JP4645872B2 - Control device and authentication method - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
  The present inventionControl device and authentication methodIn particular, by updating or deleting the dictionary in which personal information used for authentication processing is registered as necessary, the dictionary data can be managed and stabilized without increasing the authentication processing time each time. Enabled to execute authentication processControl device and authentication methodAbout.
[0002]
[Prior art]
For example, a technique for identifying an individual is required when managing entrance / exit or managing users of various information processing apparatuses such as personal computers and copiers or image forming apparatuses. Biometrics has attracted attention as a means for identifying an individual. Among them, in particular, a personal authentication system based on fingerprints, palm prints, or user facial features is being put into practical use. Fingerprints, palm prints, or features of the user's face are unique to the individual and are very effective as means for identifying the individual.
[0003]
When the user's face feature is used as the personal authentication information, it is conceivable that the authentication accuracy decreases as the user's face changes with time. In order to prevent a decrease in authentication accuracy, for example, as disclosed in JP-A-7-271981, a technique for updating dictionary data using newly input data every time an authentication process is executed, As disclosed in JP-A-9-198501, there is a technique of adding a time stamp to a dictionary and always performing authentication processing using new dictionary data.
[0004]
[Problems to be solved by the invention]
However, when the dictionary data is updated each time the authentication process is executed, it is necessary to take time for the update process of the dictionary data every time, and the authentication process time is lengthened. Further, even when the authentication accuracy is not lowered, the dictionary data is updated, so that there is a possibility that the authentication accuracy may be lowered due to temporary and minute feature changes such as injury.
[0005]
Even if a time stamp is added to the dictionary, the unused user's dictionary remains, which not only causes a problem of memory capacity, but also adversely affects authentication accuracy and authentication speed. There is a fear.
[0006]
The present invention has been made in view of such a situation, and by updating or deleting the dictionary as necessary, the dictionary data is managed without increasing the time for the authentication process, and stable authentication is performed. The process can be executed.
[0007]
[Means for Solving the Problems]
  The control device of the present invention is a control device for controlling a portable device, and includes a first storage unit that stores a facial feature value as registration data, an acquisition unit that acquires a user's facial feature value, and the first device. Authentication means for authenticating the user based on the registration data stored in the storage means and the facial feature amount acquired by the acquisition means; and if the user authentication is successful, the registration of the user When the data has passed the predetermined update period,Alternatively, when the authentication suitability indicating the success rate of the user authentication process is not more than a predetermined threshold,Updating means for updating the registered data of the user to the facial feature amount acquired by the acquiring means;A second storage unit that stores a history of authentication processing by the authentication unit and the authentication suitability level, and updates the authentication suitability level every predetermined period;It is characterized by providing.
[0009]
In order to execute the authentication process, it is necessary to register user personal authentication data in advance. The first storage means is composed of, for example, a hard disk or a semiconductor memory, and includes the registration unit 65 in FIG. 3 and the registration unit 92 in FIG. 12, and the personal authentication data of the user is registered prior to the authentication process. It is what is done. You may make it register together with ID, registration date, etc. with a personal authentication data in a 1st memory | storage means.
[0010]
  Said acquisition meansIs constituted by, for example, the communication unit 63 in FIG. 3 and the CCD camera 12 in FIG. 12, and obtains user personal authentication data from an external electronic device or by itself.
[0011]
  The authentication means includes, for example, the matching unit 64 in FIG. 3 and the matching unit 91 in FIG.The
[0015]
  The update means is constituted by, for example, the CPU 62 in FIG. 3, the CPU 34 in FIG.
  When the user's facial feature value is used as the personal authentication data, the user's facial feature value changes gradually with the passage of time. When a certain amount of time has elapsed from the date and time when the registration data was registered, the user's facial feature value is likely to change slowly.
  The update period is a value indicating an elapsed period from the date and time when the registration data is registered so that it can be determined that the facial feature amount of the user is gradually changing.
  Since the registration data is updated when the registration data of the user has passed the predetermined update period, the user's facial feature value is moderated without performing unnecessary processing such as changing the registration of the dictionary every time. Only when a change occurs, the dictionary can be updated to follow the temporal change of the user's face.
  When the authentication suitability is low, it can be determined that the facial feature amount of the user starts to change gradually.
