JP2002207977A - Authenticating device and method, and recording medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To perform authentication with high accuracy. SOLUTION: When a person detection sensor 7 detects an operator, a scanner 5 transmits about 2.45 GHz radio waves. When an ID tag 100 carried by the operator receives the radio waves by an antenna, the ID tag 100 converts the radio waves into electric power to operate a built-in IC and transmits the identification information of the operator stored preliminarily in a memory constituting the IC by radio waves. When the scanner 5 receives the identification information transmitted from the ID tag 100 by the radio waves, a message requesting the operator of the identification information to sign his/her autograph is displayed on the screen of a display device 8. When the operator signs his/her autograph on a tablet 6, the autograph is collated with autograph signed preliminarily by the operator himself/herself, and when the collation is OK, the operator is allowed to go into a working place.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

The present invention relates to an authentication device, an authentication method, and a recording medium, and more particularly, to an authentication device, an authentication method, and a recording medium for authenticating the identity of a person.

[0002]

2. Description of the Related Art Conventionally, as a method of authenticating the identity of a person, an ID card or the like in which identification information is recorded is possessed.
By reading the identification information recorded on the D card,
There have been methods of authenticating the identity of a person and methods of authenticating the identity of a person using biometrics such as a signature, fingerprint, voiceprint, and iris.

[0003]

However, in the conventional authentication method using an ID card, even if the ID card is stolen or otherwise illegally used, there is a risk that the ID card may be incorrectly authenticated. . In the authentication method using biometrics, for example, in the case of a signature,
By imitating the signature, there was a risk of being incorrectly authenticated.

[0004] The present invention has been made in view of such a situation, and it is possible to perform authentication with higher accuracy by combining authentication using an ID card and biometrics.

[0005]

According to a first aspect of the present invention, there is provided an authentication apparatus, comprising: sensing means for sensing that a person has approached within a predetermined distance; and detecting that the person has approached within a predetermined distance by the sensing means. When sensed, a reading means for reading the identification information from the identification information recording device in which the identification information unique to the person possessed is recorded, and identification means for identifying the person from the identification information read by the reading means. And matching means for performing matching by biometrics with respect to the person identified by the identifying means. The image processing apparatus further includes a storage unit that previously stores image data of a self-written signature by a person, and the matching unit matches the signature of the person with a signature stored in advance in the storage unit, thereby identifying the person. Or not. The authentication method according to claim 3, wherein the sensing step detects that the person has approached within a predetermined distance, and the person possesses when the sensing step detects that the person has approached within the predetermined distance. A reading step of reading the identification information from the identification information recording device in which the identification information unique to the person is recorded; and an identification step of identifying the person from the identification information read in the reading step; And a matching step of performing matching by biometrics. A recording medium according to a fourth aspect is characterized by recording a program capable of executing the authentication method according to the third aspect. In the authentication device, the authentication method, and the recording medium according to the present invention, it is sensed that a person has approached within a predetermined distance, and when it is sensed that a person has approached within a predetermined distance, the person possesses it. The identification information is read from the identification information recording device in which the identification information unique to the person is recorded, the person is identified based on the read identification information, and the identified person is compared with biometrics.

[0006]

FIG. 1 is an external view of an embodiment of an entrance / exit management system to which the present invention is applied. The entrance / exit management system, for example, manages the entrance / exit of workers to a workplace such as a construction site, prevents anyone other than those involved from entering the workplace, grasps workers at the workplace, This is to ensure safety.

[0007] As shown in the figure, the entrance / exit management system is composed of a person (in this example, most of them are workers.
(Hereinafter, described as a worker) is recorded on a human detection sensor (hereinafter, simply referred to as a sensor as appropriate) 7 for detecting that the worker is near the entrance / exit management system, and an ID tag 100 carried by the worker. Scanner 5 for reading identification information
And a tablet 6 or the like on which an operator signs or performs various operations. The tablet 6 is made of a transparent material, and a display device 8 for displaying various messages is provided below the tablet 6. Thereby, the operator can perform a predetermined operation according to the message displayed on the display device 8.

