Patent ID: 12242579

EXAMPLE EMBODIMENT

First, an outline of an example embodiment will be described. Note that the reference numerals in the drawings attached to this outline are attached to elements for convenience as an example for assisting understanding, and description of this outline is not intended to be any limitation. In addition, in a case where there is no particular explanation, a block illustrated in each drawing represents not a configuration of a hardware unit but a configuration of a functional unit. A connection line between blocks in each drawing includes both bidirectional and unidirectional lines. A unidirectional arrow schematically indicates a flow of a main signal (data) and does not exclude bidirectionality. In the present specification and the drawings, elements that can be similarly described are denoted by the same reference numerals, and redundant description can be omitted.

An authentication system according to an example embodiment includes at least one or more first terminals101, a plurality of second terminals102, and a server device103(seeFIG.1). The first terminal101is a terminal capable of providing a service using a biometric authentication function or a non-biometric authentication function. Each of the second terminals102is a terminal capable of switching the biometric authentication function and the non-biometric authentication function and capable of providing a service using the biometric authentication function or the non-biometric authentication function. The server device103is a server connected to the first terminal101and the plurality of second terminals102. The server device103calculates a use rate of the biometric authentication function in the at least one or more first terminals101. The server device103determines an operation mode for at least one or more of the plurality of second terminals102based on the calculated use rate.

In the-described authentication system, the server device103grasps a use situation of the biometric authentication in the first terminal101. The server device103determines the operation mode of the second terminal102according to the grasped use situation of the biometric authentication. Specifically, server device103increases the number of second terminals102that provides the service by biometric authentication setting in a situation where the biometric authentication is frequently used. On the other hand, the server device103reduces the number of second terminals102that provides the service by biometric authentication setting if the use situation of biometric authentication is infrequent. With such a response, the operation mode of the second terminal102, which is a subsequent-stage terminal, is optimized, and the throughput of the system increases. As a result, the convenience of the system is improved.

Hereinafter, specific example embodiments will be described in more detail with reference to the drawings.

First Example Embodiment

A first example embodiment will be described in more detail with reference to the drawings.

[Configuration of System]

FIG.2is a diagram illustrating an example of a schematic configuration of an authentication system according to the first example embodiment. Referring toFIG.2, the authentication system includes a plurality of first terminals10-1to10-3, a plurality of second terminals20-1to20-3, and a server device30. The configuration illustrated inFIG.2is an example and is not intended to limit the number of terminals and the like.

In the following description, when there is no particular reason to distinguish the first terminals10-1to10-3, they are simply referred to as “first terminals10”. Similarly, other elements are represented by reference numerals before hyphens.

The first terminals10and the server device30are configured to be communicable by wired or wireless communication means. The second terminals20and the server device30are similarly configured to be communicable.

Each of the first terminals10is configured to perform a predetermined procedure. For example, the first terminal10is configured to perform a check-in procedure.

Each of the second terminals20is configured to perform a procedure subsequent to the procedure performed in the first terminal. That is, the second terminal20is installed at a subsequent stage of the first terminal10, and is configured to perform a procedure different from that of the first terminal10. For example, the second terminal20is configured to perform processing related to a security check of the user who has completed the check-in procedure.

The first terminal10and the second terminal20are configured to be able to switch their operation modes. Specifically, the first terminal10and the second terminal20are configured to be switchable between a setting for performing a procedure by face authentication (hereinafter referred to as a face authentication setting) and a setting for performing a conventional procedure without using the face authentication (hereinafter referred to as a non-face authentication setting). That is, the first terminal10and the second terminal20can switch the face authentication function and the non-face authentication function (conventional function), and provide the service to the user using one of the functions.

For example, the first terminal10is assumed to be a terminal that performs the check-in procedure. In this case, the first terminal10in the face authentication setting acquires biometric information (face image) of the user in front, and generates a feature amount (a feature vector including a plurality of feature amounts) from the acquired biometric information. Thereafter, the first terminal10acquires related biometric information (face image) from an integrated circuit (IC) chip of a passport presented by the user, and generates the feature amount from the face image. The first terminal10collates the two feature amounts (one-to-one collation). When the collation is successful, the first terminal10transmits the biometric information (or the feature amount) of the user, an identifier (ID) for uniquely identifying the user, and the like to a management server (not illustrated). The management server provides the user with the face authentication service using the received information.

Meanwhile, the first terminal10with the non-face authentication setting operates as a terminal operated by airline staff. That is, the first terminal10with the non-face authentication setting operates as a terminal that issues a boarding pass when a staff member checks the passport and determines that the user in front has the correct passport.

