Patent Description:
In recent years, not only a system having a direct relationship between some kind of sensor device and its control device, but also a system that performs predetermined processing in response to a sensor signal from a sensor device that is a terminal device in the so-called IoT (Internet of Things), have been provided. When such a system determines that a predetermined state (e.g., a fire) has occurred based on a signal from the sensor device, the system performs predetermined processing (e.g., activation of a sprinkler, etc.) corresponding to that state.

However, conventionally, in the above-described system, some kind of actuation is performed using a result of sensing by the sensor device, and it is difficult to ensure the appropriateness of performing predetermined processing.

<CIT> discloses a residence management system using a drone, which comprises: a sensor unit installed inside the residence and sensing indoor information; an RF communication unit transmitting the indoor information sensed by the sensor unit to the outside; and a drone flying over the residence and receiving the indoor information from the RF communication unit. The drone determines the abnormality of the residence by referring to the indoor information, and transmits an emergency signal to management headquarters through a mobile communication network when the abnormality occurs.

<CIT>generally relates to techniques for managing a remote authorization to proceed with an action, such as creating a secure network connection. In some examples, a requesting device receives selection of one or more options. The requesting device transmits a request to proceed with an action to an authenticating device. The authenticating device concurrently displays an indication of the request to proceed with the action, information about the selected one or more options, and an indication of the requesting device. The authenticating device receives authorization to proceed with the action and transmits a response to the requesting device regarding the request to proceed with the action.

<CIT> discloses an electronic device having at least one operational setting, such as a power setting, with at least a first state and a second state. The electronic device may also include an access controller that can receive state data and authorization data from an external source such as a remote control. The access controller may enable a state of the operational setting upon receipt of proper authorization data received from or related to the output from at least one biometric sensor associated with the remote control.

[Non-Patent Literature <NUM>] <NPL>). SUMMARY OF INVENTION.

An object of the present invention is to provide an approval system capable of requesting approval of a user before performing predetermined processing.

According to one embodiment, an approval system includes the features of claim <NUM>.

The drawings are schematic diagrams illustrating the embodiment and promoting an understanding thereof, and the shapes, dimensions, ratios, etc. may be changed as appropriate.

First, a first embodiment will be described.

An approval system according to the embodiment determines whether or not a predetermined state (which may be any state, for example, an anomaly of a sensing target, a fire, etc.) occurs based on a sensor signal from a sensor device such as an IoT device. If it is determined that the predetermined state occurs, the approval system performs approval processing for performing predetermined processing (e.g., stopping of a system related to a sensing target, activation of a sprinkler, etc.). When the approval is successful, the approval system performs the predetermined processing.

<FIG> is a block diagram showing a configuration example of an approval system <NUM> according to the embodiment. As shown in <FIG>, the approval system <NUM> includes biometric authentication devices <NUM> (10a and 10b), a server <NUM>, a sensor device <NUM>, a network <NUM>, etc. The biometric authentication devices <NUM>, the server <NUM>, and the sensor device <NUM> are connected to the network <NUM>.

In addition to the configuration shown in <FIG>, the approval system <NUM> may further include a configuration as necessary, or a specific configuration may be excluded from the approval system <NUM>.

The server <NUM> (information processing apparatus) controls the entire approval system <NUM>. The server <NUM> determines whether or not a predetermined state occurs based on a sensor signal from the sensor device <NUM>. If it is determined that the predetermined state occurs, the server <NUM> causes the biometric authentication device <NUM> to perform approval processing. When the approval is successful, the server <NUM> performs predetermined processing according to the predetermined state. The server <NUM> will be described in detail later.

The biometric authentication device <NUM> performs the approval processing under the control of the server <NUM>. The biometric authentication device <NUM> authenticates a user using biometric information (here, a fingerprint) from the user. The biometric authentication device <NUM> transmits an approval result according to an authentication result of the user to the server <NUM>. The biometric authentication device <NUM> will be described in detail later.

In the embodiment, the approval system <NUM> includes the biometric authentication devices 10a and 10b. The number of biometric authentication devices <NUM> included in the approval system <NUM> is not limited to a specific number.

The sensor device <NUM> is a device that acquires predetermined data. For example, the sensor device <NUM> acquires data such as temperature, humidity, sound, light amount, acceleration, inclination, image, or odor. The sensor device <NUM> transmits a sensor signal indicating the acquired data to the server <NUM> via the network <NUM>. In some cases, the sensor device <NUM> may be provided so as to be able to communicate with a server without going through the network <NUM>.

The sensor device <NUM> is installed not only on a building or a street but also in a predetermined place where an amount of a substance to be sensed by the sensor device <NUM> changes. The sensor device <NUM> acquires data around a place where the sensor device <NUM> is installed. For example, the sensor device <NUM> is an IoT (Internet to Thing) device or a device called an end point.

The approval system <NUM> may include a plurality of sensor devices <NUM>.

The network <NUM> is a communication network for transmitting and receiving data. For example, the network <NUM> is the Internet. Further, the network <NUM> may be an independent communication network.

Next, the biometric authentication device <NUM> will be described.

Since the biometric authentication devices 10a and 10b have the same configuration, they will be described as a biometric authentication device <NUM>.

<FIG> is a perspective view showing a configuration example of the biometric authentication device <NUM>. <FIG> is a block diagram showing a configuration example of the biometric authentication device <NUM>. <FIG> is a perspective view showing an example of use of the biometric authentication device <NUM> in which the user holds the biometric authentication device <NUM> with his/her right hand and the biometric authentication device <NUM> acquires biometric authentication information from a thumb <NUM>.

