Abstract:
A user confirmation system using a recording medium capable of storing information includes a biological information obtaining part for obtaining first biological information on a user at a time of first use of a recording medium, an owner registration part for registering the first biological information in the recording medium, considering the user as an owner of the recording medium, and an owner confirmation part for detecting second biological information on a user at a time of second and later use of the recording medium, and determining whether or not the user using the recording medium is identical with the owner registered in the recording medium, based on the first and second biological information.

Description:
BACKGROUND OF THE INVENTION  
         [0001]    1. Field of the Invention  
           [0002]    The present invention relates to a user confirmation system and method for utilizing recording media as tickets or the like used by an indefinite number of many people, such as train tickets and admission tickets, thereby automatically confirming owners of the tickets or the like.  
           [0003]    2. Description of the Related Art  
           [0004]    Regarding a recording medium issued to a particular individual, intended for use for a long period of time, such as a credit card for managing information on credibility of an individual and an ID card for identifying an employee and managing arrival at and departure from an office, it is important to authenticate an owner of a recording medium.  
           [0005]    Conventionally, an owner has been confirmed by letting a user input a previously registered personal identification number or visually confirmed by a third party at a time of use of a recording medium by taking a face picture of an owner and attaching it to an ID card at a time of issuance thereof.  
           [0006]    Furthermore, JP 5 (1993)-233783A and JP 5 (1993)-35935A disclose a method for identifying a user with an owner by taking a face picture of a user at a time of use and applying a picture recognition technique. Furthermore, JP 10 (1998)-154248A discloses, regarding a train ticket, a method for specifying a track section of unauthorized use, in which when unauthorized use is found based on data stored in a train ticket, face picture data captured at a time of entrance is matched with that at a time of exit.  
           [0007]    However, according to the above-mentioned recording medium, it takes a considerable period of time to register owner identity information for identifying an owner. Therefore, such a recording medium is not effective for tickets issued in a large number to an indefinite number of many people, such as a train ticket used for utilizing a railroad and a pass for an expressway.  
           [0008]    More specifically, regarding tickets issued in a large number to an indefinite number of many people, there is no time for registering owner identity information, and actual management is difficult, so that the above-mentioned recording medium cannot be used. Furthermore, at a time of use, it is required for a user to input a personal identification number, and for a third party to compare a picture with a user. This requires a long period of time and personal resources, which is not economical in actual management, and therefore, use of the above-mentioned recording medium cannot be realized.  
           [0009]    The above-mentioned methods disclosed by JP 5 (1993)-233783A and JP 5 (1993)-35935A overcome the above-mentioned problems by automating processing. However, a face picture is taken at a time of issuance of an ID card; therefore, a recognition rate is decreased due to the difference in appearance and the like between the time of registration and the time of use caused by changes over time, resulting in increased misrecognition.  
           [0010]    Furthermore, according to the method disclosed by JP 10 (1998)-154248A, an owner of a train ticket is not confirmed. Therefore, it is impossible to prevent unauthorized use, such as use of one train pass by a plurality of people and unauthorized train-taking such as getting-on with an entrance ticket and getting-off with an entrance ticket of another station prepared by a cooperator.  
         SUMMARY OF THE INVENTION  
         [0011]    Therefore, with the foregoing in mind, it is an object of the present invention to provide a user confirmation system and method capable of immediately registering owner identity information even in a recording medium such as a ticket issued in a large number to an indefinite number of many people, and exactly preventing unauthorized use thereof.  
           [0012]    In order to achieve the above-mentioned object, the user confirmation system of the present invention using a recording medium capable of storing information includes: a biological information obtaining part for obtaining first biological information on a user at a time of first use of the recording medium; a user registration part for registering the first biological information in the recording medium, considering the user as an owner of the recording medium; and an owner confirmation part for detecting second biological information on a user at a time of second and later use of the recording medium, and determining whether or not the user using the recording medium is identical with the owner registered in the recording medium, based on the first and second biological information.  
           [0013]    Because of the above-mentioned constitution, the biological information on a user is obtained at a time of use of the recording medium. Therefore, identification between an owner and a user can be rapidly confirmed, and unauthorized use, if any, can be found. Furthermore, natural suppression effects with respect to unauthorized use can be expected.  
           [0014]    Furthermore, in the user confirmation system of the present invention, the owner registration part preferably includes: a biological information obtaining part for obtaining first biological information on a user at a time of first use of the recording medium; a recording medium reading part for reading information on a use status of the recording medium; a read data checking part for checking whether or not the recording medium is being used with proper authorization, based on the information on a use status read in the recording medium reading part; and a recording medium writing part for writing, in a case of use with proper authorization, the first biological information on the user and the information on a use status of the recording medium in the recording medium, and writing, in a case of use without proper authorization, invalidity information on the recording medium and the information on a use status in the recording medium.  
