JP6325864B2 - Admission management system and authenticator - Google Patents

Description

  The present invention relates to an entrance management system for managing entrance of a user to a designated area and an authenticator used therefor.

  Conventionally, technologies for performing entrance / exit management using an authentication device attached to a user have been proposed (Patent Documents 1 and 2 below).

  Furthermore, a wristband type authenticator that is worn on the wrist and has a biometric authentication function using a wrist vein pattern has also been proposed (Patent Document 3 below). Since the authenticator performs biometric authentication, identity verification can be performed more strictly, and building entrance / exit management and event venue management can be performed with higher accuracy.

JP-A-5-182038 Japanese Patent Laid-Open No. 2001-034734 JP 2002-31324 A

  It is desirable that the authenticator attached to each user be low-cost, but if the biometric authentication function is to be installed in the authenticator, the cost may increase due to the need for a processor with higher processing capability. There is. In addition, in order to perform biometric authentication processing with the authenticator, it is necessary to store the biometric information of the user in advance in the authenticator. For this reason, when the authenticator is lost, there is a possibility that the biometric information is taken out from the authenticator and misused, and it is necessary to consider that the biometric information is encrypted and stored. In the case of encryption, a decryption process is required for the authentication process, and the time until biometric authentication is completed is increased. Therefore, the smooth passage of the entrance is hindered, and traffic congestion may occur particularly when a large number of users arrive, such as during work hours.

  The problem caused by the processing capability of the authenticator seems to be able to be solved by performing biometric authentication processing on the management device side that determines whether the passage is permitted or not at the entrance. However, whether or not the biometric information to be verified is preferably acquired by the authenticator depends on the manner in which the authenticator is mounted, the movement of the mounting site, and the like, and an authentication error occurs if the biometric information is defective. Here, the biometric authentication process is performed on the management device side because the checked biometric information acquired at the entrance is not necessarily suitable and it is not known until it is permitted when passing through the entrance. Even in such a case, the smooth passage of the entrance may be impaired, and traffic congestion may occur.

  The present invention has been made in order to solve the above-described problems. The biometric authentication process is performed on the management device side to reduce the cost of the authenticator, and the authentication error at the entrance is reduced, and the user stays. The goal is to avoid the matrix.

  An admission management system according to the present invention is a system including an authenticator that a user wears when entering a designated area, and a management device that determines whether the user is permitted to enter the admission area, wherein the authenticator is An identification signal transmitting means for transmitting an identification signal, an attachment detecting means for detecting that the authentication device is attached to the user, and biometric information from the user when the attachment to the user is detected. Biometric information acquisition means for repeatedly acquiring biometric information evaluation means for selecting biometric information for collation from the repeatedly acquired biometric information and transmitting it to the management apparatus. Biometric authentication means for performing biometric authentication on the user based on the biometric information received from the authenticator, and admission permitting the admission to those who have succeeded in biometric authentication among the users wearing the authenticator Size It has a means, a.

  In the admission management system according to the present invention, the biometric information evaluation unit evaluates the quality of whether the acquired biometric information is suitable for biometric authentication, and repeats in a preceding period from the detection of the wearing to the transmission. It can be set as the structure which selects and transmits biometric information whose quality is higher than others among the acquired biometric information.

  In the admission management system according to the present invention, the authenticator includes a motion sensor that detects the movement of the authenticator, and the biological information evaluation unit evaluates higher the biological information acquired when the movement is small. It can be configured.

  In the admission management system according to the present invention, the biological information evaluation unit compares the quality of biological information newly acquired by the repeated acquisition with the quality of biological information acquired and stored in the past, and highly evaluates the quality. One or a predetermined number of pieces of biometric information can be stored as the collation biometric information.

  In the admission management system according to the present invention, the biometric information evaluation unit transmits the stored biometric information as biometric information for verification to a management apparatus in order from the biometric information with the highest quality. be able to.

  An authentication device according to the present invention is an authentication device that is attached to a user and is capable of wireless communication with a management device that determines whether or not to enter a designated area based on success or failure of biometric authentication, and transmits an identification signal. Means for detecting that the authentication device is attached to the user, and biometric information acquisition for repeatedly acquiring biometric information from the user when attachment to the user is detected. And biometric information evaluation means for selecting biometric information for collation from biometric information repeatedly acquired from when the attachment is detected until biometric authentication is performed, and transmitting the selected biometric information to the management apparatus.

  ADVANTAGE OF THE INVENTION According to this invention, it becomes possible to reduce the authentication error at an entrance and to avoid a user's stay and a queue, performing a biometrics authentication process by the management apparatus side, and reducing the cost of an authentication device.

It is a schematic diagram which shows the structure of the outline of the entrance management system which is embodiment of this invention. It is a block diagram which shows the structure of the outline | summary of the authentication device in embodiment of this invention. It is a block diagram which shows the schematic structure of the management apparatus in embodiment of this invention. It is a general | schematic flowchart which shows the operation | movement at the time of mounting | wearing detection in an authentication device. It is a schematic flowchart which shows operation | movement of a management apparatus. It is a general | schematic flowchart which shows operation | movement of the authentication device with respect to the request | requirement from a management main apparatus. It is a general | schematic flowchart which shows the operation | movement of the mounting | wearing monitoring process in an authentication device. It is a schematic flowchart which shows operation | movement in the management main apparatus at the time of removal detection.