As shown in <FIG> and <FIG>, the biometric authentication device <NUM> includes a processor <NUM>, a biometric sensor <NUM>, an SE (secure element) <NUM>, a communication interface <NUM>, a battery <NUM>, and a display unit <NUM>. As shown in <FIG>, the biometric authentication device <NUM> includes a housing <NUM> that houses the processor <NUM>, the SE <NUM>, the communication interface <NUM>, and the battery <NUM>, and exposes the biometric sensor <NUM> and the display unit <NUM> to the outside.

The processor <NUM> performs processing and control necessary for the operation of the biometric authentication device <NUM>. The processor <NUM> implements various functions of the biometric authentication device <NUM> based on, for example, a program stored in the SE <NUM>. The processor <NUM> controls the biometric sensor <NUM>, the SE <NUM>, and the communication interface <NUM>. For example, the processor <NUM> verifies biometric information acquired by the biometric sensor <NUM> against biometric information registered in advance, by the SE <NUM>.

The processor <NUM> (second processor) is, for example, a micro processing unit (MPU). Note that the processor <NUM> may be a central processing unit (CPU), a system on a chip (SoC), a digital signal processor (DSP), or a graphics processing unit (GPU). Alternatively, the processor <NUM> may be a combination thereof.

The biometric sensor <NUM> acquires a fingerprint from any finger as biometric information of the user. The biometric sensor <NUM> transmits the fingerprint acquired from the finger as image data to the SE <NUM>. Note that the biometric sensor <NUM> may acquire data other than the fingerprint, and may be, for example, a vein sensor that acquires a vein pattern of a finger as image data.

The SE <NUM> (storage unit) includes a memory that can store data, an encryption logic circuit, etc. The SE <NUM> stores biometric information (here, a fingerprint) registered in advance and data of a feature point extracted from the biometric information. Hereinafter, the data of a feature point extracted from the biometric information will also be referred to as biometric information. Further, the biometric information may be encrypted and held in the SE <NUM>.

Here, the SE <NUM> of the biometric authentication device 10a stores a fingerprint of a first user having a first authority as biometric information registered in advance. The SE <NUM> of the biometric authentication device 10b stores a fingerprint of a second user having a second authority as biometric information registered in advance.

The communication interface <NUM> (second interface) is an interface for connecting to the network <NUM>. That is, the communication interface <NUM> is an interface for connecting to the server <NUM>, etc. via the network <NUM>. For example, the communication interface <NUM> may employ a wired or wireless interface conforming to various communication standards such as Ethernet (registered trademark), Wi-Fi, BLE, and LTE (registered trademark). The communication interface <NUM> can also be realized by a combination thereof.

The battery <NUM> supplies electric power to each unit of the biometric authentication device <NUM>. The battery <NUM> is, for example, a secondary battery.

The display unit <NUM> displays various types of information based on control from the processor <NUM>. For example, the display unit <NUM> is formed by a lamp.

The housing <NUM> is formed in a cubic shape that fits in the fingers of one hand. Here, the cubic shape that fits in the fingers of one hand is, for example, a hexahedron having a size that can be held by the fingers of one hand. In the present embodiment, the housing <NUM> is formed into, for example, a cubic shape having a size that fits into a sphere having a diameter of <NUM>, specifically, a cubic shape having <NUM> sides or less. The housing <NUM> has, for example, a ridge portion and a corner portion formed in a curved surface shape.

As shown in <FIG>, the housing <NUM> accommodates, for example, the processor <NUM>, the SE <NUM>, the communication interface <NUM>, and the battery <NUM>, each of which is mounted on a substrate. In addition, the housing <NUM> accommodates a substrate on which the biometric sensor <NUM> and the display unit <NUM> are mounted, and exposes the biometric sensor <NUM> and the display unit <NUM> to a part of an outer surface of the housing <NUM>. As a specific example, the housing <NUM> has an opening <NUM> that exposes the biometric sensor <NUM> on one surface. The housing <NUM> also has an opening <NUM> that exposes the display unit <NUM>.

Further, the housing <NUM> has a groove <NUM> in a portion of the outer surface and at least a part of the positions with which fingers come into contact when a finger is brought into contact with the biometric sensor <NUM>. For example, the groove <NUM> is provided at least at a position of the housing <NUM> with which a finger different from the finger in contact with the biometric sensor <NUM> among the fingers comes into contact.

The groove <NUM> is formed to have a depth that allows a finger to contact a bottom surface, for example. The bottom surface of the groove <NUM> is formed into a curved surface shape, for example. The shape of the groove <NUM> can be set as appropriate, and for example, the bottom surface may be formed into a planar shape. For example, the groove <NUM> has such a depth and shape that the ball of a finger comes into contact with the bottom surface of the groove <NUM> when the housing <NUM> is held by the fingers.

In the present embodiment, as shown in <FIG>, for example, the groove <NUM> is provided on one of four surfaces adjacent to the surface of the housing <NUM> having the opening <NUM> that exposes the biometric sensor <NUM>. The groove <NUM> is provided on a center side of one surface adjacent to the surface having the opening <NUM> in a direction orthogonal to the surface where the opening <NUM> is provided, and is extended along a direction parallel to the surface where the opening <NUM> is provided.

For example, the groove <NUM> is provided across two opposing surfaces adjacent to the surface of the housing <NUM> on which the groove <NUM> is provided and the surface having the opening <NUM>. In other words, the groove <NUM> is provided between ridge portions formed by the surface having the groove <NUM>, and two opposing surfaces adjacent to both the surface having the groove <NUM> and the surface having the opening <NUM>, so as to cross the surface having the groove <NUM> in a direction parallel to the surface having the opening <NUM>.