FIG. 2 is a block diagram showing an example of an electrical configuration of the entrance / exit management system shown in FIG. CPU (c
central processing unit) 1
Is a ROM (read only memory)
y) The control program stored in 2 or the RAM (r
Each part is controlled in accordance with a predetermined application program developed in an (access memory) 3. The ROM 2 stores a boot program, various control programs, various data, and the like. The RAM 3 stores various kinds of data necessary for developing an application program and executing various processes by the CPU 1.
The scanner 5 reads the identification information recorded on the ID tag 100 as described later.
The ID tag 100 includes, for example, an IC (integrated circuit) including a CPU, a ROM, and the like;
The scanner 5 is composed of a printed antenna and the like.
The antenna receives, for example, 2.45 gigahertz (GHz) radio waves transmitted from the antenna, converts the received radio waves into electric power, operates the IC, and transmits a signal corresponding to the identification information recorded in the ROM by the radio waves. It is supposed to. The radio wave is received by the scanner 5 to obtain identification information.

The tablet 6 detects pressure by the pen when a character or the like is written with the pen or the like, converts the pressure into an electric signal, and supplies the electric signal to the CPU 1 through the interface 4. The sensor 7 receives, for example, infrared rays and supplies data indicating the intensity to the CPU 1 via the interface 4. Therefore, the CPU 1 can determine whether or not the worker has approached within a predetermined distance based on the data supplied from the sensor 7. The display device 8 includes the CPU 1
Various information is displayed under the control of. The storage device 9 stores the name of the worker, the identification information of the worker, information representing the characteristics of the worker,
For example, image data corresponding to a self-written signature and data corresponding to a fingerprint, a voiceprint, an iris, a DNA, and the like are stored in association with each other.

Next, referring to the flowchart of FIG.
A processing procedure at the time of entry according to the present embodiment will be described. First, in step S1, the CPU 1 moves the worker to the entrance / exit management system within a predetermined distance (for example, 1 meter) based on the data supplied from the sensor 7 and representing the intensity of the infrared light received by the sensor 7. Is determined.

As a result, if it is determined that the worker has approached the entrance / exit management system within a predetermined distance, the CPU 1
Instructs the scanner 5 to read the information recorded on the ID tag 100. The scanner 5 receiving this command transmits, for example, a radio wave of 2.45 GHz.

When the worker carries the ID tag 100, the ID tag 100 carried by the worker converts the electric wave into electric power when receiving the electric wave by the antenna, and the built-in I / O.
By operating C, the operator's identification information stored in advance in the memory constituting the IC is transmitted by radio waves. When the scanner 5 receives the identification information transmitted from the ID tag 100 by radio waves, the scanner 5 supplies the identification information to the CPU 1 via the interface 4. On the other hand, if the worker
When the tag 5 is not possessed, the scanner 5 does not receive radio waves from the ID tag 100 and does nothing, and therefore does not supply anything to the CPU 1.

[0013] When identification information is supplied from the scanner 5, the CPU 1 determines that the worker in front of the entrance / exit management system has the ID tag 100. on the other hand,
If the identification information is not supplied from the scanner 5 within a predetermined time (for example, about 10 seconds) after the worker detects the worker by the sensor 7, it is determined that the worker does not have the ID tag 100.

The CPU 1 allows the worker to enter the ID tag 10
If it is determined that the user does not possess 0, the process proceeds to step S2, and the CPU 1 causes the display device 8 to display a screen for selecting a name as shown in FIG. That is, the list data of workers who can enter is stored in the storage device 9 in advance, and the CPU 1 reads the list data stored in advance in the storage device 9 and displays the data on the screen of the display device 8.

On the screen of the display device 8, under the control of the CPU 1, the name list data is displayed in a window having a scroll bar in the order of, for example, "aiueo". Can be displayed on the screen. Thereafter, when the part on which the user's name is displayed is pressed using a pen or the like, the transparent tablet 6 provided above the display device 8 is pressed, and coordinate data indicating the pressed position is transmitted via the interface 4. It is supplied to CPU1.

The CPU 1 determines which name has been selected from the coordinate data supplied from the tablet 6 via the interface 4. And the selected name is R
AM3 is temporarily stored. Alternatively, the user can input his / her own name by pressing the character "Aiokakikukeko ..." displayed on the screen with a pen or the like. The input name is temporarily stored in the RAM 3. Thereafter, the process proceeds to step S3.

On the other hand, if the CPU 1 determines in step S 1 that the worker has the ID tag 100, the operation corresponding to the identification information is performed based on the identification information supplied from the scanner 5 via the interface 4. Get the name of the person. That is, from the list data of the workers stored in the storage device 9, the name of the worker corresponding to the identification information is searched. When the worker corresponding to the identification information is searched, the name of the worker is temporarily stored in the RAM 3. Thereafter, the process proceeds to step S3.

