JP7718754B2 - Authentication control device, authentication system, authentication control method, and authentication control program - Google Patents

Description

The present disclosure relates to an authentication control device, an authentication system, an authentication control method, and a non-transitory computer-readable medium.

Biometric authentication has been used in a variety of situations in recent years. In particular, due to concerns about infectious diseases, there is hope for the use of contactless biometric authentication methods such as facial recognition and iris recognition.

For example, Patent Document 1 discloses an authentication system that is installed at the entrance to a special area located further inside a closed space and controls entry through facial recognition. The authentication system in Patent Document 1 aims to speed up facial recognition processing by narrowing the search range for facial images to be searched based on the results of matching identification information, etc. obtained from the entrant's ID card.

Patent Document 2 also discloses a hotel system that determines whether or not to allow a user to enter a room by comparing the user's facial information. In the hotel system of Patent Document 2, users can enter their rooms without carrying a room key.

Furthermore, in recent years, the use of multimodal authentication, which combines multiple methods rather than relying solely on biometric authentication as described above, has been considered. The adoption of multimodal authentication offers benefits such as dramatically improved authentication accuracy. For example, Patent Document 3 discloses a biometric authentication device that uses a user's fingerprint and palm veins as biometric information. Using multiple pieces of biometric information in this way makes it possible to more reliably verify a user's identity.

International Publication No. 2018/110012 Japanese Patent Application Laid-Open No. 2003-256583 Patent No. 5796523

While multimodal authentication enables highly accurate biometric authentication, it can also place a burden on users by requiring them to present multiple pieces of biometric information. For example, when biometric authentication is performed using a face image and an iris image, face authentication may fail if the user is wearing a mask. In such cases, the user must remove the mask to be authenticated. This is particularly inconvenient when the user is carrying luggage in both hands.
As described above, if multimodal authentication is uniformly adopted regardless of the situation in which biometric authentication is performed, there is a risk that user convenience will decrease. The techniques disclosed in Patent Documents 1 to 3 do not take such a problem into consideration.

The present disclosure has been made to solve these problems, and aims to provide an authentication control device, authentication system, authentication control method, and non-transitory computer-readable medium that can mitigate the decline in user convenience in multimodal authentication.

The authentication control device according to the present disclosure includes:
a biometric information acquiring means for acquiring first biometric information and second biometric information of a predetermined user;
an authentication control means for controlling at least one of a first biometric authentication using the first biometric information and a second biometric authentication using the second biometric information;
a determination means for determining whether or not to use the result of the other biometric authentication when at least one of the first biometric authentication and the second biometric authentication is successful;
It is equipped with the following.

The authentication system according to the present disclosure comprises:
an authentication terminal that acquires multiple types of biometric information from a predetermined user;
an authentication control device connected to the authentication terminal;
Equipped with
The authentication control device
acquiring first biometric information and second biometric information of the user from the authentication terminal;
controlling at least one of a first biometric authentication using the first biometric information and a second biometric authentication using the second biometric information;
When at least one of the first biometric authentication and the second biometric authentication is successful, it is determined whether or not to use the result of the other biometric authentication.

The authentication control method according to the present disclosure includes:
The computer
Acquire first biometric information and second biometric information of a predetermined user;
controlling at least one of a first biometric authentication using the first biometric information and a second biometric authentication using the second biometric information;
When at least one of the first biometric authentication and the second biometric authentication is successful, it is determined whether or not to use the result of the other biometric authentication.

A non-transitory computer-readable medium storing an authentication control program according to the present disclosure includes:
a biometric information acquisition process for acquiring first biometric information and second biometric information of a predetermined user;
an authentication control process for controlling at least one of a first biometric authentication using the first biometric information and a second biometric authentication using the second biometric information;
a determination process for determining whether to use the result of the other biometric authentication when at least one of the first biometric authentication and the second biometric authentication is successful;
This is a method of causing a computer to execute the above.

This disclosure provides an authentication control device, authentication system, authentication control method, and non-transitory computer-readable medium that can mitigate any reduction in user convenience in multimodal authentication.

1 is a block diagram showing a configuration of an authentication control device according to a first embodiment. 4 is a flowchart showing a process of the authentication control device according to the first embodiment. FIG. 10 is a block diagram showing a configuration of an authentication system according to a second embodiment. FIG. 10 is a block diagram showing a configuration of an authentication device according to a second embodiment. 10 is a flowchart illustrating a biometric information registration process of the authentication device according to the second embodiment. 10 is a flowchart illustrating a biometric authentication process of the authentication device according to the second embodiment. FIG. 10 is a block diagram showing a configuration of an authentication terminal according to a second embodiment. FIG. 10 is a block diagram showing a configuration of an authentication control device according to a second embodiment. FIG. 10 is a diagram illustrating an example of a biometric authentication method used in the authentication control system according to the second embodiment. 10 is a flowchart showing a process of the authentication control device according to the second embodiment. 10 is a flowchart illustrating a process of the authentication control device according to the third embodiment. FIG. 10 is a block diagram showing the configuration of an authentication control device according to a fourth embodiment. FIG. 10 is a block diagram showing the configuration of an authentication control device according to a fifth embodiment.

Embodiment 1 of the present disclosure will be described in detail below with reference to the drawings. In each drawing, identical or corresponding elements are designated by the same reference numerals, and duplicate descriptions will be omitted as necessary for clarity.

<Embodiment 1>
1 is a block diagram showing the configuration of an authentication control device 10 according to this embodiment. As shown in FIG. 1, the authentication control device 10 includes a biometric information acquisition unit 11, an authentication control unit 12, and a determination unit 13.
The biometric information acquisition unit 11 acquires first biometric information and second biometric information of a predetermined user.
The authentication control unit 12 controls at least one of a first biometric authentication using the first biometric information and a second biometric authentication using the second biometric information.
When at least one of the first biometric authentication and the second biometric authentication is successful, the determination unit 13 determines whether to use the result of the other biometric authentication. When the authentication control unit 12 controls (executes) only one of the first biometric authentication and the second biometric authentication, the determination unit 13 naturally determines whether the executed biometric authentication is "one" and determines whether it is successful. "Using the result of the other biometric authentication" includes, for example, providing a service or performing various controls according to the result. When the other biometric authentication has not been executed and it is determined that "the result of the other biometric authentication is used," the authentication control unit 12 may control (execute) the other biometric authentication.

FIG. 2 is a flowchart showing the flow of the authentication control method according to the first embodiment.
First, the biometric information acquisition unit 11 acquires first biometric information and second biometric information of a predetermined user (S11). Next, the authentication control unit 12 controls at least one of a first biometric authentication using the first biometric information and a second biometric authentication using the second biometric information (S12). If at least one of the first biometric authentication and the second biometric authentication is successful (Yes in S13), the determination unit 13 determines whether or not to use the result of the other biometric authentication (S14). If both the first and second biometric authentications fail (No in S13), the authentication control device 10 ends the process.

As described above, according to the authentication control device 10 of this embodiment, when at least one of the first biometric authentication and the second biometric authentication is successful, it is determined whether to use the result of the other biometric authentication, thereby reducing the decrease in user convenience in multimodal authentication.