           [0015]    Because of the above-mentioned constitution, information for determining whether the recording medium is being used with proper authorization or without proper authorization is stored in a bunch in the recording medium, whereby it can be checked whether or not unauthorized use is conducted on each scene using the recording medium.  
           [0016]    Furthermore, in the user confirmation system of the present invention, the owner confirmation part preferably includes: a user biological information obtaining part for obtaining the second biological information on a user of the recording medium; a recording medium reading part for reading an identifier of the recording medium, information on a use state of the recording medium, and the first biological information on the user; a use status checking part for checking whether or not the recording medium is being used with proper authorization, based on the information on a use status read in the recording medium reading part; a similarity determining part for calculating similarity by comparing the second biological information obtained in the user biological information obtaining part with the first biological information read in the recording medium reading part, determining authorized use when the similarity exceeds a predetermined threshold value, and determining unauthorized use when the similarity is equal to or lower than a predetermined threshold value; and a recording medium writing part for writing, in a case of use with proper authorization, the information on a use status and, if required, the second biological information on the user in the recording medium, and writing, in a case of use without proper authorization, invalidity information on the recording medium and the information on a use status in the recording medium.  
           [0017]    Because of the above-mentioned constitution, information for determining whether the recording medium is being used with proper authorization or without proper authorization is stored in a bunch in the recording medium, whereby it can be checked whether or not unauthorized use is conducted on each scene using the recording medium. Furthermore, the first biological information on an owner is updated, if required, every time the recording medium is used with proper authorization, so that misrecognition due to changes over time can be prevented.  
           [0018]    Next, in order to achieve the above-mentioned object, the user confirmation system of the present invention using a recording medium capable of storing information includes: a biological information obtaining part for obtaining first biological information on a user at a time of first use of the recording medium; an owner registration part for registering the first biological information in a database disposed on a network, considering the user as an owner of the recording medium; and an owner confirmation part for detecting second biological information on a user at a time of second and later use of the recording medium, and determining weather or not a user using the recording medium is identical with the owner registered in the database, based on the first and second biological information.  
           [0019]    Because of the above-mentioned constitution, the biological information on a user is obtained at a time of use of the recording medium. Therefore, identification between an owner and a user can be rapidly confirmed, and unauthorized use, if any, can be found. Furthermore, large-capacity data, such as biological information on users and owners, is stored on a network server, so that the use status of a user can be grasped merely by accessing the network server. This makes it possible to mange information as a single unit. Even in the case where a recording medium is damaged or lost, an owner&#39;s use status is obtained, and an exact fee can be collected by searching for use status data and/or biological information data on the network server.  
           [0020]    Furthermore, in the user confirmation system of the present invention, the owner registration part includes: a biological information obtaining part for obtaining first biological information on a user at a time of first use of the recording medium; a recording medium reading part for reading an identifier of the recording medium; a read data checking part for checking whether or not the recording medium is being used with proper authorization, based on the information on a use state extracted from the database, using the identifier read in the recording medium reading part as key information; and a recording medium writing part for writing, in a case of use with proper authorization, the first biological information on the user and the information on a use status of the recording medium in the database and writing, in a case of use without proper authorization, invalidity information on the recording medium and the information on a use status in the database.  
           [0021]    Because of the above-mentioned constitution, information for determining whether the recording medium is being used with proper authorization or without proper authorization is stored in a bunch in the recording medium, whereby it can be checked whether or not unauthorized use is conducted on each scene using the recording medium.  
           [0022]    Furthermore, in the user confirmation system of the present invention, the owner confirmation part includes: a user biological information obtaining part for obtaining the second biological information on a user of the recording medium; a recording medium reading part for reading an identifier of the recording medium; a use status checking part for checking whether or not the recording medium is being used with proper authorization, based on the information on a use status extracted from the database, using the identifier read in the recording medium reading part as key information; a similarity determining part for calculating similarity by comparing the second biological information obtained in the user biological information obtaining part with the first biological information extracted from the database, using the identifier read in the recording medium reading part as key information, determining authorized use when the similarity exceeds a predetermined threshold value, and determining unauthorized use when the similarity is equal to or lower than a predetermined threshold value; and a recording medium writing part for writing, in a case of use with proper authorization, the information on a use status and, if required, the second biological information on the user in the database, and writing, in a case of use without proper authorization, invalidity information on the recording medium and the information on a use status in the database.  
           [0023]    Because of the above-mentioned constitution, information for determining whether the recording medium is being used with proper authorization or without proper authorization is stored in a bunch in the recording medium, whereby it can be checked whether or not unauthorized use is conducted on each scene using the recording medium. Furthermore, the first biological information on an owner is updated every time the recording medium is used with proper authorization, so that misrecognition due to changes over time can be prevented.  
           [0024]    Furthermore, the present invention is characterized by software for executing the functions of the above-mentioned user confirmation system as processing operations of a computer. More specifically, the method for confirming a user using a recording medium capable of storing information includes: obtaining first biological information on a user at a time of first use of the recording medium; registering the first biological information in the recording medium, considering the user as an owner of the recording medium; and detecting second biological information on the user at a time of second and later use of the recording medium, and determining whether or not the user using the recording medium is identical with the owner registered in the recording medium, based on the first and second biological information.  
