KR102824829B1 - Facial recognition system and method for access control - Google Patents

Abstract

A face registration system and method for access control are provided. The registration system performs primary authentication to request confirmation of whether a user is a member of the access system while transmitting first user information transmitted from a mobile terminal to the access system, and after the primary authentication is completed, when SMS personal authentication is completed from the mobile terminal and second user information used for SMS personal authentication is received, the registration system performs secondary authentication to request confirmation of whether the user is a member of the access system while transmitting the second user information to the access system. After the secondary authentication is completed, the registration system processes a face image transmitted from the mobile terminal on which the secondary authentication was performed, uses the image for access control, and transmits the face image to the access system for access control.

Description

{Facial recognition system and method for access control}

The present invention relates to access control, and more specifically, to a face registration system and method for access control.

The access system is a system that manages the entry of only authorized visitors (or employees). As facial recognition technology has developed, facial recognition solutions are being applied to access systems to verify identity by pre-registering the faces of authorized users and then recognizing the faces of current visitors and comparing them with the faces of registered users.

In the case of the existing face recognition-based access system, a user who wants to be granted access must visit the location where the face registration system is located and perform the face registration procedure. In addition, there is the inconvenience of having to visit the location again when re-registering after the initial face registration. In particular, since the face registration system must be established at any location, the initial system establishment cost is high. In addition, there are frequent cases where registration is made without a face during face registration.

Recently, a system for registering faces using mobile terminals has been proposed, and when registering faces using mobile terminals, identity verification is performed through SMS (short message service). However, illegal situations have occurred in which people who are not users of organizations that are permitted to enter register their faces by authenticating themselves using SMS. For example, there are cases in which a person who is not an employee of a company authenticates himself/herself using his/her own SMS, and then steals another person's employee number and name to authenticate the company and register his/her face. As a result, the security of access control is significantly reduced.

Related prior literature includes “Authentication method and device for gate entry” described in Korean Patent No. 10-2493219.

The problem to be solved by the present invention is to provide a system and method that enables access control by registering a face more conveniently and reliably.

According to one embodiment of the present invention, a face registration method for access control is provided. The face registration method comprises: a step in which a registration system performs primary authentication to request confirmation of whether a user is a member of the access system while transmitting first user information transmitted from a mobile terminal to an access system; a step in which the registration system, when receiving a response to the primary authentication from the access system, transmits the response to the mobile terminal; a step in which the registration system, after completing SMS personal authentication from the mobile terminal that has received the response to the primary authentication, receives second user information used in the SMS personal authentication; a step in which the registration system performs secondary authentication to request confirmation of whether the user is a member of the access system while transmitting the second user information to the access system; a step in which the registration system, when receiving a response to the secondary authentication from the access system, transmits the response to the mobile terminal; and a step in which the registration system processes a face image transmitted from the mobile terminal on which the secondary authentication has been performed and uses the response as an image for access control, and transmits the face image to the access system.

In one implementation, the step of transmitting the facial image to the access system may include the step of the registration system generating a template including metadata about facial features from the facial image using a facial processing engine used by the access system; and the step of transmitting the template to the access system together with information about the user for whom the second authentication has been performed.

In one implementation, the step of generating the template may include the step of checking the resource status of a plurality of template servers, and selecting a template server among the plurality of template servers whose current resource usage is less than a set usage amount; and the step of loading a face processing engine used by the access system by the selected template server, and processing the face image by the face processing engine to generate the template.

In one implementation, the selected template server can process the facial image by loading a facial processing engine from among a plurality of facial processing engines that is an engine of a vendor corresponding to the facial processing engine used by the access system and also has a corresponding version.

In one implementation, the face image transmitted from the mobile terminal may be a face region image in which only the user's face region is cropped from an image captured by the mobile terminal.