The authentication control device 10 includes a processor, memory, and storage device, which are not shown in the figure. The storage device stores a computer program that implements the processing of the authentication control method according to the first embodiment. The processor then loads the computer program from the storage device into the memory and executes the computer program. As a result, the processor realizes the functions of the biometric information acquisition unit 11, authentication control unit 12, and judgment unit 13.

Alternatively, the biometric information acquisition unit 11, authentication control unit 12, and judgment unit 13 may each be realized by dedicated hardware. Furthermore, some or all of the components of each device may be realized by general-purpose or dedicated circuits, processors, etc., or a combination of these. These may be configured by a single chip, or by multiple chips connected via a bus. Some or all of the components of each device may be realized by a combination of the above-mentioned circuits, etc., and programs. Furthermore, a CPU (Central Processing Unit), GPU (Graphics Processing Unit), FPGA (Field-Programmable Gate Array), etc. may be used as the processor.

Furthermore, when some or all of the components of the authentication control device 10 are realized by multiple information processing devices, circuits, etc., the multiple information processing devices, circuits, etc. may be centrally or decentralized. For example, the information processing devices, circuits, etc. may be realized as a client-server system, cloud computing system, etc., in which each is connected via a communication network. Furthermore, the functions of the authentication control device 10 may be provided in the form of SaaS (Software as a Service).

<Embodiment 2>
The second embodiment is a specific example of the above-described first embodiment. Fig. 3 is a block diagram showing the overall configuration of an authentication system 1000 according to the second embodiment.
The authentication system 1000 includes an authentication device 100, an authentication control device 200, and authentication terminals 400a to 400g. The authentication device 100, the authentication control device 200, and the authentication terminals 400a to 400g are connected to each other via a network N. Here, the network N is a wired or wireless communication line.

In this second embodiment, we will explain an example in which the authentication system 1000 is implemented in a lodging facility such as a hotel. First, we will explain the overview of this embodiment using Figure 3.

As shown in FIG. 3, authentication terminals 400a to 400g are installed in locations within the hotel where biometric authentication is required. Each authentication terminal 400 performs biometric authentication on user U for its respective purpose and installation location. Each authentication terminal 400 supports multimodal authentication and can perform authentication using, for example, either facial authentication or iris authentication. Each authentication terminal 400 is, for example, a digital signage device, and is equipped with a display unit 440 that displays a message prompting user U to perform biometric authentication and the results of the authentication.

Here, we will explain the process by assuming that user U, a customer of the hotel, is user U1. User U1 pre-registers the information necessary for their stay (date of stay, name, contact information, etc.) in the authentication control device 200 via a reservation website or the like. The authentication control device 200 also stores the fact that user U1 is a customer as an attribute of user U1, in association with their user ID. User U1 also pre-registers a facial image of user U1 in the authentication device 100 via a reservation website or the like. This allows user U1 to use facial authentication within the hotel.

The authentication terminals 400a-400g compare the facial image pre-registered in the authentication device 100 with a facial image captured within the hotel by comparing their characteristic information to perform biometric authentication for user U1. Successful biometric authentication at each authentication terminal 400 allows user U1 to receive designated services within the hotel. While user U1 may pre-register an iris image along with his or her facial image, since a dedicated camera (infrared camera) is required to capture an iris image, this description assumes that user U1 pre-registers only his or her facial image. Therefore, user U1 registers only his or her facial image in advance via a website or other means, and registers his or her iris image using the authentication terminal 400 after arriving at the hotel. User U1 may pre-register whether or not he or she consents to the use of iris authentication, including iris photography, when booking a stay. This allows for the iris registration procedure to be completed quickly after arriving at the hotel.

When user U1 arrives at the hotel, the authentication terminal 400a installed at the entrance performs biometric authentication on user U1. The authentication terminal 400a can prompt user U1 to perform facial authentication, for example by displaying a message on the display unit 440. The authentication terminal 400a may also provide audio guidance to user U1 via a speaker or the like, along with a display.

The authentication terminal 400a photographs the face of user U1 with a built-in camera and performs facial authentication of user U1 using the photographed facial image. Specifically, the authentication terminal 400a transmits a biometric authentication request to the authentication control device 200 along with the photographed facial image. The authentication control device 200 receives the biometric authentication request from the authentication terminal 400a, performs predetermined processing, and transmits the biometric authentication request to the authentication device 100. The authentication device 100 performs biometric authentication upon receiving the biometric authentication request from the authentication control device 200 and returns the result to the authentication control device 200. The authentication control device 200 returns the result to the authentication terminal 400a.
Through the above processing, the authentication terminal 400a can receive the authentication result for the user U1. These processing steps will be described in more detail later.

If facial authentication of user U1 is successful, the authentication terminal 400a displays a message such as "Facial authentication successful" or "Welcome, Mr./Ms. XX" on the display unit 440. This allows user U1 to understand that facial authentication was successful based on the facial image registered at the time of reservation.

Next, user U1 checks in using the authentication terminal 400b installed at the counter. First, authentication terminal 400b captures a photo of user U1's face using its built-in camera and performs facial authentication of user U1 using the captured facial image. If facial authentication is successful, the counter employee completes the check-in procedure for user U1. Next, authentication terminal 400b displays a message prompting user U1 to take a photo of their iris in order to use iris authentication when providing various services within the building. If user U1 has previously registered their consent to the use of iris authentication, authentication terminal 400b displays a message on display 440 such as, "Next, we will perform iris registration processing based on your permission to use iris authentication," and then photographs user U1's iris. If user U1 has not previously consented to the use of iris authentication, authentication terminal 400b displays the necessary information on display 440 to confirm with user U1 whether or not they agree to the use of iris authentication. User U1 responds whether or not he or she agrees to iris authentication by, for example, pressing a button displayed on display unit 440. When user U1 agrees to having his or her iris photographed, authentication terminal 400b photographs the iris of user U1 using a built-in infrared camera.

The captured iris image is stored in the authentication device 100 in association with the user ID etc. via the network N. This allows the user U1 to use iris authentication in subsequent procedures. Therefore, the user U1 can not only use face authentication and iris authentication independently, but also can handle cases where multimodal authentication using multiple authentication methods is required.
The above-described iris registration process may be performed by any authentication terminal 400 other than authentication terminal 400b. Furthermore, regardless of whether or not user U1 has previously agreed to the use of iris authentication, a message such as "Iris authentication is available. Please register your iris" may be displayed on display unit 440 to prompt user U1 whose iris is not registered. Furthermore, authentication terminal 400 may not display the above message thereafter to user U who has input an indication that he or she does not agree to the use of iris authentication.

After completing the check-in procedure, user U1 undergoes biometric authentication using the authentication terminal 400c at the entrance to the accommodation building as he or she moves from the entrance to the accommodation building. Because entry and exit to the accommodation building must be strictly controlled, multimodal authentication is performed here. The authentication terminal 400c performs facial and iris authentication on user U1. If authentication is successful, the door to the accommodation building opens and user U1 can enter the building. The display unit 440 displays a message such as, "Mr./Ms. XX, facial and iris authentication have been successful."

Next, user U1 enters the accommodation room he or she has reserved. As shown in Figure 3, authentication terminals 400d to 400f are installed at the entrances to rooms A to C, respectively. User U1 authenticates himself or herself using the authentication terminal 400 installed in front of the room he or she has reserved. Since strict identity verification is performed using multimodal authentication at the entrance to the accommodation building, user U1 is authenticated here using facial recognition alone.

