AUTHENTICATION SYSTEM, OPERATION METHOD OF AUTHENTICATION SYSTEM, AND OPERATION PROGRAM OF AUTHENTICATION SYSTEM

A first processor is configured to acquire a first facial image of the user; extract first facial feature information from the first facial image; generate an authentication code representing the first facial feature information; and cause a printer to print the authentication code and a display facial image of the user on a card medium to create the ID card, and a second processor is configured to acquire the authentication code printed on the ID card possessed by the user and a second facial image of the user; decode the first facial feature information from the authentication code; extract second facial feature information from the second facial image using the same algorithm as used in a case of extracting the first facial feature information from the first facial image; collate the first facial feature information with the second facial feature information; and perform the determination based on a collation result.

BACKGROUND

1. Technical Field

The technology of the present disclosure relates to an authentication system, an operation method of an authentication system, and an operation program of an authentication system.

2. Description of the Related Art

JP2014-222445A describes an authentication system that authenticates a user using an authentication code representing facial feature information extracted from a facial image of the user. In the authentication system described in JP2014-222445A, the authentication code is transmitted to a mobile terminal of the user, and the authentication code is displayed on a display unit of the mobile terminal. Then, an image of the displayed authentication code and the facial image of the user are captured, and the facial feature information decoded from the captured image of the authentication code is collated with the facial feature information extracted from the captured facial image, so that authentication is performed.

SUMMARY

As described above, in JP2014-222445A, the authentication code is transmitted to the mobile terminal of the user, and the authentication code is displayed on the display unit of the mobile terminal. Therefore, it is not easy to use for a person who does not possess a mobile terminal or a person who possesses a mobile terminal but is not familiar with the handling. In addition, in a situation in which the mobile terminal cannot be used, such as in a place where the communication environment is not established, the authentication cannot be performed in the first place.

One embodiment according to the technology of the present disclosure provides a highly convenient authentication system, an operation method of the authentication system, and an operation program of the authentication system.

According to the present disclosure, there is provided an authentication system comprising: a processor; and a memory connected to or incorporated in the processor, the processor having: a first processor configured to perform a card issuing task of issuing an ID card of a user; and a second processor configured to perform an authentication task of using the ID card to determine whether or not to authenticate the user as a legitimate user, in which the first processor is configured to, as the card issuing task: acquire a first facial image of the user; extract first facial feature information from the first facial image; generate an authentication code representing the first facial feature information; and cause a printer to print the authentication code and a display facial image of the user on a card medium to create the ID card, and the second processor is configured to, as the authentication task: acquire the authentication code printed on the ID card possessed by the user and a second facial image of the user; decode the first facial feature information from the authentication code; extract second facial feature information from the second facial image using the same algorithm as used in a case of extracting the first facial feature information from the first facial image; collate the first facial feature information with the second facial feature information; and perform the determination based on a collation result.

It is preferable that first identification information indicating that the ID card is issued by the card issuing task is added to the ID card, and that the second processor is configured to, in a case in which the first identification information is improper, determine that the user is not the legitimate user regardless of the collation result.

It is preferable that the second processor is configured to receive input of second identification information indicating that a qualified person has confirmed that the ID card is issued by the card issuing task for the user who attempts to receive authentication for a first time.

It is preferable that the second processor is configured to: store third identification information indicating that the ID card is issued by the card issuing task in a storage unit; and invalidate the third identification information for the user who has lost a qualification of the legitimate user.

It is preferable that the first facial image is an image that satisfies a standard set in advance. It is preferable that the display facial image is the first facial image. Further, It is preferable that the display facial image is an image that is not bound by the standard.

It is preferable that the first processor is configured to control an operation of a printer-equipped digital camera to cause the printer-equipped digital camera to capture the first facial image and print the authentication code and the display facial image on the card medium.

According to the present disclosure, there is provided an operation method of an authentication system, the operation method being for performing a card issuing task of issuing an ID card of a user and an authentication task of using the ID card to determine whether or not to authenticate the user as a legitimate user, the operation method comprising: as the card issuing task, acquiring a first facial image of the user; extracting first facial feature information from the first facial image; generating an authentication code representing the first facial feature information; and causing a printer to print the authentication code and a display facial image of the user on a card medium to create the ID card, and as the authentication task, acquiring the authentication code printed on the ID card possessed by the user and a second facial image of the user; decoding the first facial feature information from the authentication code; extracting second facial feature information from the second facial image using the same algorithm as used in a case of extracting the first facial feature information from the first facial image; collating the first facial feature information with the second facial feature information; and performing the determination based on a collation result.

According to the present disclosure, there is provided an operation program of an authentication system, the operation program being for performing a card issuing task of issuing an ID card of a user and an authentication task of using the ID card to determine whether or not to authenticate the user as a legitimate user, the operation program causing a computer to execute a process comprising: as the card issuing task, acquiring a first facial image of the user; extracting first facial feature information from the first facial image; generating an authentication code representing the first facial feature information; and causing a printer to print the authentication code and a display facial image of the user on a card medium to create the ID card, and as the authentication task, acquiring the authentication code printed on the ID card possessed by the user and a second facial image of the user; decoding the first facial feature information from the authentication code; extracting second facial feature information from the second facial image using the same algorithm as used in a case of extracting the first facial feature information from the first facial image; collating the first facial feature information with the second facial feature information; and performing the determination based on a collation result.