In one implementation, the face registration method may further include: a step of the mobile terminal acquiring an image of a user when a response to the second authentication is received; a step of the mobile terminal detecting a face in the acquired image; a step of the mobile terminal acquiring a minimum inter-eye distance of the detected face, and, when the minimum inter-eye distance satisfies a range of a reference inter-eye distance, cropping only the face region from the acquired image to generate at least one face region image; and a step of the mobile terminal transmitting the face region image to the registration system together with user information on which the second authentication is completed.

In one implementation, user information for the first authentication and the second authentication may include an organization name, employee number, user name, and phone number.

According to another embodiment of the present invention, a face registration system for access control is provided. The face registration system comprises: a face registration web server configured to transmit and receive data with a mobile terminal of a user who wishes to register a face; a face registration control server configured to perform authentication in conjunction with an access system that performs access control based on data provided from the face registration web server; and a plurality of template servers configured to process a face image from the mobile terminal transmitted through the face registration web server under the control of the face registration control server, wherein the face registration control server performs first authentication for requesting confirmation of whether the user is a member of the access system while transmitting first user information transmitted from the mobile terminal through the face registration web server to the access system; when a response to the first authentication is received from the access system, the response is transmitted to the mobile terminal through the face registration web server; after SMS personal authentication is completed from the mobile terminal that has received the response to the first authentication, second user information used for the SMS personal authentication transmitted from the mobile terminal is received through the face registration web server; The method comprises: performing secondary authentication to request confirmation of whether the user is a member of the access system while transmitting the second user information to the access system; when a response to the secondary authentication is received from the access system, transmitting the response to the mobile terminal through the face registration web server; receiving a facial image transmitted from the mobile terminal for which the secondary authentication has been performed through the face registration web server, and controlling processing to transmit the facial image to one of the plurality of template servers; and using the image processed by the template server as an image for access control and transmitting the image to the access system.

In one implementation, the template server is configured to generate a template including metadata about facial features from the facial image using a face processing engine used by the access system and transmit the template to the face registration control server, and the face registration control server can be configured to transmit the template to the access system together with information about the user for whom the second authentication has been performed.

In one implementation, the face registration control server is configured to check the resource status of a plurality of template servers, select a template server among the plurality of template servers whose current resource usage is less than a set usage usage, and transmit the face image to the selected template server, and the template server may be configured to load a face processing engine used by the access system to process the face image to generate a template.

In one implementation, the template server may be configured to process the facial image by loading a facial processing engine from among a plurality of facial processing engines, the facial processing engine being an engine of a vendor corresponding to the facial processing engine used by the access system and also having a corresponding version.

In one implementation, the face image transmitted from the mobile terminal may be a face region image in which only the user's face region is cropped from an image captured by the mobile terminal.

According to another embodiment of the present invention, a mobile terminal is provided. The mobile terminal includes an interface device; and a processor, wherein the processor is configured to request primary authentication while transmitting first user information to a registration system through the interface device; when a response to the primary authentication is received from the registration system through the interface device, perform SMS personal authentication; when the SMS personal authentication is completed, request secondary authentication while transmitting second user information used for the SMS personal authentication to the registration system through the interface device; and when a response to the secondary authentication is received from the registration system through the interface device, acquire a user image, and then transmit the acquired image through the interface device to the registration system for access control.

In one implementation, the processor may be specifically configured to detect a face in the acquired image; acquire a minimum inter-eye distance of the detected face; and, if the minimum inter-eye distance satisfies a range of reference inter-eye distances, crop only the face region from the acquired image to generate at least one face region image; and transmit the face region image to the registration system together with user information for which the secondary authentication has been completed.

According to an embodiment, a face for access control can be conveniently and reliably registered via a mobile terminal. In particular, by registering the user's face for access control through an authentication process including primary authentication through linkage with an access system using user information, personal authentication based on SMS, and secondary authentication through linkage with an access system using personally authenticated information, it is possible to prevent cases where a third party registers a face by stealing user information.