In step S3, an entry button and an exit button are displayed on the screen of the display device 8, as shown in FIG. At that time, if the worker who is now in front of the entrance / exit management system, that is, the worker corresponding to the name stored in the RAM 3 has left the last time, the entrance button is displayed larger than the exit button, and The exit button is displayed larger than the entrance button. That is, the entry / exit history information is stored in the storage device 9 as entry / exit history information, and based on the entry / exit history information,
The sizes of the entry button and the exit button are controlled. In this case, since the worker has left the previous time and is about to enter this time, the entry button is displayed larger than the exit button. And it will be in the state of waiting for selection.

When the entry button is selected in step S3, the process proceeds to step S4. In step S4, a message (Total message) for the entire worker is displayed on the screen of the display device 8, as shown in FIG. For example, "Safety Week.
Please work so that there is no accident. Is displayed.

Next, the process proceeds to step S5, where signature verification is performed. That is, under the control of the CPU 1, as shown in FIG. 7, the message "Please enter your signature" is displayed on the screen of the display device 8, and the system is in a state of waiting for input. The worker who has read the message writes his / her name on the tablet 6 using a pen according to the instruction of the message. As a result, the tablet 6 is pressed, and coordinate data representing the pressed position on the tablet 6 is supplied to the CPU 1 via the interface 4.

The CPU 1 stores the coordinate data supplied via the interface 4 in the RAM 3 once. Then, when the worker has the ID tag 100,
In step S1, the image data of the operator's signature corresponding to the identification information recorded on the ID tag 100 read by the scanner 5 is read out from the storage device 9 and is read when the operator does not have the ID tag 100. Reads the image data of the signature of the worker corresponding to the name selected in step S2 from the storage device 9 and temporarily stores it in the RAM 3.

Next, the CPU 1 stores the coordinate data corresponding to the operator's signature previously stored in the RAM 3 and the signature image data read out from the storage device 9 by the operator. The collation is performed, and it is determined whether or not the signature performed by the worker is the signature of the worker.

As a result, if it is determined that the signature is not the signature of the worker, that is, if the verification is NG, step S6
The message "Signature was not authenticated. Please enter again." Is displayed on the screen of the display device 8 as shown in FIG. Then, the number of times that the verification is NG is counted. Thereafter, the process returns to step S5, and the processes after step S5 are repeatedly executed.

If the verification NG in step S6 is repeated a predetermined number of times, the process proceeds to step S7,
As shown in FIG. 9, an abnormal entrance message “Please sign again at the site office.” Is displayed on the screen of the display device 8, and the name of this worker and the fact that this worker has abnormal entrance Is registered in the storage device 9. Thereafter, the process proceeds to step S9. In step S7, after displaying the abnormal message on the screen of the display device 8, it is also possible to reject entry of the worker.

On the other hand, as a result of the comparison in step S5,
If the collation is determined to be OK, the message “Signature has been authenticated” is displayed on the screen of the display device 8 in step S8. Thereafter, the process proceeds to step S9.

In step S9, as shown in FIG. 10, a message for the authenticated worker is displayed. For example, if the worker has not yet received a health check, a message “Please get a health check immediately.” Is displayed. That is, the storage device 9 stores information for managing the individual worker, a message for the individual worker, and the like in association with the name and identification information of the worker.
The CPU 1 retrieves a message for the worker from the storage device 9 based on the worker's name and identification information, and displays the message on the screen of the display device 8.

Next, in step S10, the CPU 1
As shown in FIG. 11, a selection screen for the operator to select a work place is displayed on the screen of the display device 8 under the control of. Since the work place is displayed on the selection screen as characters, graphics, or the like, the worker selects his / her work place from the work place. In this example, “Unit 1 maintenance site”, “Unit 2 maintenance site”, “Preparation room”, “Design office”, and “Other” are displayed as the work places, and “Unit 1 maintenance site” among them is displayed. Is selected. The selected work place is stored in the storage device 9 in association with the name and identification information of the worker. Thereafter, the door leading to the work area is opened. As a result, only the authenticated worker can enter his / her own selected work place. Thus, the entry procedure is completed.