For example, the second terminal20is assumed to be a terminal that performs processing related to the security check. In this case, the second terminal20with the face authentication setting acquires the face image of the user whose security check has been completed by a gate o metal detection or the like, and generates a feature amount from the acquired face image. The second terminal20transmits the generated feature amount to the management server. The management server performs collation (one-to-N matching; N is a positive integer and the same applies to below) using the acquired feature amount and the feature amount stored in a database (the database that stores the information transmitted from the first terminal10). The management server transmits a collation result (the ID of the user specified by the collation) to the second terminal20. The second terminal20manages the user who has passed the security check by the transmitted ID.

Meanwhile, the second terminal20with the non-face authentication setting operates as a terminal operated by the staff member in charge. The second terminal20with the non-face authentication setting operates as a terminal to which the staff member in charge inputs information and the like of the user who has passed the security check.

The function of the management server may be implemented in the server device30or may be implemented in a device different from the server device30. Since an existing technique can be used for the collation (one-to-one matching or one-to-N matching) performed by the management server, detailed description thereof will be omitted. For example, the management server calculates a Euclidean distance or the like between the biometric information of a collation target (the feature vector of a target to be collated) and the biometric information on a registration side (the feature vector) as similarity, and performs the above collation by threshold processing or the like for the similarity.

The server device30is a device that switches the operation mode of the subsequent-stage terminal (second terminal20) in such a way as to maximize the throughput of the authentication system, that is, the number of times of processing per unit time.

[Schematic Operation of System]

Next, a schematic operation of the authentication system according to the first example embodiment will be described with reference toFIG.2.

Each of the first terminals10notifies the server device30of “processing information” including the number of users processed by the first terminal10. More specifically, the first terminal10operating with the face authentication setting notifies the server device30of the number of users (the number of times of face authentication processing) for which the service by the setting has been provided in unit time (for example, 10 minutes or 1 hour). More specifically, the first terminal10operating with the non-face authentication setting notifies the server device30of the number of users (the number of times of non-face authentication processing) for which the service by the setting has been provided in unit time.

The server device30calculates a face authentication use rate per unit time based on the processing information notified from a first terminal group (the first terminal10with the face authentication setting and the first terminal10with the non-face authentication setting). Specifically, the server device30calculates the face authentication use rate by the following Equation (1).
[Math. 1]
FACE AUTHENTICATION USE RATE=TOTAL NUMBER OF TIMES OF FACE AUTHENTICATION PROCESSING/(TOTAL NUMBER OF TIMES OF FACE AUTHENTICATION PROCESSING+TOTAL NUMBER OF TIMES OF NON-FACE AUTHENTICATION PROCESSING)   (1)

In Equation (1), the total number of face authentication processing is the total number of users (the number of times of face authentication processing) processed per unit time by the first terminal10that provides the service by the face authentication function among the plurality of first terminals10. Similarly, the total number of non-face authentication processing is the total number of users (the number of times of non-face authentication processing) processed per unit time by the first terminal10that provides the service by the non-face authentication function among the plurality of first terminals10. That is, the server device30aggregates the processing information acquired from each of the plurality of first terminals10and calculates the face authentication use rate.

The server device30determines and switches the operation mode (the face authentication setting or the non-face authentication setting) of each terminal included in a second terminal group (the second terminal20with the face authentication setting and the second terminal20with the non-face authentication setting) based on the calculated face authentication use rate.

Specifically, the server device30increases the number of second terminals20operating with the face authentication setting when the face authentication use rate is high. Alternatively, the server device30reduces the number of second terminals20operating with the face authentication setting when the face authentication use rate is low.

For example, inFIG.2, the user who has completed the procedure in the first terminal10by the face authentication is illustrated in gray. The server device30assumes that the use of the face authentication will be frequent in the second terminal group following the first terminal group and increases the number of second terminals20with the face authentication setting when the number of users who have used the face authentication among the users who have passed through the first terminal10is large. In this case, in an extreme example, when the face authentication use rate is 100%, there is no need to install terminals supporting the conventional procedure in the second terminal group, and the server device30can set all terminals in the second terminal group to the face authentication setting.

In contrast, the server device30assumes that the use of the face authentication will be less frequent in the second terminal group following the first terminal group and reduces the number of second terminals20with the face authentication setting when the number of users who have used the face authentication among the users who have passed through the first terminal group is small. In this case, in an extreme example, when the face authentication use rate is 0%, there is no need to install terminals supporting the face authentication procedure in the second terminal group, and the server device30can set all the terminals in the second terminal group to the non-face authentication setting.