           [0025]    Because of the above-mentioned constitution, the program is loaded onto a computer for execution, whereby a user confirmation system can be realized, in which the biological information on a user is obtained at a time of use of the recording medium, so that identification between an owner and a user is rapidly confirmed, and unauthorized use, if any, is found.  
           [0026]    Furthermore, the present invention is characterized by software for executing the functions of the above-mentioned user confirmation system as processing operations of a computer. More specifically, the method for confirming a user using a recording medium capable of storing information includes: obtaining first biological information on a user at a time of first use of the recording medium; registering the first biological information in a database disposed on a network, considering the user as an owner of the recording medium; and detecting second biological information on a user at a time of second and later use of the recording medium, and determining whether or not the user using the recording medium is identical with the owner registered in the database, based on the first and second biological information.  
           [0027]    Because of the above-mentioned constitution, the program is loaded onto a computer for execution, whereby a user confirmation system can be realized, in which the biological information on a user is obtained at a time of use of the recording medium, so that identification between an owner and a user is rapidly confirmed, and unauthorized use, if any, is found.  
           [0028]    Furthermore, in this system, large-capacity data, such as biological information on users and owners, is stored on a network server, so that the use status of a user can be grasped merely by accessing the network server. This makes it possible to mange information as a single unit. Even in the case where a recording medium is damaged or lost, an owner&#39;s use status is obtained, and an exact fee can be collected by searching for use status data and/or biological information data on the network server.  
           [0029]    These and other advantages of the present invention will become apparent to those skilled in the art upon reading and understanding the following detailed description with reference to the accompanying figures. 
       
    
    
     BRIEF DESCRIPTION OF THE DRAWINGS  
       [0030]    [0030]FIG. 1 is a block diagram of a user confirmation system of Embodiment  1  according to the present invention.  
         [0031]    [0031]FIG. 2 is a block diagram of an owner automatic registration apparatus in the user confirmation system of Embodiment  1  according to the present invention.  
         [0032]    [0032]FIG. 3 is a flow chart illustrating processing of the owner automatic registration apparatus in the user confirmation system of Embodiment  1  according to the present invention.  
         [0033]    [0033]FIG. 4 is a block diagram of an owner automatic confirmation apparatus in the user confirmation system of Embodiment  1  according to the present invention.  
         [0034]    [0034]FIG. 5 is a flow chart illustrating processing of the owner automatic confirmation apparatus in the user confirmation system of Embodiment  1  according to the present invention.  
         [0035]    [0035]FIG. 6 is a block diagram of a user confirmation system of Embodiment  2  according to the present invention.  
         [0036]    [0036]FIG. 7 is a block diagram of an owner automatic registration apparatus in the user confirmation system of Embodiment  2  according to the present invention.  
         [0037]    [0037]FIG. 8 is a block diagram of an owner automatic confirmation apparatus in the user confirmation system of Embodiment  2  according to the present invention.  
         [0038]    [0038]FIG. 9 illustrates a configuration of a ticket use status database in the user confirmation system of Embodiment  2  according to the present invention.  
         [0039]    [0039]FIG. 10 shows exemplary recording media. 
     
    
     DESCRIPTION OF THE PREFERRED EMBODIMENTS  
     EMBODIMENT 1  
       [0040]    Hereinafter, a user confirmation system of Embodiment  1  according to the present invention will be described with reference to the drawings. FIG. 1 is a block diagram of the user confirmation system of Embodiment  1  according to the present invention. In Embodiment  1 , a toll facility such as a railroad and an expressway is assumed in which a ticket is used at an entrance and an exit.  
         [0041]    In FIG. 1, in the toll facility  1 , a plurality of owner registration apparatuses  3  are disposed at an entrance  2 , and a plurality of owner confirmation apparatuses  5  are disposed at an exit  4 . The owner registration apparatuses  3  and the owner confirmation apparatuses  5  are respectively connected to monitor terminals  7  through a network  6 .  
         [0042]    When a user of the toll facility  1  inserts a ticket  8  into an insertion port or the like of the owner registration apparatus  3  at a time of entrance, his/her biological information (a face picture, a fingerprint, etc.) as an owner of the ticket  8  is recorded onto the ticket  8 . Thus, when the user uses the ticket  8  for the first time, registration as an owner of the ticket  8  is conducted with respect to the ticket  8 .  
         [0043]    At a time of exit, in the owner confirmation apparatus  5 , the biological information of a person who exits the facility is compared with the biological information of the owner recorded onto the ticket  8  at a time of entrance, whereby it is confirmed whether or not the registered owner of the ticket  8  is using the ticket  8 .  