Next, with reference to the flowchart of FIG. 12, a description will be given of a processing procedure at the time of exit from this embodiment. First, in step S11, based on data indicating the intensity of the infrared light received by the sensor 7 and supplied from the sensor 7, the CPU 1 moves the worker to the entrance / exit management system within a predetermined distance (for example, 1 meter). Is determined.

As a result, if it is determined that the worker has approached the entrance / exit management system within a predetermined distance, the CPU 1
Instructs the scanner 5 to read the information recorded on the ID tag 100. The scanner 5 receiving this command transmits, for example, a radio wave of 2.45 GHz.

When the worker has an ID tag 100, the ID tag 100 carried by the worker converts this radio wave into electric power when receiving the radio wave by an antenna, and converts the radio wave into a built-in ID.
By operating C, the operator's identification information stored in advance in the memory constituting the IC is transmitted by radio waves. When the scanner 5 receives the identification information transmitted from the ID tag 100 by radio waves, the scanner 5 supplies the identification information to the CPU 1 via the interface 4. On the other hand, if the worker
When the tag 5 is not possessed, the scanner 5 does not receive radio waves from the ID tag 100 and does nothing, and therefore does not supply anything to the CPU 1.

When the identification information is supplied from the scanner 5, the CPU 1 determines that the worker in front of the entrance / exit management system has the ID tag 100. on the other hand,
If the identification information is not supplied from the scanner 5 within a predetermined time (for example, about 10 seconds) after the worker detects the worker by the sensor 7, it is determined that the worker does not have the ID tag 100.

The CPU 1 allows the worker to enter the ID tag 10
If it is determined that the user does not possess 0, step S12
The CPU 1 causes the display device 8 to display a screen for selecting a name, as shown in FIG. That is, the list data of workers who can enter and exit is stored in the storage device 9 in advance, and the CPU 1 reads out the list data stored in the storage device 9 in advance and displays it on the screen of the display device 8.

Under the control of the CPU 1, the list data is displayed on the screen of the display device 8 in a window having a scroll bar, for example, in the order of "aiueo". By operating the scroll bar with a pen or the like, the user can operate the scroll bar. Can be displayed on the screen. Thereafter, when the part on which the user's name is displayed is pressed using a pen or the like, the transparent tablet 6 provided on the upper side of the display device 8 is pressed, and coordinate data indicating the pressed position is transmitted via the interface 4. It is supplied to CPU1.

The CPU 1 determines which name has been selected from the coordinate data supplied from the tablet 6 via the interface 4. And the selected name is R
AM3 is temporarily stored. Alternatively, the user can input his / her own name by pressing the character "Aiokakikukeko ..." displayed on the screen with a pen or the like. The input name is temporarily stored in the RAM 3. Thereafter, the process proceeds to step S13.

On the other hand, in step S11, the CPU 1
When it is determined that the worker has the ID tag 100, the name of the worker corresponding to the identification information is acquired from the identification information supplied from the scanner 5 via the interface 4. That is, from the list data of the workers stored in the storage device 9, the name of the worker corresponding to the identification information is searched. When the worker corresponding to the identification information is searched, the name of the worker is temporarily stored in the RAM 3. Thereafter, the process proceeds to step S13.

In step S13, an entry button and an exit button are displayed on the screen of the display device 8 under the control of the CPU 1, as shown in FIG. At that time, if the worker who is now in front of the entrance / exit management system, that is, the worker corresponding to the name stored in the RAM 3 has left the last time, the entry button is displayed larger than the exit button, and The exit button is displayed larger than the entrance button. That is, the entry / exit history information is stored in the storage device 9 as entry / exit history information, and the sizes of the entry button and the exit button are controlled based on the entry / exit history information.
In this case, since the user has entered the last time and is about to leave this time, the exit button is displayed larger than the entrance button. And it will be in the state of waiting for selection.

When the exit button is selected in step S13, the process proceeds to step S14. In step S <b> 14, a message (Total message) for the entire worker is displayed on the screen of the display device 8 under the control of the CPU 1. For example, as shown in FIG. 14, a message such as "Please work so that there will be no accidents tomorrow. Thereafter, the worker leaves, and the exit procedure for this worker ends.

Thus, the worker can be authenticated based on the identification information recorded on the ID tag 100 possessed by the worker and the signature of the worker. In the above embodiment, the worker is authenticated using both the identification information recorded on the ID tag 100 possessed by the worker and the signature of the worker. However, only one of them is used in accordance with the security level. The worker may be authenticated by using.