In addition, by detecting a face in a mobile terminal and transmitting an image cropped to only the face area, network resources and server resources can be minimized. In addition, by performing a verification on an image that does not include a face in the image on the mobile terminal, unnecessary server usage or network usage can be prevented by transmitting non-face photos to the server. In addition, by generating a template including facial feature points from a face image according to the face engine version of the access system, face registration suitable for the access system can be performed.

Figure 1 is a diagram showing a network environment of a face registration system according to an embodiment of the present invention.
FIG. 2 is a diagram showing the structure of a face registration system according to an embodiment of the present invention.
FIG. 3 is a flowchart showing an authentication process in a face registration method according to an embodiment of the present invention.
FIG. 4 is a flowchart showing a photographing process in a face registration method according to an embodiment of the present invention.
FIG. 5 is a flowchart showing a face registration process in a face registration method according to an embodiment of the present invention.
FIG. 6 is a structural diagram illustrating a computing device for implementing a face registration method according to an embodiment of the present invention.

Hereinafter, with reference to the attached drawings, embodiments of the present invention will be described in detail so that those skilled in the art can easily practice the present invention. However, the present invention may be implemented in various different forms and is not limited to the embodiments described herein. In addition, in order to clearly describe the present invention in the drawings, parts that are not related to the description are omitted, and similar parts are assigned similar drawing reference numerals throughout the specification.

Throughout the specification, whenever a part is said to "include" a component, this does not mean that it excludes other components, but rather that it may include other components, unless otherwise stated.

In this specification, expressions described in the singular may be interpreted as singular or plural, unless explicit expressions such as “one” or “singular” are used.

In addition, terms including ordinal numbers such as first, second, etc. used in the embodiments of the present invention may be used to describe components, but the components should not be limited by the terms. The terms are used only for the purpose of distinguishing one component from another. For example, without departing from the scope of the present invention, the first component may be referred to as the second component, and similarly, the second component may also be referred to as the first component.

Hereinafter, a face registration system and method according to an embodiment of the present invention will be described.

Figure 1 is a diagram showing a network environment of a face registration system according to an embodiment of the present invention.

As shown in the attached drawing 1, the face registration system (1) according to an embodiment of the present invention performs face-based access control by linking with a plurality of access systems (2), and in particular, performs face registration by communicating with a plurality of mobile terminals (3). In addition, the face registration system (1) performs SMS authentication for a user registering a face by linking with an SMS authentication server (4).

In this network environment, the mobile terminal (3) is a terminal used when a user who wishes to be granted entry wishes to register his or her face, and the mobile terminal (3) is configured to photograph the user's face and transmit the corresponding image to the face registration system (1). For example, the mobile terminal (3) may be various types of devices such as a smart phone or a handheld device capable of transmitting and receiving images over a network. The mobile terminal (3) includes a client for face registration, for example, a user may access the face registration system (1) through the mobile terminal (3) to support face registration according to an embodiment of the present invention. The face registration client may be implemented as a software module that is executed in combination with the hardware of the mobile terminal (3) and may be referred to as a user app, for example. The mobile terminal (3) may access the face registration system (1) through various methods (for example, QR code photographing, SMS (short message service) link, etc.).

The access system (2) is a system that performs actual access control for the entrance doors of an area where access control is performed in conjunction with the face registration system (1). Each of the access systems (2) is a system that performs access control for members of an organization, such as a company or an institution, for example, and is a system that performs access control based on face recognition. In particular, the access system (2) uses the face image provided from the face registration system (1) according to an embodiment of the present invention as the face of a member of the organization and performs access control based on the face image. In one implementation example, the access system (1) can operate in an environment where a plurality of entrance doors are installed in an area where access control is performed, an entrance door driving device is installed corresponding to each entrance door, and a photographing device for face recognition is installed.

The SMS authentication server (4) is configured to perform SMS-based authentication, performs SMS authentication based on information provided from the face registration system (1), and provides the result to the face registration system (1).