It is desirable to install a bulletin board (digital signage or the like) that guides a terminal number and the like available to each user (face authentication system user or face authentication system non-user) near the second terminal group in consideration of convenience of the user. Alternatively, the face authentication function may be mounted on the digital signage to improve user convenience. For example, in a case where the user in front is found to be a user of the face authentication system (a user with an ID registered in the management server), the digital signage may display (instruct) the second terminal20to which the user is to go. In this case, the server device30notifies the digital signage of the operation mode of the second terminal20.

Next, details of each device included in the authentication system will be described.

[First Terminal]

FIG.3is a diagram illustrating an example of a processing configuration of the first terminal10according to the first example embodiment. Referring toFIG.3, the first terminal10includes a communication control unit201, a terminal function implementation unit202, a processing information generation unit203, and a storage unit204.

The communication control unit201is a means that controls communication with other devices. Specifically, the communication control unit201receives data (packet) from the server device30. Further, the communication control unit201transmits data to the server device30.

The terminal function implementation unit202is a means that implements a function allocated to the first terminal10. Specifically, in a case where the first terminal10operates as a check-in terminal, the terminal function implementation unit202executes processing related to the check in.

In the case of operating with the face authentication setting, the terminal function implementation unit202executes processing related to the face authentication. Specifically, the terminal function implementation unit202acquires a face image of the user in front and calculates the feature amount. Furthermore, in the case of operating with non-face authentication setting, the terminal function implementation unit202receives information input by the staff member in charge and processes the received information.

Since the terminal function implementation unit202changes according to the function allocated to the first terminal10, more detailed description regarding implementation of the function will be omitted.

The terminal function implementation unit202notifies the processing information generation unit203of the processing content each time the terminal function implementation unit processes the user's procedure. For example, when the check-in procedure of the user is completed, the terminal function implementation unit202notifies the processing information generation unit203of the completion of the procedure together with the operation mode (face authentication setting or non-face authentication setting) at that time.

The processing information generation unit203is a means that generates “processing information” to be notified to the server device30. The processing information generation unit203counts the number of user procedures processed by the terminal function implementation unit202every predetermined period. The processing information generation unit203transmits the “processing information” including the number of users counted each time the predetermined period passes to the server device30. More specifically, the processing information generation unit203transmits “processing information” including the setting mode (face authentication setting and non-face authentication setting) of the terminal and the number of times of processing of the user to the server device30.

The storage unit204is a means that stores information necessary for the operation of the first terminal10.

[Second Terminal]

The plurality of second terminals20is terminals installed at a subsequent stage of the at least one or more first terminals10. That is, the second terminal20is a terminal that provides a service for the user who has completed the procedure (service) by the first terminal10.

FIG.4is a diagram illustrating an example of a processing configuration of the second terminal20according to the first example embodiment. Referring toFIG.4, the second terminal20includes a communication control unit301, a terminal function implementation unit302, an operation mode switching unit303, and a storage unit304.

The communication control unit301is a means that controls communication with other devices. Specifically, the communication control unit301receives data (packet) from the server device30. Further, the communication control unit301transmits data to the server device30.

The terminal function implementation unit302is a means that implements a function allocated to the second terminal20. Specifically, in a case where the second terminal20operates as a terminal related to a security check, the terminal function implementation unit302executes processing related to the security check. Note that since the terminal function implementation unit302changes according to the function allocated to the second terminal20, more detailed description regarding implementation of the function will be omitted, similarly to the terminal function implementation unit202of the first terminal10.

The operation mode switching unit303is a means that switches the operation mode of the terminal function implementation unit302according to a “setting switching notification” received from the server device30. In the case where “face authentication setting” is notified from the server device30, the operation mode switching unit303instructs the terminal function implementation unit302to operate with the “face authentication setting”. Similarly, in the case where the “non-face authentication setting” is notified from the server device30, the operation mode switching unit303instructs the terminal function implementation unit302to operate with the “non-face authentication setting”.

The storage unit304is a means that stores information necessary for the operation of the second terminal20.

Note that the operation mode of the first terminal10can be set by any method. For example, an administrator or the like may input the operation mode by changing a setting menu of the first terminal10. Alternatively, the server device30may notify the first terminal10of the operation mode.

[Server Device]

FIG.5is a diagram illustrating an example of a processing configuration of the server device30according to the first example embodiment. Referring toFIG.5, the server device30includes a communication control unit401, a face authentication use rate calculation unit402, an operation mode determination unit403, and a storage unit404.

The communication control unit401is a means that controls communication with other devices. Specifically, the communication control unit401receives data (packets) from first terminal10and the second terminal20. Furthermore, the communication control unit401transmits data to the first terminal10and the second terminal20.