According to the technology of the present disclosure, it is possible to provide a highly convenient authentication system, an operation method of the authentication system, and an operation program of the authentication system.

DETAILED DESCRIPTION

First Embodiment

As shown inFIG.1as an example, an authentication system2is a system that authenticates a user11using an ID (Identification) card10. The authentication system2is composed of a card issuing unit12and an authentication unit13. The card issuing unit12and the authentication unit13operate independently of each other (stand-alone), and data is not exchanged between them.

The card issuing unit12is used in a card issuing phase, which is a phase of issuing the ID card10. The card issuing unit12is installed, for example, in a security room of an introduction facility of the authentication system2. The introduction facility of the authentication system2is a shopping mall, a building, a company, a medical facility, a research facility, or the like. Here, a shopping mall named “Fuji Mall” is described as an example of the introduction facility.

The authentication unit13is used in an authentication phase, which is a phase of using the ID card10to determine whether or not to authenticate the user11as a legitimate user. The legitimate user is the user11who is permitted to enter and exit the introduction facility of the authentication system2. The authentication unit13is installed, for example, on the entrance side of an entrance/exit for commuting used by the legitimate user.

The card issuing unit12comprises a printer-equipped digital camera14and a card issuing terminal15. Under the control of the card issuing terminal15, the printer-equipped digital camera14captures, for example, an image of the face of the user11who will work as a new employee in the introduction facility from now. Then, a first facial image16obtained in this way is printed on an instant film17(see alsoFIG.2). In addition, the printer-equipped digital camera14prints an authentication code18on the instant film17in addition to the first facial image16. Here, a Quick Response (QR) code (registered trademark) is employed as the authentication code18. In this way, the instant film17on which the first facial image16, the authentication code18, the store name, the facility name, and the like are printed is distributed to the user11as the ID card10. The printer-equipped digital camera14is an example of a “printer” according to the technology of the present disclosure. The instant film17is an example of a “card medium” according to the technology of the present disclosure. The first facial image16is an example of a “display facial image” according to the technology of the present disclosure.

The card issuing terminal15has a touch panel display19. A guide screen for guiding the capturing of the first facial image16is displayed on the touch panel display19. The user11captures the first facial image16in accordance with the guide screen. A live preview image captured by the printer-equipped digital camera14is displayed on the guide screen. In addition, a frame indicating the position and the size of the face conforming to a standard set in advance, such as a standard of a typical identification photo, and cautionary notes are displayed on the guide screen. Further, an input box for the store name and the facility name to be printed on the ID card10, an imaging instruction button for issuing an instruction to capture the first facial image16, and the like are displayed on the guide screen. The cautionary notes are, for example, facing forward, no hat, no mask, no sunglasses, no obstruction of the eyes by hair, no closed eyes, no shadows, and the like. The imaging instruction button can be operated only in a case in which the face of the user11fits within the frame and all the cautionary notes are observed. Therefore, the first facial image16is an image that satisfies the standard set in advance. In addition, whether or not the first facial image16satisfies the standard may be determined by a dedicated application program.

After the imaging instruction button on the guide screen is operated to capture the first facial image16, a print instruction screen for issuing an instruction to print the first facial image16and the like on the instant film17is displayed on the touch panel display19. The print instruction button for issuing an instruction to print a sample image of the ID card10to be printed from now, the first facial image16, and the like is displayed on the print instruction screen.

The authentication unit13comprises a code reader20, an authentication camera21, a security door22, a speaker23, and an authentication terminal24. The code reader20reads the authentication code18from the ID card10of the user11who attempts to receive the authentication. The authentication camera21captures a second facial image95(seeFIG.7) of the user11standing in front of the authentication camera21under the control of the authentication terminal24. The security door22is an automatic door that opens and closes the entrance/exit for commuting used by the legitimate user, and is normally locked. The speaker23outputs audio related to the authentication. The authentication terminal24is installed at, for example, a place away from the security door22or the like, such as a security room.

In a case in which the user11approaches the security door22, a guidance audio, such as “Please hold the authentication code of the ID card over the code reader.”, is output from the speaker23. In addition, in a case in which the authentication code18is read by the code reader20, a guidance audio, such as “Please turn your face to the camera.”, is output from the speaker23.

As shown inFIG.2as an example, the printer-equipped digital camera14has a box-shaped main body30that is rounded as a whole. The main body30is provided with a camera unit31for capturing the first facial image16, a printer unit32for printing the first facial image16and the like on the instant film17, a film pack33for the instant film17, and the like. The film pack33is interchangeably loaded in the main body30. A plurality of unused instant films17, for example, 10 films are accommodated in the film pack33. A discharge port34through which the instant film17with the first facial image16and the like printed thereon is discharged is formed on the upper part of the main body30.

As shown inFIG.3as an example, computers constituting the card issuing terminal15and the authentication terminal24have basically the same configuration and each comprise a storage40, a memory41, a central processing unit (CPU)42, a communication unit43, and the like. These are interconnected via a bus line44.