  Hereinafter, embodiments of the present invention (hereinafter referred to as embodiments) will be described with reference to the drawings.

[Configuration of admission management system]
FIG. 1 is a schematic diagram showing a schematic configuration of an admission management system according to an embodiment of the present invention. This system includes an authenticator 2 and a management device 4. The management device 4 includes a management main device 6, a tag reader 8, and a wireless repeater 10, and is arranged in the management area 12. Further, the management device 4 may include a device that detects a person who attempts to enter the management area 12 and tracks the person in the management area 12. The management area 12 is a place for managing the entrance of the user (user) 14, and can be set in an event venue such as a building, a factory site, or a concert, for example. One or more designated areas 16 are set in the management area 12. When the management area 12 is a company building, a room of a department to which a user 14 such as an employee belongs can be the designated area 16. When the management area 12 is a factory site, a designated area 16 can be a building in the site or a room in the building, for example. When the management area 12 is an event venue, the seat block set in the venue can be designated as the designated area 16. A certain distance and space are provided from the entrance of the management area 12 to the entrance of the designated area 16. Hereinafter, an area other than the designated area 16 in the management area 12 will be referred to as a non-designated area.

  In this embodiment, the management area 12 is assumed to be a company building, and the designated area 16 is assumed to be a room of each department. Correspondingly, entry to the management area 12 is hereinafter referred to as entry, and entry to the designated area 16 is referred to as entry. In this case, for example, there may be an entrance hall or a corridor near the entrance of the building as the non-designated area.

  A gate 20 is installed at the entrance of the management area 12, and a door 22 is provided at the entrance of the designated area 16. For example, the gate 20 includes a human sensor, and has a function of detecting a person who tries to pass through the gate 20, blocking a person (intruder) who tries to pass without obtaining authentication, and issuing an alarm. . In addition, the detection of the person who is going to pass through the gate 20 can also be performed by an image of the monitoring camera. The person in the management area 12 can be tracked using the image of the surveillance camera.

  For example, an employee of the company becomes a user 14 of this system, and a plurality of authentication devices 2 are given to each user 14 and there can exist a plurality of devices. A visitor or the like can borrow the authentication device 2 at a reception window. The authenticator 2 is used to receive authentication when the user 14 passes through the gate 20 and enters the management area 12 (enters), and further unlocks the door 22 and enters the designated area 16 (enters). It is done. The authenticator 2 is attached to the user 14 and used. For example, in this embodiment, the authentication device 2 is a wristband type and can be worn on the wrist of the user 14. FIG. 1 shows a user 14 wearing the authentication device 2 on the wrist and a user 14 carrying the authentication device 2 in a bag. Note that the authenticator 2 can be made different in color and form so that, for example, the employee and the visitor can be distinguished in the mounted state.

  As will be described later, the authenticator 2 has a built-in wireless tag and wireless communication function, and the tag reader 8 installed at the entrance of the management area 12 and the entrance of the designated area 16 reads the information of the wireless tag and transmits it to the management main device 6. In addition, the wireless repeater 10 is installed as necessary to relay wireless communication between the authenticator 2 and the management main device 6.

  Hereinafter, the main components of this system will be described individually.

  FIG. 2 is a block diagram showing a schematic configuration of the authenticator 2. The authenticator 2 includes a wireless tag 30, a mounting sensor 32, a biological information sensor 34, a motion sensor 36, a wireless communication unit 38, an output unit 40, a control unit 42, a storage unit 44, and a battery 46. As described above, the authentication device 2 is a wristband type (annular) attached to the wrist, and a material such as rubber or resin having flexibility is used for the body of the authentication device 2. Therefore, it is easy to attach to and detach from the wrist, and when it is wound around and attached to the wrist, it is appropriately fixed to the wrist.

  The wireless tag 30 is a transmitter that transmits an identification signal, and uses the power supplied from the battery 46 to perform wireless communication with the tag reader 8 at a distance of 1 to several meters. Specifically, the wireless tag 30 stores a tag ID as an identification code (tag identification information) that allows the wireless tag 30 to identify itself from other wireless tags, and when receiving a query wave of a predetermined frequency from the tag reader 8, Depending on the contents of the question, a response wave including its own tag ID, the state of attachment of the authenticator 2 (attachment flag), or biometric information is transmitted.

  The mounting sensor 32 is a mounting detection unit that detects that the authentication device 2 is mounted on the user 14. In the present embodiment, the authentication device 2 is a wristband worn on the wrist, and the wearing sensor 32 detects a human body that is in proximity when worn. For example, a capacitance type or pyroelectric proximity sensor can be used as the mounting sensor 32. It should be noted that other methods may be employed, such as connecting the ends of the wristband when worn and detecting the connection between the ends by a contact switch or an energized state.