The face authentication use rate calculation unit402is a means that calculates the face authentication use rate. The face authentication use rate calculation unit402counts the processing information transmitted from each of the plurality of first terminals10, and calculates the face authentication use rate per unit time. Specifically, the face authentication use rate calculation unit402classifies the number of times of processing of each terminal into either “the number of times of face authentication processing” or “the number of times of non-face authentication processing” based on the operation mode of the processing information transmitted from the first terminal10.

Thereafter, the face authentication use rate calculation unit402adds the number of times of processing of each terminal for each operation mode, calculates the total number of times of face authentication processing and the total number of times of non-face authentication processing, and calculates the face authentication use rate by applying these calculated total numbers to the above-described Equation (1). The face authentication use rate calculation unit402passes the calculated face authentication use rate to the operation mode determination unit403.

The operation mode determination unit403is a means that determines the operation mode of the second terminal20based on the calculated face authentication use rate. Specifically, the operation mode determination unit403determines the operation mode of at least one or more of the plurality of second terminals20. For example, the operation mode determination unit403determines the operation mode of the second terminal20in such a way that the number of second terminals20operating with the face authentication setting becomes large when the face authentication use rate is high. In contrast, the operation mode determination unit403determines the operation mode of the second terminal20in such a way that the number of second terminals20operating with the non-face authentication setting becomes large when the face authentication use rate is low.

For example, the operation mode determination unit403determines the operation mode of the second terminal20with reference to table information in which the face authentication use rate is associated with the number of second terminals20to operate with the face authentication setting. For example, the operation mode determination unit403refers to the table information as illustrated inFIG.6, and determines the number of second terminals20to operate with the face authentication setting according to the face authentication use rate. In the example ofFIG.6, when the face authentication use rate is equal to or more than 90%, the number of second terminals20operating with the face authentication setting is set to A1. In the example ofFIG.6, A1>A2>A3is satisfied.

When determining the number of second terminals20to operate with the face authentication setting in accordance with the face authentication use rate, the operation mode determination unit403determines the second terminals20for which the operation mode is to be changed. Specifically, in a case of increasing the number of second terminals20operating with the face authentication setting, the operation mode determination unit403selects the number of increase (change) of the second terminals20operating with the non-face authentication setting. The operation mode determination unit403instructs the selected second terminals20to change the operation mode. In the above example, the operation mode determination unit403transmits the setting switching notification to the selected second terminals20to operate with the face authentication setting.

In this manner, the face authentication use rate calculation unit402calculates the use rate of the face authentication function in at least one or more first terminals10. Further, the operation mode determination unit403determines the number of terminals that provides the service with the face authentication function among the plurality of second terminals20based on the calculated use rate. More specifically, the operation mode determination unit403selects terminals that require switching between the face authentication function and the non-face authentication function among the plurality of second terminals20based on the face authentication use rate, and transmits the setting switching notification to the selected second terminals20.

[Operation of System]

Next, an operation of the authentication system according to the first example embodiment will be described.FIG.7is a sequence diagram illustrating an example of an operation of the authentication system according to the first example embodiment.

The first terminal10generates the processing information including the number of processed users per unit time (the number of users processed by the face authentication and the number of users processed by the conventional processing) (step S01).

The first terminal10transmits the generated processing information to the server device30(step S02).

In this manner, each of the plurality of first terminals10generates the processing information including the number of users for which the service by the face authentication function has been provided per unit time or the number of users for which the service by the non-face authentication function has been provided per unit time. In addition, each of the plurality of first terminals10transmits the processing information to the server device30.

The server device30counts the processing information acquired from the first terminals10, and calculates the total number of face authentication users (the total number of times of face authentication processing) and the total number of times of non-face authentication users (the total number of times of non-face authentication processing) processed per unit time. The server device30calculates the face authentication use rate using these total numbers (step S03).

The server device30determines the operation mode of the second terminal20based on the face authentication use rate (step SO4). Specifically, the server device30increases the number of second terminals20operating with the face authentication setting when the face authentication use rate is high.

The server device30transmits the setting switching notification to the second terminal20of which the operation mode is to be switched (step S05).

When receiving the setting switching notification, the second terminal20switches the setting (the face authentication setting or the conventional processing setting) of the second terminal according to the notification (step S06).