The storage40is a hard disk drive that is incorporated in each of the computers constituting the card issuing terminal15and the authentication terminal24or that is connected through a cable or a network. Alternatively, the storage40is a disk array in which a plurality of hard disk drives are provided consecutively. The storage40stores a control program, such as an operating system, various application programs, various types of data associated with these programs, and the like. A solid state drive may be used instead of the hard disk drive.

The memory41is a work memory for the CPU42to execute processing. The CPU42loads the program stored in the storage40into the memory41and executes processing in accordance with the program. With this, the CPU42controls each unit of the computer in an integrated manner. The communication unit43is an interface that controls transmission of various types of data with other devices.

In the following description, each unit of the computer constituting the card issuing terminal15is distinguished by the subscript “A”, and each unit of the computer that constitutes the authentication terminal24is distinguished by the subscript “B”.

As shown inFIG.4as an example, an operation program50A is stored in a storage40A of the card issuing terminal15. The operation program50A is an application program for causing the computer constituting the card issuing terminal15to function as a part of the authentication system2. That is, the operation program50A is an example of an “operation program of an authentication system” according to the technology of the present disclosure. An identification ID51is also stored in the storage40A. The identification ID51is an example of “first identification information” according to the technology of the present disclosure.

In a case in which the operation program50A is activated, a CPU42A of the computer constituting the card issuing terminal15functions as an acquisition unit60, an extraction unit61, a generation unit62, and a control unit63in cooperation with the memory41and the like. The CPU42A performs a card issuing task of issuing the ID card10through these processing units. That is, the CPU42A is an example of a “first processor” according to the technology of the present disclosure.

The acquisition unit60acquires the first facial image16from the printer-equipped digital camera14. The acquisition unit60outputs the first facial image16to the extraction unit61.

The extraction unit61extracts first facial feature information70from the first facial image16. More specifically, the extraction unit61specifies a region of the face of the user11appearing in the first facial image16and performs well-known feature extraction processing on the specified region of the face. In the feature extraction processing, the extraction unit61extracts, for example, the size of each of the component parts of the face, such as eyebrows, eyes, nose, mouth, and ears, as the first facial feature information70. In addition, in the feature extraction processing, the extraction unit61extracts the positions of feature points of each component part, such as the ends of eyebrows, the inner corners of eyes, the outer corners of eyes, the tip of the nose, and the corners of the mouth, a positional relationship of each component part, such as the distance between the inner corners of both eyes, and the like, as the first facial feature information70. The extraction unit61outputs the first facial feature information70to the generation unit62.

In addition to the first facial feature information70from the extraction unit61, the identification ID51is input to the generation unit62from the storage40A. The identification ID51is, for example, a facility ID of the introduction facility of the authentication system2and is stored in the storage40A at the time of introducing the authentication system2. The generation unit62generates the authentication code18representing the first facial feature information70and the identification ID51. The generation unit62encrypts the first facial feature information70and the identification ID51to create the authentication code18. The generation unit62outputs the authentication code18to the control unit63. As the identification ID51, the store ID of the store to which the user11belongs, the device ID of the printer-equipped digital camera14, or the like may be used.

The control unit63controls the display of various screens on the touch panel display19. In addition, the control unit63receives various instructions input via the touch panel display19. There are various instructions including an imaging instruction75(seeFIG.5) of the first facial image16through the imaging instruction button on the guide screen and a print instruction78(seeFIG.6) of the first facial image16and the like through the print instruction button on the print instruction screen. The control unit63controls the operations of the printer-equipped digital camera14in response to various instructions.

As shown inFIG.5as an example, in a case in which the imaging instruction button on the guide screen is operated and the imaging instruction75is input from the touch panel display19, the control unit63transmits an imaging instruction signal76to the printer-equipped digital camera14. In a case in which the imaging instruction signal76is received, the printer-equipped digital camera14operates the camera unit31to capture the first facial image16.

As shown inFIG.6as an example, in a case in which the print instruction button on the print instruction screen is operated and the print instruction78is input from the touch panel display19, the control unit63transmits a print instruction signal79to the printer-equipped digital camera14. The print instruction signal79includes the authentication code18. In a case in which the print instruction signal79is received, the printer-equipped digital camera14operates the printer unit32to print the first facial image16, the authentication code18, and the like on the instant film17to create the ID card10.

As shown inFIG.7as an example, an operation program50B is stored in a storage40B of the authentication terminal24. The operation program50B is an application program for causing the computer constituting the authentication terminal24to function as a part of the authentication system2. That is, the operation program50B is an example of the “operation program of the authentication system” according to the technology of the present disclosure. The identification ID51is stored in the storage40B, like the storage40A of the card issuing terminal15.

In a case in which the operation program50B is activated, a CPU42B of the computer constituting the authentication terminal24functions as a first acquisition unit85, a decoding unit86, a second acquisition unit87, an extraction unit88, a collation unit89, a determination unit90, and a control unit91in cooperation with the memory41and the like. The CPU42B performs an authentication task of using the ID card10to determine whether or not to authenticate the user11as the legitimate user through these processing units. That is, the CPU42B is an example of a “second processor” according to the technology of the present disclosure.

The first acquisition unit85acquires the authentication code18read by the code reader20. The first acquisition unit85outputs the authentication code18to the decoding unit86.