For example, if user U1 is staying in room A, user U1 authenticates using the authentication terminal 400d installed in front of room A. If facial authentication is successful, room A is unlocked and user U1 can enter room A. If user U1 attempts authentication using an authentication terminal 400 installed in front of a room in which user U1 is not planning to stay, authentication will fail. In this case, the authentication terminal 400 may display on the display unit 440 that authentication has failed and prompt user U1 to confirm the room number.

Furthermore, when user U1 makes a purchase at a souvenir shop, payment processing is required, so strict identity verification is required. For this reason, multimodal authentication using facial recognition and iris recognition is performed at the authentication terminal 400g installed at the souvenir shop's cash register.

When the customer checks out, user U1 is authenticated by the authentication terminal 400b installed at the counter, just as when checking in. Checking out also involves payment of accommodation fees, etc., so multimodal authentication using facial recognition and iris recognition is performed, just as in the souvenir shop.

Up to this point, we have explained the biometric authentication methods used in each situation, assuming that user U is a customer staying at a hotel. Below, we will explain the case where user U is not a customer, but a hotel employee.

In the following explanation, user U, who is an employee, will be referred to as user U2. User U2 takes images of his or her face and iris using an authentication terminal 400 or the like, and registers this biometric information in advance in the authentication device 100. This allows user U2 to use face authentication and iris authentication at each authentication terminal 400 within the hotel. In addition, the authentication control device 200 stores the fact that user U2 is an employee as an attribute of user U2, in association with his or her user ID.

As with user U1, biometric authentication is performed on user U2 at each authentication terminal 400. However, even if the authentication terminals 400 are installed in the same location, different biometric authentication methods are used for user U1, who is a customer, and user U2, who is an employee. The specific processing details will be described later, but the following explains the differences depending on the attributes of user U.

Fig. 9 is a diagram showing an example of biometric authentication required depending on the attributes of user U and the installation location of authentication terminal 400. The upper part of the table shown in Fig. 9 shows the biometric authentication required for user U1, which has already been described. As shown in Fig. 9, user U1 and user U2 use different authentication methods, for example, in accommodation buildings or accommodation rooms.
For example, in the example of user U1 described above, authentication was performed using face authentication and iris authentication at the authentication terminal 400c at the entrance to the accommodation building. However, user U2 can pass through the same accommodation building entrance with only successful iris authentication. Therefore, user U2 can enter the accommodation building from the entrance even while wearing a mask. When user U2 succeeds in iris authentication at authentication terminal 400c, the display unit 440 displays a message such as, for example, "Employee ID: No. XX, Mr./Ms. △△, iris authentication successful."

On the other hand, in the example of user U1 mentioned above, user U1 was able to enter room A using only facial recognition, whereas user U2 must successfully pass facial and iris recognition to enter rooms A to C. Unlike user U1, user U2 only used facial recognition at the entrance to the accommodation building, and therefore must undergo strict identity verification when entering a room.

Furthermore, when user U2 purchases an item at a souvenir shop, he or she must undergo multimodal authentication using facial recognition and iris recognition, just like user U1. This is because, for transactions including payment, strict identity verification is required even for employees.

As described above, the authentication system 1000 according to this embodiment can determine the number and method of biometric authentication to be performed at each authentication terminal 400 depending on the attributes of the user U, the installation location of the authentication terminal 400, and the purpose of the biometric authentication. This allows appropriate multimodal authentication to be performed without reducing the convenience for the user U.

The above is an overview of the processing performed by the authentication system 1000 according to this embodiment. Next, we will provide a detailed explanation of each of the authentication device 100, authentication terminal 400, and authentication control device 200 that make up the authentication system 1000.

The authentication device 100 is an information processing device that, in response to a biometric authentication request received from outside, compares the face, iris, or other images or biometric feature information included in the request with the biometric feature information of each user U and returns the comparison result (authentication result) to the requestor. The authentication device 100 stores the biometric feature information of multiple users U. The authentication device 100 can also store multiple pieces of biometric feature information for one user U and perform authentication using each piece of biometric feature information. Biometric feature information is feature information of the biometric information used for biometric authentication. Examples of biometric information include face, iris, fingerprint, and vein patterns. In this embodiment 2, face authentication and iris authentication are used as examples of biometric authentication.

Figure 4 is a block diagram showing the configuration of the authentication device 100 according to embodiment 2. The authentication device 100 includes a biometric information database (DB) 110, a detection unit 120, a feature point extraction unit 130, a registration unit 140, and an authentication unit 150.

The biometric information DB 110 stores a user ID 111, biometric feature information 112 for that user ID, and a biometric authentication method 113, in association with each other. The biometric feature information 112 is a collection of feature points extracted from a face image or iris image. The biometric authentication method 113 is an authentication method such as face authentication, iris authentication, or vein authentication. The authentication device 100 may delete the biometric feature information 112 from the biometric information DB 110 at the request of the registered user U of the biometric feature information 112. Alternatively, the authentication device 100 may delete the biometric feature information 112 after a certain period of time has passed since its registration.

The detection unit 120 detects face and iris areas included in the registration image for registering biometric information and outputs the detected areas to the feature point extraction unit 130. The feature point extraction unit 130 extracts feature points from the face area, etc. detected by the detection unit 120 and outputs biometric feature information to the registration unit 140. The feature point extraction unit 130 also extracts feature points included in the face image, etc. received from the authentication control device 200 and outputs biometric feature information to the authentication unit 150.

When registering biometric feature information, the registration unit 140 issues a new user ID 111. The registration unit 140 associates the issued user ID 111 with biometric feature information 112 extracted from the registration image and registers them in the biometric information DB 110. The authentication unit 150 performs biometric authentication using the biometric feature information 112. Specifically, the authentication unit 150 compares the biometric feature information extracted from a facial image, etc. with the biometric feature information 112 in the biometric information DB 110. The authentication unit 150 returns a response to the authentication control device 200 indicating whether or not there is a match in the biometric feature information. The presence or absence of a match in the biometric feature information corresponds to the success or failure of authentication. Note that a match in the biometric feature information (match present) refers to a case where the degree of match is equal to or greater than a predetermined value.

Next, the biometric information registration process and authentication process according to the second embodiment will be described. FIG. 5 is a flowchart showing the flow of the biometric information registration process according to the second embodiment. First, the authentication device 100 acquires a registration image included in a biometric information registration request (S21). For example, the authentication device 100 receives a biometric information registration request via the network N from the authentication terminal 400, a hotel website, or the like. Next, the detection unit 120 detects a facial region, etc. included in the registration image (S22). Next, the feature point extraction unit 130 extracts feature points from the facial region, etc. detected in step S22, and outputs biometric feature information to the registration unit 140 (S23). Finally, the registration unit 140 issues a user ID 111 and associates the user ID 111, biometric feature information 112, and biometric authentication method 113 with each other, and registers them in the biometric information DB 110 (S24). The authentication device 100 may receive biometric feature information 112 from a terminal or the like owned by the user U, and register the biometric feature information 112 in the biometric information DB 110 in association with the user ID 111 and the biometric authentication method 113 .