As described above, in the authentication system according to the first example embodiment, the server device30grasps the use situation of the face authentication in the first terminal10. The server device30determines the operation mode of the second terminal20belonging to the second terminal group (the plurality of second terminals20) according to the grasped use situation of the face authentication. Specifically, the server device30increases the number of second terminals20that provides the service with the face authentication setting in the situation where the face authentication is frequently used. In contrast, the server device30reduces the number of second terminals20that provides the service with the face authentication setting when the use situation of the face authentication is infrequent. That is, the server device30dynamically switches the operation mode (enables the biometric authentication or disables the biometric authentication) in the subsequent-stage terminal (second terminal20) located downstream of the system according to the use situation of the face authentication (biometric authentication) in the preceding-stage terminal (first terminal10) located upstream of the system. Even if the ratios of attributes (the face authentication user and the face authentication non-user) of the system users substantially change according to a time zone, a season, or the like, the operation mode of the subsequent-stage terminal is optimized by the switching and the throughput of the system can be increased. As a result of the increase in the throughput of the system, the convenience of the authentication system is improved.

Second Example Embodiment

Next, a second example embodiment will be described in detail with reference to the drawings.

In the first example embodiment, it has been described that the operation mode of the second terminal20is determined based on the “processing information” notified from the first terminal10. In the second example embodiment, it will be described that an operation mode of a second terminal20is determined based on information obtained from a camera device installed in a field.

FIG.8is a diagram illustrating an example of a schematic configuration of an authentication system according to the second example embodiment. Referring toFIG.8, the authentication system includes camera devices40-1to40-K (K is a positive integer and the same applies to below), a second terminal20, and a server device30.

The camera devices40are installed at various places in the field (for example, in an airport). The camera devices40are configured to be communicable with the server device30by wired or wireless communication means.

Each of the camera devices40transmits an image obtained by imaging an inside of the field to the server device30. The server device30analyzes the acquired field image, and switches the operation mode of the second terminal20based on a result of the analysis.

For example, in a case of finding a suspicious person (a person illustrated in gray inFIG.8) in the field, the server device30switches the operation mode of the second terminal20to non-face authentication setting. In the case of finding a suspicious person, the server device30switches the operation mode to the non-face authentication setting that requires an operation of a staff member or the like instead of the second terminal20automatically operating (operating in an unmanned manner). By such switching, the security in the field (in the airport) is reinforced. That is, the server device30reinforces a monitoring system in the field by increasing the number of second terminals20operating with the non-face authentication setting (alternatively, setting all the second terminals20to the non-face authentication setting).

Alternatively, the server device30may switch the operation mode of the second terminal20to the non-face authentication setting in a case of finding a person who needs support of the staff member, such as a physically handicapped person or a pregnant female, by analyzing the field image. That is, in a case of finding a physically handicapped person or the like, the server device30may increase the number of the second terminals20operating with the non-face authentication setting.

Alternatively, the server device30may calculate a congestion status of each procedure area (for example, in the case of an airport, a security inspection area or a boarding area) by analyzing the field image, and switch the operation mode of the second terminal20based on the calculated congestion status.

Next, details of the server device30included in the authentication system according to the second example embodiment will be described. Note that a general-purpose web camera or the like can be used as the camera device40. Further, the second terminal20can have the same configuration and function as those described in the first example embodiment. Therefore, detailed description of these devices is omitted.

[Server Device]

FIG.9is a diagram illustrating an example of a processing configuration (processing module) of the server device30according to the second example embodiment. Referring toFIG.9, the server device30includes a communication control unit401, an operation mode determination unit403, a storage unit404, and an image analysis unit405.

ComparingFIGS.5and9, in the second example embodiment, the image analysis unit405is added instead of the face authentication use rate calculation unit402.

The image analysis unit405is a means that analyzes the field image acquired from the camera device40and notifies the operation mode determination unit403of the result.

For example, the image analysis unit405executes analysis regarding whether a suspicious person is present in the field. In this case, the image analysis unit405extracts a person from the acquired field image and extracts a face area of the extracted person. The image analysis unit405calculates a feature amount (a feature vector including a plurality of feature amounts) from the extracted face area (face image). The image analysis unit405compares the calculated feature amount with a feature amount of a list stored in advance (a blacklist in which feature amounts of suspicious persons are described), and confirms whether the calculated feature amount is registered in the blacklist.

When the feature amount calculated from the field image (the feature amount of the person moving in the field) is registered in the blacklist, the image analysis unit405notifies the operation mode determination unit403of the presence of the suspicious person as an “image analysis result”. Alternatively, in a case of confirming a plurality of suspicious persons, the image analysis unit405may notify the operation mode determination unit403of the number of suspicious persons as the “image analysis result”.

For example, the image analysis unit405may execute analysis regarding whether a physically handicapped person or a pregnant female is present in the field. In this case, the image analysis unit405extracts a whole-body image of the person from the field image. Specifically, the image analysis unit405detects an area including the whole body of the person (whole body area) from the field image. Thereafter, the image analysis unit405extracts the whole-body image by cutting out the detected whole-body area from the field image.