In an embodiment of the present invention, a face registration system (1) performs face registration for access control based on a user image transmitted via a mobile terminal (3), and performs authentication for a user wishing to perform face registration based on information provided from an access system (2).

For this purpose, the face registration system (1) has a structure as shown in Fig. 2.

FIG. 2 is a diagram showing the structure of a face registration system according to an embodiment of the present invention.

A face registration system (1) according to an embodiment of the present invention includes a face registration web server (10), a face registration control server (20), and a plurality of template servers (30) (e.g., template server #1 to template server #N), as illustrated in the attached FIG. 2.

The face registration web server (10) performs an interface with a mobile terminal (3) so that a user can register a face through the mobile terminal (3). The face registration web server (10) transmits an image and user information transmitted from the mobile terminal (3) to the face registration control server (20), and receives a response related to authentication and processing results for face registration processing provided from the face registration control server (20) and transmits the response to the mobile terminal (3).

The template server (30) is configured to generate a template from an image. In particular, each of the template servers (30) includes at least one face processing engine for generating a template from a face image (or a face region image), and each face processing engine is mapped and stored and managed by a company developing the face processing engine and by engine version. Based on this, the template server (30) selects one face processing engine for generating a template from a face image (or a face region image) based on engine information (company name, engine version, etc. related to the processing engine used in the corresponding access system) provided through the face registration control server (20) among a plurality of face processing engines. In addition, the template server (30) is configured to transmit its own resource information (GPU, CPU, and memory status information, etc.) to the face registration control server (20). As an implementation example, the resource information may be transmitted to the face registration control server (20) at each set cycle.

In each of these template servers (30), the face processing engine is managed by version for each face processing engine vendor, and the face processing engine is automatically loaded and unloaded using the face processing engine information of the access system, so that templates for various types of face processing engines can be created.

The face registration control server (20) controls the overall face registration processing of a user through a mobile terminal (3), and in particular, performs authentication processing for a user who wishes to register his or her face through linkage with an access system (2). The face registration control server (20) controls a plurality of template servers (30), and in particular, stores and manages resource information provided from each template server (30) for each template server, and selects one template server based on the resource information of each template server, and controls it to process an image currently provided from a face registration web server (10).

As an example of an implementation, the face registration control server (20) periodically receives GPU, CPU, and MEM usage from each template server (30), and assigns weights to each resource such as GPU, CPU, and MEM according to the usage. The resource values including the weights are obtained for each template server, and the template server with the smallest resource value among the template servers can be selected, and a face image can be transmitted to the selected template server. In this case, the template server receives the received image, stores it in its own queue, sequentially takes images from the queue, extracts a template, and transmits it to the face registration control server.

A face registration system (1) having this structure can be built in the cloud and provided as a rental service.

Next, a face registration method according to an embodiment of the present invention based on this structure is described.

Here, for convenience of explanation, the face registration method is explained using as an example a system in which members register their faces to control access to a company and an access system (2) controls access to a corresponding company.

FIG. 3 is a flowchart showing an authentication process in a face registration method according to an embodiment of the present invention.

To this end, as shown in the attached Fig. 3, authentication for the user is performed. To this end, the face registration web server (10) for face registration of the face registration system (1) provides information corresponding to a company performing access control based on a face to the face registration control server (20) (S100). Here, the information corresponding to the company includes the company name, the IP address of the corresponding access system, the port number, etc., and for the convenience of explanation, it is named access system information.

The face registration control server (20) requests information on a face processing engine that processes a face image from a corresponding access system (2) based on the access system information provided from the face registration web server (10) (S110). In response to this request, the corresponding access system (2) transmits information on a face processing engine used in its own system to the face registration control server (20) (S120). The information on the face processing engine includes engine version information, engine company name, etc. The information on the face processing engine is provided to the template server (30) and is used thereafter when registering a user's face. This will be described later. The face registration control server (20) maps information on the face processing engine to the access system information and stores and manages it.