  The threshold value of the authentication suitability level is a threshold value of the authentication suitability level at which it can be determined that the facial feature amount of the user starts to change gradually, and can be set as a numerical value such as 80% or 75%, for example. .
  Since the personal authentication data is updated when the authentication suitability is less than or equal to the threshold value, the user's facial feature value is moderated without performing unnecessary processing such as changing dictionary registration each time. Only when a change occurs, the dictionary can be updated to follow the temporal change of the user's face.
  The second storage means is composed of, for example, a hard disk or a semiconductor memory, and can be configured by the login history storage unit 67 of FIG. 3, the login history storage unit 94 of FIG. 12, and the like. Is memorized.
[0016]
  In the control device of the present invention, the facial feature value is stored as registration data, the user's facial feature value is acquired, and the user is authenticated based on the stored registration data and the acquired facial feature value. If the user authentication is successful, the user registration data has passed a predetermined update period,Alternatively, when the authentication suitability indicating the success rate of the user authentication process is not more than a predetermined threshold,The user registration data is updated to the facial feature value acquired by the acquisition means.The history of authentication processing and the authentication suitability are stored, and the authentication suitability is updated every predetermined period.
[0017]
Accordingly, since the personal authentication data is updated or deleted only when necessary, dictionary data can be managed and stable authentication processing can be executed without increasing the time for each authentication processing.
[0018]
  Also,The update means further obtains the user registration data by the obtaining means when the user authentication succeeds, and the number of times the authentication processing fails before the user authentication succeeds exceeds a predetermined threshold. The facial feature value can be updated.
[0020]
For example, when the user's facial feature value is used as the personal authentication data, the user's facial feature value changes gradually with the passage of time, and the first registered facial feature value is used. If the authentication process is continued, there is a possibility that even if the user is correctly registered, the authentication process may not be executed correctly sometime.
[0021]
For example, when the authentication process is not performed correctly only when the authentication process is repeated several times, it can be determined that the facial feature amount of the user starts to change gently.
[0032]
  Also,An erasure unit for erasing the registration data in which the period from the date and time when the authentication process is last executed by the authentication process unit to the present is longer than a predetermined period among the registration data stored in the first storage unit Can be further provided.
[0033]
  FinallyWhen the date and time when the authentication process is executed is old, the user can determine that the authentication process is not currently performed, and the registered personal authentication data can be determined to be useless data. .
[0034]
  FirstThe threshold for the period until the personal authentication data stored in the storage means is erased may be determined that the registered personal authentication data is useless data, and the period during which login (authentication processing) is not performed Is shown.
[0035]
  AndOf the registration data stored in the first storage means, erase the registration data whose period from the date and time when the authentication processing was last executed by the authentication processing means to the present is longer than a predetermined period.As a result, it is possible to automatically delete unnecessary personal authentication data without registering it indefinitely.
[0041]
  Furthermore, the control device for controlling the portable device can be built in the portable device.
  The authentication method of the present invention is an authentication method for a portable device that performs user authentication based on a facial feature quantity stored as registration data in a storage means, an acquisition step for acquiring a facial feature quantity of the user, and a storage means Authentication step for performing user authentication based on the registered data and the facial feature amount acquired by the processing of the acquisition step, and if the user authentication is successful, the user registration data has passed a predetermined update period. WhenAlternatively, when the authentication suitability indicating the success rate of the user authentication process is not more than a predetermined threshold,An update step of updating the registration data of the user to the facial feature amount acquired by the processing of the acquisition step;Storing a history of authentication processing by the authentication means and the authentication suitability, and updating the authentication suitability every predetermined period;It is characterized by including.
[0042]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings.
[0043]
FIG. 1 shows a configuration example of an authentication system to which the invention is applied. In this configuration example, copying machines 1-1 to 1-N as examples of electronic devices are connected to an authentication server 13 via a LAN (Local Area Network) 14. The copiers 1-1 to 1-N have CCD (Charge-Coupled Devices) cameras 12-1 to 12-N, respectively.
[0044]
In the following, the copying machines 1-1 to 1-N are simply referred to as copying machines 1 when it is not necessary to distinguish them individually. The same applies to the CCD cameras 12-1 to 12-N and other devices.