More specifically, when the surface where the opening <NUM> is provided is an upper surface 16a and a surface facing the upper surface 16a is a lower surface 16b, the groove <NUM> is provided on any one side surface 16c1 among four side surfaces 16c of the housing <NUM>. In addition, the groove <NUM> extends in a direction orthogonal to a direction in which the upper surface 16a and the lower surface 16b of the housing <NUM> face each other, in other words, in a direction orthogonal to the vertical direction, and in a direction along the side surface 16c1 on which the groove <NUM> is provided. Further, the groove <NUM> extends to a pair of opposing side surfaces 16c2 adjacent to the side surface 16c1. As a result, when the side surface 16c2 is viewed from the front, a part of a side portion of each of the pair of side surfaces 16c2 and the side surface 16c1 on which the groove <NUM> extends is cut out to have a cross-sectional shape of the groove <NUM>.

According to the biometric authentication device <NUM> having such a configuration, the groove <NUM> extending in the direction along the upper surface 16a on which the biometric sensor <NUM> is provided is provided on any one side surface 16c1 of four side surfaces 16c adjacent to the upper surface 16a where the biometric sensor <NUM> is exposed. Thus, as shown in <FIG>, when the housing <NUM> is held by one of the right and left hands (in the present embodiment, fingers of a right hand <NUM>) and the thumb <NUM> is brought into contact with the biometric sensor <NUM>, an index finger <NUM> can be guided to the groove <NUM>. When the index finger <NUM> is located in the groove <NUM>, the position of the index finger <NUM> is guided by the groove <NUM>, and for example, a middle finger <NUM>, a ring finger <NUM>, and a little finger <NUM> are disposed on the lower surface 16b side facing the upper surface 16a on which the biometric sensor <NUM> is provided. When the thumb <NUM> is brought into contact with the biometric sensor <NUM>, the housing <NUM> is held by the thumb <NUM>, the index finger <NUM>, and the middle finger <NUM>, and a predetermined region of the thumb <NUM> (in the embodiment, a part of a region of the thumb <NUM> that has the fingerprint) comes into contact with the biometric sensor <NUM>.

That is, when a finger is located in the groove <NUM>, a positional relationship of the other fingers with respect to the housing <NUM> is also determined. As a result, the groove <NUM> guides a positional relationship between the biometric sensor <NUM> and a finger in contact with the biometric sensor <NUM>.

Next, the server <NUM> will be described.

<FIG> shows a configuration example of the server <NUM> according to the embodiment. <FIG> is a block diagram showing the configuration example of the server <NUM>. As shown in <FIG>, the server <NUM> includes a processor <NUM>, a ROM <NUM>, a RAM <NUM>, an NVM <NUM>, a communication unit <NUM>, an operation unit <NUM>, a display unit <NUM>, etc..

The processor <NUM> is connected to each of the ROM <NUM>, RAM <NUM>, NVM <NUM>, communication unit <NUM>, operation unit <NUM>, and display unit <NUM> via a data bus, etc..

The server <NUM> may include a configuration according to need in addition to the configuration shown in <FIG>, or a specific configuration may be excluded from the server <NUM>.

The processor <NUM> (first processor) has a function of controlling an overall operation of the server <NUM>. The processor <NUM> may include an internal cache, various interfaces, etc. The processor <NUM> realizes various processing by executing programs stored in advance in an internal memory, the ROM <NUM>, or the NVM <NUM>.

Note that some of the various functions realized by the execution of the programs by the processor <NUM> may be realized by a hardware circuit. In this case, the processor <NUM> controls the functions performed by the hardware circuit.

The ROM <NUM> is a non-volatile memory in which a control program, control data, etc. are stored in advance. The control program and control data stored in the ROM <NUM> are incorporated therein in advance according to the specification of the server <NUM>.

The RAM <NUM> is a volatile memory. The RAM <NUM> temporarily stores data being processed by the processor <NUM>. The RAM <NUM> stores various application programs based on instructions from the processor <NUM>. In addition, the RAM <NUM> may store data necessary for executing the application programs, execution results of the application programs, etc..

The NVM <NUM> is a non-volatile memory capable of writing and rewriting data. The NVM <NUM> includes, for example, a hard disk drive (HDD), a solid state drive (SSD), or a flash memory. The NVM <NUM> stores a control program, an application, various data, etc. depending on an operational use of the server <NUM>.

The communication unit <NUM> (first interface) is an interface for connecting to the network <NUM>. That is, the communication unit <NUM> is an interface for connecting to the biometric authentication device <NUM>, the sensor device <NUM>, etc. via the network <NUM>. For example, the communication unit <NUM> supports a wired or wireless LAN connection.

The communication unit <NUM> may employ a wired or wireless interface conforming to various communication standards such as Ethernet, Wi-Fi, BLE, and LTE. In addition, the communication unit <NUM> can also be realized by a combination thereof. The communication unit <NUM> may include an interface for communicating with the sensor device <NUM> and an interface for communicating with the biometric authentication device <NUM>.

The operation unit <NUM> receives inputs of various operations from an operator. The operation unit <NUM> transmits a signal indicating an input operation to the processor <NUM>. The operation unit <NUM> may be formed by a touch panel.

The display unit <NUM> displays image data from the processor <NUM>. For example, the display unit <NUM> is formed by a liquid crystal monitor. When the operation unit <NUM> is formed by a touch panel, the display unit <NUM> may be formed integrally with the operation unit <NUM>.

For example, the server <NUM> is a desktop PC or a notebook PC, etc..