  The biometric information sensor 34 is a sensor that identifies the user 14 and acquires biometric information that can be used for biometric authentication. The biometric information sensor 34 basically detects biometric information from the human body in the vicinity of the place where the authenticator 2 is mounted. For example, the wristband type authentication device 2 includes a biological information sensor 34 that captures a vein pattern of a wrist using near infrared rays. Note that the type of the biological information sensor 34 and the mounting form of the authentication device 2 can be changed according to the biological information to be acquired. For example, a finger vein pattern may be used as a ring-type authenticator. In addition, the biometric information can be a fingerprint pattern, and a fingerprint sensor can be mounted on the outer surface in a state where the authenticator is mounted. Furthermore, the biometric information can be an iris pattern, and the iris can be photographed using the authenticator 2 as the biometric information sensor 34. It can also be a glasses type equipped with a camera.

  The motion sensor 36 is a sensor for detecting the movement of the wearing part of the human body, and is, for example, an acceleration sensor or a gyro sensor.

  The wireless communication unit 38 transmits / receives data to / from the management main apparatus 6. The wireless communication unit 38 basically uses a communication technology having a longer communication distance than short-range wireless such as NFC (Near Field Communication) used for reading the wireless tag 30. For example, a specific low power radio can be used.

  The output unit 40 is means for notifying the user 14 of a message or a predetermined state from the control unit 42. For example, as the output unit 40, display means such as an LED or a liquid crystal display device, sound output means such as a buzzer or a speaker, a vibrator that vibrates the authenticator 2, or the like can be used. In the present embodiment, as the output unit 40, an LED for distinguishing and displaying the state on the authenticator 2 side and the state notified from the management main device 6 side by color is mounted, and a buzzer and a vibrator are mounted.

  The control unit 42 includes a wearing state monitoring unit 50, a biological information acquisition unit 52, and a biological information evaluation unit 54. Specifically, the control unit 42 is configured by using a microprocessor, and realizes various operations by a program executed by the processor. For example, as the wearing state monitoring unit 50, the biological information acquisition unit 52, and the biological information evaluation unit 54 Function.

  The wearing state monitoring unit 50 is a wearing state monitoring unit that receives a detection signal from the wearing sensor 32 and monitors whether the authentication device 2 is worn on the body of the user 14.

  The biometric information acquisition unit 52 controls the biometric information sensor 34 and constitutes a biometric information acquisition unit that acquires biometric information from the user 14 wearing the authenticator 2 together with the biometric information sensor 34. The biometric information acquisition unit 52 repeatedly acquires the biometric information of the wearer until the entry permission determination for the designated area 16 requiring biometric authentication is performed after the authentication device 2 is detected to be mounted.

  The biometric information evaluation unit 54 evaluates whether or not the acquired biometric information is suitable for biometric authentication, and accumulates biometric information having high quality among biometric information repeatedly acquired as biometric information samples for biometric authentication. And according to the request | requirement from the management apparatus 4, the biometric information sample accumulate | stored and transmitted is transmitted.

  The storage unit 44 stores various control programs used by the control unit 42, identification information for identifying itself, and the like. The identification information stored by the storage unit 44 includes, for example, a terminal ID (tag ID) assigned to the authenticator 2 and a communication address. In addition, as information indicating the state of the authenticator 2, a mounting flag indicating the mounting state, a biometric authentication flag indicating whether biometric authentication is performed, and the upper limit number NS of the acquired wearer's biometric information are stored. Remember.

  The battery 46 is a built-in power supply that supplies driving power to each unit of the authenticator 2.

  FIG. 3 is a block diagram showing a schematic configuration of the management apparatus 4. The tag reader 8 at the entrance of the management area 12 is referred to as a management area tag reader 8a, and the tag reader 8 at the entrance of the designated area 16 is referred to as a designated area tag reader 8b. The management area tag reader 8a, the designated area tag reader 8b, and the wireless repeater 10 are connected to the management main apparatus 6 so as to be communicable.

  The management main device 6 includes a control unit 80, a storage unit 82, and a communication interface 84. The communication interface 84 controls communication between the control unit 80 and the tag reader 8 and the authenticator 2.

  The control unit 80 includes an admission / rejection determination unit 90, a room admission / rejection determination unit 92, a band monitoring unit 94, and a biometric authentication unit 96. Specifically, the control unit 80 is configured by using a CPU (Central Processing Unit) and a microprocessor, and realizes various operations by a program executed by them. For example, the above-described entrance permission / rejection determination unit 90, room permission / rejection determination Functions as the unit 92, the band monitoring unit 94, and the biometric authentication unit 96.

  The admission permission / non-permission determination unit 90 is a means for determining whether or not the user 14 enters the management area 12. The admission / rejection determination unit 90 determines admission permission / inhibition based on the tag ID and the mounting flag transmitted from the authenticator 2.

  The entry permission / rejection determination unit 92 is an entry permission / rejection determination unit that determines whether or not the user 14 enters the designated area 16 from the non-designated area. The room entry permission / rejection determination unit 92 determines room entry permission / rejection based on the tag ID, the mounting flag, the biometric information, the biometric authentication flag, and the like transmitted from the authenticator 2.

  The band monitoring unit 94 is a band monitoring unit that receives a tag ID (identification signal) from the wireless tag 30 and monitors whether the user 14 entering the management area 12 is accompanying the authentication device 2. Note that the state where the authentication device 2 is attached includes not only the state where the authentication device 2 is attached to the user 14 but also the state where the authentication device 2 is put in a bag carried by the user 14.