The decoding unit86decodes the authentication code18. The decoding unit86outputs first facial feature information70D decoded from the authentication code18to the collation unit89. In addition, the decoding unit86outputs identification ID51D decoded from the authentication code18to the determination unit90.

The second acquisition unit87acquires the second facial image95of the user11captured by the authentication camera21. The second acquisition unit87outputs the second facial image95to the extraction unit88.

The extraction unit88extracts second facial feature information96from the second facial image95using the same algorithm as used in a case in which the extraction unit61of the card issuing terminal15extracts the first facial feature information70from the first facial image16. The extraction unit88outputs the second facial feature information96to the collation unit89.

The collation unit89collates the first facial feature information70D decoded from the authentication code18by the decoding unit86with the second facial feature information96extracted from the second facial image95by the extraction unit88. The collation unit89outputs a collation result97between the first facial feature information70D and the second facial feature information96to the determination unit90.

In addition to the identification ID51D from the decoding unit86and the collation result97from the collation unit89, the identification ID51is input to the determination unit90from the storage40B. The determination unit90determines whether or not to authenticate the user11as the legitimate user based on the collation result97and the identification IDs51and51D. The determination unit90outputs a determination result98as to whether or not to authenticate the user11as the legitimate user to the control unit91.

The control unit91controls the operation of the authentication camera21to cause the authentication camera21to capture the second facial image95. In addition, the control unit91controls locking and unlocking of the security door22and opening and closing of the security door22. Further, the control unit91controls the operation of the speaker23.

As shown inFIG.8as an example, in a case in which the identification ID51D decoded by the decoding unit86and the identification ID51stored in the storage40B match, the determination unit90determines that the identification ID51is proper.

On the other hand, as shown inFIG.9as an example, in a case in which the identification ID51D decoded by the decoding unit86and the identification ID51stored in the storage40B do not match, the determination unit90determines that the identification ID51is improper. In this case, the determination unit90outputs the determination result98indicating that the user11is not the legitimate user regardless of the collation result97.

Further, as shown inFIG.10as an example, even in a case in which the identification ID51is not registered in the authentication code18and the decoding unit86does not decode the identification ID51D from the authentication code18, the determination unit90determines that the identification ID51is improper. Then, the determination result98indicating that the user11is not the legitimate user is output.

As shown inFIG.11as an example, in a case in which the identification ID51is proper and the collation result97from the collation unit89indicates that the first facial feature information70D and the second facial feature information96match, the determination unit90outputs the determination result98indicating that the user11is the legitimate user. The control unit91transmits an unlock instruction signal100to the security door22in a case in which the determination result98indicating that the user11is the legitimate user is input from the determination unit90. In a case in which the unlock instruction signal100is received, the security door22is unlocked and the entrance/exit for commuting is temporarily opened.

As shown inFIG.12as an example, in a case in which the identification ID51is proper and the collation result97from the collation unit89indicates that the first facial feature information70D and the second facial feature information96do not match, the determination unit90outputs the determination result98indicating that the user11is not the legitimate user. In a case in which the determination result98indicating that the user11is not the legitimate user is input from the determination unit90, the control unit91does not transmit anything to the security door22and instead transmits a warning audio output instruction signal103to the speaker23. In a case in which the warning audio output instruction signal103is received, the speaker23outputs a warning audio, such as “The ID card is invalid. Access is not permitted.” In this case, since nothing is transmitted to the security door22, the security door22remains locked. Even in a case shown inFIG.9in which the identification ID51D decoded by the decoding unit86and the identification ID51stored in the storage40B do not match and the determination unit90determines that the identification ID51is improper, the control unit91transmits the warning audio output instruction signal103to the speaker23. Further, even in a case shown inFIG.10in which the decoding unit86does not decode the identification ID51D from the authentication code18and the determination unit90determines that the identification ID51is improper, the control unit91transmits the warning audio output instruction signal103to the speaker23. The warning audio may be a siren, a beep sound, or the like.

Next, the operation of the above-described configuration will be described with reference to the flowcharts shown inFIGS.13to15.

First, the procedure of the card issuing task by the CPU42A of the card issuing terminal15will be described with reference to the flowchart shown inFIG.13.

In a case in which the operation program50A is activated in the card issuing terminal15, the CPU42A of the card issuing terminal15functions as the acquisition unit60, the extraction unit61, the generation unit62, and the control unit63, as shown inFIG.4.

As shown inFIG.5, in a case in which the imaging instruction button on the guide screen is operated, the imaging instruction75is received by the control unit63(YES in step ST100). As a result, the imaging instruction signal76is transmitted from the control unit63to the printer-equipped digital camera14, and the first facial image16of the user11is captured by the camera unit31of the printer-equipped digital camera14(step ST110). The first facial image16is transmitted from the printer-equipped digital camera14to the card issuing terminal15.

The first facial image16from the printer-equipped digital camera14is input to and acquired by the acquisition unit60(step ST120). The first facial image16is output from the acquisition unit60to the extraction unit61.

The extraction unit61extracts the first facial feature information70from the first facial image16(step ST130). The first facial feature information70is output from the extraction unit61to the generation unit62.