Next, functions realized by the biometric authentication device <NUM> will be described. The functions realized by the biometric authentication device <NUM> are realized by the processor <NUM> executing a program stored in the internal memory or the SE <NUM>, etc..

First, the processor <NUM> has a function of receiving an approval request signal requesting approval through the communication interface <NUM>.

The processor <NUM> receives an approval request signal by push notification from the server <NUM> through the communication interface <NUM>. The processor <NUM> may also transmit a predetermined request to the server <NUM> through the communication interface <NUM> at a predetermined timing. The processor <NUM> may receive an approval request signal as a response to that request.

Further, the processor <NUM> has a function of causing the biometric sensor <NUM> to acquire biometric information when receiving the approval request signal.

Here, the biometric information is a fingerprint (image data of the fingerprint) of the user.

Upon receiving the approval request signal, the processor <NUM> displays on the display unit <NUM> guidance for prompting the user to bring a finger into contact with the biometric sensor <NUM>. For example, the processor <NUM> causes the display unit <NUM> to light up in a predetermined color as that guidance. Further, the processor <NUM> may cause the display unit <NUM> to blink. The method by which the processor <NUM> displays that guidance is not limited to a specific method.

Here, it is assumed that the user (the first user or the second user) brings his/her finger into contact with the biometric sensor <NUM>.

The biometric sensor <NUM> acquires a fingerprint from a finger in contact with the biometric sensor <NUM>. The biometric sensor <NUM> transmits the acquired fingerprint to the SE <NUM>.

The processor <NUM> also has a function of performing authentication processing based on a fingerprint acquired through the biometric sensor <NUM>.

The processor <NUM> performs the authentication processing using the SE <NUM>. As described above, the biometric sensor <NUM> transmits the acquired fingerprint to the SE <NUM>. The SE <NUM> compares the pre-registered biometric information with the received fingerprint. For example, the SE <NUM> verifies feature points, etc. of the two. When the two are matched (identified) with each other, the SE <NUM> transmits to the processor <NUM> a signal (matching signal) indicating that the two match. In addition, if the two do not match, the SE <NUM> transmits to the processor <NUM> a signal (mismatching signal) indicating that the two do not match.

When receiving a matching signal from the SE <NUM>, the processor <NUM> determines that the authentication is successful. When it is determined that the authentication is successful, the processor <NUM> transmits to the server <NUM> a signal (approval response signal) indicating that the approval is successful as a response through the communication interface <NUM>.

When the processor <NUM> receives a mismatching signal from the SE <NUM>, the processor <NUM> determines that the authentication has failed. When it is determined that the authentication has failed, the processor <NUM> transmits to the server <NUM> a signal (rejection response signal) indicating that the approval has failed as a response through the communication interface <NUM>.

Next, functions realized by the server <NUM> will be described. The function of the server <NUM> is realized by the processor <NUM> executing a program stored in the internal memory, the ROM <NUM>, or the NVM <NUM>, etc..

First, the processor <NUM> has a function of acquiring a sensor signal from the sensor device <NUM> through the communication unit <NUM>.

For example, the processor <NUM> receives a sensor signal transmitted at predetermined intervals from the sensor device <NUM> through the communication unit <NUM>.

Further, the processor <NUM> may transmit a predetermined request to the sensor device <NUM> through the communication unit <NUM>. The processor <NUM> receives the sensor signal as a response to that request.

In addition, the processor <NUM> has a function of determining whether or not a state (a predetermined state) satisfying a predetermined condition occurs based on the acquired sensor signal.

The predetermined state is related to data (such as values of various parameters) indicated by the sensor signal. The predetermined state is not necessarily limited to an anomalous state, and refers to a state that requires confirmation or approval by a human once. A typical example of the predetermined state is a state in which it is determined that an anomaly has occurred based on data indicated by the sensor signal. For example, the predetermined state is a state in which a disaster such as a fire or an earthquake, an accident, an incident, etc. has occurred.

For example, in a case where the sensor signal indicates a temperature of a predetermined place, the processor <NUM> determines that a fire is occurring as the predetermined state when the temperature indicated by the sensor signal exceeds a predetermined threshold value.

Note that the predetermined state and the method by which the processor <NUM> determines the occurrence of the predetermined state are not limited to specific configurations.

In addition, the processor <NUM> has a function of determining the biometric authentication device <NUM> to perform approval processing when it is determined that the predetermined state occurs.

The processor <NUM> determines predetermined processing (countermeasure processing) corresponding to the predetermined state that has occurred.

The countermeasure processing is processing for dealing with a predetermined state when that predetermined state occurs. For example, in a case where the predetermined state is a fire, the countermeasure processing is activation of a sprinkler, interruption of a power source of a predetermined device, stopping of a system, issuance of an alarm, etc..

For example, the NVM <NUM> stores a table in which a state condition and countermeasure processing are associated with each other. The processor <NUM> determines countermeasure processing corresponding to a predetermined state that has occurred with reference to that table.

When the countermeasure processing is determined, the processor <NUM> determines an authority to perform the countermeasure processing. For example, the NVM <NUM> stores a table in which countermeasure processing and an authority are associated with each other. The processor <NUM> determines an authority to perform the countermeasure processing with reference to that table. Here, the processor <NUM> determines a first authority or a second authority as the authority to perform the countermeasure processing. Here, the first authority is an authority to perform a part of the countermeasure processing. The second authority is an authority to perform other countermeasure processing in addition to that part of the countermeasure processing. Note that the second authority may be an authority to perform all of the countermeasure processing.