         [0044]    In the case where unauthorized use (e.g., a person other than the registered owner is using the ticket  8 ) is determined, occurrence of unauthorized use and information on the unauthorized use are sent to the monitor terminal  7  through the network  6 . Thus, the manager of the facility can find unauthorized use by a display on the monitor terminal  7 .  
         [0045]    [0045]FIG. 2 is a block diagram of an owner registration apparatus  3  in the user confirmation system of Embodiment  1  according to the present invention. In FIG. 2, reference numerals  31  and  32  denote a biological information obtaining part and a biological information storing part, respectively. In the biological information obtaining part  31 , biological information peculiar to a user, such as a face picture, a fingerprint, a voiceprint, and an iris is obtained. In order to obtain biological information, for example, in the case of obtaining a face picture, a camera or the like is disposed in the biological information obtaining part  31 , and in the case of utilizing a voiceprint, a microphone or the like is disposed in the biological information obtaining part  31 .  
         [0046]    Furthermore, in the case of adopting a face picture as biological information, a picture may be a still image or a moving image. In the case of a still image, it is desirable to prepare a plurality of images so as to enhance a recognition precision. Furthermore, in order to enhance a recognition precision, it is also effective to use a conventional technique of extracting only a face region. More specifically, portions similar in density to partial image models of eyes, a nose, and a mouth of a human are extracted from a user&#39;s picture, and a region where a relative positional relationship of these portions do not disagree to a configuration of a human&#39;s face is extracted as a face region. Furthermore, if a camera is disposed in the vicinity of the insertion port of the ticket  8 , a user sees the insertion port every time he/she inserts the ticket  8  therein, so that this is effective for obtaining uniformity of a face picture to be obtained.  
         [0047]    The biological information such as a face picture may be recorded as it is. In this case, a large storage capacity is generally required, so that it is also effective to extract feature values by a method in accordance with the kind of biological information and to record only the feature values.  
         [0048]    Reference numerals  33  and  34  denote a ticket (recording medium) reading part and a read data storing part, respectively. The ticket (recording medium) reading part  33  reads the use status data and the like stored in the ticket  8 .  
         [0049]    Examples of the use status data include available date and time representing a period during which a ticket can be used, use conditions such as an available facility, owner registration information on whether or not an owner has been registered, and ticket validity information on whether or not a ticket is valid.  
         [0050]    Examples of the recording medium used as the ticket  8  include a magnetic card and an IC card. Reading/writing with respect to the ticket  8  may be conducted either by a contact-type method or a non-contact type method. In the case of the contact-type method, for example, as in an automatic ticket gate at a railroad station, reading/writing is conducted with respect to the ticket  8  by inserting the ticket  8  into an insertion port. In the case of the non-contact type method, reading/writing is conducted with respect to the ticket  8  through a magnetic reader or the like.  
         [0051]    The use status data and the like read by the ticket (recording medium) reading part  33  are stored in the read data storing part  34 .  
         [0052]    Furthermore, reference numerals  35  and  36  denote a read data checking part and an updated data storing part, respectively. The read data checking part  35  checks a use status of the ticket  8  from the use status data and the like stored in the read data storing part  34 , and determines whether or not the ticket  8  is being used with proper authorization.  
         [0053]    Examples of the conditions for authorized use include that a ticket ID is an unused ID, available date and time and an available facility are appropriate, an owner is unregistered, and a ticket is valid. In the case where these conditions are not satisfied, unauthorized use is determined.  
         [0054]    In the case where authorized use is determined, an available facility and available date and time are added or updated, and an owner is registered, of which information is stored in the updated data storing part  36 . In the case where unauthorized use is determined, an available facility and available date and time are added or updated, and a ticket is invalidated so as to inhibit the use of the ticket thereafter, of which information is stored in the updated data storing part  36 .  
         [0055]    Reference numerals  37  and  38  denote a ticket (recording medium) writing part and an unauthorized use presenting part, respectively. In the ticket (recording medium) writing part  37 , the information stored in the updated data storing part  36  and the biological information storing part  32  are written in the ticket  8 .  
         [0056]    In the case of unauthorized use, in an unauthorized use presenting part  38 , a user is notified of the unauthorized use while the monitor terminal  7  is notified of the occurrence of the unauthorized use. Unauthorized use is presented by various methods such as giving a warning sound, turning on a warning light, displaying unauthorized use information on a display, closing a gate, and warning with a synthetic voice.  
         [0057]    [0057]FIG. 3 is a flow chart illustrating processing in the owner registration apparatus  3  in the user confirmation system of Embodiment  1  according to the present invention. In FIG. 3, a user first presents a ticket when entering a toll facility (Operation  301 ). If the ticket is a contact-type recording medium, the ticket is inserted into an insertion port dedicated to reading tickets, and in the case of a non-contact type recording medium, the ticket is brought into close to a ticket reading part. Simultaneously with presentation of the ticket, the biological information of a user using the ticket is obtained (Operation  302 ). Examples of the biological information to be obtained include a face picture, a fingerprint, and a voiceprint.  
