JP7407038B2 - Authentication devices, computer programs, and authentication systems - Google Patents

Description

The present invention relates to an authentication device that performs authentication processing to authenticate a person to be authenticated as a user of an object. The present invention also relates to a computer program executable by the processing unit of the authentication device. The present invention also relates to an authentication system including the authentication device.

Patent Document 1 discloses an authentication system applied to a vehicle as an example of a target object. In this system, an image in which the person to be authenticated is captured is acquired by an imaging device mounted on the vehicle, and authentication processing is executed based on the image. Based on the authentication result, the seat position in the vehicle is adjusted.

International Publication No. 2005/032895

An object of the present invention is to improve the convenience of an authentication system that authenticates a person to be authenticated as a user of an object based on image information.

One aspect of achieving the above objective is an authentication device,
a reception unit that receives image information corresponding to an image in which the person to be authenticated;
a processing unit that executes authentication processing to authenticate the person to be authenticated as a user of the object based on the image information;
It is equipped with
The processing unit, when the authentication processing is not successful,
causing the reception unit to accept re-authentication information different from the image information;
performing re-authentication processing to authenticate the person to be authenticated as a user of the object based on the re-authentication information;
If the re-authentication process is successful, control of the controlled device mounted on the object is permitted.

One aspect of achieving the above object is a computer program executable by a processing unit of an authentication device, comprising:
By being executed, the authentication device:
Accepts image information corresponding to an image in which the person to be authenticated is captured,
executing an authentication process for authenticating the person to be authenticated as a user of the object based on the image information;
If the authentication process is not successful, accepting re-authentication information different from the image information,
performing re-authentication processing to authenticate the person to be authenticated as a user of the object based on the re-authentication information;
If the re-authentication process is successful, control of the controlled device mounted on the object is permitted.

One aspect of achieving the above objective is an authentication system that includes:
an imaging device that outputs image information corresponding to an image in which the person to be authenticated;
an authentication device that executes authentication processing to authenticate the person to be authenticated as a user of the object based on the image information;
a processing device that outputs re-authentication information different from the image information;
It is equipped with
The authentication device, when the authentication process is not successful,
executing re-authentication processing to authenticate the person to be authenticated as a user of the mobile body based on the re-authentication information;
If the re-authentication process is successful, control of the controlled device mounted on the mobile body is permitted.

According to the configurations according to each of the above aspects, when the authentication process based on the image information fails for some reason, the means for enabling the control of the controlled device using re-authentication information different from the image information is provided. Can be provided. Since the person to be authenticated can be provided with an opportunity to obtain re-authentication information regardless of the location of the object where the problem occurred, it is possible to increase the possibility that the problem will be resolved without having to wait for dispatch of on-site service staff or the like. From the perspective of the on-site service staff, it is possible to reduce the number of dispatch opportunities to the necessary minimum. Therefore, the convenience of an authentication system that performs authentication processing based on image information can be improved.

1 illustrates a functional configuration of an authentication system according to an embodiment. An example of the configuration of the authentication system in FIG. 1 is shown. The flow of processing executed by the authentication device of FIG. 1 is illustrated.

Examples of embodiments will now be described in detail with reference to the accompanying drawings. FIG. 1 illustrates a functional configuration of an authentication system 10 according to an embodiment. The authentication system 10 is a system for executing an authentication process for authenticating the person 20 illustrated in FIG. 2 as a user of the vehicle 30. Vehicle 30 is an example of a target object.

As illustrated in FIG. 1, the authentication system 10 includes an imaging device 11. The imaging device 11 is configured to acquire an image in which the person to be authenticated 20 is reflected, and output image information I corresponding to the image. The image information I may be in the form of analog data or digital data.

Authentication system 10 includes authentication device 12 . The authentication device 12 includes a reception section 121 and a processing section 122. The reception unit 121 is configured to receive image information I from the imaging device 11. When the image information I is in the form of analog data, the reception unit 121 may include an appropriate conversion circuit including an A/D converter. The processing unit 122 processes image information I in the form of digital data.

The processing unit 122 is configured to perform authentication processing based on the image information I. Specifically, the processing unit 122 compares the image information of the person to be authenticated 20 stored in advance in a storage unit (not shown) with the image information I, and obtains the degree of matching between the two. If the degree of matching exceeds the prescribed threshold, the processing unit 122 establishes the authentication process based on the image information I.