  When the user 14 enters the designated area 16, the biometric authentication unit 96 checks whether the biometric information received from the authenticator 2 matches the registered biometric information 100 stored in the storage unit 82. Biometric authentication means for performing biometric authentication. As the biometric authentication processing method, a known method such as image pattern matching or calculation of the degree of matching of extracted feature points can be employed. In the following description, matching the biometric information and determining the match is expressed as “performing biometric authentication”, and success (establishment) of biometric authentication is expressed as “bioauthenticated”. There is a case.

  The storage unit 82 stores, for example, a table in which the tag ID of the wireless tag 30 is registered, a processing program executed by the control unit 80, and the like. In addition, the storage unit 82 stores registered biometric information 100 that is biometric information acquired in advance from the owner of the authenticator 2 and the state of the authenticator 2. In addition, a travel history is recorded as a result of the admission permission determination and the admission permission determination.

  The tag reader 8 is used for detection and identification of the wireless tag 30 of the authenticator 2 existing around the tag reader 8. Specifically, the tag reader 8 periodically transmits an interrogation wave to the surrounding area, and detects the wireless tag 30 by detecting a response wave from the wireless tag. The tag reader 8 demodulates the response wave and acquires the tag ID of the wireless tag 30 that has transmitted it. Since there can be many users 14, it is preferable to use the tag reader 8 having an anti-collision function (multiple simultaneous reading function). Thereby, for example, even when a large number of users 14 try to pass through the gate 20 during work hours, tag IDs can be acquired from the wireless tags 30 of those authenticators 2 all at once and without omission. .

[Operation of admission management system]
Next, the operation of this system will be described.

  FIG. 4 is a schematic flowchart showing an operation at the time of detecting attachment in the authentication device 2. The wearing state monitoring unit 50 monitors the output of the wearing sensor 32. If the wearing sensor 32 does not detect that the authentication device 2 is worn by a person, for example, the wearing flag stored in the storage unit 44 is reset. . In this state, the authenticator 2 is set to the sleep mode and suppresses power consumption. Even in the sleep state, the wireless tag 30 returns a response wave to the interrogation wave from the tag reader 8.

  When the wearing sensor 32 detects that the authentication device 2 is worn on a person, the sleep mode is canceled and the operation shown in FIG. 4 is started, and the wearing state monitoring unit 50 sets the wearing flag (step S2). For example, the LED of the output unit 40 is turned off in a non-wearing state, and turned on in white when it is in a wearing state.

  Since the fact that the authentication device 2 is attached is a condition for permitting entry into the designated area 16, at least the user 14 attaches the authentication device 2 in front of the door 22. Here, the user 14 wears the authenticator 2 before coming to the door 22, and there is often a certain amount of time (preceding period) from the wearing to arrival at the door 22. In the present invention, using the time, an attempt is made to acquire the checked biometric information from the user 14 a plurality of times during that time.

  The biometric information acquisition unit 52 controls the biometric information sensor 34 to read biometric information from the person wearing it (step S4). When the number of biometric information samples, which are biometric information to be verified, stored in the storage unit 44 is less than the preset upper limit number NS (in the case of “Yes” in step S6), the read biometric information is stored in the storage unit 44. It memorize | stores as a biometric information sample (step S8). Here, the number NS is determined according to the time required for the biometric authentication process including communication between the authenticator 2 and the management main device 6, and is preferably 1 to several.

  If the number of biometric information samples has already reached NS (“No” in step S6), the biometric information evaluation unit 54 evaluates the quality of the read biometric information (step S10). When the quality is equal to or higher than the quality of NS biological information samples stored in the storage unit 44 (“Yes” in step S12), the read biological information is stored in any of the registered biological information samples. It replaces (step S14). That is, the registered biometric information sample having the lowest quality is discarded, and the read biometric information is added to the biometric information sample. On the other hand, when the quality of the read biometric information is lower than the quality of the already registered biometric information sample (“No” in step S12), the read biometric information is not stored in the storage unit 44 but discarded. The When NS is 1, a comparison with a stored biological information sample is performed, and the higher quality is always left.

  The quality of the biometric information can be the image quality of the vein pattern image obtained by imaging the wrist of the user 14 by the biometric information sensor 34 of the wristband type authenticator 2. For example, the quality can be evaluated based on the sharpness such as the contrast of the image or the number of feature points extracted from the vein pattern. The biometric information evaluation unit 54 compares the quality of the read biometric information and the stored biometric information sample. For example, a biometric information sample having a lower quality than the newly obtained biometric information is replaced.

  Also, if the movement of the wearing part is intense, there is a high possibility that the image will be shaken and a good image cannot be obtained. Therefore, the quality is evaluated based on the magnitude and change of the movement (speed, acceleration, etc.) of the authentication device 2. You can also For example, the biometric information evaluation unit 54 evaluates the quality higher for the biometric information acquired when the movement of the authenticator 2 is small, and evaluates the quality lower for the biometric information when the movement is intense. The movement of the authenticator 2 is determined based on the output of the movement sensor 36.