The processor <NUM> may determine a plurality of authorities as authorities to perform countermeasure processing. For example, when the determined countermeasure processing can be performed with the first authority, the processor <NUM> may determine the first authority and the second authority as authorities to perform the determined countermeasure processing.

When the authority is determined, the processor <NUM> determines a biometric authentication device <NUM> corresponding to the determined authority as a biometric authentication device <NUM> to perform approval processing. That is, the processor <NUM> determines a biometric authentication device <NUM> capable of performing authentication processing of a user having the determined authority as the biometric authentication device <NUM> to perform the approval processing.

For example, in a case where the first authority is determined, the processor <NUM> determines the biometric authentication device 10a that stores the fingerprint of the first user having the first authority as the biometric authentication device <NUM> to perform the approval processing.

The processor <NUM> also has a function of transmitting an approval request signal to the determined biometric authentication device <NUM> through the communication unit <NUM>.

When determining the biometric authentication device <NUM> to perform the approval processing, the processor <NUM> transmits an approval request signal to the determined biometric authentication device <NUM> through the communication unit <NUM>.

In addition, the processor <NUM> has a function of performing countermeasure processing corresponding to the predetermined state that has occurred when receiving an approval response signal through the communication unit <NUM>.

When receiving an approval response signal from the biometric authentication device <NUM> after transmitting the approval request signal to the biometric authentication device <NUM>, the processor <NUM> performs the countermeasure processing. For example, the processor <NUM> transmits a signal performing the countermeasure processing to an external device.

For example, when the countermeasure processing is activation of a sprinkler, the processor <NUM> transmits a signal activating the sprinkler to a device for controlling the sprinkler through the communication unit <NUM>, etc..

In a case of transmitting the approval request signal to a plurality of biometric authentication devices <NUM>, the processor <NUM> performs the countermeasure processing if an approval response signal is received from at least one of the biometric authentication devices <NUM>. In addition, the processor <NUM> may perform the countermeasure processing when receiving an approval response signal from each of the biometric authentication devices <NUM>. Further, the processor <NUM> may perform the countermeasure processing when receiving an approval response signal from a predetermined number or more of the biometric authentication devices <NUM>.

When receiving a rejection response signal from the biometric authentication device <NUM> after transmitting the approval request signal to the biometric authentication device <NUM>, the processor <NUM> outputs an error indicating that the approval has failed. For example, the processor <NUM> displays an error message on the display unit <NUM>, etc..

Next, an operation example of the approval system <NUM> will be described.

<FIG> is a flowchart for explaining the operation example of the approval system <NUM>.

First, the sensor device <NUM> transmits a sensor signal to the server <NUM> (S11).

The processor <NUM> of the server <NUM> receives the sensor signal from the sensor device <NUM> through the communication unit <NUM>. Here, the processor <NUM> determines that a predetermined state occurs based on the received sensor signal (S12).

When it is determined that the predetermined state occurs, the processor <NUM> determines a biometric authentication device <NUM> to perform approval processing (S13). When the biometric authentication device <NUM> to perform authentication processing is determined, the processor <NUM> transmits an approval request signal to the determined biometric authentication device <NUM> through the communication unit <NUM> (S14).

The processor <NUM> of the biometric authentication device <NUM> receives the approval request signal through the communication interface <NUM>. Upon receiving the approval request signal, the processor <NUM> acquires biometric information through the biometric sensor <NUM> (S15).

When the biometric information is acquired, the processor <NUM> performs the authentication processing using the acquired biometric information (S16). Here, it is assumed that the processor <NUM> succeeds in authentication. When the authentication processing is performed, the processor <NUM> transmits an approval response signal to the server <NUM> through the communication interface <NUM> (S17).

The processor <NUM> of the server <NUM> receives the approval response signal from the biometric authentication device <NUM> through the communication unit <NUM>. When the approval response signal is received, the processor <NUM> performs countermeasure processing (S18). When the processor <NUM> performs the countermeasure processing, the approval system <NUM> finishes the operation.

Next, an operation example of the server <NUM> will be described.

<FIG> is a flowchart for explaining the operation example of the server <NUM>.

First, the processor <NUM> of the server <NUM> receives a sensor signal from the sensor device <NUM> through the communication unit <NUM> (S21). Upon receiving the sensor signal, the processor <NUM> determines whether or not a predetermined state occurs based on the sensor signal (S22).

If it is determined that the predetermined state does not occur (NO in S22), the processor <NUM> returns to S21.

If it is determined that the predetermined state occurs (YES in S22), the processor <NUM> determines countermeasure processing corresponding to the predetermined state that has occurred (S23). When the countermeasure processing is determined, the processor <NUM> determines a biometric authentication device <NUM> to perform authentication processing based on the determined countermeasure processing (S24).

When the biometric authentication device <NUM> is determined, the processor <NUM> transmits an approval request signal to the determined biometric authentication device <NUM> through the communication unit <NUM> (S25). When the approval request signal is transmitted, the processor <NUM> receives a response from the biometric authentication device <NUM> through the communication unit <NUM> (S26).

When the response is received, the processor <NUM> determines whether or not the response is an approval response signal (S27). When it is determined that the response is an approval response signal (YES in S27), the processor <NUM> performs the countermeasure processing (S28).

If it is determined that the response is not an approval response signal (the response is a rejection response signal) (NO in S27), the processor <NUM> outputs an error (S29).

When the countermeasure processing is performed (S28) or when the error is output (S29), the processor <NUM> finishes the operation.

When it is determined that the predetermined state occurs, the processor <NUM> of the server <NUM> may display information indicating the predetermined state that has occurred on the display unit <NUM>, etc. In addition, when the countermeasure processing is determined, the processor <NUM> may display information indicating the determined countermeasure processing on the display unit <NUM>, etc..