If the exit button is selected in step S3 in FIG. 3, the process proceeds to step S14 in FIG. In addition, when the entrance button is selected in step S13 of FIG. 12, step S4 of FIG.
The processing shifts to.

A program for executing the above-described processing is a CD-ROM (compact disc).
read only memory), DVD (dig)
It can be provided by being recorded on various recording media such as an italative disc, a floppy (registered trademark) disk, and a memory card. The program controls the operation of the computer, and the computer controlled by the program executes a predetermined process instructed by the program.

In the above embodiment, the authentication process is performed by combining the identification information recorded on the ID tag 100 and the signature. However, the identification information recorded on the ID tag 100, the fingerprint, voiceprint, It is also possible to perform authentication processing by combining biometrics such as iris and DNA.

The configuration and operation of the above embodiment are merely examples, and it is needless to say that they can be appropriately changed without departing from the spirit of the present invention.

[0043]

As described above, according to the authentication apparatus, the authentication method, and the recording medium of the present invention, it is detected that a person has approached within a predetermined distance, and that the person has approached within a predetermined distance. When is detected, the identification information is read from the identification information recording device in which the identification information unique to the person possessed is recorded, and the person is identified from the read identification information,
Since the verification by the biometrics is performed on the identified person, the authentication with the physically recorded identification information and the biometrics can be combined to perform the authentication with higher accuracy.

[Brief description of the drawings]

FIG. 1 is an external view of an entrance / exit management system to which the present invention is applied.

FIG. 2 is a block diagram showing an example of an electrical configuration of the entrance / exit management system of FIG.

FIG. 3 is a flowchart illustrating a processing procedure at the time of entry.

FIG. 4 is a diagram showing an example of a screen for selecting a name.

FIG. 5 is a diagram showing an example of a screen on which an entry button and an exit button are displayed.

FIG. 6 is a diagram showing an example of a screen on which a message for the entire worker is displayed.

FIG. 7 is a diagram showing an example of a screen for inputting a signature.

FIG. 8 is a diagram showing an example of a screen on which a message is displayed.

FIG. 9 is a diagram illustrating an example of a screen on which a message is displayed.

FIG. 10 is a diagram illustrating an example of a screen on which a message is displayed.

FIG. 11 is a diagram showing an example of a screen for inputting a work place.

FIG. 12 is a flowchart illustrating a processing procedure at the time of leaving.

FIG. 13 is a diagram showing an example of a screen on which an entry button and an exit button are displayed.

FIG. 14 is a diagram showing an example of a screen on which a message for the entire worker is displayed.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 CPU 2 ROM 3 RAM 4 Interface 5 Scanner 6 Tablet 7 Human detection sensor 8 Display device 9 Storage device 100 ID tag

──────────────────────────────────────────────────続 き Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat ゛ (Reference) // G07C 9/00 H04L 9/00 673D (72) Inventor Isao Tomon 2- Hamamatsucho, Minato-ku, Tokyo 1-16 SVAX Hamamatsucho II Building 8F F Term in Japan Information System Co., Ltd. (Reference) 3E038 AA01 BB05 CA03 CA07 EA02 FA03 HA08 JA01 JA03 JB10 5B058 CA17 KA02 KA04 KA06 KA13 KA37 YA11 5J104 AA07 KA01 KA16 MA01

Claims (4)

[Claims] 1. A sensing means for sensing that a person has approached within a predetermined distance, and the person carried by the person when the sensing means senses that the person has approached within a predetermined distance. Reading means for reading the identification information from an identification information recording device having unique identification information recorded therein, identification means for identifying the person from the identification information read by the reading means, identification by the identification means A verification unit for performing verification based on biometrics for the identified person. 2. The image processing apparatus according to claim 1, further comprising: a storage unit configured to previously store image data of the autograph by the person, wherein the verification unit verifies the signature of the person with the signature stored in the storage unit in advance. By doing
The authentication device according to claim 1, wherein it is determined whether or not the person is a person. 3. A sensing step for sensing that a person has approached within a predetermined distance; and, when it is detected in the sensing step that the person has approached within a predetermined distance, the person carried by the person. From the identification information recording device in which the unique identification information is recorded,
A reading step of reading the identification information; an identification step of identifying the person from the identification information read in the reading step; and for the person identified in the identification step,
A verification step of performing verification by biometrics. 4. A recording medium on which a program capable of executing the authentication method according to claim 3 is recorded.