  The biological information acquisition unit 52 evaluates the quality of the acquired biological information using one or both of quality evaluation based on image quality and quality evaluation based on motion. Furthermore, the quality evaluation can take into account the elapsed time since biometric information was acquired. For example, older data can be more easily replaced.

  Whether the biometric information sample is added or replaced (S4 to S14) in the authenticator 2 is the wireless tag 30 of the authenticator 2 receiving the interrogation wave from the designated area tag reader 8b and being allowed to enter the designated area 16? (In the case of “No” in step S16), the process is periodically repeated until the removal of itself is detected.

  When the attachment sensor 32 detects that the authentication device 2 has been removed from a person after the attachment is detected, the attachment state monitoring unit 50 resets the attachment flag and also resets the biometric authentication flag. Biometric authentication is disabled. In this case, the biometric information acquisition unit 52 ends the repeated acquisition of the biometric information, and the wearing state monitoring unit 50 erases the biometric information sample, but if it is worn again, the process of FIG. 4 is performed.

  FIG. 5 is a schematic flowchart showing the operation of the management apparatus 4. FIG. 6 is a schematic flowchart showing the operation of the authenticator 2 in response to a request from the management main device 6. FIG. 7 is a schematic flowchart showing the operation of the attachment monitoring process in the authenticator 2. In the following, the step number “#” in the step symbol “S #” indicating the process is assigned the 100s for the operation of the management device 4 shown in FIG. 5 and the 200s for the operation of the authenticator 2 shown in FIG. Then, the operation of the authenticator 2 shown in FIG. 7 is given the 300th series, and the operation of the present system will be described with reference to these drawings.

  When the authenticator 2 receives the interrogation wave transmitted from the tag reader 8, it starts the operation shown in FIG.

  First, the operation when entering from the gate 20 where the management area tag reader 8a is installed will be described.

  When receiving the interrogation wave from the management area tag reader 8a, the authenticator 2 transmits the tag ID and the value of the mounting flag stored in the storage unit 44 as authentication data by the wireless tag 30 (step S200). At this time, if it is in the sleep mode, the sleep mode is canceled.

  On the management device 4 side, when the management area tag reader 8a detects the wireless tag 30 for a person who is about to pass through the gate 20 (in the case of “Yes” in step S100), the management area tag reader 8a receives the tag received from the wireless tag 30. The ID is sent to the management main apparatus 6. In the management main device 6, the band monitoring unit 94 checks whether the received tag ID is the tag ID of the authentication device 2 registered in the storage unit 82. If the tag ID is registered, it is determined that the visitor is the user 14 who is associated with the authentication device 2 (in the case of “Yes” in step S102). In this case, the admission permission determination unit 90 authenticates the user 14 based only on the tag ID of the wireless tag 30 and determines admission permission (step S104). Then, the admission / rejection determination unit 90 notifies the authenticator 2 that the admission has been permitted (step S106).

  When authentication is performed using the tag ID (in the case of “Yes” in step S102), the management main device 6 further confirms the mounting state of the authenticator 2 with the received authentication data.

  When the authenticator 2 is in the mounted state (in the case of “Yes” in step S108), the management main apparatus 6 knows that it is in the mounted state and indicates that the admission is permitted (green status) Is stored in the storage unit 82 (step S110).

  On the other hand, when the authenticator 2 is not attached (“No” in step S108), the management main apparatus 6 transmits a monitoring instruction regarding attachment to the authenticator 2 (step S112). In this case, the management main apparatus 6 records a state (referred to as a yellow status) indicating that admission is permitted, but an admission permission time, in the storage unit 82, although it is not attached. ).

  If the tag ID registered in the storage unit 82 is not detected by the visitor, the visitor cannot receive authentication using the tag ID of the wireless tag 30 (in the case of “No” in step S102). In this case, the admission / rejection determination unit 90 determines that admission is not permitted (step S114). The determination that the entry is not permitted is sent to the unregistered authenticator 2 (step S116).

  The authenticator 2 receives the admission permission notification from the management main apparatus 6 when the management main apparatus 6 determines that the status is green (in the case of “Yes” in step S202), and does not receive the monitoring instruction (step S202). In the case of “No” in S204). In this case, for example, the authenticator 2 lights the LED of the output unit 40 in green and notifies the user 14 (step S206).

  If the management main device 6 determines that the status is yellow, the authenticator 2 receives an admission permission notice from the management main device 6 (in the case of “Yes” in step S202) and receives a monitoring instruction. (In the case of “Yes” in step S204). In this case, for example, the authenticator 2 lights the LED of the output unit 40 in yellow and notifies the user 14 (step S208), and executes the mounting monitoring process S210.

  Further, when the authenticator 2 receives the admission non-permission notification from the management main apparatus 6 after transmitting the authentication data (for example, “No” in step S202), for example, the LED of the output unit 40 turns red. Lights up and notifies the user 14 (step S212).

  Here, the mounting monitoring process S210 will be described with reference to FIG. When the authenticator 2 receives a monitoring instruction from the management main device 6, the wearing state monitoring unit 50 starts the wearing monitoring process. The wearing state monitoring unit 50 monitors the output of the wearing sensor 32 while counting the elapsed time T from the admission permission time notified from the management main device 6 or the reception time of the monitoring instruction.