The generation unit62generates the authentication code18representing the first facial feature information70and the identification ID51(step ST140). The authentication code18is output from the generation unit62to the control unit63.

As shown inFIG.6, in a case in which the print instruction button on the print instruction screen is operated, the print instruction78is received by the control unit63(YES in step ST150). As a result, the print instruction signal79is transmitted from the control unit63to the printer-equipped digital camera14, and the first facial image16, the authentication code18, and the like are printed on the instant film17by the printer unit32of the printer-equipped digital camera14, and the ID card10is created (step ST160). The ID card10is distributed to the user11.

Subsequently, the procedure of the authentication task by the CPU42B of the authentication terminal24will be described with reference to the flowcharts shown inFIGS.14and15.

In a case in which the operation program50B is activated in the authentication terminal24, as shown inFIG.7, the CPU42B of the authentication terminal24functions as the first acquisition unit85, the decoding unit86, the second acquisition unit87, the extraction unit88, the collation unit89, the determination unit90, and the control unit91.

In a case in which the authentication code18of the ID card10is held over the code reader20by the user11and the authentication code18is read by the code reader20(YES in step ST200), the authentication code18is input to and acquired by the first acquisition unit85(step ST210). The authentication code18is output from the first acquisition unit85to the decoding unit86.

The authentication code18is decoded by the decoding unit86(step ST220). The first facial feature information70D decoded from the authentication code18is output from the decoding unit86to the collation unit89. Further, the identification ID51D decoded from the authentication code18is output from the decoding unit86to the determination unit90.

As shown inFIG.8, in a case in which the identification ID51D decoded by the decoding unit86and the identification ID51stored in the storage40B match, the determination unit90determines that the identification ID51is proper (YES in step ST230). In this case, the authentication camera21is activated by the control unit91, and the second facial image95of the user11is captured (step ST240).

The second facial image95is input to and acquired by the second acquisition unit87(step ST250). The second facial image95is output from the second acquisition unit87to the extraction unit88.

The second facial feature information96from the second facial image95is extracted by the extraction unit88(step ST260). The second facial feature information96is output from the extraction unit88to the collation unit89.

By the collation unit89, the first facial feature information70D decoded by the decoding unit86from the authentication code18is collated with the second facial feature information96extracted from the second facial image95by the extraction unit88(step ST270). The collation result97is output from the collation unit89to the determination unit90.

As shown inFIG.11, in a case in which the collation result97indicates that the first facial feature information70D and the second facial feature information96match (YES in step ST280), the determination unit90determines that the user11is the legitimate user (step ST290). In this case, the determination result98indicating that the user11is the legitimate user is output from the determination unit90to the control unit91.

In a case in which the determination result98indicating that the user11is the legitimate user is input to the control unit91, the unlock instruction signal100is transmitted from the control unit91to the security door22. As a result, the security door22is unlocked and the entrance/exit for commuting is temporarily opened (step ST300).

As shown inFIG.9, in a case in which the identification ID51D decoded by the decoding unit86and the identification ID51stored in the storage40B do not match, the determination unit90determines that the identification ID51is improper (NO in step ST230). Further, as shown inFIG.10, even in a case in which the decoding unit86does not decode the identification ID51D from the authentication code18, the determination unit90determines that the identification ID51is improper (NO in step ST230). In these cases, the determination unit90determines that the user11is not the legitimate user (step ST310). Then, the determination result98indicating that the user11is not the legitimate user is output from the determination unit90to the control unit91.

In addition, as shown inFIG.12, even in a case in which the collation result97indicates that the first facial feature information70D and the second facial feature information96do not match (NO in step ST280), the determination unit90determines that the user11is not the legitimate user (step ST310). Then, the determination result98indicating that the user11is not the legitimate user is output from the determination unit90to the control unit91.

In a case in which the determination result98indicating that the user11is not the legitimate user is input to the control unit91, the warning audio output instruction signal103is transmitted from the control unit91to the speaker23. As a result, the warning audio is output from the speaker23(step ST320).

As described above, the CPU42A of the card issuing terminal15comprises the acquisition unit60, the extraction unit61, the generation unit62, and the control unit63. The acquisition unit60acquires the first facial image16of the user11. The extraction unit61extracts first facial feature information70from the first facial image16. The generation unit62generates the authentication code18representing the first facial feature information70. The control unit63causes the printer-equipped digital camera14to print the authentication code18and the first facial image16on the instant film17to create the ID card10.

In addition, the CPU42B of the authentication terminal24comprises the first acquisition unit85, the decoding unit86, the second acquisition unit87, the extraction unit88, the collation unit89, and the determination unit90. The first acquisition unit85acquires the authentication code18printed on the ID card10possessed by the user11. The decoding unit86decodes the first facial feature information70D from the authentication code18. The second acquisition unit87acquires the second facial image95of the user11. The extraction unit88extracts the second facial feature information96from the second facial image95using the same algorithm as used in a case in which the first facial feature information70is extracted from the first facial image16. The collation unit89collates the first facial feature information70D with the second facial feature information96. The determination unit90determines whether or not to authenticate the user11as the legitimate user based on the collation result97of the collation unit89.