         [0058]    Next, ticket data stored in the ticket such as a ticket use status is read (Operation  303 ), and it is determined whether or not the use status of the ticket is appropriate (Operation  304 ).  
         [0059]    In the case where it is determined that the use status of the ticket is appropriate (Operation  304 : Yes), the biological information of a user is registered in the ticket so as to register the actual ticket user as the owner of the ticket (Operation  305 ). Then, the use status of the ticket is added/updated (Operation  306 ).  
         [0060]    In the case where it is determined that the use status of the ticket is not appropriate (Operation  304 : No), the use status of the ticket is added/updated together with the fact that unauthorized use has been conducted, and invalidity of the ticket is also updated and registered (Operation  307 ). Then, the user is notified of the unauthorized use while the unauthorized use is displayed on the monitor terminal through the network (Operation  308 ).  
         [0061]    [0061]FIG. 4 is a block diagram of an owner confirmation apparatus  5  in the user confirmation system of Embodiment  1  according to the present invention. In FIG. 4, reference numerals  51  and  52  denote a user biological information obtaining part and a user biological information storing part, respectively. In the user biological information obtaining part  51 , the biological information peculiar to a user, such as a face picture, a fingerprint, a voiceprint, and an iris of an actual user, is obtained. In order to obtain biological information, for example, in the case of obtaining a face picture, a camera or the like is disposed in the user biological information obtaining part  51 , and in the case of utilizing a voiceprint, a microphone or the like is disposed in the user biological information obtaining part  51 .  
         [0062]    Furthermore, in the case of adopting a face picture as biological information, a picture may be a still image or a moving image. In the case of a still image, it is desirable to prepare a plurality of images so as to enhance a recognition precision. Furthermore, in order to enhance a recognition precision, it is also effective to use a conventional technique of extracting only a face region. More specifically, portions similar in density to partial image models of eyes, a nose, and a mouth of a human are extracted from a user&#39;s picture, and a region where a relative positional relationship of these portions do not disagree to a configuration of a human&#39;s face is extracted as a face region.  
         [0063]    Reference numerals  53 ,  54 , and  55  denote a ticket (recording medium) reading part, a read data storing part, and an owner biological information storing part, respectively. The ticket (recording medium) reading part  53  reads use status data stored in the ticket  8  and the biological information of the owner of the ticket  8 .  
         [0064]    Examples of the use status data include a ticket ID peculiar to a ticket, available date and time representing a period during which a ticket can be used, use conditions such as an available facility, owner registration information on whether or not an owner has been registered, and ticket validity information on whether or not a ticket is valid.  
         [0065]    The use status data read by the ticket (recording medium) reading part  53  is stored in the read data storing part  54 , and the biological information peculiar to the owner is stored in the owner biological information storing part  55 .  
         [0066]    Furthermore, reference numerals  56 ,  57 , and  58  denote a use status checking part, an updated data storing part, and a similarity determining part, respectively. The use status checking part  56  checks a use status of the ticket  8  from the use status data stored in the read data storing part  54 , and determines whether or not the ticket  8  is being used with proper authorization.  
         [0067]    Examples of the conditions for authorized use include that available date and time and an available facility are appropriate and a ticket is valid. In the case where these conditions are not satisfied, unauthorized use is determined.  
         [0068]    In the case where authorized use is determined, an available facility and available date and time are added or updated, of which information is stored in the updated data storing part  57 . In the case where unauthorized use is determined, an available facility and available date and time are added or updated, and a ticket is invalidated so as to inhibit the use of the ticket thereafter, of which information is stored in the updated data storing part  57 .  
         [0069]    In order to check whether or not the user using the ticket is identical with the registered owner of the ticket, the similarity determining part  58  calculates the similarity between the biological information of the ticket user stored in the user biological information storing part  52  and the biological information of the ticket owner stored in the owner biological information storing part  55 .  
         [0070]    For example, in the case of adopting a face picture as biological information, as the brightness values of face parts such as eyes, a nose, and a mouth are closer between face pictures to be compared, the similarity therebetween is calculated to be higher, and as the relative positional relationship of each face part is closer between the face pictures, the similarity therebetween is calculated to be higher. Furthermore, in the case of adopting a voiceprint as biological information, the similarity is calculated based on a matching degree of voiceprint patterns.  
         [0071]    In the case where the similarity thus calculated exceeds a predetermined threshold value, the biological information of the ticket owner is considered to be identical with that of the ticket user, and it is determined that the ticket is being used with proper authorization. On the other hand, when the similarity is equal to or lower than a predetermined threshold value, the ticket owner is considered to be different from the ticket user, and it is determined that the ticket is not being used with proper authorization.  
         [0072]    In the case where it is determined that the ticket is not being used with proper authorization, in order to prevent re-use of the ticket in advance, ticket invalidity information is stored in the updated data storing part  57 .  