Further, the processor <NUM> may present the predetermined state that has occurred or the determined countermeasure processing to the user whose fingerprint is acquired by the biometric authentication device <NUM> to which the approval request signal is transmitted. For example, the processor <NUM> may transmit information indicating the predetermined state that has occurred or the determined countermeasure processing to a terminal held by that user. The processor <NUM> may also cause the biometric authentication device <NUM> to display the predetermined state that has occurred or the determined countermeasure processing.

The processor <NUM> may also store the approval request signal and the approval response signal (or the rejection response signal) as an operation log in the NVM <NUM>. Further, the processor <NUM> may store the approval request signal and the approval response signal (or the rejection response signal) in a predetermined external device.

When the approval system formed as described above determines that a predetermined state occurs based on a sensor signal from the sensor device, the approval system causes the biometric authentication device to perform approval processing before performing processing corresponding to that state. The approval system performs that processing when the approval by the biometric authentication device is successful, that is, after it can be confirmed that the approval is of a person who is eligible for approval. As a result, the approval system can ensure the appropriateness of performing that processing. In the first embodiment, approval propriety is directly requested from the server to the biometric authentication device. However, approval may be requested to a mobile device such as a mobile phone through communication via a mobile line or communication via Wi-Fi, approval propriety may be requested to a biometric authentication device capable of separately communicating via Bluetooth (registered trademark) using an app of that mobile device, and a result thereof may be returned to the server. In this way, a system can be realized in which, by simply installing an app on a mobile device, even if different OSs provided by various carriers are installed on the mobile device, approval propriety can be incorporated into a part of a determination process by biometric authentication software incorporated in the mobile device or a separately provided biometric authentication device.

Next, a second embodiment will be described. The second embodiment is not encompassed by the wording of the claims but is considered as useful for understanding the invention.

An approval system according to a second embodiment is different from that of the first embodiment in that the biometric authentication device <NUM> controls the IoT device. Therefore, the other points are denoted by the same reference signs, and detailed descriptions thereof will be omitted. Similarly, a description of an effect that can be derived from the configuration of the first embodiment will be omitted here.

The approval system according to the second embodiment is a system for a person (a treating person) who gives predetermined treatment such as care, nursing, or medical treatment to explicitly indicate a person (a person to be treated) who receives that predetermined treatment. For example, the approval system may be used in a hospital, a sanatorium, or a care facility.

<FIG> is a block diagram showing a configuration example of an approval system <NUM>' according to the second embodiment. As shown in <FIG>, the approval system <NUM>' includes the biometric authentication devices <NUM> (10a and 10b), the network <NUM>, IoT devices <NUM> (60a to 60c), etc. The biometric authentication devices <NUM> and the IoT devices <NUM> are connected to the network <NUM>.

In addition to the configuration shown in <FIG>, the approval system <NUM>' may further include a configuration as necessary, or a specific configuration may be excluded from the approval system <NUM>'.

The IoT devices 60a to 60c include lamps 61a to 61c each formed of an LED, etc. Since the IoT devices 60a to 60c have the same configuration, they will be described as the IoT device <NUM>. Since the lamps 61a to 61c have the same configuration, they will be described as the lamp <NUM>.

The IoT device <NUM> operates in response to a control signal from the biometric authentication device <NUM>. That is, the IoT device <NUM> turns on or off the lamp <NUM> based on the control signal from the biometric authentication device <NUM>.

When receiving a control signal (a lighting signal) instructing lighting of the lamp <NUM> from the biometric authentication device <NUM> through the network <NUM>, the IoT device <NUM> lights the lamp. The IoT device <NUM> may maintain the lighting of the lamp until receiving a control signal instructing it to turn off the lamp. Further, the IoT device <NUM> may turn off the lamp when a predetermined time elapses after the lamp is turned on.

The IoT devices 60a to 60c correspond to predetermined persons to be treated, respectively. For example, the IoT devices 60a to 60c indicate positions where the persons to be treated are present, respectively. For example, the IoT devices 60a and 60c are installed near positions where beds or seats, etc. of the persons to be treated are present, respectively. That is, the IoT devices 60a to 60c indicate the presence of the persons to be treated corresponding thereto by turning on the lamps 61a to 61c, respectively.

Here, the approval system <NUM>' includes the three IoT devices 60a to 60c. The IoT devices 60a to 60c are installed at positions where predetermined persons to be treated a to c are present, respectively.

Next, functions realized by the biometric authentication device <NUM> will be described. The function of the biometric authentication device <NUM> is realized by the processor <NUM> executing a program stored in the internal memory or the SE <NUM>, etc..

The processor <NUM> realizes the following function in addition to the functions realized in the first embodiment.

The processor <NUM> has a function of transmitting a lighting signal to the IoT device <NUM> through the communication interface <NUM> when authentication is successful.

Here, the communication interface <NUM> is an interface for communicating with the IoT device <NUM>, etc. via the network <NUM>.

In addition, the processor <NUM> causes the SE <NUM> to perform authentication processing even if an approval request signal is not received. That is, when a finger comes into contact with the biometric sensor <NUM>, the processor <NUM> causes the biometric sensor <NUM> to acquire a fingerprint. The processor <NUM> causes the SE <NUM> to perform the authentication processing using the acquired fingerprint.

When the authentication is successful, the processor <NUM> transmits a lighting signal to the IoT device <NUM> via the network <NUM>.

The processor <NUM> transmits the lighting signal to a predetermined IoT device <NUM>. That is, the processor <NUM> transmits a lighting signal to an IoT device <NUM> corresponding to a person to be treated who is treated by a treating person who carries the biometric authentication device <NUM>.