[0045]
FIG. 2 shows an internal configuration example of the copying machine 1. The image captured by the CCD camera 12 is amplified by an amplifier (AMP) 31 and then supplied to the A / D converter 32 where it is A / D converted. A CPU (Central Processing Unit) 34 controls the operation of the copying machine 1 based on a user instruction input from the operation panel 33 and encrypts image data captured by the CCD camera 12. The copying unit 35 is controlled by the CPU 34 to read a document placed on the document table and to copy the read image onto a sheet.
[0046]
When there is a user in front of the copying machine 1, the sensor 36 detects this and notifies the CPU 34. The communication unit 37 performs processing for communicating with the authentication server 13 via the LAN 14. The storage unit 38 is composed of, for example, a semiconductor memory, and stores data necessary for processing by the CPU 34 and data being processed.
[0047]
The authentication server 13 is configured as shown in FIG. 3, for example. The input unit 61 includes a switch, a keyboard, a mouse, and the like. The input unit 61 is operated by a user and outputs a signal corresponding to the operation to the CPU 62. The communication unit 63 communicates with the copying machine 1 via the LAN 14.
[0048]
The CPU 62 executes various processes in response to a signal input from the input unit 61 or the communication unit 63 in addition to the decryption process of the encrypted image data transmitted from the copying machine 1. The timer 69 is connected to the CPU 62, and the CPU 62 can acquire the current date and time by referring to the timer 69. An input rejection number counter 70 is also connected to the CPU 62, and the counter is incremented or initialized under the control of the CPU 62.
[0049]
The feature amount extraction unit 66 executes a process of extracting feature amounts necessary for identifying the user, such as the shape and position of eyes, nose, mouth, and ear, from the image data of the input face image. The registration unit 65 registers the feature amount extracted by the feature amount extraction unit 66 in the registration mode. For example, as illustrated in FIG. 4, the facial feature amount of the user is registered in the registration unit 65 together with the ID and the dictionary update date and time. The registration unit 65 is configured by, for example, a hard disk or a semiconductor memory. The matching unit 64 performs a matching process between the feature amount extracted by the feature amount extraction unit 66 and the feature amount registered in advance in the registration unit 65 in the normal authentication mode.
[0050]
In the login history storage unit 67, for example, as shown in FIG. 5, the login ID of the logged-in user, the login date and time, and the degree of suitability that is the ratio of successful logins to the number of login requests, , And the number of successful authentication processes.
[0051]
The fitness may be calculated and recorded by resetting the fitness calculation result once every predetermined period such as one week, one month, etc. The fitness level may not be reset until the dictionary is updated.
[0052]
The threshold storage unit 68 stores various thresholds for updating or erasing the dictionary, such as a threshold for fitness, a threshold for the number of rejected inputs, a threshold for a dictionary update period, and a threshold for a dictionary registration period. .
[0053]
Each user needs to register the image feature amount of his / her face in the registration unit 65 in advance when using this system.
[0054]
Next, registration processing of the copying machine 1 in the authentication system of FIG. 1 will be described with reference to the flowchart of FIG.
[0055]
In step S11, the CPU 34 determines whether or not the currently set mode is the registration mode.
[0056]
The registration mode is set by a service person or a predetermined administrator of the copying machine 1 by inputting a predetermined password from the operation panel 33, for example. Alternatively, the registration mode may be set when a key or the like prepared in advance is attached to a predetermined position of the copying machine 1. If it is determined in step S1 that the registration mode is not set, the registration process is terminated because it is a normal authentication mode.
[0057]
If it is determined in step S1 that the registration mode is set, in step S2, the CPU 34 executes a process for capturing facial image data. At this time, the CPU 34 controls the CCD camera 12 to capture an image of the user's face. Image data photographed by the CCD camera 12 is amplified by an amplifier 31 and then input to an A / D converter 32. The A / D converter 32 performs A / D conversion on the input image data. The CPU 34 encrypts this image data and outputs it to the communication unit 37.
[0058]
In step S <b> 3, the communication unit 37 transmits the encrypted image data supplied from the CPU 34 to the authentication server 13 via the LAN 14 and requests user registration.
[0059]
Thereafter, as will be described later with reference to the flowchart of FIG. 7, the authentication server 13 executes a user registration process in response to the registration request, and when the registration process is completed, notifies the registration completion in step S25. Come on.