The authentication device 12 includes an output section 123. The processing unit 122 is configured to output the control information C through the output unit 123 when the authentication process based on the image information I is completed. The control information C may be in the form of digital data or analog data. When the control information C is in the form of analog data, the output section 123 may include an appropriate conversion circuit including a D/A converter.

Authentication system 10 includes a control device 13. The control device 13 is mounted on the vehicle 30. The control device 13 is configured to control the operation of the controlled device 40 mounted on the vehicle 30 based on the control information C output from the authentication device 12. Examples of the controlled device 40 include a locking device for an opening/closing body such as a door or window, an engine, an air conditioner, a lighting device, an audio-visual device, a seat position adjustment device, and the like. For example, when the person to be authenticated 20 completes the authentication process while approaching the vehicle 30, the doors of the vehicle 30 are unlocked.

The imaging device 11 may be mounted on the vehicle 30 or may be mounted on a mobile device 50 that can be carried by the person to be authenticated 20 illustrated in FIG. 2 . Examples of the mobile device 50 include a general-purpose smartphone and a dedicated smart key.

When the imaging device 11 is installed in the mobile device 50, the image information I is transmitted to the authentication device 12 by wireless communication based on an appropriate standard. Examples of standards include Bluetooth (registered trademark), Wi-Fi, LTE, 5G, and the like.

The authentication device 12 may be installed in the vehicle 30, or may be installed in a server device 70 that can communicate with at least one of the vehicle 30 and the mobile device 50 illustrated in FIG. 2 via a wireless communication network 60 based on an appropriate standard. It may be installed. Examples of standards include LTE, 5G, etc.

When the authentication device 12 is mounted on the vehicle 30, the authentication process by the authentication device 12 and the control process by the control device 13 may be performed by a common device or element.

When the authentication device 12 is installed in the server device 70, the image information I output from the imaging device 11 is transmitted to the authentication device 12 via the wireless communication network 60. Control information C that may be output as a result of the authentication process by the processing unit 122 is transmitted to the control device 13 via the wireless communication network 60.

As illustrated in FIG. 1, the authentication system 10 includes a processing device 14. The processing device 14 is configured to output re-authentication information R different from the image information I.

As used herein, the term "re-authentication information different from image information" refers to information that is not an image, information corresponding to an image different from the image corresponding to image information I, and information corresponding to an image corresponding to image information I. It corresponds to the same image and includes information transmitted to the authentication device 12 using different communication methods.

FIG. 3 illustrates the flow of processing executed by the processing unit 122 of the authentication device 12.

The processing unit 122 receives image information I from the imaging device 11 through the reception unit 121 (STEP 1). Image information I corresponds to, for example, an image in which the face of the person to be authenticated 20 is reflected.

Subsequently, the processing unit 122 executes authentication processing (STEP 2). As described above, the processing unit 122 compares the image information of the person to be authenticated 20 stored in advance in a storage unit (not shown) with the image information I, and obtains the degree of matching between the two.

Subsequently, the processing unit 122 determines whether the authentication process is successful (STEP 3). As a result of the comparison in STEP 2, if the degree of matching exceeds the prescribed threshold, the processing unit 122 determines that the authentication process based on the image information I has been successful.

When it is determined that the authentication process has been completed (YES in STEP 3), the processing unit 122 outputs control information C corresponding to the specified operation of the controlled device 40 from the output unit 123 (STEP 4). Control information C is transmitted to the control device 13. The control device 13 causes the controlled device 40 to perform a specified operation based on the control information C.

When it is determined that the authentication process based on the image information I has not been successful (NO in STEP 3), the processing unit 122 executes a notification process to indicate to the person to be authenticated 20 that the authentication process has not been successful and to request re-authentication information R. (STEP 5).

The notification process is performed using at least one of visual notification, auditory notification, and tactile notification. For example, the authentication device 12 can cause a speaker (not shown) mounted on the vehicle 30 to output a guidance message saying "Authentication has failed. Please perform XXX for re-authentication." Alternatively, the authentication device 12 may wirelessly transmit to the mobile device 50 data that causes a similar message to be displayed on the display unit 51 of the mobile device 50 illustrated in FIG. 2 .