Figure 6 is a flowchart showing the flow of biometric authentication processing by the authentication device 100 according to the second embodiment. First, the feature point extraction unit 130 acquires a facial image for authentication, etc., included in the biometric authentication request (S31). For example, the authentication device 100 receives a biometric authentication request from the authentication control device 200 via the network N, and extracts biometric feature information from the biometric image included in the biometric authentication request as in steps S21 to S23. Alternatively, the authentication device 100 may receive biometric feature information from the authentication control device 200.

Next, the authentication unit 150 compares the acquired biometric feature information with the biometric feature information 112 in the biometric information DB 110 (S32). If the biometric feature information matches, that is, if the degree of match between the biometric feature information is equal to or greater than a predetermined value (Yes in S33), the authentication unit 150 identifies the user ID 111 of the user U whose biometric feature information matches (S34). The authentication unit 150 then returns to the authentication control device 200 a message indicating that the biometric authentication was successful and the identified user ID 111 (S35). If no matching biometric feature information exists (No in S33), the authentication unit 150 returns to the authentication control device 200 a message indicating that the biometric authentication failed (S36).

In step S32, the authentication unit 150 does not need to attempt matching with all biometric feature information 112 in the biometric information DB 110. For example, the authentication unit 150 can receive the biometric authentication request including the biometric authentication method 113, and perform matching from among those with a matching biometric authentication method 113. Alternatively, the authentication unit 150 may preferentially attempt matching with biometric feature information registered between the day the biometric authentication request was received and several days prior. This can improve the matching speed. Furthermore, if the preferential matching fails, it is advisable to perform matching with all remaining biometric feature information.

Next, the authentication terminal 400 will be described in detail. Figure 7 is a block diagram showing the configuration of the authentication terminal 400 according to the second embodiment. Note that the authentication terminals 400a to 400g are equivalent to the authentication terminal 400, and therefore are not shown in the figure. The authentication terminal 400 comprises a first camera 410, a second camera 411, a memory unit 420, a communication unit 430, a display unit 440, and a control unit 450.

The first camera 410 and the second camera 411 are photographing devices that take photographs under the control of the control unit 450. In this embodiment 2, the first camera 410 photographs the face of the user U, and the second camera 411 photographs the iris of the user U. The second camera 411 is an infrared camera capable of photographing the iris.

The storage unit 420 is a storage device that stores programs for realizing the functions of the authentication terminal 400 .
The communication unit 430 is a communication interface with the network N.
The display unit 440 is at least a display device. Alternatively, the display unit 440 may be an input/output unit including a display device and an input device, such as a touch panel.

The control unit 450 controls the hardware of the authentication terminal 400. The control unit 450 includes a photography control unit 451, a registration unit 452, an authentication control unit 453, and a display control unit 454.

The photography control unit 451 controls the first camera 410 and the second camera 411 to capture a registration image or an authentication image of the user U. The registration image and authentication image captured by the first camera 410 and the second camera 411 are images that include at least the face area and iris area of the user U, respectively. The photography control unit 451 outputs the registration image to the registration unit 452. The photography control unit 451 also outputs the authentication image to the authentication control unit 453.

The registration unit 452 sends a biometric information registration request including the registration image to the authentication device 100 via the network N.

The authentication control unit 453 transmits a biometric authentication request including an authentication image to the authentication control device 200 via the network N. The authentication control unit 453 also transmits the biometric authentication request to the authentication control device 200, including a location ID that identifies the location where the device is installed and the purpose of the biometric authentication. The purpose includes, for example, information on whether the purpose includes payment processing or identity verification. The authentication control unit 453 may also transmit the biometric authentication request to the authentication control device 200, including a terminal ID that identifies the authentication terminal 400 instead of the location ID. In this case, the authentication control device 200 associates the terminal ID of the authentication terminal 400 with the location ID of the installation location of the authentication terminal 400 and stores them in advance in the memory unit 210. This allows the authentication control device 200 to refer to the memory unit 210 and obtain the location ID of the authentication terminal 400 based on the terminal ID included in the received biometric authentication request.

The authentication control unit 453 receives the biometric authentication result and outputs it to the display control unit 454. Furthermore, if the authentication result is successful, the authentication control unit 453 outputs an instruction signal to the control device of a specified service to cause that service to be executed. Examples of specified services include opening and closing a door (gate), unlocking a lock, executing a payment process, executing a check-in process, and executing a check-out process. The specified services are not limited to these, but also include various services that are provided in response to successful authentication of user U. As a result, user U can use the biometric authentication result to receive specified services that require authentication, such as entering a hotel room or processing a payment.

The display control unit 454 displays content corresponding to the biometric authentication result on the display unit 440. For example, the display control unit 454 displays to user U that authentication was successful or unsuccessful. The display control unit 454 may also display the biometric authentication method, user U's name, etc., along with the authentication result on the display unit 440. For example, the display control unit 454 displays, "Mr./Ms. XX, facial authentication was successful," or "Mr./Ms. XX, facial authentication and iris authentication were successful." Information such as the name may be hidden or presented in a format that does not identify the individual, as needed. Furthermore, if user U is an employee, the display control unit 454 may also display information such as the employee ID and affiliation, such as, for example, "Employee ID: No. XX, Mr./Ms. △△, iris authentication was successful." In addition, the display control unit 454 may guide user U through actions required for biometric authentication (such as removing a mask or facing the authentication terminal 400).

Returning to Figure 3, we will continue the explanation. The authentication control device 200 is an information processing device that controls the biometric authentication processing of user U at the authentication terminal 400. The authentication control device 200 may be redundantly configured with multiple servers, and each functional block may be realized by multiple computers.

Specifically, first, the authentication control device 200 receives a biometric authentication request from the authentication terminal 400, which includes the biometric information of user U, the location ID of the authentication terminal 400, and the purpose of biometric authentication. The authentication control device 200 determines a first biometric authentication method from among multiple biometric authentication methods depending on the installation location of the authentication terminal 400 or the purpose of biometric authentication, and transmits a first biometric authentication request using the determined method to the authentication device 100.

When the authentication control device 200 receives notification from the authentication device 100 that the first biometric authentication was successful, it identifies the attributes of user U. The authentication control device 200 determines whether to use the results of the second biometric authentication, taking into account the installation location of the authentication terminal 400, the purpose of the biometric authentication, and the attributes of user U. If it is determined that the results of the second biometric authentication should be used, the authentication control device 200 determines to perform the second biometric authentication on user U and controls the second biometric authentication.

If it is determined that the second biometric authentication should be performed, the authentication control device 200 transmits a second biometric authentication request to the authentication device 100. When the authentication control device 200 receives from the authentication device 100 a message indicating that the second biometric authentication has been successful, the authentication control device 200 transmits the message to the authentication terminal 400.
Through the above process, the user U who has successfully passed the biometric authentication can receive the desired services, such as entering the accommodation room and making a payment.

Next, the authentication control device 200 will be described in detail. Figure 8 is a block diagram showing the configuration of the authentication control device 200 according to the second embodiment. The authentication control device 200 includes a storage unit 210, a memory 220, a communication unit 230, and a control unit 240.

The storage unit 210 is a storage device such as a hard disk, a flash memory, etc. The storage unit 210 stores a program 211, attribute information 212, and authentication method information 213.
The program 211 is a computer program in which the processing of the authentication control method according to the second embodiment is implemented.