[0060]
Therefore, in step S5, the CPU 34 stands by until a registration completion notification is received from the authentication server 13. When the registration completion notification is received, the CPU 34 proceeds to step S6, executes a registration mode release process, and the process ends. .
[0061]
On the other hand, the authentication server 13 executes the registration process shown in the flowchart of FIG. 7 in the registration mode.
[0062]
In step S <b> 21, the CPU 62 of the authentication server 13 determines whether a registration request is received from the copying machine 1. If it is determined in step S21 that a registration request has not been received, the process ends. If it is determined in step S21 that a registration request has been received from the copying machine 1, in step S22, the CPU 62 executes processing for taking in facial image data transmitted from the copying machine 1. That is, the CPU 62 decrypts the encrypted image data input via the communication unit 63 and supplies the decrypted image data to the feature amount extraction unit 66.
[0063]
In step S <b> 23, the feature amount extraction unit 66 extracts the feature amount of the user's face from the captured facial image data, and outputs it to the registration unit 65 via the matching unit 64.
[0064]
In step S24, the registration unit 65 receives the input of the facial feature value from the feature value extraction unit 66, and adds the facial feature value to the registration data.
[0065]
In step S <b> 25, the CPU 62 notifies the copying machine 1 of registration completion from the communication unit 63 via the LAN 51, and ends the process.
[0066]
As described above, the facial feature amount of the user is registered in the registration unit 65 of the authentication server 13. However, the user's facial feature value changes gradually with the passage of time, and if the authentication process is continued using the facial feature value registered first, Even in such a case, there is a possibility that the authentication process will not be executed properly sometime.
[0067]
For example, when the authentication process is not performed correctly only when the authentication process is repeated several times, it can be determined that the facial feature amount of the user starts to change gently. By using this, the face feature value authenticated after the authentication process is repeated several times is registered as new dictionary data, so that useless processing such as changing the dictionary registration each time is not performed. Thus, it is possible to update the dictionary only when a gradual change occurs and to follow the temporal change of the user's face.
[0068]
Next, an authentication process 1 in which dictionary data is updated based on the number of input rejections will be described with reference to the flowchart of FIG.
[0069]
In step S31, the CPU 62 acquires the threshold value of the input rejection number from the threshold value storage unit 68, and initializes the value of the input rejection number counter 70 in step S32.
[0070]
In step S33, the CPU 62 receives personal authentication data (that is, image data of the user's face) transmitted from any of the copier 1-1 to copier 1-N via the LAN 14 and the communication unit 63. get. The CPU 62 outputs the personal authentication data to the feature amount extraction unit 66. The feature amount extraction unit 66 performs predetermined image processing on the input image data, extracts a facial feature amount, and outputs the facial feature amount to the matching unit 64. The matching unit 64 collates the facial feature amount registered in the registration unit 65 with the input facial feature amount, and outputs the collation result to the CPU 62.
[0071]
In step S <b> 34, the CPU 62 determines whether the authentication process has been successful based on the signal input from the matching unit 64. If it is determined in step S34 that the authentication process has been successful, the process proceeds to step S38.
[0072]
If it is determined in step S34 that the authentication process has not succeeded, in step S35, the CPU 62 determines whether or not the authentication process has been executed a predetermined number of times. As described above, since the authentication accuracy of the personal authentication process is set to be very high, for example, when the facial features of the user are slowly changing or the facial orientation is different, Even in such a case, since authentication may not be possible, the authentication process can be retried a predetermined number of times.
[0073]
If it is determined in step S35 that the authentication process has not been executed a predetermined number of times, in step S36, the CPU 62 transmits the personal authentication data through the communication unit 63 and the LAN 14 through the copying machines 1-1 to 1-1. An authentication process retry request is sent to one of the copying machines 1-N, 1 is added to the value of the input rejection number counter, the process returns to step S33, and the subsequent processes are repeated. .
[0074]
If it is determined in step S35 that the authentication processing has been executed a predetermined number of times, in step S37, the CPU 62 transmits the personal authentication data via the communication unit 63 and the LAN 14 to the copying machines 1-1 to 1 that have transmitted the personal authentication data. A signal indicating authentication processing failure is output to any of -N, and the processing is terminated.