The “XXX” part in the above message indicates the action that the person to be authenticated 20 should take in order to input the re-authentication information R into the authentication device 12. The person to be authenticated 20 inputs the re-authentication information R into the authentication device 12 through this action. The reception unit 121 of the authentication device 12 receives the re-authentication information R (STEP 6).

For example, an instruction may be given, ``Please contact the support center and obtain a password.'' In response to the instruction, the person to be authenticated 20 uses the mobile device 50 to contact the support center and perform appropriate identity verification procedures.

In this case, the processing device 14 illustrated in FIG. 1 may be installed in the server device 70 illustrated in FIG. 2. When it is confirmed through the procedure that the person to be authenticated 20 is the user himself/herself, the processing device 14 outputs a one-time password. The one-time password may be an image such as a barcode, or may be an invisible release code.

Identity verification procedures can be done through conversations with support staff. In this case, the one-time password is output by the processing device 14 manually by the support staff.

Alternatively, the identity verification process may be automated through data communications between mobile device 50 and processing device 14. For example, identification information identifying the authenticatee 20 may be wirelessly transmitted from the mobile device 50 to the processing device 14 . Examples of the identification information include a face photograph of the person to be authenticated 20 taken with a camera mounted on the mobile device 50, fingerprint information, and answers to preset questions. The processing device 14 checks the identification information stored in a storage unit (not shown) in the server device 70 and the identification information received from the mobile device 50 . When the processing device 14 determines that the degree of matching between the two exceeds the threshold, it outputs a one-time password.

The one-time password output from processing device 14 may be transmitted to mobile device 50 via wireless communication network 60 . In this case, the one-time password is input as the re-authentication information R to the authentication device 12 via the mobile device 50.

For example, if the one-time password is an image, the image is displayed on the display unit 51 of the mobile device 50. As illustrated by the broken line in FIG. 1, the person to be authenticated 20 causes the reception unit 121 of the authentication device 12 to receive the re-authentication information R by causing the imaging device 11 mounted on the vehicle 30 to capture the image. .

For example, if the one-time password is an invisible release code, the release code is received by mobile device 50 in a state where it can be wirelessly transmitted to authentication device 12 . The person to be authenticated 20 causes the reception unit 121 of the authentication device 12 to accept the re-authentication information R by wirelessly transmitting the cancellation code to the authentication device 12 .

If wireless communication is possible between the authentication device 12 and the server device 70, the processing device 14 authenticates the re-authentication information R by directly transmitting a one-time password, which is an invisible visible code, to the authentication device 12. The reception unit 121 of the device 12 can receive the information.

If the authentication process based on the image information I corresponding to the image acquired by the image capturing device 11 mounted on the vehicle 30 is not successful, the notification process will be “Please send a face photo taken with your device”. This instruction can be given. In response to the instruction, the person to be authenticated 20 takes a photograph of his or her face using an imaging device installed in the mobile device 50.

In this case, the processing device 14 illustrated in FIG. 1 may be installed in the mobile device 50 illustrated in FIG. 2. The processing device 14 outputs, as re-authentication information R, image information corresponding to the image in which the person to be authenticated 20 is reflected. The person to be authenticated 20 causes the receiving unit 121 of the authentication device 12 to accept the re-authentication information R by wirelessly transmitting the image information to the authentication device 12 .

If the authentication process based on the image information I corresponding to the image acquired by the imaging device 11 installed in the mobile device 50 is not successful, the notification process is "Please change the communication method and resend the image". This instruction can be given. For example, if the authentication process is not successful as a result of image information I being transmitted through wireless communication based on the Bluetooth standard, in response to the instruction, the authenticated person 20 changes the settings of the mobile device 50 based on the LTE standard. Change to use wireless communication.

In this case, the processing device 14 illustrated in FIG. 1 may be installed in the mobile device 50 illustrated in FIG. 2. The processing device 14 outputs the image information I as re-authentication information R. The person to be authenticated 20 causes the reception unit 121 of the authentication device 12 to receive the re-authentication information R by wirelessly transmitting the image information I to the authentication device 12 based on the LTE standard.