Attribute information 212 is attribute information for each user U. Specifically, attribute information 212 is information that associates a user ID 2121 with an attribute 2122. User ID 2121 is information that identifies user U. Attribute 2122 is information that indicates the attribute of user U, and includes, for example, whether the user is a customer or an employee.

The authentication method information 213 is information that associates a location ID 2131, a purpose 2132, an attribute 2133, and an authentication method 2134. As already explained using Fig. 9, the authentication methods and their combinations to be performed on the user U are determined depending on the installation location of the authentication terminal 400, the purpose of the biometric authentication, and the attributes of the user U. The authentication method information 213 stores these in association with each other.
9 is an example and is not limiting. For example, the number of authentication methods to be combined may be increased or decreased depending on the accuracy of biometric authentication, or the attributes of user U may be further subdivided. For example, for employees, the combination of authentication methods may be adjusted depending on their job title or years of employment, or iris authentication may be applied differently to employees who wear masks less frequently, such as those who do cleaning work, than to those who wear masks more frequently.

The memory 220 is a volatile storage device such as a RAM (Random Access Memory), and is a storage area for temporarily storing information when the control unit 240 is operating.
The communication unit 230 is a communication interface with the network N.

The control unit 240 is a processor, or control unit, that controls each component of the authentication control device 200. The control unit 240 loads the program 211 from the storage unit 210 into the memory 220 and executes the program 211. As a result, the control unit 240 realizes the functions of the biometric information acquisition unit 241, the authentication control unit 242, the judgment unit 243, and the decision unit 244.

The biometric information acquisition unit 241 is an example of the biometric information acquisition unit 11 described above. The biometric information acquisition unit 241 acquires first biometric information and second biometric information of a specific user U who is to undergo biometric authentication. Specifically, the biometric information acquisition unit 241 acquires the first and second biometric information from the authentication terminal 400 via the network N. The first and second biometric information are, for example, biometric information of the user U's face and iris captured by the first camera 410 and the second camera 411.

The authentication control unit 242 is an example of the above-mentioned authentication control unit 12. The authentication control unit 242 controls at least one of a first biometric authentication using first biometric information and a second biometric authentication using second biometric information.
In this embodiment, first, the authentication control unit 242 controls the first biometric authentication using the first biometric information acquired by the biometric information acquisition unit 241. Specifically, the authentication control unit 242 transmits a first biometric authentication request to the authentication device 100 via the network N. The first biometric authentication request includes the first biometric information. The first biometric authentication method is determined by the determination unit 244, which will be described later. Note that the first biometric authentication request may include information on the first biometric authentication method. This can improve the matching speed in the authentication device 100.

Next, if the determination unit 243 described below determines that second biometric authentication should be performed on user U, the authentication control unit 242 controls the second biometric authentication. Specifically, the authentication control unit 242 transmits a second biometric authentication request to the authentication device 100 via network N. The second biometric authentication request includes second biometric information of user U. As above, the second biometric authentication request may also include information on the second biometric authentication method.

The determination unit 243 is an example of the determination unit 13 described above. When at least one of the first biometric authentication and the second biometric authentication is successful, the determination unit 13 determines whether to use the result of the other biometric authentication. In this embodiment, when the first biometric authentication is successful, the determination unit 243 determines whether to use the result of the second biometric authentication. Specifically, the determination unit 243 identifies the attributes of user U who succeeded in the first biometric authentication, and determines whether to use the result of the second biometric authentication based on the identified attributes. Furthermore, when it is determined that the result of the second biometric authentication is to be used, the determination unit 243 determines to perform the second biometric authentication.

The determination unit 243 determines whether or not to use the results of the second biometric authentication, for example, based on the conditions shown in the table in Figure 9. That is, the determination unit 243 determines whether or not to use the results of the second biometric authentication depending on the attributes of user U, the installation location of the authentication terminal 400, and the purpose of the biometric authentication, and then determines whether or not to perform the second biometric authentication.

9 , assume that the authentication terminal 400 is installed at the entrance to a lodging building (a common entrance to multiple service provision locations for multiple recipients of services that are provided in response to successful authentication), and that user U1 has successfully passed facial authentication as the first biometric authentication. The determination unit 243 identifies user U1's attribute as a customer (a recipient of the service) based on the attribute information 212. Furthermore, based on the identified attribute of user U1, the determination unit 243 references the authentication method information 213 to determine whether or not to use the result of the second biometric authentication for user U1. Because iris authentication as well as facial authentication is required for user U1 at the entrance to the lodging building, the determination unit 243 determines to use the result of the second biometric authentication and also determines to perform the second biometric authentication.
Similarly, when user U is an employee (service provider), the determination is made based on the authentication method information 213. For user U2 who has succeeded in iris authentication, which is the first biometric authentication, the determination unit 243 identifies the attribute of user U2 as an employee, and based on the identified attribute, determines not to use the result of the second biometric authentication for user U2 by referring to the authentication method information 213, and also determines not to perform the second biometric authentication.

By making such a judgment, customers can be strictly identified using facial and iris recognition when entering the accommodation building, preventing non-customers from entering the building. Employees can also be allowed to enter the accommodation building using iris recognition alone, so even if an employee is wearing a mask, for example, identity can be efficiently confirmed without them having to remove the mask. Furthermore, because iris recognition has higher authentication accuracy than facial recognition, it is believed possible to perform strict identity confirmation even when entering the accommodation building using iris recognition alone.

In the example shown in FIG. 9, the authentication terminal 400 is installed in front of the guest room (at the entrance to the location where services are provided in response to successful biometric authentication), and user U1 has successfully passed facial authentication as the first biometric authentication.
As described above, the determination unit 243 identifies the attribute of user U1 as a customer based on the attribute information 212. Based on the identified attribute of user U1, the determination unit 243 refers to the authentication method information 213 and determines not to use the result of the second biometric authentication for user U1, and also determines not to perform the second biometric authentication.
Furthermore, if user U2 has succeeded in face authentication as the first biometric authentication, the determination unit 243 identifies the attribute of user U2 as an employee, and determines to use the result of the second biometric authentication based on the identified attribute by referring to the authentication method information 213. Then, the determination unit 243 determines to perform the second biometric authentication.

By making this determination, customers who have already undergone multimodal authentication at the entrance to the accommodation building can be allowed to enter their rooms using only facial recognition. Furthermore, for employees, identity verification can be conducted more strictly than at the entrance to the accommodation building.

Furthermore, when the use of the authentication terminal 400 includes payment processing, the determination unit 243 may determine to use the second biometric authentication regardless of the attributes of user U, and may also determine to perform the second biometric authentication. In the example shown in Figure 9, the souvenir shop requires the second biometric authentication regardless of whether user U's attributes are customer or employee. This allows for more rigorous identity verification for payment processing compared to the provision of other services.

The determination unit 244 determines the first biometric authentication method from among multiple biometric authentication methods depending on the purpose or installation location of the authentication terminal 400. For example, in the example shown in Figure 9, iris authentication is required at the entrance to the accommodation building regardless of the attributes of user U. Therefore, the determination unit 244 determines to use iris authentication as the first biometric authentication method. Similarly, in the accommodation room, the first biometric authentication is determined to be face authentication.