[0075]
If it is determined in step S34 that the authentication process has been successful, in step S38, the CPU 62 determines whether or not the value of the input rejection number counter 70 is greater than the threshold acquired in step S31.
[0076]
If it is determined in step S38 that the value of the input rejection number counter 70 is greater than the threshold value, it is highly likely that the user's facial feature value is slowly changing, so in step S39, the CPU 62 performs the authentication process. The control signal for updating the dictionary is generated using the personal authentication data when the authentication is successful as new registration data, and is output to the matching unit 64. The matching unit 64 updates the facial feature amount of the corresponding user registered in the registration unit 65 to the facial feature amount input in this process, and changes the dictionary update date and time.
[0077]
If it is determined in step S38 that the value of the input rejection number counter 70 is smaller than the threshold value, or after the process of step S39 is completed, the CPU 62 records the login history in the login history storage unit 67 in step S40. Then, the process ends.
[0078]
By executing such processing, the facial registration fee dictionary data can be changed to the current user's facial feature amount only when there is a high possibility that the user's facial feature amount is slowly changing. Therefore, stable authentication processing can be continuously executed.
[0079]
Next, the authentication process 2 will be described with reference to the flowchart of FIG. 9 in which the dictionary data is updated when the fitness of the authentication process falls below a certain value.
[0080]
In step S <b> 51, the CPU 62 acquires a threshold value of the fitness level from the threshold value storage unit 68.
[0081]
In step S52 and step S53, processing similar to that in step S33 and step S34 in FIG. 8 is executed.
[0082]
If it is determined in step S53 that the authentication process has failed, the same processes as in steps S35 to S37 in FIG. 8 are executed in steps S54 to S56.
[0083]
If it is determined in step S53 that the authentication process has been successful, in step S57, the CPU 62 stores the latest login history with the same login ID stored in the login history storage unit 67 and the input rejection count counter 70. Based on the value, the fitness value is calculated.
[0084]
In step S58, the CPU 62 determines whether or not the value of the authentication process suitability calculated in step S57 is greater than the suitability threshold acquired in step S51.
[0085]
For example, when the threshold of conformity is 80% and the login history is stored in the login history storage unit 67 as shown in FIG. 5 and the user with the login ID [025] logs in in the third authentication process, the total The number of logins is 20 times, and 15 of them are successful in authentication, so the fitness is 75%, which is below the threshold.
[0086]
If it is determined in step S58 that the fitness value is smaller than the threshold value, in step S59, processing similar to that in step S39 in FIG. 8 is executed.
[0087]
If it is determined in step S58 that the fitness value is greater than the threshold value, or after the process in step S59 is completed, the same process as in step S40 in FIG. 8 is executed in step S60, and the process is terminated. The
[0088]
By executing such processing, the facial registration fee dictionary data can be changed to the current user's facial feature amount only when there is a high possibility that the user's facial feature amount is slowly changing. Therefore, stable authentication processing can be continuously executed.
[0089]
Further, as described with reference to FIG. 4, the registration unit 65 records the update date and time of the dictionary. Therefore, in addition to updating the dictionary by the processing described with reference to FIGS. 8 and 9, for example, The dictionary may be updated using data that has been successfully authenticated when a certain period of time has passed since the last update date of the dictionary.
[0090]
Next, processing for updating a dictionary that has not been updated for a certain period of time with reference to the update date and time of the dictionary registered in the registration unit 65 will be described with reference to the flowchart of FIG.
[0091]
In step S72, the authentication process 1 described using FIG. 8 or the authentication process 2 described using FIG. 9 is executed.
[0092]
In step S71, the CPU 62 determines whether or not the authentication process executed in step S71 has succeeded. If it is determined in step S72 that the authentication process has failed, the process ends.
[0093]
If it is determined in step S72 that the authentication process has been successful, in step S73, the CPU 62 refers to the timer 69 and acquires the current date and time.
[0094]
In step S74, the CPU 62 acquires a threshold value for the dictionary update period from the threshold value storage unit 68. In step S75, the CPU 62 updates the dictionary used for the authentication process in step S71 from the registration unit 65 via the matching unit 64. Get the date and time.