Meanwhile, the face registration web server (10) provides the access system information to the face registration control server (20), and then first performs primary authentication using the access system. Primary authentication using the access system is authentication that verifies whether the user is a member of the organization (company) based on the information entered by the user. To this end, a message requesting face registration is transmitted to the mobile terminal of the corresponding member of the company, that is, the user's mobile terminal (3) (S130). The message requesting face registration may be, for example, in the form of a face registration invitation message.

The user's mobile terminal (3) receives a message requesting face registration from the face registration web server (10), and then transmits the input user information to the face registration web server (10) (S140). For example, when the mobile terminal (3) receives a message requesting face registration, it displays user information input, and accordingly transmits the information input by the user as user information to the face registration web server (10). Here, the user information may include the name of the corresponding organization, i.e., the company (company name), user name, employee number, phone number, etc.

When the face registration web server (10) receives user information from a mobile terminal (3) that has sent a message requesting face registration, it transmits the received user information to the face registration control server (20) (S150). The face registration control server (20) transmits the user information to the corresponding access system (2) and requests confirmation of whether the user is a member of the corresponding company (S160).

Thereafter, the face registration control server (20) receives response information from the access system (2) as to whether the user is a member of the company (S170) and transmits the received response information to the user's mobile terminal (3) via the face registration web server (10) (S180, S190).

When the user's mobile terminal (3) receives response information for the transmitted user information, it performs personal authentication. Specifically, when the mobile terminal (3) receives response information through the above steps (S130 to S190) performed according to the first authentication using the access system, and when the response information is a response success, that is, authentication using the access system is successful (S200), personal authentication using SMS is performed (S210). Personal authentication using SMS can be performed through the SMS authentication server (4), and authentication can be performed through an authentication method known in the art. In this case, SMS personal authentication can also be performed through the relay of the face registration control server (20).

When personal authentication using SMS is performed and personal authentication is successful (S210), the mobile terminal (3) performs secondary authentication using the access system. Here, secondary authentication using the access system is authentication that verifies whether the user is a member of the organization (company) based on the user information used for personal authentication, not the input information. When personal authentication using SMS is successful, the mobile terminal (3) requests secondary authentication while transmitting the user information used for personal authentication to the face registration web server (10) (S220~S230). The user information used for secondary authentication may include the user name and phone number used for personal authentication.

When the face registration web server (10) receives user information from a mobile terminal (3), it transmits the received user information to the face registration control server (20) (S240). The face registration control server (20) transmits the corresponding user information to the corresponding access system (2) and requests confirmation of whether the user is a member of the corresponding company (S250).

Thereafter, the face registration control server (20) receives response information from the access system (2) as to whether the user is a member of the company (S260) and transmits the received response information to the user's mobile terminal (3) via the face registration web server (10) (S270, S280).

The user's mobile terminal (3) receives response information for the user information previously stored through the above steps (S230 to S280) performed according to the second authentication using the access system, and if the response information is a success, i.e., authentication using the access system is successful (S290), it is finally determined that the user currently attempting to register his/her face is a legitimate user and authentication is completed (S300).

In this way, after the first authentication using the access system based on the information entered by the user and the personal authentication using SMS are performed, the mobile terminal (3) encrypts the user information (name, phone number, employee number, etc.) used for personal authentication and transmits it to the face registration web server (10) without receiving separate user information, and the face registration web server (10) decrypts the received user information and performs the second authentication using the access system through the face registration control server (20). Therefore, the authentication of the user who wants to register his/her face is performed more reliably, and in particular, a person who is not a member of the organization (company) performs personal authentication using his/her SMS,

You can prevent cases in advance where someone else's employee number (or phone number) and name is used to authenticate the company and register the face.

As described above, after the authentication process is performed, the process for face registration is performed.

FIG. 4 is a flowchart showing a photographing process in a face registration method according to an embodiment of the present invention.