  The wearing state monitoring unit 50 monitors whether or not wearing is detected until the elapsed time T reaches a predetermined grace time (first monitoring period) T1 (in the case of “No” in step S300) (step S302). If T is not detected (in the case of “No” in step S302) and T reaches T1 (in the case of “Yes” in step S300), the wearing state monitoring unit 50 outputs a non-wearing signal, and the user 14 For example, the user 14 is warned by operating a buzzer or a vibrator of the output unit 40 for the purpose of instructing the user to attach the authenticator 2 (step S304).

  Thereafter, the wearing state monitoring unit 50 continues to monitor the wearing detection until the elapsed time T reaches a predetermined upper limit time (second monitoring period) T2 (> T1) (in the case of “No” in step S306). (Step S302). As a result, if T is not detected (in the case of “No” in step S302) T reaches T2 (in the case of “Yes” in step S306), the mounting state monitoring unit 50 determines that it is abnormal. The management main apparatus 6 is notified via the wireless communication unit 38, and the mounting monitoring process is terminated (step S308). For example, when the manager device 6 receives the report of the abnormality, the manager device 6 cancels the admission permission and does not accept the authentication by the authenticator 2 thereafter. Further, the authenticator 2 itself may be set to the use prohibition mode.

  Upon receipt of the abnormality report, the management main unit 6 notifies the authentication unit 2 of cancellation of the admission permission via the wireless repeater 10, and stores a state (referred to as red status) indicating that admission is not permitted. Recorded in section 82. Further, in this case, the management main device 6 can perform an operation such as notifying a security guard or the like of detection of a suspicious person and prompting a countermeasure. When the authentication device 2 receives a notification of cancellation of admission permission, for example, it switches the light emission of the LED of the output unit 40 from yellow to red and notifies the user 14.

  On the other hand, when mounting is detected before the elapsed time T reaches T2 (in the case of “Yes” in step S302), the authenticator 2 executes the operation at the time of mounting detection described with reference to FIG. 4 ( Step S310). In this case, the management main apparatus 6 determines that the status is green, and the status recording to the storage unit 82 and the notification to the authenticator 2 are performed. When receiving this notification, the authenticator 2 switches the light emission of the LED of the output unit 40 from yellow to green and notifies the user 14, for example.

  The operation when the management area tag reader 8a detects the wireless tag 30 on the management device 4 side (in the case of “Yes” in step S100) has been described. Next, the operation when entering the room through the door 22 where the designated area tag reader 8b is installed will be described.

  Upon receiving the interrogation wave from the designated area tag reader 8b, the authenticator 2 cancels the sleep mode and wirelessly uses the biometric information sample as authentication data together with the tag ID and the value of the mounting flag stored in the storage unit 44. Transmission is performed by the tag 30 (step S200). As described above, since the authenticator 2 stores high quality biometric information acquired during the period from wearing to biometric authentication as a biometric information sample, Thus, the biometric information evaluated higher than the other is selected and transmitted. At this time, if biometric authentication has already been performed (when the biometric authentication flag is set), the biometric authentication flag is included in the authentication data instead of the biometric information sample. Note that the biological information may be transmitted to the management main apparatus 6 not by the wireless tag 30 but by wireless communication via the wireless communication unit 38 separately.

  Here, when the upper limit number to be stored is two or more and there are two or more stored biometric information samples, the authenticator 2 transmits all the stored biometric information samples in the authentication data. In addition, you may select one from several stored biometric information samples, or you may select and transmit a part, and in this case, the thing evaluated most highly is selected. If there is a transmission request from the management main apparatus 6 when biometric authentication is not successful, the biometric information is transmitted in the order of high quality evaluation. Since the biometric information sample that has become unsuccessful is not subsequently biometrically authenticated, it is deleted from the storage unit 44.

  The designated area tag reader 8 b installed at the entrance of the designated area 16 sends the tag ID received from the wireless tag 30 to the management main device 6. The room admission / rejection determination unit 92 of the management main device 6 checks whether the received tag ID is registered in the storage unit 82 as that of the authenticator 2 of the user 14 permitted to enter the designated area 16. If the tag ID is registered, authentication based on the tag ID is established (in the case of “Yes” in step S152). In this case, the management main apparatus 6 confirms the mounting state of the authentication device 2 with the authentication data (step S156).

  When the authenticator 2 is in the mounted state (in the case of “Yes” in step S156), the biometric authentication unit 96 of the management main device 6 uses the received biometric information sample as the collated biometric information, and stores the collated biometric information and the collation biometric information. The process which collates with the registration biometric information 100 memorize | stored in the part 82 is performed. As a result, when it is determined that the predetermined verification criteria are satisfied and the biometric information to be verified matches the registered biometric information 100, it is determined that biometric authentication has been established (in the case of “Yes” in step S158). . In this case, the room admission / rejection determination unit 92 determines admission permission (entrance permission) to the designated area 16 (step S160). If the biometric authentication flag is set in the received authentication data, the wearer's biometric authentication has already been established, so it is determined that biometric authentication is possible (in the case of “Yes” in step S158), and the room is entered. Allow (step S160). The room entry permission / rejection determination unit 92 notifies the authentication unit 2 that room entry has been permitted (step S162). Further, the management main apparatus 6 records the status in the storage unit 82 (step S164). For example, in addition to the green status information, the management main apparatus 6 records the entry into the designated area 16 and the time thereof in addition to the green status information. Further, the management main device 6 unlocks the door 22 of the designated area 16 where the user 14 who has given permission to enter enters for a predetermined time. Note that the management apparatus 4 does not hold the result of biometric authentication. As a result, when the authentication device 2 is once removed and worn by another person, unauthorized entry is not allowed.