Therefore, unlike the authentication system described in JP2014-222445A, which displays the authentication code on the display unit of the mobile terminal, in the authentication system2of the present disclosure, even a user11who does not possess a mobile terminal or a user11who possesses a mobile terminal but is not familiar with the handling can receive the authentication. This makes it possible to achieve social inclusion, which has been recently advocated for (that is, embracing and supporting all individuals as members of the community so as to protect them from loneliness, isolation, exclusion, and conflicts and to lead to achieving a healthy and cultural lifestyle). In addition, authentication can be performed even in a situation where the mobile terminal cannot be used. Therefore, it can be said that the authentication system2of the present disclosure is more convenient than the authentication system described in JP2014-222445A.

The card issuing unit12and the authentication unit13operate independently of each other. Therefore, unlike the conventional authentication system, there is no need for a server that is connected to the card issuing terminal15and the authentication terminal24via a network and that collectively manages the IDs of legitimate users. It is also possible to eliminate the effort of collating the IDs of all the legitimate users stored in the server with the ID of the user11who attempts to receive the authentication.

The card issuing unit12has a simple configuration of the printer-equipped digital camera14and the card issuing terminal15. Therefore, there are no restrictions on the installation location, and the installation can be performed as long as there is a small amount of space. Accordingly, it is possible to install the card issuing units12at a plurality of locations and issue the ID cards10in a distributed manner at the plurality of locations.

In addition, the control unit63controls the operation of the printer-equipped digital camera14to cause the printer-equipped digital camera14to capture the first facial image16and print the authentication code18and the first facial image16on the instant film17. Therefore, unlike the conventional authentication system, it does not take several days to issue the ID card10, and the ID card10can be immediately issued and distributed to the user11at the installation location of the card issuing unit12.

The ID card10is designed such that the authentication as the legitimate user cannot be received unless the user11himself/herself uses the ID card10. Therefore, a plurality of ID cards10can be issued. In addition, in a case of losing the ID card10, the conventional authentication system requires a complicated procedure, such as making the ID card10unusable, but in the case of the present example, such a procedure is not necessary. Simply reissuing the ID card10is sufficient. Even in a case in which the ID card10is forgotten, the ID card10need only be reissued on the spot.

The identification ID51indicating that the ID card10is issued by the card issuing task of the CPU42A of the card issuing terminal15is added to the ID card10. As shown inFIGS.9and10, in a case in which the identification ID51is improper, the determination unit90determines that the user11is not the legitimate user regardless of the collation result97. Therefore, it is possible to avoid erroneously determining, as the legitimate user, a user11who belongs to a facility other than the introduction facility of the authentication system2, or a user11who attempts to receive authentication with the ID card10which is not issued by the card issuing task, such as a forged ID card10.

The first facial image16is an image that satisfies a standard set in advance. Therefore, the first facial feature information70suitable for authentication can be extracted. In addition, the first facial image16as the display facial image is printed on the ID card10. Therefore, the face of the user11himself/herself and the first facial image16can be compared on the spot, and the impersonation of the user11can be easily detected.

For a user11who has lost the qualification of the legitimate user, such as a retired person or an employee of a closed store, the ID card10is collected from the user11at the time of leaving work on the day when the qualification of the legitimate user is lost. The employee of the closed store may be excluded by making the identification ID51include the store ID and determining that the user11having the authentication code18registered as the store ID of the closed store is not the legitimate user.

Instead of or in addition to outputting the warning audio from the speaker23, for example, a display unit may be provided at the upper part of the security door22to display a symbol or character indicating the determination result98, such as “o” or “OK”, “x” or “No Good (NG)”.

Second Embodiment

In the above-described first embodiment, the identification ID51indicating that the ID card10is issued by the card issuing task is added to the ID card10, but the present disclosure is not limited to this. As a method of ensuring that the ID card10is issued by the card issuing task, the second embodiment shown inFIG.16may be employed.

As shown inFIG.16as an example, in the second embodiment, a reception unit110is constructed in the CPU42B of the authentication terminal24in addition to the processing units85to91of the first embodiment. Then, new employee information111, which is the information of the new employee who will work in the introduction facility from now, is delivered in advance to a security guard112of the introduction facility. In the new employee information111, the first facial image16and the name of the user11, who is the new employee, and the store to which the user11belongs are described.

The security guard112stands in front of the authentication unit13and, in a case in which the user11, who is the new employee attempting to receive authentication, comes to work for the first time, compares the new employee information111, the face of the user11, and the ID card10possessed by the user11. Then, in some cases, the security guard112may ask the user11to present a driver's license or the like by which the name can be confirmed, and visually confirm that the user11is a person registered in the new employee information111.

In a case in which it is determined by visual confirmation that the user11is a person registered in the new employee information111, the security guard112inputs confirmed information113to the authentication terminal24. The confirmed information113includes the authentication code18read by the code reader20from the ID card10possessed by the user11who is the new employee. On the other hand, in a case in which it is determined by visual confirmation that the user11is not a person registered in the new employee information111, the security guard112takes appropriate measures such as prompting the user11to move out. The security guard112is an example of a “qualified person” according to the technology of the present disclosure. The confirmed information113is an example of “second identification information” according to the technology of the present disclosure.