[0095]
In step S76, the CPU 62 calculates a period between the current login date and dictionary update date and time, and determines whether or not the calculation result is larger than the dictionary update period threshold acquired in step S74. If it is determined in step S76 that the period between the login date and time and the dictionary update date and time is smaller than the threshold for the dictionary update period, the process ends.
[0096]
If it is determined in step S76 that the period between the current login date and dictionary update date and time is greater than the threshold for the dictionary update period, the same processing as step S39 in FIG. 8 is executed in step S77, and the processing ends. Is done.
[0097]
By such processing, when the dictionary data has not been updated for a long period of time, it is likely that the current user's facial feature value is slowly changing compared to the registered facial feature value. Since it is determined and the dictionary data is changed to the facial feature amount of the current user, stable authentication processing can be continuously executed.
[0098]
In addition, when a large number of users are registered in such an authentication processing system, the registration data of users who are no longer using the system may be forgotten to be deleted. The amount of data of facial image data used for personal authentication is very large, so if you do not delete unused data, the memory capacity will be full and you will not be able to register new users. Or need to add more memory.
[0099]
In order to prevent such a situation, it is possible to automatically delete registered data of a user who has not logged in for a predetermined period by using the fact that the login history is entirely stored in the login history storage unit 67. . The dictionary deletion process will be described with reference to the flowchart of FIG.
[0100]
In step S91, the CPU 62 detects that its own power is turned on and refers to the timer 69 to acquire the power-on date and time. In step S92, the CPU 62 obtains the dictionary deletion period from the threshold storage unit 68. Get the threshold.
[0101]
In step S <b> 93, the CPU 62 acquires the last login date and time of each registered dictionary from the login history stored in the login history storage unit 67.
[0102]
In step S94, the CPU 62 calculates a period between the last login date and time of each dictionary acquired in step S93 and the power-on date and time acquired in step S91, and the calculation result is the dictionary registration period acquired in step S92. It is determined whether there is a dictionary larger than the threshold. If it is determined in step S94 that there is no dictionary in which the period between the last login date and the power-on date and time of each dictionary is greater than the threshold for the dictionary registration period, the process ends.
[0103]
If it is determined in step S94 that there is a dictionary in which the period between the last login date and the power-on date and time of each dictionary is larger than the threshold for the dictionary registration period, the CPU 62 deletes the corresponding dictionary in step S95. The process is terminated.
[0104]
Through the processing as described above, useless dictionary data can be deleted, and stable authentication processing can be executed.
[0105]
In the above, as described with reference to FIG. 1, the authentication system that controls the plurality of copying machines 1 using the authentication server 13 has been described. However, the present invention can be applied to, for example, a printer, a fax machine, a scanner, Various image forming apparatuses with various functions such as copiers, printers, fax machines, scanners, etc., various image processing apparatuses, various information processing apparatuses such as computers, personal computers, ATMs, telephones, mobile phones The present invention can be applied to an authentication system that executes an authentication process for various communication devices.
[0106]
Furthermore, the present invention provides an entrance / exit management device for managing entrance / exit of a condominium, an office, etc., for example, by performing personal authentication at the entrance / exit, and permitting entrance / exit only to a pre-registered user, or a bicycle It can be applied to a locking device that allows only a registered user to open and close a key such as a locker.
[0107]
In addition, various image forming apparatuses, various image processing apparatuses, various information processing apparatuses, various communication apparatuses, which are configured to perform authentication processing independently without being connected to a network such as the LAN 14, The present invention can also be applied to an entrance / exit management device or a locking device.
[0108]
FIG. 12 is a block diagram showing the internal configuration of a copying machine 81 that performs the authentication process independently, to which the present invention is applied. 2 corresponding to those in FIG. 2 are denoted by the same reference numerals, and description thereof will be omitted as appropriate.
[0109]
That is, the copying machine 81 of FIG. 2 further includes a matching unit 91, a registration unit 92, a feature amount extraction unit 93, a login history storage unit 94, a threshold storage unit 95, a timer 96, and an input rejection number counter 97. 2 except that the functions of the matching unit 91 through the input rejection number counter 97 are the same as those of the matching unit 64 through the input rejection number counter 70 described with reference to FIG. Since there is, explanation is omitted.