For example, in a case where a treating person who carries the biometric authentication device 10a gives the persons to be treated a and b treatment, the processor <NUM> of the biometric authentication device 10a transmits a lighting signal to the IoT devices 60a and 60b (the IoT devices <NUM> corresponding to the persons to be treated a and b) when authentication is successful.

When authentication fails, the processor <NUM> may output an error. For example, the processor <NUM> may turn on the display unit <NUM> as an error. Further, the processor <NUM> may transmit a predetermined signal as an error to an external device.

Next, an operation example of the biometric authentication device <NUM> will be described.

<FIG> is a flowchart for explaining the operation example of the biometric authentication device <NUM>.

First, the processor <NUM> of the biometric authentication device <NUM> determines whether or not the biometric sensor <NUM> acquires a fingerprint (S51). That is, the processor <NUM> determines whether or not a finger comes into contact with the biometric sensor <NUM>.

If it is determined that the biometric sensor <NUM> does not acquire a fingerprint (NO in S51), the processor <NUM> returns to S51.

If it is determined that the biometric sensor <NUM> acquires a fingerprint (YES in S51), the processor <NUM> causes the SE <NUM> to verify the fingerprint acquired by the biometric sensor <NUM> against a fingerprint registered in advance (S52).

If the SE <NUM> succeeds in verification (YES in S53), the processor <NUM> transmits a lighting signal to a predetermined IoT device <NUM> through the communication interface <NUM> (S54). If the SE <NUM> fails in verification (NO in S53), the processor <NUM> outputs an error (S55).

When the lighting signal is transmitted to the predetermined IoT device <NUM> (S54) or when the error is output (S55), the processor <NUM> finishes the operation.

Note that the biometric authentication device <NUM> may store fingerprints of a plurality of treating persons in advance. In this case, the SE <NUM> of the biometric authentication device <NUM> specifies a treating person who matches the acquired fingerprint. The processor <NUM> transmits a lighting signal to an IoT device <NUM> corresponding to a person to be treated who is treated by the treating person who matches the acquired fingerprint.

The biometric authentication device formed as described above transmits a control signal to a predetermined IoT device when fingerprint verification is successful. As a result, the biometric authentication device can control the IoT device corresponding to a user after authenticating that user.

In addition, after authenticating a treating person as a user, the biometric authentication device transmits a lighting signal to an IoT device corresponding to a person to be treated who is treated by that treating person. As a result, the biometric authentication device can clearly indicate the person to be treated who is treated by that treating person. Therefore, the biometric authentication device can prevent a mix-up of persons to be treated. In this configuration according to the second embodiment, the IoT device operates in response to a control signal from the biometric authentication device. However, the IoT device may issue a command to the biometric authentication device via the network so as to encourage the biometric authentication device to perform biometric authentication, and the biometric authentication device may perform biometric authentication in response to the command. With such a configuration, the biometric authentication device can clearly indicate the person to be treated who is treated by that treating person by an action from the IoT device side when necessary. Furthermore, although the second embodiment is configured to turn on a lamp on the IoT device side, the same effect as that of the lamp can be expected in a case where, instead of the lamp, an authentication result display means that allows the user to know a result of biometric authentication is provided in the IoT device or a peripheral device thereof.

Next, a third embodiment will be described.

An approval system according to the third embodiment is different from that of the first embodiment in that biometric information of a plurality of users is registered in the biometric authentication device <NUM>. Therefore, other points are denoted by the same reference signs, and detailed descriptions thereof will be omitted. Similarly, a description of an effect that can be derived from the configuration of the first embodiment will also be omitted here.

The SE <NUM> of the biometric authentication device <NUM> stores biometric information of a plurality of users. Here, the SE <NUM> stores a fingerprint of a first user having a first authority and a fingerprint of a second user having a second authority as the biometric information of a plurality of users.

Note that the approval system <NUM> may include one biometric authentication device <NUM>.

The processor <NUM> has a function of transmitting an approval request signal requesting approval by a determined authority to the biometric authentication device <NUM> through the communication unit <NUM>.

That is, the approval request signal requests authentication processing of a user having an authority to perform countermeasure processing.

For example, when determining the first authority as an authority to perform countermeasure processing, the processor <NUM> transmits an approval request signal requesting approval by the first authority to the biometric authentication device <NUM>. That is, the processor <NUM> transmits an approval request signal requesting authentication processing of the first user having the first authority to the biometric authentication device <NUM>.

When a plurality of authorities are determined as authorities for performing countermeasure processing, the processor <NUM> transmits an approval request signal requesting approval by any one of the plurality of determined authorities to the biometric authentication device <NUM>.

The processor <NUM> has a function of performing authentication processing based on a fingerprint acquired through the biometric sensor <NUM> according to an approval request signal.

The processor <NUM> performs the authentication processing using the SE <NUM>. The SE <NUM> compares each piece of biometric information registered in advance with the fingerprint received from the biometric sensor <NUM>. For example, the SE <NUM> verifies feature points of the two.

If biometric information matching the input fingerprint is present in the pre-registered biometric information, the SE <NUM> outputs a signal indicating a user of the matched biometric information to the processor <NUM>.

If there is no matching biometric information, the SE <NUM> transmits a signal indicating that the received fingerprint is not registered as biometric information to the processor <NUM>.

If a signal indicating that the received fingerprint is not registered as biometric information is acquired from the SE <NUM>, the processor <NUM> determines that the authentication has failed. When it is determined that the authentication has failed, the processor <NUM> transmits a rejection response signal to the server <NUM> through the communication interface <NUM>.