The image analysis unit405compares the extracted whole-body image with a template prepared in advance to detect a physically handicapped person or the like. Alternatively, the image analysis unit405may detect a physically handicapped person or the like using a learning model generated by machine learning. For example, a large number of images of physically handicapped persons and the like to which labels are given is prepared as training data, and a learning model is generated using the training data. Any algorithm such as a support vector machine, boosting, or a neural network can be used to generate the learning model. A known technique can be used for the algorithm such as the support vector machine, and thus description thereof is omitted.

In the case of detecting a physically handicapped person or the like in the field, the image analysis unit405notifies the operation mode determination unit403of the detection as the “image analysis result”. Alternatively, in the case of detecting a plurality of physically handicapped persons or the like, the image analysis unit405may notify the operation mode determination unit403of the number of the physically handicapped persons or the like as the “image analysis result”.

The operation mode determination unit403is a means that switches the operation mode in the second terminal20based on the image analysis result acquired from the image analysis unit405.

For example, when a suspicious person, a physically handicapped person, or the like is present in the field, the operation mode determination unit403increases the number of second terminals20operating with the non-face authentication setting. Alternatively, the operation mode determination unit403may set the operation modes of all the second terminals20to the non-face authentication setting.

Alternatively, the operation mode determination unit403may determine the operation mode of the second terminal20according to the number of suspicious persons, physically handicapped persons, or the like. For example, the operation mode determination unit403may increase the number of second terminals20operating with the non-face authentication setting as the number of suspicious persons or the like increases.

As described above, in the authentication system according to the second example embodiment, by analyzing the field image acquired from the camera device40, it is possible to reinforce the security in the airport and provide the service suitable for the physically handicapped person or the like.

Next, hardware of each device constituting the authentication system will be described.FIG.10is a diagram illustrating an example of a hardware configuration of the server device30.

The server device30can be configured by an information processing device (so-called computer), and has the configuration illustrated inFIG.10. For example, the server device30includes a processor311, a memory312, an input/output interface313, a communication interface314, and the like. The components such as the processor311are connected by an internal bus or the like and are configured to be able to communicate with each other.

However, the configuration illustrated inFIG.10is not intended to limit the hardware configuration of the server device30. The server device30may include hardware (not illustrated) or may not include the input/output interface313as necessary. In addition, the numbers of processors311and the like included in the server device30are not limited to the example ofFIG.10, and for example, a plurality of the processors311may be included in the server device30.

The processor311is a programmable device such as a central processing unit (CPU), a micro processing unit (MPU), or a digital signal processor (DSP). Alternatively, the processor311may be a device such as a field programmable gate array (FPGA) or an application specific integrated circuit (ASIC). The processor311executes various programs including an operating system (OS).

The memory312is a random access memory (RAM), a read only memory (ROM), a hard disk drive (HDD), a solid state drive (SSD), or the like. The memory312stores an OS program, an application program, and various data.

The input/output interface313is an interface of a display device or an input device (not illustrated). The display device is, for example, a liquid crystal display or the like. The input device is, for example, a device that receives a user operation of a keyboard or a mouse.

The communication interface314is a circuit, a module, or the like that communicates with another device. For example, the communication interface314includes a network interface card (NIC) or the like.

The functions of the server device30are implemented by various processing modules. The processing modules are implemented by, for example, the processor311executing a program stored in the memory312. Furthermore, the program can be recorded in a computer-readable storage medium. The storage medium may be a non-transient (non-transitory) medium such as a semiconductor memory, a hard disk, a magnetic recording medium, or an optical recording medium. That is, the present disclosure can also be embodied as a computer program product. In addition, the program can be downloaded via a network or updated using a storage medium storing the program. Further, the processing module may be implemented by a semiconductor chip.

The first terminal10and the second terminal20can also be configured by an information processing device similarly to the server device30, and since there is no difference in the basic hardware configuration from the server device30, the description thereof will be omitted. The first terminal10and the second terminal20may include a camera device (camera module) or the like as necessary.

[Modification]

Note that the configuration, operation, and the like of the authentication system described in the above example embodiments are merely examples, and are not intended to limit the configuration and the like of the system.

For example, in the first example embodiment, the case where the authentication system includes the plurality of first terminals10has been described as an example, but it is sufficient that the authentication system includes one or more first terminals10. In a case where one first terminal10is included in the authentication system, the first terminal10may be a hybrid terminal. That is, the first terminal10is configured to be able to perform both the service provision by the face authentication function and the service provision by the non-face authentication function without requiring a setting change. The first terminal10calculates the number of times of face authentication processing and the number of times of non-face authentication processing per unit time, and reports them to the server device30. The server device30only needs to calculate the face authentication use rate using these numbers of times of processing.

