with reference to the database; an output means for outputting first warning information when it is determined that the second user is not allowed to get off the vehicle; A usage management support system equipped with: (Appendix B2) the identification means identifies the first permitted floor when the first face authentication performed using the facial feature information in the database on the first face image photographed of the first user when getting on the elevator is successful. The utilization management support system described in Appendix B1. (Appendix C1) The computer By referring to a database in which facial feature information of users is associated with permitted floors that the users are authorized to use, a first permitted floor that is associated with a first user who has successfully passed first face authentication on a first face image captured while boarding the elevator is identified; Controlling the operation of the elevator according to the first permitted floor; referring to the database, and performing second facial authentication on a second facial image of a second user who gets off at a stop floor where the elevator has stopped in accordance with the operation control, to determine whether the second user is allowed to get off at the stop floor; outputting first warning information when it is determined that the second user is not allowed to get off the vehicle; Usage management support method. (Appendix D1) a process of identifying a first permitted floor associated with a first user who has successfully passed first face authentication on a first face image captured while riding in an elevator, by referring to a database that associates facial feature information of the user with permitted floors that the user is permitted to use; an operation control process for controlling the operation of the elevator according to the first permitted floor; a determination process of determining whether a second user is allowed to disembark at a stop floor where the elevator has stopped in accordance with the operation control by performing second facial authentication on a second facial image of the second user who disembarks at the stop floor, with reference to the database; an output process of outputting first warning information when it is determined that the second user is not allowed to get off the vehicle; A non-transitory computer-readable medium storing a usage management support program that causes a computer to execute the above.

[0126] Although the present invention has been described above with reference to the embodiments (and examples), the present invention is not limited to the above-described embodiments (and examples). Various modifications that can be understood by those skilled in the art can be made to the configuration and details of the present invention within the scope of the present invention. [Explanation of symbols]

[0127] 1 Usage management support device 11 Specific section 12 Operation control section 13 Judgment section 14 Output section 1000, 1000b Usage Management Support System U1~U3, UX users N Network 101, 101-2 Floor camera 100 Elevator 110 Operation controller 120, 120-1 to 120-3 cameras 130 Display device 140th floor designated area 141 Designation button 150 Opening and closing designation part 160 Doors 170 Warning information output device 180 Call Button 200 Authentication Device 210 Face Information DB 211 User ID 212 Facial Feature Information 220 Face detection unit 230 Feature Point Extraction Unit 240 Registration Department 250 Authentication Department 300 Usage management support device 310 Storage section 311 Program 312 User management DB 3121 User ID 3122 Permit Floor 320 memory 330 Communications Department 340 Control Unit 341 Registration Department 342 Authentication control section 343 Specific part 344 Operation Control Unit 345 Judgment section 346 Output Section 400 Administrator terminal

Claims

1. an identification means for identifying a first permitted floor associated with a first user who has successfully passed first face authentication for a first face image captured while riding in an elevator, by referring to a database that associates facial feature information of the user with permitted floors that the user is permitted to use; an operation control means for controlling the operation of the elevator in accordance with the first permitted floor; a determination means for determining whether a second user is permitted to disembark at a stop floor where the elevator has stopped in accordance with the operation control by performing second facial authentication on a second facial image of the second user disembarking at the stop floor, with reference to the database; an output means for outputting first warning information when it is determined that the second user is not allowed to get off the vehicle; Equipped with the identification means identifies the first permitted floor when the first face authentication performed using the facial feature information in the database on the first face image taken of the first user when boarding the elevator is successful; The operation control means performing the operation control by making a designation button for designating a stop at the first permitted floor in the elevator selectable; When the first user is permitted to use a plurality of floors, the operation control is performed by activating a plurality of designation buttons that can be designated by the first user to make them selectable, and deactivating designation buttons for other floors to make them unselectable. Usage management support device.

2. The operation control means controls the operation of the elevator so that the elevator stops at the first permitted floor. The utilization management support device according to claim 1.

3. the specifying means specifies the first permitted floor when the first face authentication performed using the facial feature information in the database on the first face image photographed when the first user is about to specify a floor at which the first user will get off in the elevator is successful. The utilization management support device according to claim 1.

4. When the floor designated by the first user is included in the first permitted floors, the operation control means selects a designation button for designating a stop at the designated floor and performs the operation control.

4. The utilization management support device according to claim 3.

5. The operation control means performs the operation control by making a designation button for designating a stop at the first permitted floor selectable.

5. The utilization management support device according to claim 4.

6. The determination means controlling the second face authentication using the facial feature information associated with the stop floor as the permitted floor in the database; If the second face authentication fails, it is determined that the second user is not allowed to get off the vehicle. The utilization management support device according to claim 1.