[0110]
That is, the copying machine 81 in FIG. 12 can perform the same processing as the processing described with reference to FIGS. The copying machine 81 extracts, for example, a facial feature amount from the user's facial image data imaged using the CCD camera 12 by using the feature amount extraction unit 93, and stores the facial feature amount in the registration unit 92 included therein. Even when the user performs authentication processing, the login history can be stored in the login history storage unit 94 owned by the user, and according to various threshold values stored in the threshold storage unit 95. The dictionary registered in the registration unit 92 can be updated or deleted.
[0111]
In addition, although the description has been made here using the user's facial feature amount as the feature amount for performing personal authentication, the personal authentication data includes not only the user's face image but also the user's fingerprint or palm print, for example. You may do it.
[0112]
In the present specification, the term “system” represents the entire apparatus constituted by a plurality of apparatuses.
[0113]
【The invention's effect】
According to the control device of the present invention, based on the threshold value, it is determined whether to update the personal authentication data, and based on the determination result, the stored personal authentication data is updated. It is possible to manage dictionary data and execute stable authentication processing without increasing the time for each authentication processing.
[Brief description of the drawings]
FIG. 1 is a diagram showing a configuration example of an authentication system to which the present invention is applied.
FIG. 2 is a block diagram showing an internal configuration of the copier of FIG.
FIG. 3 is a block diagram showing an internal configuration of the authentication server in FIG. 1;
4 is a diagram for explaining data registered in a registration unit in FIG. 3; FIG.
5 is a diagram for explaining data registered in a login history storage unit in FIG. 3; FIG.
FIG. 6 is a flowchart for explaining copying machine registration processing;
FIG. 7 is a flowchart for explaining authentication server registration processing;
FIG. 8 is a flowchart for explaining authentication processing 1;
FIG. 9 is a flowchart for explaining authentication processing 2;
FIG. 10 is a flowchart for explaining dictionary update processing;
FIG. 11 is a flowchart for explaining dictionary erasure processing;
FIG. 12 is a block diagram showing an internal configuration of a copying machine configured to perform authentication processing independently.
[Explanation of symbols]
1 Copying machine
12 CCD camera
13 Authentication server
34, 62 CPU
64 matching section
65 Registration Department
66 Feature Extraction Unit
67 Login history storage
68 Threshold storage unit
69 Timer
70 Input rejection counter
91 Matching part
92 Registration Department
93 Feature Extraction Unit
94 Login history storage
95 Threshold storage unit
96 timer
97 Input rejection counter

Claims (5)

A control device for controlling a portable device,
First storage means for storing facial feature quantities as registration data;
Acquisition means for acquiring a facial feature of the user;
Authentication means for authenticating the user based on the registration data stored in the first storage means and the facial feature amount acquired by the acquisition means;
When the authentication of the user is successful, when the registration data of the user has passed a predetermined update period, or when the authentication suitability indicating the success rate of the authentication process of the user is not more than a predetermined threshold and updating means for updating the registration data of the user to the facial feature quantity acquired by the acquisition means,
A control apparatus comprising: a second storage unit that stores a history of authentication processing by the authentication unit and the authentication suitability, and updates the authentication suitability every predetermined period . The update unit further acquires the registration data of the user when the authentication of the user is successful, when the number of times the authentication process has failed before the authentication of the user exceeds a predetermined threshold. The control device according to claim 1, wherein the control unit updates the facial feature amount acquired by a unit. An erasure unit for erasing the registration data in which the period from the date and time when the authentication process is last executed by the authentication process unit to the present is longer than a predetermined period among the registration data stored in the first storage unit The control device according to claim 1 , further comprising: Wherein the control device for controlling a mobile device, the control device according to any one of claims 1 to 3, characterized in that it is incorporated in the portable device. In a mobile device authentication method for performing user authentication based on facial feature values stored as registration data in a storage unit,
An acquisition step of acquiring a facial feature of the user;
An authentication step of authenticating the user based on the registration data stored in the storage means and the facial feature amount acquired by the processing of the acquisition step;
When the authentication of the user is successful, when the registration data of the user has passed a predetermined update period, or when the authentication suitability indicating the success rate of the authentication process of the user is not more than a predetermined threshold and updating step of updating the registered data of the user to the facial feature quantity obtained by the processing of the acquisition step,
An authentication method comprising: storing a history of authentication processing by the authenticating means and the authentication suitability, and updating the authentication suitability every predetermined period .

Images