In the above example embodiment, the case of using “face or face image” as the biometric information of the user has been described, but the biometric information available in the present disclosure is not limited to “face”. In the present disclosure, another biometric information such as an iris can be used.

In the first example embodiment, the case of using the face authentication use rate as an index for grasping the use situation of the face authentication in the pre-stage terminal (the first terminal10) has been described, but the use situation may be grasped by another index. For example, a non-face authentication use rate (a ratio of users for which the service is provided by the conventional procedure) in the first terminal10may be calculated. Since the face authentication use rate and the non-face authentication use rate are in an inextricable relationship, the non-face authentication use rate can be substantially regarded as the face authentication use rate.

In the first example embodiment, the second terminal20has been described as a subsequent-stage terminal, but the second terminal20may operate as a preceding-stage terminal depending on a system configuration. In this case, the second terminal20only needs to include the function of the first terminal10. That is, a processing module corresponding to the “processing information generation unit203” is mounted on the second terminal20, and the processing information is transmitted from the second terminal20to the server device30. The server device30may calculate the face authentication use rate (the use situation of the face authentication in the second terminal20) based on the processing information transmitted from the second terminal20and determine the operation mode of the subsequent-stage terminal.

In the above example embodiment, the terminal that provides the service by the face authentication setting or the non-face authentication setting has been described as an example. However, in addition to the above two settings, the terminal may have a setting of a hybrid terminal that provides the service by both the face authentication and the non-face authentication. That is, the first terminal10and the second terminal20in the first example embodiment, and the second terminal20in the second example embodiment may be switchable among three operation modes of the face authentication setting, the non-face authentication setting, and the hybrid setting.

In the first example embodiment, the case where the number of second terminals20operating with the face authentication setting is determined by the table information as illustrated inFIG.6has been described. However, the number of second terminals may be determined using a predetermined function or the like. For example, a function using the face authentication use rate as input and the number of second terminals20operating with the face authentication setting as output may be defined in advance, and the number of second terminals20operating with the face authentication setting may be determined using the function.

Alternatively, the number of second terminals20operating with an optimum face authentication setting for each face authentication use rate may be prepared in advance as training data, and the number of second terminals20operating with the face authentication setting may be calculated using a learning model constructed using the training data. Any algorithm such as a support vector machine, boosting, or a neural network can be used to generate the learning model. A known technique can be used for the algorithm such as the support vector machine, and thus description thereof is omitted.

The server device30may change the setting of the first terminal group based on the face authentication use rate in the first terminal group.

By installing a terminal operation determination program in the storage unit of the computer, the computer can be caused to function as the server device30. Further, a terminal operation determination method can be executed by the computer by causing the computer to execute the terminal operation determination program.

In the flowcharts (flowchart and sequence diagram) used in the above description, a plurality of steps (processes) is described in order, but the execution order of the steps executed in the example embodiments is not limited to the described order. In the example embodiments, for example, the order of the illustrated steps can be changed in a range including no trouble in terms of content, such as executing the processes in parallel.

The above example embodiments have been described in detail in order to facilitate understanding of the present disclosure, and it is not intended that all the configurations described above are necessary. In addition, in the case where a plurality of example embodiments has been described, the example embodiment may be used alone or in combination. For example, a part of the configuration of the example embodiment can be replaced with the configuration of another example embodiment, or the configuration of another example embodiment can be added to the configuration of the example embodiment. Furthermore, another configuration may be added to, deleted from, or replaced with another configuration a part of the configuration of the example embodiment.

Although the industrial applicability of the present disclosure is apparent from the above description, the present disclosure is suitably applicable to an authentication system and the like in an airport.

Some or all of the above example embodiments can be described as but are not limited to the following supplementary notes.

[Supplementary Note 1]

An authentication system including:at least one or more first terminals (10or101) capable of providing a service by a biometric authentication function or a non-biometric authentication function;a plurality of second terminals (20or102) each capable of switching a biometric authentication function and a non-biometric authentication function and capable of providing a service by the biometric authentication function or the non-biometric authentication function; anda server device (30or103) connected to the at least one or more first terminals (10or101) and the plurality of second terminals (20or102), whereinthe server device (30or103)calculates a use rate of the biometric authentication function in the at least one or more first terminals (10or101), anddetermines an operation mode of at least one or more second terminals among the plurality of second terminals (20or102) in accordance with the calculated use rate.
[Supplementary Note 2]

The authentication system according to supplementary note 1, in which the server device (30or103) determines the number of second terminals that provides the service by the biometric authentication function among the plurality of second terminals (20or102).