7. The determination means referring to the database to identify a second permitted floor associated with the second user who has succeeded in the second face authentication; If the stop floor is not included in the second permitted floor, it is determined that the second user is not allowed to get off the vehicle. The utilization management support device according to claim 1.

8. The output means outputs the first warning information including the second facial image to a terminal of a manager of the stop floor. The utilization management support device according to claim 1.

9. the determination means refers to the database and determines whether or not to stop the elevator at the predetermined floor by performing third face authentication on a third face image captured of a third user who is about to press a call button for the elevator at the predetermined floor; When it is determined that the elevator should not be stopped at the predetermined floor, the operation control means performs the operation control so as not to stop the elevator at the predetermined floor. The utilization management support device according to claim 1.

10. The output means outputs second warning information when it is determined that the train should not be stopped at the predetermined floor. The utilization management support device according to claim 9.

11. The output means outputs the second warning information including the third face image to a terminal of a manager of the predetermined floor. The utilization management support device according to claim 10.

12. The determination means controlling the third face authentication using the facial feature information associated with the predetermined floor in the database; If the third face authentication fails, it is determined that the vehicle should not be stopped at the predetermined floor. The utilization management support device according to claim 9.

13. The determination means referring to the database to identify a third permitted floor associated with the third user who has succeeded in the third face authentication; If the predetermined floor is not included in the third permitted floors, it is determined that the vehicle will not be stopped at the predetermined floor. The utilization management support device according to claim 9.

14. When it is determined that the elevator should not be stopped at the predetermined floor, the operation control means performs the operation control by making the call button unselectable. The utilization management support device according to claim 9.

15. a database that associates facial feature information of a user with a permitted floor that the user is permitted to use; a usage management support device connected to the database, The usage management support device an identification means for identifying a first permitted floor associated with a first user who has succeeded in first face authentication for a first face image captured while boarding an elevator, by referring to the database; an operation control means for controlling the operation of the elevator in accordance with the first permitted floor; a determination means for determining whether a second user is permitted to disembark at a stop floor where the elevator has stopped in accordance with the operation control by performing second facial authentication on a second facial image of the second user disembarking at the stop floor, with reference to the database; an output means for outputting first warning information when it is determined that the second user is not allowed to get off the vehicle; Equipped with the identification means identifies the first permitted floor when the first face authentication performed using the facial feature information in the database on the first face image taken of the first user when boarding the elevator is successful; The operation control means performing the operation control by making a designation button for designating a stop at the first permitted floor in the elevator selectable; When the first user is permitted to use a plurality of floors, the operation control is performed by activating a plurality of designation buttons that can be designated by the first user to make them selectable, and deactivating designation buttons for other floors to make them unselectable. Usage management support system.

16. the identification means identifies the first permitted floor when the first face authentication performed using the facial feature information in the database on the first face image photographed of the first user when boarding the elevator is successful.

16. The utilization management support system according to claim 15.

17. The computer by referring to a database in which facial feature information of a user is associated with an authorized floor that the user is authorized to use, the system identifies a first authorized floor that is associated with a first user who has successfully passed first face authentication on a first face image captured while boarding the elevator; performing operation control of the elevator according to the first permitted floor; referring to the database, and performing second facial authentication on a second facial image of a second user who gets off at a stop floor where the elevator has stopped in accordance with the operation control, to determine whether the second user is allowed to get off at the stop floor; outputting first warning information when it is determined that the second user is not allowed to get off the vehicle; identifying the first permitted floor when the first face authentication performed using the facial feature information in the database on the first face image taken of the first user when boarding the elevator is successful; performing the operation control by making a designation button for designating a stop at the first permitted floor in the elevator selectable; When the first user is permitted to use a plurality of floors, the operation control is performed by activating a plurality of designation buttons that can be designated by the first user to make them selectable, and deactivating designation buttons for other floors to make them unselectable. Usage management support method.

18. a process of identifying a first permitted floor associated with a first user who has successfully passed first face authentication for a first face image captured while riding in an elevator, by referring to a database that associates facial feature information of the user with permitted floors that the user is permitted to use; an operation control process for controlling the operation of the elevator in accordance with the first permitted floor; a determination process of determining whether a second user is permitted to disembark at a stop floor where the elevator has stopped in accordance with the operation control by performing second facial authentication on a second facial image of the second user who disembarks at the stop floor with reference to the database; an output process of outputting first warning information when it is determined that the second user is not allowed to get off the vehicle; on the computer, identifying the first permitted floor when the first face authentication performed using the facial feature information in the database on the first face image taken of the first user when boarding the elevator is successful; performing the operation control by making a designation button for designating a stop at the first permitted floor in the elevator selectable; When the first user is permitted to use a plurality of floors, the operation control is performed by activating a plurality of designation buttons that can be designated by the first user to make them selectable, and deactivating designation buttons for other floors to make them unselectable. Utilization management support program.

Images