When the processor <NUM> acquires a signal indicating a user of matched biometric information from the SE <NUM>, the processor <NUM> determines whether or not an authority of the user indicated by that signal and an authority from which the approval request signal requests approval are identical (matched). For example, the internal memory or the SE <NUM> of the processor <NUM> stores a table in which users and authorities are associated with each other. The processor <NUM> determines whether or not the two authorities are identical with reference to that table.

If the two authorities are identical, the processor <NUM> determines that the authentication is successful. When it is determined that the authentication is successful, the processor <NUM> transmits an approval response signal to the server <NUM> through the communication interface <NUM>.

If the two authorities are not identical, the processor <NUM> determines that the authentication has failed. When it is determined that the authentication has failed, the processor <NUM> transmits a rejection response signal to the server <NUM> through the communication interface <NUM>.

In a case where an approval request signal indicates a plurality of authorities, the processor <NUM> transmits an approval response signal to the server <NUM> if an authority of a user of matched biometric information and any one of the plurality of authorities are identical.

Further, a user may have a plurality of authorities. In this case, the processor <NUM> transmits an approval response signal to the server <NUM> if any one of the plurality of authorities of the user and an authority from which an approval request signal requests approval are identical.

When it is determined that the predetermined state occurs, the processor <NUM> determines an authority to perform countermeasure processing corresponding to the predetermined state (S31). When the authority is determined, the processor <NUM> transmits an approval request signal requesting approval by the determined authority to the biometric authentication device <NUM> through the communication unit <NUM> (S32).

The processor <NUM> of the biometric authentication device <NUM> receives the approval request signal through the communication interface <NUM>. When the approval request signal is received, the processor <NUM> acquires biometric information through the biometric sensor <NUM> (S15).

When the biometric information is acquired, the processor <NUM> performs authentication processing in accordance with the approval request signal based on the acquired biometric information (S33). Here, it is assumed that the processor <NUM> succeeds in authentication. When the authentication processing is performed, the processor <NUM> transmits an approval response signal to the server <NUM> through the communication interface <NUM> (S17).

First, the processor <NUM> of the biometric authentication device <NUM> determines whether or not an approval request signal is received from the server <NUM> through the communication interface <NUM> (S41). If it is determined that the approval request signal is not received (NO in S41), the processor <NUM> returns to S41.

If it is determined that the approval request signal is received (YES in S41), the processor <NUM> causes the biometric sensor <NUM> to acquire a fingerprint (S42). When the fingerprint is acquired, the processor <NUM> causes the SE <NUM> to verify the fingerprint acquired by the biometric sensor <NUM> against a plurality of fingerprints registered in advance (S43).

If biometric information matching the fingerprint acquired by the biometric sensor <NUM> is registered (YES in S44), the processor <NUM> determines whether or not an authority of a user of the matched biometric information and an authority indicated by the approval request signal are identical (S45).

If it is determined that the two authorities are identical (YES in S45), the processor <NUM> transmits an approval response signal to the server <NUM> through the communication interface <NUM> (S46).

If biometric information matching the fingerprint acquired by the biometric sensor <NUM> is not registered (NO in S44) or if it is determined that the two authorities are not identical (NO in S45), the processor <NUM> transmits a rejection response signal to the server <NUM> through the communication interface <NUM> (S47).

When the approval response signal is transmitted to the server <NUM> (S46) or when the rejection response signal is transmitted to the server <NUM> (S47), the processor <NUM> finishes the operation.

The processor <NUM> of the server <NUM> may determine a biometric authentication device <NUM> in which biometric information of a user having a determined authority is registered. The processor <NUM> may transmit an approval request signal to the determined biometric authentication device <NUM>.

The approval system formed as described above transmits an approval response signal based on an authority of a user authenticated by the biometric authentication device. As a result, the approval system does not need to manage the user's authority at the server.

While certain embodiments have been described, these embodiments have been presented by way of example only, and are not intended to limit the scope of the inventions.

Claim 1:
An approval system (<NUM>) comprising an information processing apparatus (<NUM>) and a plurality of biometric authentication devices (<NUM>, 10a, 10b), wherein
the information processing apparatus includes:
a first storage unit storing a countermeasure processing-and-authority associating table;
a first interface (<NUM>) for communicating with a sensor device (<NUM>) and the plurality of biometric authentication devices; and
a first processor (<NUM>) configured to:
receive (S21) a sensor signal from the sensor device through the first interface;
when a state satisfying a predetermined condition related to data indicated by the sensor signal occurs, determine (S23) countermeasure processing corresponding to the state, determine (S24) an authority to perform the countermeasure processing with reference to the countermeasure processing-and-authority associating table, determine a biometric authentication device to perform approval processing from among the plurality of biometric authentication devices based on the determined authority, and transmit (S25) an approval request signal requesting approval of the countermeasure processing to the determined biometric authentication device through the first interface; and
perform (S28) the countermeasure processing when an approval response signal indicating that the approval of the countermeasure processing is successful is received from the determined biometric authentication device through the first interface, and
each of the plurality of biometric authentication devices includes:
a second interface (<NUM>) for communicating with the information processing apparatus;
a second storage unit (<NUM>) configured to store biometric information in advance;
a biometric sensor (<NUM>) configured to acquire biometric information; and
a second processor (<NUM>) configured to:
cause the biometric sensor to acquire (S51) the biometric information when the approval request signal is received; and
transmit (S54) the approval response signal to the information processing apparatus through the second interface when the biometric information acquired by the biometric sensor and the biometric information stored in the second storage unit are identified with each other.