  When biometric authentication processing is sequentially performed on a plurality of biometric information samples stored in the authenticator 2, the management main device 6 transmits another biometric information sample if biometric authentication fails for the first received biometric information sample. Request to the authenticator 2. If biometric authentication succeeds for any biometric information sample, it is determined that biometric authentication is successful (in the case of “Yes” in step S158), and biometric authentication fails if biometric authentication fails for all biometric information samples. Is determined (in the case of “No” in step S158).

  When the management main apparatus 6 determines that the status is green, the authenticator 2 receives a room entry permission notification from the management main apparatus 6 (in the case of “Yes” in step S202). Since the installation of the authentication device 2 is not monitored in the entry permission / denial determination, the authentication device 2 that has received the entry permission notification turns on the LED of the output unit 40 in green for a predetermined time, for example, to confirm that the entry is permitted. (Step S208). Further, if the biometric authentication flag in the storage unit 44 is in a reset state when the authentication unit 2 receives a room entry permission, the authentication unit 2 recognizes that the biometric authentication has been established in the current entry permission determination, and sets the biometric authentication flag to the set state. Update.

  On the other hand, when the tag ID authentication is not established (in the case of “No” in step S152) or in a non-wearing state (in the case of “No” in step S156), biometric authentication is not established. In the case (“No” in step S158), the room entry permission / refusal determination unit 92 does not permit room entry (step S170).

  When the notification of entry prohibition is received from the management main device 6 (in the case of “No” in step S202), the authentication device 2 notifies the user 14 by turning on the LED of the output unit 40 in red (step S202). S212). Further, the authenticator 2 can determine that the unauthorized use has been used when it has continuously received a notification of entry refusal for a predetermined number of times or more, and can also notify the manager device 6 of an abnormality.

  When the processing at the time of occurrence of each event in steps S100 and S150 is completed, or when neither of those events has occurred (in the case of “No” in step S150), the management main apparatus 6 performs the flow of FIG. Return to the beginning of and continue monitoring the occurrence of the event.

  One of the events monitored by the management main apparatus 6 can include removal of the attached authenticator 2. For example, the management main apparatus 6 receives a notification of removal detection from the authenticator 2 via the wireless repeater 10. FIG. 8 is a schematic flowchart showing the operation of the management main apparatus 6 at the time of detection of removal. When the management main device 6 detects that the value of the mounting flag has changed from the set state to the reset state, it determines whether removal has occurred in the designated area 16 (step S402). Whether or not the person who has removed the authentication device 2 is in the designated area 16 can be determined from the traffic history recorded at the time of entering the room and at the time of entering the room. If it is within the designated area 16 (in the case of “Yes” in step S402), it is determined that there is an abnormality, and for example, a warning is given to a monitor, a guard, etc. (step S404). On the other hand, when the removal has occurred in the non-designated area of the management area 12, the management main apparatus 6 transmits a monitoring instruction regarding the attachment to the authenticator 2 (step S406). Upon receiving the monitoring instruction, the authenticator 2 performs the mounting monitoring process described with reference to FIG.

  As described above, the admission management system according to the present invention performs admission management using the authenticator 2 attached to the user 14. However, when entering the management area 12, authentication by the wireless tag 30 is performed. Then, even if the authentication device 2 is not attached, the user 14 is permitted to enter. Thereby, it is possible to avoid the occurrence of congestion due to the user 14 trying to wear the authentication device 2 at the entrance of the management area 12.

  Moreover, the entrance to the designated area 16 can be suitably managed by using the biometric authentication result to determine whether to enter the room. Since the biometric authentication process is performed by the management main apparatus 6, the high-capacity control unit 80 of the management main apparatus 6 can quickly perform the authentication process. Furthermore, the biometric information suitable for the biometric authentication process is used as the biometric information to be verified by repeatedly acquiring the biometric information by using the time from the installation of the authenticator 2 to reaching the door 22 and evaluating the quality. Therefore, the biometric authentication error (rejection of person) at the door 22 is less likely to occur. These allow the user 14 to smoothly pass through the entrance of the designated area 16.

  Further, by performing the biometric authentication process with the management main device 6, the control unit 42 of the authenticator 2 can be configured with a processor having a relatively low processing capability, and the cost of the authenticator 2 can be reduced.

[Modification]
Further, in the above-described embodiment, in the determination of whether to permit entry into the designated area 16, if biometric authentication has already been established (the biometric authentication flag is set), the biometric authentication flag is determined. It is good also as a structure which performs biometrics authentication, whenever it does not use and it judges room admission permission. In this case, the authenticator 2 does not end the repeated acquisition of the biometric information even when it receives the entry permission notice, and continues until removal is detected.