         [0073]    Reference numerals  59  and  60  denote a ticket (recording medium) writing part and an unauthorized use presenting part, respectively. In the ticket (recording medium) writing part  59 , the information stored in the updated data storing part  57  is written in the ticket  8 .  
         [0074]    In the case where unauthorized use is determined, in the unauthorized use presenting part  60 , a user is notified of the unauthorized use while the monitor terminal  7  is notified of the occurrence of the unauthorized use. Unauthorized use is presented by various methods such as giving a warning sound, turning on a warning light, displaying unauthorized use information on a display, closing a gate, and warning with a synthetic voice.  
         [0075]    [0075]FIG. 5 is a flow chart illustrating processing in an owner automatic confirmation apparatus  5  in the user confirmation system of Embodiment  1  according to the present invention. In FIG. 5, a user first presents a ticket when exiting from a toll facility (Operation  501 ). If the ticket is a contact-type recording medium, the ticket is inserted into an insertion port dedicated to reading tickets, and in the case of a non-contact type recording medium, the ticket is brought into close to a ticket reading part. Simultaneously with presentation of the ticket, the biological information of a user using the ticket is obtained (Operation  502 ). Examples of the biological information to be obtained include a face picture, a fingerprint, and a voiceprint.  
         [0076]    Next, the ticket use status and the biological information of the ticket owner are read as ticket data (Operation  503 ), and it is determined whether or not the use status of the ticket is appropriate (Operation  504 ).  
         [0077]    In the case where it is determined that the use status of the ticket is appropriate (Operation  504 : Yes), the biological information of an actual user is compared with that of the ticket owner, whereby it is confirmed whether or not the actual user is identical with the ticket owner (Operation  505 ).  
         [0078]    In the case where it is determined that the actual user is identical with the ticket owner by comparing the biological information of the actual user with that of the ticket owner (Operation  505 : Yes), the ticket is considered to be used with proper authorization, and the use status of the ticket is added/updated (Operation  506 ).  
         [0079]    In the case where it is determined that the ticket is being used without proper authorization (Operation  504 : No), and it is determined that the actual user is not identical with the ticket owner (Operation  505 : No), the use status of the ticket is added/updated together with the fact that the unauthorized use has been conducted, and ticket invalidity is also updated and registered (Operation  507 ). Then, the user is notified of the unauthorized use while the monitor terminal is notified of the unauthorized use through the network (Operation  508 ).  
         [0080]    Furthermore, the monitor terminal  7  has functions of correcting misrecognition by the owner confirmation apparatus  5 , as well as displaying the unauthorized use of the ticket  8  by the user. Because of this, the user can be protected from inconvenience that the ticket  8  is invalidated although the ticket  8  is being used with proper authorization.  
         [0081]    More specifically, when the information on the unauthorized use is sent from the owner confirmation apparatus  5 , invalidity information is written in the ticket  8 . Then, it is required for the user, who feels certain that the determination has been caused by misrecognition by the owner confirmation apparatus  5 , to bring the ticket  8  to a monitoring place where a supervisor is present, and ask the supervisor to conduct determination at the monitor terminal  7 .  
         [0082]    Therefore, the monitor terminal  7  is required to have functions similar to those of the owner registration apparatus  3  and the owner confirmation apparatus  5 . More specifically, the information on the owner registered in the ticket  8  is compared with that on the user obtained at the monitor terminal  7 , whereby it is confirmed whether or not the ticket owner is identical with the ticket user through the comparison in biological information and visual confirmation by the supervisor. In the case where identity is not determined even through visual confirmation by a third party, the ticket is considered to be used without proper authorization and remains invalid, and in the case where identity is determined and misrecognition by the owner confirmation apparatus  5  is determined, the ticket is considered to be valid and updated again.  
         [0083]    As described above, according to Embodiment  1 , the biological information on a user can be obtained at a time of use of a ticket. Therefore, the identification between the ticket owner and the ticket user can be rapidly confirmed, and unauthorized use, if any, can be found. Furthermore, natural suppression effects with respect to unauthorized use can be expected.  
       EMBODIMENT 2  
       [0084]    Next, a user confirmation system of Embodiment  2  according to the present invention will be described with reference to the drawings. FIG. 6 is a block diagram of the user confirmation system of Embodiment  2  according to the present invention. In Embodiment  2 , a toll facility such as a railroad is assumed in the same way as in Embodiment  1 .  
         [0085]    The basic constitution of the user confirmation system in FIG. 6 is the same as that shown in FIG. 1, except that a ticket use status database  9  is disposed on a network  6 .  
         [0086]    The purpose of disposing the ticket use status database  9  on the network  6  is to manage, as a single unit, ticket use statuses and the like (which are stored in the ticket  8  in Embodiment  1 ) by a database on a network. According to this constitution, large-capacity data, such as biological information on users and owners, is stored on a network server, so that the use status of a user can be grasped merely by accessing the network server. This makes it possible to manage information in a bunch. Even in the case where a recording medium is damaged or lost, an owner&#39;s use status is obtained, and an exact fee can be collected by searching for use status data and/or biological information data on the network server.  