After authentication is completed, as shown in the attached drawing 4, the mobile terminal (3) performs a face photographing (S400). As an example of one implementation, the face registration client in the mobile terminal (3) can automatically activate the camera of the mobile terminal (3) when authentication is completed, thereby inducing the user to take a picture of his/her face.

When a face is captured and a captured image is acquired, the mobile terminal (3) detects a face from the captured image (S410). Face detection means detecting an area corresponding to a face in the captured image to determine whether a face is present in the captured image, and various methods known in the art can be used for such face detection.

If face detection is successful (S420), the minimum inter-eye distance is obtained in the detected face area (S430). The minimum inter-eye distance may represent, for example, the distance between the pupil center of the left eye and the pupil center of the right eye.

If the acquired minimum inter-eye distance is included in the reference inter-eye distance range (S440), the mobile terminal (3) determines that face detection has been successfully performed and performs the subsequent process. On the other hand, if the minimum inter-eye distance is not included in the reference inter-eye distance range, face detection is determined to have failed and the above steps (S400 to S440) are performed again.

If face detection is successful, the mobile terminal (3) generates multiple face images based on the captured image (S450). Then, only the face region is cropped from each of the multiple face images, and face region images are obtained (S460). Then, the mobile terminal (3) transmits the face region images, in which only the face region is cropped, to the face registration web server (10) for registration (S470). At this time, in addition to the multiple face region images, user information is transmitted together, and the user information may include a company name, name, phone number, etc. The mobile terminal (3) may store and manage the face image and the face region image together.

In this way, by automatically verifying whether there is a face in the captured image and transmitting the image to the face registration web server (10) only when there is a face, unnecessary consumption of network resources can be minimized, and cases where face registration is performed despite there being no face area in the captured image can be prevented. In addition, server resources can be used efficiently since the acquisition of the face image for registration is processed on the mobile terminal. In addition, by cropping and transmitting only the face area from the captured image on the mobile terminal, the amount of network transmission can be minimized, and cases where network traffic is caused due to unnecessary data being transmitted for areas other than the face, such as the upper body, even though only the face area image is actually needed can be prevented.

Meanwhile, the face registration web server (10) that receives face area images and user information from the mobile terminal (3) transmits them to the face registration control server (20) to request face registration (S490).

As described above, after the shooting process is performed, the face registration process is performed.

FIG. 5 is a flowchart showing a face registration process in a face registration method according to an embodiment of the present invention.

In an embodiment of the present invention, the template server (30) transmits its resources to the face registration control server (20) at a set cycle, thereby causing the face registration control server (20) to monitor the resources of the template servers (S600). That is, as shown in FIG. 5, the template server (30) transmits resource information to the face registration control server (20) at a set cycle, and the resource information includes CPU and memory status information. The face registration control server (20) monitors the resources of each template server (30) based on the resource information provided from each template server (30).

In this state of resource monitoring, when the face registration web server (10) receives face area images and user information from the mobile terminal (3) and requests face registration while transmitting them (S610, S620), the face registration control server (20) checks the resource information of each template server (30) to determine whether the current resources are sufficient to process the image and selects a template server (30) with available resources. For example, if the current resource usage is less than the set usage, it can be determined that the resources are sufficient to process the image, i.e., the resources are available. As an example of an implementation, a template server with available resources can be selected while sequentially checking resource information for a plurality of template servers. To this end, as shown in FIG. 5, resources of a plurality of template servers are sequentially checked starting from variable M=1 to select a template server with available resources (S630 to S650).

The face registration control server (20) transmits image data (multiple face area images) for face registration to a template server (30) selected as having sufficient resources (S660). In particular, the face registration control server (20) transmits information about the face processing engine used by the access system of the organization (e.g., company) to which the user belongs (engine version information, engine company name).

Thereafter, the template server (30) loads a face processing engine corresponding to the engine company name and engine version based on the information about the received face processing engine (S670), and extracts a template from multiple face region images through the loaded face processing engine (S680). The template represents metadata having face feature points acquired from the face region images. Accordingly, the template can be automatically extracted by the face processing engine used in the access system, which is the customer system.