The determination unit 244 may determine the first biometric authentication method in consideration of the accuracy of the authentication method. For example, even if only face authentication is required as the first biometric authentication, if the user U is wearing a mask and only an iris image can be acquired, the determination unit 244 may determine iris authentication, which has higher authentication accuracy, as the first biometric authentication method.
In addition, if either authentication method is acceptable and multiple pieces of biometric information can be obtained from the authentication terminal 400, the multiple pieces of biometric information may be obtained and the authentication method with the higher accuracy may be prioritized and determined as the first biometric authentication.

Figure 10 is a flowchart showing the flow of the authentication control process according to embodiment 2. First, the biometric information acquisition unit 241 receives a biometric authentication request from the authentication terminal 400 and acquires the first and second biometric information (S401).

Next, the determination unit 244 determines a first biometric authentication method according to the purpose or installation location of the authentication terminal 400 (S402). The authentication control unit 242 transmits a first biometric authentication request corresponding to the determined first biometric authentication method to the authentication device 100 (S403).

The authentication control unit 242 receives the result of the first biometric authentication from the authentication device 100 and determines whether the first biometric authentication was successful (S404). If the first biometric authentication was successful (Yes in S404), the judgment unit 243 identifies the attributes of user U (S405). The judgment unit 243 also determines whether to use the result of the second biometric authentication, and determines whether to perform the second biometric authentication based on the judgment result (S406). For example, the judgment unit 243 makes the judgment by referring to the authentication method information 213.

If it is determined that second biometric authentication is to be performed (Yes in S406), the authentication control unit 242 sends a second biometric authentication request to the authentication device 100 (S407).

The authentication control unit 242 receives the result of the second biometric authentication from the authentication device 100 and determines whether the second biometric authentication was successful (S408). If the second biometric authentication was successful (Yes in S408), the authentication control unit 242 returns a message to the authentication terminal 400 indicating that the biometric authentication was successful (S409).

If the first biometric authentication fails in step S404 (No in S404) and if the second biometric authentication fails in step S408 (No in S408), the authentication control unit 242 replies to the authentication terminal 400 that the biometric authentication has failed (S410).

Also, if it is determined in step S406 that the second biometric authentication will not be performed (No in S406), the authentication control unit 242 replies to the authentication terminal 400 that the biometric authentication was successful (S409).

If the biometric authentication is successful (S409), the authentication terminal 400 outputs an instruction signal to the control device for each service to execute processes such as opening/closing the door (gate), unlocking the lock, executing payment processing, executing check-in processing, and executing check-out processing. This allows the user U to receive the desired services, such as entering each facility and processing payments.

As described above, the authentication system 1000 according to the present embodiment can identify the attributes of the user U when the first biometric authentication is successful, and determine whether to use the results of the second biometric authentication and whether to perform the second biometric authentication based on the identified attributes. Furthermore, the first biometric authentication method can be determined depending on the purpose or installation location of the authentication terminal 400. Therefore, for example, even if the user U is wearing a mask, the identity of the user U can be appropriately confirmed without removing the mask, depending on the attributes of the user U and the purpose and installation location of the authentication terminal 400. Furthermore, for example, in payment processing, strict identity confirmation can be performed depending on the purpose of the biometric authentication, such as requiring multimodal authentication regardless of the attributes of the user U.
As described above, the authentication system 1000 according to this embodiment can appropriately verify the identity of the user U while reducing the decrease in convenience for the user U in multimodal authentication.

<Embodiment 3>
The third embodiment is a modification of the second embodiment. In the second embodiment, the authentication control device 200 first controls the first biometric authentication and, depending on the success of the first biometric authentication, controls the second biometric authentication. In contrast, the authentication control device 200 according to the present embodiment first controls both the first and second biometric authentications, and, if at least one of the biometric authentications is successful, determines whether to use the result of the other biometric authentication.

The configuration of the authentication control device 200 according to this embodiment is the same as that of the second embodiment, and therefore a description thereof will be omitted.
11 is a flowchart showing the flow of authentication control processing according to this embodiment. First, the biometric information acquisition unit 241 receives a biometric authentication request from the authentication terminal 400 and acquires the first and second biometric information (S501).

Next, the authentication control unit 242 sends first and second biometric authentication requests using the acquired first and second biometric information, respectively, to the authentication device 100 (S502). Note that, as in embodiment 2, the determination unit 244 may determine the first biometric authentication method, but since both the first and second biometric authentications are performed in this embodiment, explanation will be omitted here.

The authentication control unit 242 receives the results of the first and second biometric authentications from the authentication device 100 and determines whether at least one of the biometric authentications was successful (S503). If either of the biometric authentications was successful (Yes in S503), the judgment unit 243 identifies the attributes of user U (S504). Furthermore, the judgment unit 243 determines whether or not to use the result of the other biometric authentication based on the identified attributes (S505). For example, the judgment unit 243 makes the judgment by referring to the authentication method information 213.

If it is determined that the results of the other biometric authentication are to be used (Yes in S505), the authentication control unit 242 determines whether the other biometric authentication was successful (S506).

If the other biometric authentication is successful (Yes in S506), the authentication control unit 242 replies to the authentication terminal 400 that the biometric authentication was successful (S507).

If the first biometric authentication fails in step S503 (No in S503) and if the other biometric authentication fails in step S506 (No in S506), the authentication control unit 242 replies to the authentication terminal 400 that the biometric authentication has failed (S508).

Also, if it is determined in step S505 that the result of the other biometric authentication will not be used (No in S505), the authentication control unit 242 replies to the authentication terminal 400 that the biometric authentication was successful (S507).

If biometric authentication is successful (S507), user U can receive the desired services, such as opening and closing a door (gate).

As described above, the authentication control device 200 according to this embodiment performs both the first and second biometric authentications, and if at least one of them is successful, identifies the attributes of the user U and determines whether to use the result of the other biometric authentication based on the identified attributes. For example, suppose that the user U performs facial authentication and iris authentication while wearing a mask. It is considered that the user U fails facial authentication but succeeds iris authentication. However, if the iris authentication is successful, the authentication control device 200 can identify the attributes of the user U and determine whether to use the result (failure) of facial authentication based on the attributes. Therefore, for example, in a situation where authentication would be successful only if the iris authentication was successful, by determining not to use the result of facial authentication, the user U can receive the desired service even if the facial authentication fails.
Therefore, the authentication control device 200 according to this embodiment can achieve the same effects as those of the second embodiment.

<Fourth Embodiment>
The fourth embodiment is a modification of the second embodiment. The authentication control device 200a according to the fourth embodiment performs authentication processing in response to a biometric authentication request received from the authentication terminal 400 without going through the authentication device 100, and returns the result to the authentication terminal 400.

Figure 12 is a block diagram showing the configuration of the authentication control device 200a according to this embodiment. As shown in Figure 12, the authentication control device 200a includes a storage unit 210, a memory 220, a communication unit 230, and a control unit 240. The storage unit 210 stores a program 211, attribute information 212, authentication method information 213, and further stores biometric information 214.

Biometric information 214 corresponds to the biometric information DB 110 of the authentication device 100 described above, and stores a user ID 2141, biometric feature information 2142, and biometric authentication method 2143 in correspondence with each other.

For user U who has successfully passed the first biometric authentication, the biometric information acquisition unit 241a determines whether second biometric information is registered in the biometric information 214, and if the second biometric information is not registered, acquires the second biometric information from user U. For example, if user U has registered only face information and not iris information, the biometric information acquisition unit 241a acquires iris information from user U. Then, the biometric information acquisition unit 241a associates the user ID, the face information which is the registered first biometric information, and the iris information which is the acquired second biometric information, and registers them in the biometric information 214.