         [0087]    Furthermore, due to the presence of the ticket use status database  9 , the functions of the owner registration apparatus  3  and the owner confirmation apparatus  5  are slightly varied. FIG. 7 is a block diagram of the owner registration apparatus  3  in the user confirmation system of Embodiment  2  according to the present invention. In FIG. 7, reference numerals  31  and  32  denote a biological information obtaining part and a biological information storing part, respectively. In the biological information obtaining part  31 , biological information peculiar to a user, such as a face picture, a fingerprint, a voiceprint, and an iris is obtained. In order to obtain biological information, for example, in the case of obtaining a face picture, a camera or the like is disposed in the biological information obtaining part  31 , and in the case of utilizing a voiceprint, a microphone or the like is disposed in the biological information obtaining part  31 .  
         [0088]    Next, reference numerals  71  and  72  denote a ticket (recording medium) identifier reading part and a ticket (recording medium) identifier storing part, respectively. The ticket (recording medium) identifier reading part  71  reads a ticket ID or the like that is an identifier peculiar to a ticket stored in the ticket  8 . The read ticket ID or the like is stored in the ticket (recording medium) identifier storing part  72 .  
         [0089]    Furthermore, reference numerals  73  and  74  denote a database reading part and a ticket (recording medium) use status storing part, respectively. The database reading part  73  is used for reading use status data and the like stored in the ticket use status database  9  on a ticket ID basis.  
         [0090]    As the use status data, available date and time representing a period during which a ticket can be used, use conditions such as an available facility, owner registration information on whether or not an owner has been registered, ticket validity information on whether or not a ticket is valid, and the like are stored on the basis of a ticket ID peculiar to a ticket.  
         [0091]    The use status data and the like read by the database reading part  73  are stored in the ticket (recording medium) use status storing part  74 .  
         [0092]    Furthermore, reference numerals  75  and  36  denote a ticket (recording medium) use status checking part and an updated data storing part, respectively. In the ticket (recording medium) use status checking part  75 , a use status of the ticket  8  is checked based on the use status data and the like stored in the ticket (recording medium) use status storing part  74 , and it is determined whether or not the ticket  8  is being used with proper authorization.  
         [0093]    In the case where authorized use is determined, an available facility and available date and time are added or updated, and an owner is registered, of which information is stored in the updated data storing part  36 . In the case where unauthorized use is determined, an available facility and available date and time are added or updated, and a ticket is invalidated so as to inhibit the use of the ticket thereafter, of which information is stored in the updated data storing part  36 .  
         [0094]    Reference numerals  76  and  38  denote a database writing part and an unauthorized use presenting part, respectively. In the database writing part  76 , the information stored in the updated data storing part  36  and the biological information storing part  32  are written in the ticket use status database  9 .  
         [0095]    In the case of unauthorized use, in an unauthorized use presenting part  38 , a user is notified of the unauthorized use while a monitor terminal  7  is notified of the occurrence of the unauthorized use. Unauthorized use is presented by various methods such as giving a warning sound, turning on a warning light, displaying unauthorized use information on a display, closing a gate, and warning with a synthetic voice.  
         [0096]    [0096]FIG. 8 is a block diagram of the owner confirmation apparatus  5  in the user confirmation system of Embodiment  2  according to the present invention. In FIG. 8, reference numerals  51  and  52  denote a user biological information obtaining part and a user biological information storing part, respectively. In the user biological information obtaining part  51 , biological information peculiar to a user, such as a face picture, a fingerprint, a voiceprint, and an iris of an actual user is obtained. In order to obtain biological information, for example, in the case of obtaining a face picture, a camera or the like is disposed in the user biological information obtaining part  51 , and in the case of utilizing a voiceprint, a microphone or the like is disposed in the user biological information obtaining part  51 .  
         [0097]    Next, reference numerals  81  and  82  denote a ticket (recording medium) identifier reading part and a ticket (recording medium) identifier storing part, respectively. The ticket (recording medium) identifier reading part  81  reads a ticket ID or the like that is an identifier peculiar to a ticket stored in the ticket  8 . The read ticket ID or the like is stored in the ticket (recording medium) identifier storing part  82 .  
         [0098]    Furthermore, reference numerals  73 ,  83 , and  55  denote a database reading part, a ticket (recording medium) use status storing part, and an owner biological information storing part, respectively. The database reading part  73  is used for reading use status data stored in the ticket use status database  9  and biological information on an owner of the ticket  8 .  
         [0099]    As the use status data, available date and time representing a period during which a ticket can be used, use conditions such as an available facility, owner registration information on whether or not an owner has been registered, ticket validity information on whether or not a ticket is valid, and the like are stored on the basis of a ticket ID peculiar to a ticket.  