The template server (30) transfers a plurality of templates extracted from a plurality of face area images to the face registration control server (20) (S690). Then, the corresponding face processing engine is unloaded (S700).

The face registration control server (20) transmits a plurality of templates provided from the template server (30) together with corresponding user information to the access system (2) of the organization (S710). At this time, the original plurality of face area images, templates extracted from each face area image, and user information (name, phone number, etc.) are transmitted to the access system (2) to enable face registration.

Thereafter, when a successful reception response for transmission is received from the access system (2) (S720), the face registration control server (20) transmits response information indicating successful face registration to the mobile terminal (3) through the face registration web server (10) (S730, S740).

Accordingly, the mobile terminal (3) displays a face registration success message (S750), allowing the user to confirm that his or her face has been successfully registered in the access system (2).

FIG. 6 is a structural diagram illustrating a computing device for implementing a face registration method according to an embodiment of the present invention.

As illustrated in the attached FIG. 6, a face registration method according to an embodiment of the present invention can be implemented using a computing device (100).

The computing device (100) may include at least one of a processor (110), a memory (120), an input interface device (130), an output interface device (140), a storage device (160), and a network interface device (150). Each of the components may be connected to each other by a bus (170). In addition, each of the components may be connected to each other through an individual interface or an individual bus centered around the processor (110), rather than a common bus (170).

The processor (110) may be implemented in various types such as an AP (Application Processor), a CPU (Central Processing Unit), a GPU (Graphic Processing Unit), etc., and may be any semiconductor device that executes a command stored in a memory (120) or a storage device (160). The processor (110) may execute a program command stored in at least one of the memory (120) and the storage device (160). Such a processor (110) may be configured to implement the functions and methods described based on FIGS. 1 to 5 above.

The memory (120) and storage device (160) may include various forms of volatile or nonvolatile storage media. For example, the memory may include a read-only memory (ROM) (121) and a random access memory (RAM) (122). In an embodiment of the present invention, the memory (120) may be located inside or outside the processor (110), and the memory (120) may be connected to the processor (110) through various means already known.

The input interface device (130) is configured to provide data to the processor (110), and the output interface device (140) is configured to output data from the processor (110).

A network interface device (150) can transmit or receive signals to or from other entities via a wired network or a wireless network.

A computing device (100) having such a structure is named a face registration system and can implement a face registration method according to an embodiment of the present invention.

In addition, a computing device (100) having such a structure is named a mobile terminal and can implement steps and functions performed by a mobile terminal among the face registration methods according to one embodiment of the present invention.

Additionally, at least a part of the face registration method according to one embodiment of the present invention may be implemented as a program or software running on a computing device (100), and the program or software may be stored in a computer-readable medium.

Additionally, at least a part of the face registration method according to one embodiment of the present invention may be implemented as hardware that can be electrically connected to a computing device (100).

Embodiments of the present invention are not implemented only through the devices and/or methods described above, and may also be implemented through a program for realizing a function corresponding to the configuration of an embodiment of the present invention, a recording medium on which the program is recorded, etc., and such implementation can be easily implemented by an expert in the technical field to which the present invention belongs, based on the description of the embodiments described above.

Although the embodiments of the present invention have been described in detail above, the scope of the present invention is not limited thereto, and various modifications and improvements made by those skilled in the art using the basic concept of the present invention defined in the following claims also fall within the scope of the present invention.