As described in embodiment 2, one method for acquiring the second biometric information is to display a message on the display unit 440 informing the user that an iris photograph will be taken and obtain the user U's consent. If the user U consents to the iris photograph being taken, the second camera 411 photographs the user U's iris, and the biometric information acquisition unit 241a acquires the iris image via the network N.

The biometric information acquisition unit 241a also has the functions of the detection unit 120, feature point extraction unit 130, registration unit 140, and authentication unit 150 in the authentication device 100. In other words, the biometric information acquisition unit 241a detects the iris area from the iris image included in the biometric information registration request received from the authentication terminal 400, extracts iris feature information, and issues a user ID. The biometric information acquisition unit 241a also registers biometric information 214 in the memory unit 210, which associates a user ID 2141 with first and second biometric feature information 2142 and a biometric authentication method 2143.

The authentication control unit 242a controls biometric authentication by comparing feature information extracted from areas such as the face and iris of the user U contained in the acquired captured image with the biometric feature information 2142 stored in the memory unit 210.
The configuration other than the above is the same as that of the second embodiment, and therefore the description thereof will be omitted.

As described above, the authentication control device 200a of this embodiment can achieve the same effects as embodiment 2.

<Embodiment 5>
The fifth embodiment is a modification of the second embodiment. An authentication control device 200b according to the fifth embodiment has the functions of the authentication terminal 400 described in the second embodiment.

13 is a block diagram showing the configuration of an authentication control device 200b according to this embodiment. As shown in FIG. 13, the authentication control device 200b includes a storage unit 210, a memory 220, a communication unit 230, a control unit 240, a first camera 250, a second camera 251, and a display unit 260.
Furthermore, the control unit 240 can realize the functions of an imaging control unit 245, a registration unit 246, and a display control unit 248 in addition to the functions described in the second embodiment.

The first camera 250, the second camera 251, and the display unit 260 correspond to the first camera 410, the second camera 411, and the display unit 440 in embodiment 2, respectively. That is, the first camera 250 captures, for example, the face of user U, and the second camera 251 captures the iris of user U. The display unit 260 is at least a display device and may also be an output unit including an input device, for example, a touch panel.

The biometric information acquisition unit 241b acquires the first and second biometric information of the user U from the facial image and iris image of the user U captured by the first camera 250 and the second camera 251.

The photographing control unit 245, the registration unit 246, and the display control unit 248 correspond to the photographing control unit 451, the registration unit 452, and the display control unit 454 described in embodiment 2, respectively. However, the photographing control unit 245 outputs the registration image to the registration unit 246, but outputs the authentication image to the authentication control unit 242b.

The determination unit 244b determines a first biometric authentication method from among a plurality of biometric authentication methods depending on the purpose or installation location of the authentication control device 200b. The authentication control unit 242b controls the first biometric authentication corresponding to the determined first biometric authentication method.
The configuration other than the above is the same as that of the second embodiment, and therefore the description thereof will be omitted.

As described above, the authentication control device 200b of this embodiment can achieve the same effects as embodiment 2.

Note that while the above-described embodiment has been described as a hardware configuration, this is not limited to this. Any processing in the present disclosure can also be realized by having a CPU execute a computer program.

In the above examples, the program can be stored and supplied to a computer using various types of non-transitory computer-readable media. Non-transitory computer-readable media include various types of tangible storage media. Examples of non-transitory computer-readable media include magnetic recording media (e.g., flexible disks, magnetic tapes, hard disk drives), magneto-optical recording media (e.g., magneto-optical disks), CD-ROMs (Read Only Memory), CD-Rs, CD-R/Ws, DVDs (Digital Versatile Discs), and semiconductor memories (e.g., mask ROMs, PROMs (Programmable ROMs), EPROMs (Erasable PROMs), flash ROMs, and RAMs (Random Access Memory)). The program may also be supplied to a computer by various types of transitory computer-readable media. Examples of transitory computer-readable media include electrical signals, optical signals, and electromagnetic waves. The temporary computer-readable medium can supply the program to the computer via a wired communication path such as an electric wire or an optical fiber, or via a wireless communication path.

The present disclosure is not limited to the above-described embodiments, and may be modified as appropriate without departing from the spirit and scope of the present disclosure. In addition, the present disclosure may be implemented by appropriately combining the respective embodiments.
For example, although the above description has been given using face authentication and iris authentication as the first and second biometric authentication methods, other biometric authentication methods may be used. Furthermore, biometric authentication may be performed using three or more authentication methods.
Furthermore, instead of using multiple biometric authentication methods, biometric authentication may be combined with a technology other than biometric authentication. For example, in the example shown in FIG. 9 , in the authentication before entering the guest room, user U2, who is an employee, must succeed in face authentication and iris authentication. Here, the authentication terminal 400, for example, photographs the uniform or employee name tag worn by user U2 and determines whether user U2 is an employee through image recognition or the like. If user U2 is determined to be an employee, the authentication control device 200 may perform only iris authentication on user U2 without performing face authentication. This allows user U2 to be authenticated and enter the guest room without removing the mask, even if he or she is wearing a mask.