  Further, in the above-described embodiment, the biometric authentication is performed only by the permission determination for entering the designated area 16, but the biometric authentication may be performed by the permission determination for entering the management area 12. In this case, it is necessary for the user 14 to wear the authentication device 2 outside the management area 12, and the authentication device 2 repeatedly acquires biometric information between the time when this authentication is detected and the time of entry, and evaluates the quality while evaluating the quality. Accumulate biometric information samples suitable for authentication.

  In the above-described embodiment, the biometric authentication is triggered by the reception of the interrogation wave from the designated zone tag reader 8b. However, the biometric authentication can be performed at an arbitrary location in the management zone 12. For example, when the authenticator 2 is mounted and exists in the management area 12, a biometric information sample is transmitted from the authenticator 2 by wireless communication via the wireless repeater 10, and a biometric authentication flag is set according to the authentication result. to manage. Whether it is within the management area 12 can be determined based on whether or not it is within the communication range of the wireless repeater 10 according to the reception state of the wireless communication unit 38. Then, the authentication device 2 manages using the biometric information sample accumulated so far when the wireless LAN enters the wireless communication range with the mounting flag set or when the mounting flag is set within the wireless communication range. An authentication request is made to the main device 6.

  In the embodiment described above, the wearing state monitoring means for monitoring whether or not the authentication device 2 is attached to the user 14 is mounted on the authentication device 2, but it can also be mounted on the management main device 6. In this case, the output of the mounting sensor 32 is wirelessly transmitted from the authenticator 2 to the management main device 6, and the management main device 6 determines whether or not it is mounted.

  Also, a mounting detection means can be provided on the management device 4 side. For example, when the authenticator 2 is attached to a part that is easily visible to the user 14, the image of the authenticator 2 is detected from the image of the monitoring camera installed in the management area 12 or the like, and the positional relationship with the image of the user 14 is obtained. Based on this, it is possible to detect the mounting of the authenticator 2.

  2 Authentication device, 4 management device, 6 management main device, 8 tag reader, 10 wireless repeater, 12 management area, 14 user, 16 designated area, 20 gate, 22 door, 30 wireless tag, 32 wearing sensor, 34 biological information sensor , 36 motion sensor, 38 wireless communication unit, 40 output unit, 42 control unit, 44 storage unit, 46 battery, 50 wearing state monitoring unit, 52 biological information acquisition unit, 54 biological information evaluation unit, 80 control unit, 82 storage unit , 84 Communication interface, 90 Admission permission determination unit, 92 Admission permission determination unit, 94 Band monitoring unit, 96 Biometric authentication unit, 100 Registered biometric information.

Claims (5)

An admission management system including an authenticator that a user wears when entering a designated area, and a management device that determines whether the user is allowed to enter,
The authenticator is
Transmitting means for transmitting a response wave including biometric information for verification with respect to the interrogation wave transmitted from the management device ;
Wearing detection means for detecting that the authenticator is worn by the user;
Biometric information acquisition means for repeatedly acquiring biometric information from the user when attachment to the user is detected;
Each of the biometric information obtained repeatedly is evaluated for quality indicating a degree suitable for biometric authentication, and is repeatedly obtained in a preceding period from detection of the attachment to reception of the interrogation wave without detecting removal. among the biological information, the biological information evaluation means the quality you select higher than other biometric information as the biometric information for the comparison,
Have
The management device
A communication means for transmitting an interrogation wave to the authenticator and receiving a response wave including the biometric information for verification;
Biometric authentication means for performing biometric authentication on the user based on the biometric information for verification received from the authenticator;
Admission determination means for permitting the admission for those who have succeeded in the biometric authentication among the users wearing the authenticator,
The admission management system characterized by having. In the admission management system according to claim 1 ,
The authenticator has a motion sensor that detects a movement of a wearing part of a user wearing the authenticator,
The biometric information evaluation unit evaluates higher the biometric information acquired when the movement is small. In the admission management system according to claim 1 or claim 2 ,
The biological information evaluation means, the quality compared to the quality of the acquired in the past stored biometric information, one or a predetermined number of biometric information to appreciate the quality of the newly acquired biometric information by the repeated acquisition Is stored as the biometric information for verification, an admission management system. In the admission management system according to claim 3 ,
The said biometric information evaluation means transmits to the management apparatus as biometric information for collation in an order from the biometric information which evaluated the said quality highly among the accumulated biometric information, The entrance management system characterized by the above-mentioned. An authentication device that is attached to a user and capable of wireless communication with a management device that determines whether or not to enter a designated area based on success or failure of biometric authentication,
Transmitting means for transmitting a response wave including biometric information for verification with respect to the interrogation wave transmitted from the management device ;
Wearing detection means for detecting that the authenticator is worn by the user;
Biometric information acquisition means for repeatedly acquiring biometric information from the user when attachment to the user is detected;
Each of the biometric information obtained repeatedly is evaluated for quality indicating a degree suitable for biometric authentication, and is repeatedly obtained in a preceding period from detection of the attachment to reception of the interrogation wave without detecting removal. among the biological information, the biological information evaluation means the quality you select higher than other biometric information as the biometric information for the comparison,
An authenticator comprising:

Images