         [0100]    The use status data read by the database reading part  73  is stored in the ticket (recording medium) use status storing part  83 , and the biological information peculiar to an owner is stored in the owner biological information storing part  55 , respectively.  
         [0101]    Furthermore, reference numerals  84 ,  57 , and  58  denote a ticket (recording medium) use status checking part, an updated data storing part, and a similarity determining part, respectively. In the ticket (recording medium) use status checking part  84 , a use status of the ticket  8  is checked based on the use status data stored in the ticket (recording medium) use status storing part  83 , and it is determined whether or not the ticket  8  is being used with proper authorization.  
         [0102]    Examples of the conditions for authorized use include that available date and time and an available facility are appropriate, and a ticket is valid. In the case where these conditions are not satisfied, unauthorized use is determined.  
         [0103]    In the case where authorized use is determined, an available facility and available date and time are added or updated, of which information is stored in the updated data storing part  57 . In the case where unauthorized use is determined, an available facility and available date and time are added or updated, and a ticket is invalidated so as to inhibit the use of the ticket thereafter, of which information is stored in the updated data storing part  57 .  
         [0104]    In order to check whether or not the user using the ticket is identical with the registered owner of the ticket, the similarity determining part  58  calculates the similarity between the biological information of the ticket user stored in the user biological information storing part  52  and the biological information of the ticket owner stored in the owner biological information storing part  55 .  
         [0105]    In the case where the similarity calculated in the same way as in Embodiment  1  exceeds a predetermined threshold value, the biological information of the ticket owner is considered to be identical with that of the ticket user, and it is determined that the ticket is being used with proper authorization. On the other hand, when the similarity is equal to or lower than a predetermined threshold value, the ticket owner is considered to be different from the ticket user, and it is determined that the ticket is not being used with proper authorization.  
         [0106]    In the case where it is determined that the ticket is not being used with proper authorization, in order to prevent re-use of the ticket in advance, ticket invalidity information is stored in the updated data storing part  57 .  
         [0107]    Reference numerals  76  and  60  denote a database writing part and an unauthorized use presenting part, respectively. In the database writing part  76 , the information stored in the updated data storing part  57  is written in the ticket use status database  9 .  
         [0108]    In the case where unauthorized use is determined, in the unauthorized use presenting part  60 , a user is notified of the unauthorized use while the monitor terminal  7  is notified of the occurrence of the unauthorized use. Unauthorized use is presented by various methods such as giving a warning sound, turning on a warning light, displaying unauthorized use information on a display, closing a gate, and warning with a synthetic voice.  
         [0109]    In the use status database  9 , validity/invalidity flag of a ticket, an available period, an available facility, and the like, as well as the biological information of a ticket owner are stored as one record, using a ticket ID as key information. For example, a database configuration as shown in FIG. 9 is considered. Information to be stored is not particularly limited to those described above.  
         [0110]    As described above, according to Embodiment  2 , in the same way as in Embodiment  1 , the biological information on a user is obtained at a time of use of a ticket. Therefore, identification between a ticket owner and a ticket user can be rapidly confirmed, and unauthorized use, if any, can be found. Furthermore, large-volume of data such as the biological information on a user and biological information on a ticket owner can be stored on the network server, so that the use status of a user can be grasped merely by accessing the network server, and information can be managed in a single unit. Furthermore, even in the case where a recording medium is damaged or lost, an owner&#39;s use status is obtained, and an exact fee can be collected by searching for use status data and/or biological information data on the network server.  
         [0111]    Examples of a recording medium storing a program for realizing the user confirmation system of the embodiments according to the present invention include a storage apparatus  101  provided at the end of a communication line, and a recording medium  104  such as a hard disk and a RAM of a computer  103 , as well as a portable recording medium  102  such as a CD-ROM  102 - 1  and a floppy disk  102 - 2 , as shown in FIG. 10. In execution, the program is loaded onto a computer, and executed on a main memory.  
         [0112]    Furthermore, examples of a recording medium storing a ticket use status database and the like generated by the user confirmation system of the embodiments according to the present invention also include a storage apparatus  101  provided at the end of a communication line, and a recording medium  104  such as a hard disk and a RAM of a computer  103 , as well as a portable recording medium  102  such as a CD-ROM  102 - 1  and a floppy disk  102 - 2 , as shown in FIG. 10. For example, when the user confirmation system according to the present invention is utilized, such a recording medium is read by the computer  103 .  
         [0113]    As described above, according to the user confirmation system of the present invention, the biological information on a user is obtained at a time of use of a ticket. Therefore, identification between a ticket owner and a ticket user can be rapidly confirmed, and unauthorized use, if any, can be found.  
         [0114]    The invention may be embodied in other forms without departing from the spirit or essential characteristics thereof. The embodiments disclosed in this application are to be considered in all respects as illustrative and not limiting. The scope of the invention is indicated by the appended claims rather than by the foregoing description, and all changes which come within the meaning and range of equivalency of the claims are intended to be embraced therein.