A part or all of the above-described embodiments can be described as, but not limited to, the following supplementary notes.
(Appendix 1)
a biometric information acquiring means for acquiring first biometric information and second biometric information of a predetermined user;
an authentication control means for controlling at least one of a first biometric authentication using the first biometric information and a second biometric authentication using the second biometric information;
a determination means for determining whether or not to use the result of the other biometric authentication when at least one of the first biometric authentication and the second biometric authentication is successful;
An authentication control device comprising:
(Appendix 2)
2. The authentication control device according to claim 1, wherein the authentication control means controls the other biometric authentication when it is determined that the result of the other biometric authentication is to be used.
(Appendix 3)
The determination means
Identifying an attribute of the user who has successfully passed one of the biometric authentications;
The authentication control device according to claim 1 or 2, further comprising: determining whether or not to use the result of the other biometric authentication based on the identified attribute.
(Appendix 4)
the biometric information acquisition means acquires the first biometric information and the second biometric information from a predetermined authentication terminal;
a determination unit that determines a first biometric authentication method from among a plurality of biometric authentication methods according to the purpose or installation location of the authentication terminal;
The authentication control device according to claim 3, wherein the authentication control means controls the first biometric authentication corresponding to the determined first biometric authentication method.
(Appendix 5)
The authentication control device according to claim 4, wherein the determination means determines to use the result of the other biometric authentication when the use of the authentication terminal includes payment processing.
(Appendix 6)
the authentication terminal is installed at an entrance of a location where a service is provided in response to successful biometric authentication;
The determination means
If the attribute of the user who has succeeded in the one biometric authentication is that of the service provider, it is determined that the result of the other biometric authentication is to be used;
The authentication control device according to claim 4 or 5, wherein if the attribute of the user is a person to whom the service is to be provided, it is determined that the result of the other biometric authentication is not to be used.
(Appendix 7)
the authentication terminal is installed at a common entrance to a plurality of service provision locations for a plurality of recipients of services that are provided in response to successful biometric authentication;
The determination means
If the attribute of the user who has succeeded in one of the biometric authentications is a person to whom the service is to be provided, it is determined that the result of the other of the biometric authentications is to be used;
If the attribute of the user is that of the service provider, it is determined that the result of the other biometric authentication is not to be used;
The authentication control device according to any one of appendixes 4 to 6, wherein the one biometric authentication has higher authentication accuracy than the other biometric authentication.
(Appendix 8)
The system further includes a storage unit that associates at least the user with the first biometric information,
The biometric information acquisition means
If the second biometric information of the user who has succeeded in the first biometric authentication is not registered in the storage means, the second biometric information is acquired from the user;
The authentication control device according to any one of Supplementary Notes 1 to 7, wherein the user, the first biometric information, and the acquired second biometric information are registered in the storage means in association with each other.
(Appendix 9)
The authentication control device described in any one of appendices 1 to 3, wherein the authentication control means determines a first biometric authentication method from among a plurality of biometric authentication methods according to the purpose or installation location of the authentication control device, and controls the first biometric authentication corresponding to the determined first biometric authentication method.
(Appendix 10)
an authentication terminal that acquires multiple types of biometric information from a predetermined user;
an authentication control device connected to the authentication terminal;
Equipped with
The authentication control device
acquiring first biometric information and second biometric information of the user from the authentication terminal;
controlling at least one of a first biometric authentication using the first biometric information and a second biometric authentication using the second biometric information;
When at least one of the first biometric authentication and the second biometric authentication is successful, it is determined whether or not to use the result of the other biometric authentication.
(Appendix 11)
The authentication control device
The authentication system according to claim 10, wherein when it is determined that the result of the other biometric authentication is to be used, the other biometric authentication is controlled.
(Appendix 12)
The computer
Acquire first biometric information and second biometric information of a predetermined user;
controlling at least one of a first biometric authentication using the first biometric information and a second biometric authentication using the second biometric information;
When at least one of the first biometric authentication and the second biometric authentication is successful, it is determined whether or not to use the result of the other biometric authentication.
(Appendix 13)
a biometric information acquisition process for acquiring first biometric information and second biometric information of a predetermined user;
an authentication control process for controlling at least one of a first biometric authentication using the first biometric information and a second biometric authentication using the second biometric information;
a determination process for determining whether to use the result of the other biometric authentication when at least one of the first biometric authentication and the second biometric authentication is successful;
A non-transitory computer-readable medium storing an authentication control program that causes a computer to execute the above.

REFERENCE SIGNS LIST 10 Authentication control device 11 Biometric information acquisition unit 12 Authentication control unit 13 Determination unit 100 Authentication device 110 Biometric information DB
111 User ID
112 Biometric feature information 113 Biometric authentication method 120 Detection unit 130 Feature point extraction unit 140 Registration unit 150 Authentication unit 200, 200a, 200b Authentication control device 210 Storage unit 211 Program 212 Attribute information 213 Authentication method information 214 Biometric information 220 Memory 230 Communication unit 240 Control unit 241, 241a Biometric information acquisition unit 242, 242a, 242b Authentication control unit 243 Determination unit 244 Decision unit 400, 400a to 400g Authentication terminal 410 First camera 411 Second camera 420 Storage unit 430 Communication unit 440 Display unit 450 Control unit 451 Photography control unit 452 Registration unit 453 Authentication control unit 454 Display control unit 1000 Authentication system 2121 User ID
2122 Attribute 2131 Location ID
2132 Purpose 2133 Attribute 2134 Authentication method 2141 User ID
2142 Biometric feature information 2143 Biometric authentication method N Network U User

Claims (7)

a biometric information acquiring means for acquiring first biometric information and second biometric information of a predetermined user from a predetermined authentication terminal;
an authentication control means for controlling a first biometric authentication using the first biometric information and a second biometric authentication using the second biometric information;
a determination means for determining whether or not to use the result of the other biometric authentication when at least one of the first biometric authentication and the second biometric authentication is successful;
Equipped with
a biometric authentication method corresponding to each of the first biometric authentication and the second biometric authentication is determined regardless of a selection by the user;
The determination means identifies the attributes of the user who has succeeded in one of the biometric authentications, and determines whether to use the result of the other biometric authentication based on the attributes of the user and the purpose of the authentication terminal or the installation location of the authentication terminal. The authentication control device according to claim 1 , wherein the determining means determines to use the result of the other biometric authentication when the use of the authentication terminal includes a payment process. the authentication terminal is installed at an entrance of a location where a service is provided in response to successful biometric authentication;
The determination means
If the attribute of the user who has succeeded in the one biometric authentication is that of the service provider, it is determined that the result of the other biometric authentication is to be used;
The authentication control device according to claim 1 or 2 , wherein when the attribute of the user is a person to whom the service is to be provided, it is determined that the result of the other biometric authentication is not to be used. the authentication terminal is installed at a common entrance to a plurality of service provision locations for a plurality of recipients of services that are provided in response to successful biometric authentication;
The determination means
If the attribute of the user who has succeeded in one of the biometric authentications is a person to whom the service is to be provided, it is determined that the result of the other of the biometric authentications is to be used;
If the attribute of the user is the service provider, it is determined that the result of the other biometric authentication is not to be used.
The authentication control device according to claim 1 or 2 . an authentication terminal that acquires multiple types of biometric information from a predetermined user;
an authentication control device connected to the authentication terminal;
Equipped with
The authentication control device
acquiring first biometric information and second biometric information of the user from the authentication terminal;
controlling a first biometric authentication using the first biometric information and a second biometric authentication using the second biometric information;
If at least one of the first biometric authentication and the second biometric authentication is successful, determining whether to use the result of the other biometric authentication;
a biometric authentication method corresponding to each of the first biometric authentication and the second biometric authentication is determined regardless of a selection by the user;
In determining whether to use the result of the other biometric authentication, the attributes of the user who succeeded in the one biometric authentication are identified, and the determination as to whether to use the result of the other biometric authentication is made based on the attributes of the user and the purpose of the authentication terminal or the installation location of the authentication terminal. The computer
acquiring first biometric information and second biometric information of a predetermined user from a predetermined authentication terminal;
controlling a first biometric authentication using the first biometric information and a second biometric authentication using the second biometric information;
If at least one of the first biometric authentication and the second biometric authentication is successful, determining whether to use the result of the other biometric authentication;
a biometric authentication method corresponding to each of the first biometric authentication and the second biometric authentication is determined regardless of a selection by the user;
In determining whether to use the result of the other biometric authentication, an attribute of the user who succeeded in the one biometric authentication is identified, and whether to use the result of the other biometric authentication is determined based on the attribute of the user and the purpose of the authentication terminal or the installation location of the authentication terminal. a biometric information acquisition process for acquiring first biometric information and second biometric information of a predetermined user from a predetermined authentication terminal;
an authentication control process for controlling a first biometric authentication using the first biometric information and a second biometric authentication using the second biometric information;
a determination process for determining whether to use the result of the other biometric authentication when at least one of the first biometric authentication and the second biometric authentication is successful;
on the computer,
a biometric authentication method corresponding to each of the first biometric authentication and the second biometric authentication is determined regardless of a selection by the user;
In the determination process, an attribute of the user who succeeded in one biometric authentication is identified, and whether or not to use the result of the other biometric authentication is determined based on the attribute of the user and the purpose of the authentication terminal or the installation location of the authentication terminal.