[Supplementary Note 3]

The authentication system according to supplementary note 1 or 2, in which the server device (30or103)selects a second terminal that requires switching between the biometric authentication function and the non-biometric authentication function among the plurality of second terminals (20or102) in accordance with the use rate, and transmits a setting switching notification to the selected second terminal (20or102).
[Supplementary Note 4]

The authentication system according to any one of supplementary notes 1 to 3, in whicha plurality of the first terminals (10or101) is included, andeach of the plurality of first terminals (10or101) generates processing information including the number of users for which the service by the biometric authentication function has been provided or the number of users for which the service by the non-biometric authentication function has been provided, per unit time.
[Supplementary Note 5]

The authentication system according to supplementary note 4, in which each of the plurality of first terminals transmits (10or101) the processing information to the server device (30or103).

[Supplementary Note 6]

The authentication system according to supplementary note 5, in which the server device (30or103) counts the processing information acquired from each of the plurality of first terminals (10or101) and calculates the use rate.

[Supplementary Note 7]

The authentication system according to supplementary note 6, in which the server device (30or103) calculates the use rate in accordance with a total number of users processed per unit time by the first terminal (10or101) that provides the service by the biometric authentication function among the plurality of first terminals (10or101) and a total number of users processed per unit time by the first terminal (10or101) that provides the service by the non-biometric authentication function among the plurality of first terminals (10or101).

[Supplementary Note 8]

The authentication system according to supplementary note 7, in which the server device (30or103) calculates the use rate by dividing a total number of users for which the service by the biometric authentication function has been provided by a sum of the total number of users for which the service by the biometric authentication function has been provided and a total number of users for which the service by the non-biometric authentication function has been provided.

[Supplementary Note 9]

The authentication system according to any one of supplementary notes 1 to 8, wherein the plurality of second terminals (20or102) is terminals installed at a subsequent stage of the at least one or more first terminals (10or101).

[Supplementary Note 10]

The authentication system according to any one of supplementary notes 1 to 9, in which the at least one or more first terminals (10or101) are terminals that execute processing related to a check-in procedure.

[Supplementary Note 11]

The authentication system according to any one of supplementary notes 1 to 10, wherein the plurality of second terminals (20or102) is terminals that execute processing related to a security check.

[Supplementary Note 12]

A method including:in an authentication system includingat least one or more first terminals (10or101) capable of providing a service by a biometric authentication function or a non-biometric authentication function,a plurality of second terminals (20or102) each capable of switching a biometric authentication function and a non-biometric authentication function and capable of providing a service by the biometric authentication function or the non-biometric authentication function, anda server device (30or103) connected to the at least one or more first terminals (10or101) and the plurality of second terminals (20or102),calculating a use rate of the biometric authentication function in the at least one or more first terminals (10or101); anddetermining an operation mode of at least one or more second terminals among the plurality of second terminals (20or102) in accordance with the calculated use rate.
[Supplementary Note 13]

A computer-readable recording medium recording a program for causing a computer (311) mounted on a server device (30or103) connected to at least one or more first terminals (10or101) and a plurality of second terminals (20or102) to execute:the at least one or more first terminals (10or101) capable of providing a service by a biometric authentication function or a non-biometric authentication function, andthe plurality of second terminals (20or102) each capable of switching a biometric authentication function and a non-biometric authentication function and capable of providing a service by the biometric authentication function or the non-biometric authentication function,processing of calculating a use rate of the biometric authentication function in the at least one or more first terminals (10or101); andprocessing of determining an operation mode of at least one or more second terminals among the plurality of second terminals (20or102) in accordance with the calculated use rate.

Note that the form of the supplementary note 12 and the form of the supplementary note 13 can be developed into the form of the supplementary note 2 to the form of the supplementary note 11, similarly to the form of the supplementary note 1.

The disclosures of the cited prior art documents are incorporated herein by reference. Although the example embodiments of the present disclosure have been described, the present disclosure is not limited to these example embodiments. It will be understood by those skilled in the art that these example embodiments are exemplary only and that various modifications are possible without departing from the scope and spirit of the present disclosure. That is, it goes without saying that the present disclosure includes various modifications and corrections that can be made by those skilled in the art in accordance with the entire disclosure including the claims and the technical idea.

REFERENCE SIGNS LIST

10,10-1to10-3,101First terminal20,20-1to20-3,102Second terminal30,103Server device40,40-1to40-K Camera device201,301,401Communication control unit202,302Terminal function implementation unit203Processing information generation unit204,304,404Storage unit303Operation mode switching unit311Processor312Memory313Input/output interface314Communication interface402Face authentication use rate calculation unit403Operation mode determination unit405Image analysis unit