Subsequently, the processing unit 122 of the authentication device 12 executes a re-authentication process based on the re-authentication information R input in the various manners exemplified above (STEP 7 in FIG. 3). When the re-authentication information R is a one-time password, the processing unit 122 basically establishes the re-authentication process. This is because an authentication procedure with an appropriate security level is required to obtain the one-time password. When an image in which the person to be authenticated 20 is reflected is input again as the re-authentication information R, the processing unit 122 compares the image with an image of the person to be authenticated 20 stored in advance in a storage unit (not shown).

Subsequently, the processing unit 122 determines whether the re-authentication process is successful (STEP 8). When it is determined that the re-authentication process has been completed (YES in STEP 8), the processing unit 122 allows the control device 13 to control the controlled device 40. That is, the processing unit 122 outputs the control information C corresponding to the specified operation of the controlled device 40 from the output unit 123 (STEP 4). Control information C is transmitted to the control device 13. The control device 13 causes the controlled device 40 to perform a specified operation based on the control information C.

If it is determined that the re-authentication process has not been completed (NO in STEP 8), the processing unit 122 returns the process to STEP 5 and requests the re-authentication information R again. In this case, it is preferable that the person to be authenticated 20 is required to take an action that can obtain re-authentication information different from the re-authentication information R used in the unsuccessful re-authentication process.

According to the above configuration, even if the authentication process based on the image information I fails for some reason, the controlled device 40 can be controlled using the re-authentication information R different from the image information I. We can provide the means. Since the person to be authenticated 20 can be provided with an opportunity to obtain re-authentication information R regardless of the location of the vehicle 30 where the problem has occurred, it is possible to increase the possibility that the problem will be resolved without having to wait for the dispatch of on-site service staff or the like. . From the perspective of the on-site service staff, it is possible to reduce the number of dispatch opportunities to the necessary minimum. Therefore, the convenience of the authentication system 10 that performs authentication processing based on the image information I can be improved.

As illustrated in FIG. 3, if the failure of the re-authentication process is repeated a predetermined number of times, the authentication device 12 can execute a process of notifying an error (STEP 9). Under such circumstances, it is suspected that there is an error that cannot be resolved only by the actions of the person to be authenticated 20 himself. By notifying the person to be authenticated 20 of this fact, it is possible to take appropriate measures such as waiting for dispatch of on-site service staff.

The processing unit 122 having each of the functions described above can be realized by a general-purpose microprocessor that operates in cooperation with a general-purpose memory. Examples of general-purpose microprocessors include CPUs, MPUs, and GPUs. Examples of general-purpose memory include ROM and RAM. In this case, the ROM may store a computer program that executes the above-described processing. A ROM is an example of a storage medium that stores a computer program. The processor designates at least a part of the computer program stored on the ROM, loads it on the RAM, and executes the above-described processing in cooperation with the RAM. The computer program described above may be preinstalled in general-purpose memory, or may be downloaded from an external server via a communication network and installed in general-purpose memory. In this case, the external server is an example of a storage medium that stores a computer program.

The processing unit 122 may be realized by a dedicated integrated circuit such as a microcontroller, ASIC, or FPGA that can execute the above-mentioned computer program. In this case, the above-mentioned computer program is preinstalled in the memory element included in the dedicated integrated circuit. The storage element is an example of a storage medium that stores a computer program. The processing unit 122 can also be realized by a combination of a general-purpose microprocessor and a dedicated integrated circuit.

The above embodiments are merely illustrative to facilitate understanding of the present invention. The configuration according to the embodiments described above can be modified and improved as appropriate without departing from the spirit of the present invention.

The authentication system 10 can also be applied to moving objects other than the vehicle 30. Examples of other moving objects include trains, aircraft, ships, and the like. The mobile object may not require a driver.

The authentication system 10 can also be applied to objects other than moving objects. Examples of other objects include residences, commercial facilities, school buildings, office buildings, factories, research facilities, etc.