The reception unit110receives the confirmed information113. The reception unit110registers the confirmed information113in a confirmed list114of the storage40B. In the confirmed list114, the authentication code18included in the confirmed information113, the second facial image95captured by the authentication camera21, and the registration date are registered. The second facial image95need not be registered.

In a case of performing the authentication after the initial authentication, the determination unit90searches whether or not the authentication code18acquired by the first acquisition unit85is registered in the confirmed list114. Then, in a case in which the authentication code18acquired by the first acquisition unit85is registered in the confirmed list114, it is determined that the ID card10is issued by the card issuing task, similarly to the case of the identification ID51of the first embodiment.

A case in which the authentication code18acquired by the first acquisition unit85is not registered in the confirmed list114is, that is, at the time of initial authentication. In this case, the security guard112performs visual confirmation as described above.

As described above, in the second embodiment, the reception unit110receives input of the confirmed information113indicating that the security guard112has confirmed that the ID card10is issued by the card issuing task for the user11who attempts to receive the authentication for the first time. Therefore, similarly to the case of the identification ID51of the above-described first embodiment, it is possible to avoid erroneously determining, as the legitimate user, the user11who attempts to receive the authentication with the ID card10that is not issued by the card issuing task.

The qualified person is not limited to the security guard112. The qualified person may be the superior of the store to which the user11, who is the new employee, belongs. In addition, the number of qualified persons is not limited to one. A double check may be performed by the security guard112and the superior.

Third Embodiment

For the user11who has lost the qualification of the legitimate user, such as a retired person or an employee of a closed store, instead of or in addition to collecting the ID card10, a method of the third embodiment shown inFIG.17may be applied.

As shown inFIG.17as an example, in the third embodiment, an invalidation unit120is constructed in the CPU42B of the authentication terminal24, in addition to the processing units85to91of the first embodiment and the reception unit110of the second embodiment. The invalidation unit120receives, for example, retired person information121to be input to the authentication terminal24by the security guard112. In the retired person information121, the first facial image16, the authentication code18, and the name of the user11, who is the retired person, and the store to which the user11belongs are described. At least the authentication code18need only be described in the retired person information121.

The invalidation unit120searches for the authentication code18described in the retired person information121from the confirmed list114of the storage40B, which is created based on the confirmed information113. Then, the authentication code18that has been searched for is invalidated by being deleted from the confirmed list114together with the second facial image95and the registration date. The storage40B is an example of a “storage unit” according to the technology of the present disclosure. In addition, the confirmed information113is an example of “third identification information” according to the technology of the present disclosure.

As described above, in the third embodiment, the confirmed information113indicating that the ID card10is issued by the card issuing task is stored in the storage40B. Then, the invalidation unit120invalidates the confirmed information113for the user11who has lost the qualification of the legitimate user. Therefore, it is possible to avoid erroneously determining the user11who has lost the qualification of the legitimate user as the legitimate user.

As a method of invalidating the confirmed information113, the following method may be employed. That is, in addition to the confirmed list114, a list of users11who have lost the qualifications of legitimate users (hereinafter, referred to as a disqualified person list) is prepared in the storage40B. The invalidation unit120shifts the authentication code18and the like from the confirmed list114to the disqualified person list for the user11who has lost the qualification of the legitimate user. By doing this, the authentication code18and the like of the user11who has lost the qualification of the legitimate user can be left in the storage40B. For example, in a case in which the closed store resumes operations, the authentication code18can be restored from the disqualified person list to the confirmed list114for the employee of the store.

Instead of or in addition to the retired person information121, the invalidation unit120may receive the information on the employee of the closed store to invalidate the confirmed information113of the employee of the closed store.

The confirmed list114may be created by connecting the card issuing terminal15and the authentication terminal24and transmitting the authentication code18from the card issuing terminal15to the authentication terminal24. By doing this, the qualified person, such as the security guard112, does not need to perform confirmation at the time of initial authentication.

In each of the above-described embodiments, as the display facial image, the first facial image16that satisfies a standard set in advance has been described as an example, but the present disclosure is not limited to this. As shown inFIG.18as an example, in addition to an ID card10_1that uses the first facial image16as the display facial image, an ID card10_2that uses a facial image130_1which is not bound by the standard as the display facial image, and an ID card10_3that uses a facial image130_2which is not bound by the standard as the display facial image may be issued. The facial image130_1is an image captured when the user11watches a soccer game. The facial image130_2is an image captured when the user11snowboards. Both the facial images130_1and130_2are images provided by the user11to the card issuing terminal15.

The display facial image is only for visual confirmation of the face of the user11, and the authentication of the user11is performed by the authentication code18. Therefore, there is no problem in the authentication itself even in a case in which the facial image130that is not bound by the standard is used as the display facial image.

As described above, the display facial image to be printed on the ID card10may be the facial image130that is not bound by the standard. Therefore, the facial image130according to the preference of the user11can be used as the display facial image. In addition, the variation of the ID card10can be increased.

The facial image130that is not bound by the standard may be, for example, a facial image decorated with a commercially available image processing application program. Both the first facial image16and the facial image130that is not bound by the standard may be printed on one ID card10.

As in the ID card10shown inFIG.19as an example, in addition to the first facial image16, the authentication code18, and the like, an illustration135, such as an image character of the introduction facility, may be printed. In addition, the authentication code18may include an expiration date of the ID card10in addition to the first facial feature information70and the identification ID51.