Claims (14)

As a face registration method for access control,
A step in which the registration system performs primary authentication by requesting confirmation of whether the user is a member of the access system while transmitting first user information transmitted from a mobile terminal to the access system;
A step of the above registration system, when receiving a response to the first authentication from the access system, transmitting the response to the mobile terminal;
A step in which the above registration system receives second user information used for the SMS personal authentication after the SMS personal authentication is completed from the mobile terminal that has received a response to the first authentication;
A step in which the registration system performs secondary authentication to request confirmation of whether the user is a member of the access system while transmitting the second user information to the access system;
The step of the registration system, when receiving a response to the second authentication from the access system, transmitting the response to the mobile terminal; and
The above registration system receives a facial image transmitted from the mobile terminal on which the second authentication has been performed, selects a template server among a plurality of template servers whose current resource usage is less than a set usage usage to process the received facial image, and transmits the facial image processed by the selected template server to the access system as a facial image for access control.
A face registration method comprising: In the first paragraph,
The steps for transmitting to the above entry system are:
The step of the selected template server generating a template including metadata about facial feature points from the received facial image using the facial processing engine used by the access system; and
The step of the above registration system transmitting the above template to the access system together with information about the user who has undergone the second authentication.
A face registration method comprising: delete In the second paragraph,
A face registration method in which the above-mentioned selected template server loads a face processing engine that is an engine of a company corresponding to the face processing engine used by the access system among a plurality of face processing engines and has a corresponding version, and processes the received face image to generate a template. In the first paragraph,
A face registration method, wherein the face image transmitted from the mobile terminal is a face area image in which only the user's face area is cropped from an image captured by the mobile terminal. In paragraph 5,
A step of obtaining a user's image when the mobile terminal receives a response to the second authentication;
A step in which the mobile terminal detects a face in the acquired image;
The step of the mobile terminal obtaining the minimum inter-eye distance of the detected face, and if the minimum inter-eye distance satisfies the range of the reference inter-eye distance, cropping only the face area from the obtained image to generate at least one face area image; and
The step of the above mobile terminal transmitting the face area image to the registration system together with the user information for which the second authentication has been completed.
A face registration method further comprising: In the first paragraph,
A face registration method, wherein the user information for the first authentication and the second authentication includes an organization name, employee number, user name, and phone number. As a face registration system for access control,
A face registration web server configured to transmit and receive data to and from a mobile terminal of a user wishing to register a face;
A face registration control server configured to perform authentication in conjunction with an access system that performs access control based on data provided from the above face registration web server; and
A plurality of template servers configured to process face images from the mobile terminal transmitted through the face registration web server under the control of the face registration control server.
Including,
The above face registration control server,
Performs primary authentication to request confirmation of whether the user is a member of the access system while transmitting first user information transmitted from the mobile terminal to the access system through the face registration web server;
When a response to the first authentication is received from the access system, the response is transmitted to the mobile terminal through the face registration web server;
After SMS personal authentication is completed from the mobile terminal that has received a response to the first authentication, second user information used for the SMS personal authentication transmitted from the mobile terminal is received through the face registration web server;
Perform secondary authentication by requesting confirmation that the user is a member of the access system while transmitting the second user information to the access system;
When a response to the second authentication is received from the access system, the response is transmitted to the mobile terminal through the face registration web server;
Receiving a face image transmitted from the mobile terminal for which the second authentication has been performed through the face registration web server, selecting a template server among the plurality of template servers whose current resource usage is less than the set usage, and controlling the processing of the face image while transmitting the face image to the selected template server; and
A face registration system configured to use an image processed by the template server as an image for access control and transmit the image to the access system. In Article 8,
The above template server is configured to generate a template including metadata about facial feature points from the facial image using the facial processing engine used by the access system and transmit the template to the facial registration control server.
A face registration system, wherein the face registration control server is configured to transmit the template to the access system together with information about the user who has undergone the second authentication. delete In Article 9,
A face registration system, wherein the above template server is configured to process the face image by loading a face processing engine that is an engine of a company corresponding to the face processing engine used by the access system among a plurality of face processing engines and has a corresponding version. In Article 8,
A face registration system, wherein the face image transmitted from the mobile terminal is a face area image in which only the user's face area is cropped from an image captured by the mobile terminal. delete delete

Images