10: Authentication system, 11: Imaging device, 12: Authentication device, 121: Reception unit, 122: Processing unit, 13: Control device, 14: Processing device, 20: Person to be authenticated, 30: Vehicle, 40: Controlled device , 50: Mobile device, I: Image information, R: Re-authentication information

Claims (12)

a reception unit that receives image information corresponding to an image in which the person to be authenticated;
a processing unit that executes authentication processing to authenticate the person to be authenticated as a user of the object based on the image information;
It is equipped with
The processing unit, when the authentication processing is not successful,
causing the reception unit to accept re-authentication information different from the image information from a mobile device that can be carried by the person to be authenticated ;
performing re-authentication processing to authenticate the person to be authenticated as a user of the object based on the re-authentication information;
If the re-authentication process is successful, permitting control of a controlled device mounted on the target object;
The re-authentication information is transmitted wirelessly from the processing device to the mobile device in response to identification information for identifying the authenticated person transmitted from the mobile device to the processing device installed in the server device via a wireless communication network. was sent,
Authentication device. a reception unit that receives image information corresponding to an image in which the person to be authenticated;
a processing unit that executes authentication processing to authenticate the person to be authenticated as a user of the object based on the image information;
It is equipped with
The processing unit, when the authentication processing is not successful,
causing the reception unit to accept re-authentication information different from the image information;
performing re-authentication processing to authenticate the person to be authenticated as a user of the object based on the re-authentication information;
If the re-authentication process is successful, permitting control of a controlled device mounted on the target object;
The reception unit receives the image information from a mobile device that can be carried by the person to be authenticated.
Authentication device. The reception unit receives the re-authentication information through wireless communication.
The authentication device according to claim 2. configured to be mounted on the object,
The authentication device according to any one of claims 1 to 3. the target object is a moving body;
The authentication device according to any one of claims 1 to 4. A computer program executable by a processing unit of an authentication device,
By being executed, the authentication device:
Accepts image information corresponding to an image in which the person to be authenticated is captured,
executing an authentication process for authenticating the person to be authenticated as a user of the object based on the image information;
If the authentication process is not successful, receiving re-authentication information different from the image information from a mobile device that can be carried by the person to be authenticated;
performing re-authentication processing to authenticate the person to be authenticated as a user of the object based on the re-authentication information;
If the re-authentication process is successful, permitting control of a controlled device mounted on the target object;
The re-authentication information is transmitted wirelessly from the processing device to the mobile device in response to identification information for identifying the authenticated person transmitted from the mobile device to the processing device installed in the server device via a wireless communication network. was sent,
computer program. A computer program executable by a processing unit of an authentication device,
By being executed, the authentication device:
receiving image information corresponding to an image in which the person to be authenticated is captured from a mobile device that can be carried by the person to be authenticated;
executing an authentication process for authenticating the person to be authenticated as a user of the object based on the image information;
If the authentication process is not successful, accepting re-authentication information different from the image information,
performing re-authentication processing to authenticate the person to be authenticated as a user of the object based on the re-authentication information;
If the re-authentication process is successful, permitting control of a controlled device mounted on the object;
computer program. an imaging device that outputs image information corresponding to an image in which the person to be authenticated;
an authentication device that executes authentication processing to authenticate the person to be authenticated as a user of the object based on the image information ;
a mobile device that can be carried by the authenticated person;
a processing device installed in a server device capable of communicating with the mobile device via a wireless communication network, and outputting re-authentication information different from the image information;
It is equipped with
the mobile device wirelessly transmits identification information identifying the authenticated person to the processing device;
the processing device wirelessly transmits the re-authentication information to the mobile device in response to the identification information;
The authentication device, when the authentication process is not successful,
performing re-authentication processing to authenticate the person to be authenticated as a user of the object based on the re-authentication information wirelessly transmitted from the mobile device ;
If the re-authentication process is successful, permitting control of a controlled device mounted on the object;
Authentication system. a mobile device that can be carried by the authenticated person;
an imaging device that is installed in the mobile device and outputs image information corresponding to an image in which the person to be authenticated is reflected;
an authentication device that executes authentication processing to authenticate the person to be authenticated as a user of the object based on the image information;
a processing device that outputs re-authentication information different from the image information;
It is equipped with
The authentication device, when the authentication process is not successful,
performing re-authentication processing to authenticate the person to be authenticated as a user of the object based on the re-authentication information;
If the re-authentication process is successful, permitting control of a controlled device mounted on the object;
Authentication system. The imaging device is mounted on the object,
The authentication system according to claim 8 or 9. the target object is a moving body;
The authentication system according to claim 10. the processing device transmits the re-authentication information via wireless communication;
The authentication system according to any one of claims 9 to 11.

Images