As the illustration135, instead of or in addition to the image character of the introduction facility described as an example, a character of an animation or game affiliated with the campaign, a logo of a sponsored sports competition, a logo of the introduction facility and/or the store, or the like may be used. Further, the present disclosure is not limited to the illustration135, and characters indicating an event or campaign being held at the introduction facility or the store may be printed on the ID card10. Furthermore, a pattern, such as a waffle pattern, a hound's tooth, or a checkered pattern may be printed on the ID card10.

The authentication code18may include information that limits the usage location of the ID card10, for example, permitting the use of only one of two entrances/exits for commuting. In addition, for the purpose of performing maintenance on the printer-equipped digital camera14, the authentication code18may include the cumulative number of prints of the printer-equipped digital camera14, in which the ID cards10have been printed. In this case, in a case in which the cumulative number of prints approaches the useful number of the printer-equipped digital camera14, the administrator of the authentication system2is notified to urge the replacement of the printer-equipped digital camera14.

The expiration date of the ID card10may be a short period, such as one day or one week, for example. By doing this, it is possible to eliminate the effort of collecting the ID card10from the user11who has lost the qualification of the legitimate user.

In each of the above-described embodiments, an example in which the printer-equipped digital camera14is used has been described, but the present disclosure is not limited to this. A printer that prints the ID card10and a digital camera that captures the first facial image16may be separately prepared. Therefore, the card medium is not limited to the instant film17described as an example. A plastic plate or the like may be used.

The authentication code18is not limited to the QR code described as an example. A barcode may be used.

The information of the issued ID card10, such as the first facial image16, the authentication code18, the name of the user11, the store to which the user11belongs, the illustration135, characters, and a pattern, may be stored in a database connected to the card issuing terminal15. In addition, the history of the collation result97and the determination result98may be stored in a database connected to the authentication terminal24together with the authentication code18, the second facial image95, and the like.

A film ID for uniquely identifying each of the instant films17may be attached to the instant film17, and this film ID may be used for the authentication task.

In each of the above-described embodiments, as the hardware structure of a processing unit that executes various types of processing, such as the acquisition unit60, the extraction units61and88, the generation unit62, the control units63and91, the first acquisition unit85, the decoding unit86, the second acquisition unit87, the collation unit89, the determination unit90, the reception unit110, and the invalidation unit120, various processors described below can be used. The various processors include, as described above, in addition to the CPUs42A and42B which are general-purpose processors that execute software (operation programs50A and50B) to function as various processing units, a programmable logic device (PLD) which is a processor having a changeable circuit configuration after manufacture, such as a field programmable gate array (FPGA), a dedicated electric circuit which is a processor having a dedicated circuit configuration designed to execute specific processing, such as an application specific integrated circuit (ASIC), and the like.

One processing unit may be composed of one of these various processors or a combination of two or more processors of the same type or different types (for example, a combination of a plurality of FPGAs and/or a combination of a CPU and an FPGA). Alternatively, a plurality of processing units may be composed of one processor.

A first example in which the plurality of processing units are composed of one processor is an aspect in which one or more CPUs and software are combined to constitute one processor and the processor functions as a plurality of processing units, as typified by a computer such as a client and a server. A second example is an aspect in which a processor that realizes the functions of the entire system including a plurality of processing units with one integrated circuit (IC) chip is used, as typified by system on chip (SoC) and the like. As described above, various processing units are composed of one or more of the above-described various processors as the hardware structure.

Furthermore, as the hardware structures of these various processors, more specifically, an electric circuitry in which circuit elements, such as semiconductor elements, are combined can be used.

The technology of the present disclosure can also appropriately combine the above-described various embodiments and/or various modification examples. Further, it goes without saying that the technology of the present disclosure is not limited to each of the above-described embodiments and various configurations may be employed without departing from the gist. Furthermore, the technology of the present disclosure extends to a storage medium that stores the program in a non-transitory manner, in addition to the program.

The contents described and shown above are detailed descriptions of the parts related to the technology of the present disclosure and are merely an example of the technology of the present disclosure. For example, the descriptions of the above-described configurations, functions, operations, and effects are the descriptions of an example of the configurations, functions, operations, and effects of the parts related to the technology of the present disclosure. Accordingly, it is needless to say that unnecessary parts may be deleted, new elements may be added, or replacements may be made with respect to the contents described and shown above, within a scope that does not depart from the gist of the technology of the present disclosure. Further, in order to avoid complications and facilitate understanding of the parts related to the technology of the present disclosure, descriptions of common general knowledge and the like that do not require special descriptions for enabling the implementation of the technology of the present disclosure are omitted, in the contents described and shown above.

In the present specification, “A and/or B” has the same meaning as “at least one of A or B”. That is, “A and/or B” means that only A may be used, only B may be used, or a combination of A and B may be used. In addition, in the present specification, the same concept as “A and/or B” is also applied to a case in which three or more matters are expressed by “and/or”.

All documents, patent applications, and technical standards described in the present specification are incorporated in the present specification by reference to the same extent as in a case in which the individual documents, patent applications, and technical standards were specifically and individually stated to be incorporated by reference.