JP2007233916A - Security system and security method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To simplify information management of a face image of a person himself/herself to be used for face authentication without deteriorating security performance by face authentication about use management of various devices. <P>SOLUTION: A user collates ID information inputted by an authentication device of an entrance reader 3 with previously registered ID information before using various devices 7 to 9. When they are matched, the face of the user is photographed by a first camera 16, the photographed face image is stored as a face image of the user himself/herself in a storage device of the entrance reader 3 every day and an electric lock 6 is unlocked. When the user uses the various devices 7 to 9 in a management room 1, the face is photographed by a second camera 31, and the photographed face image is collated with the face image of the user himself/herself stored every day. When the face images coincide, that is, when face authentication is successful, the controller of each of the various devices 7 to 8 allows the user to use the various devices 7 to 9. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a security system and a security method for managing use of various devices by face authentication.

  Conventionally, as this type of system, for example, a processing device for processing use of various devices, an input device for inputting user identification information (password, ID number, fingerprint information, etc.), and a user There is a camera with a camera for photographing the face. Then, the processing device performs face authentication based on the input identification information and the captured face image, and permits the use of various devices when it is determined that the user is himself. As an example of the face authentication apparatus used in this type of system, there is an apparatus described in Patent Document 1 below.

  Here, in Japanese Patent Laid-Open No. 2003-260, face authentication is performed to verify whether or not the user is the user by collating the face image captured by the camera with the person face image registered in advance in a database or the like. Accordingly, a face authentication device that permits locking or unlocking of an electronic lock of a door is described.

JP 2002-183734 A

  However, in the face authentication device described in Patent Document 1, each user's face image is pre-registered in the database as a personal face image and stored for a long time. Conventionally, this face image pre-registration is performed at a different date and time from when face authentication is performed, and is registered in advance in a database in association with the identification information of the user. Here, the information of the registered person face image may change over time, or may not match the information of the registered person face image when the user wears glasses. In such a case, it is necessary to update the pre-registered personal face image information as appropriate. For this reason, in order for the face authentication device to always function correctly, it is necessary to take measures such as periodically updating the information of the registered person face image, and it takes time to manage the information of the person face image. there were. In addition, when the number of persons to be registered reaches a large number of people of 100 or more, it takes much more time and effort to manage information on the person's face image.

  In addition, in order to reduce the information management of registered personal face images, it may be possible to loosen the criteria for face authentication instead of reducing the opportunity for updating the information of the personal face images. Here, the “person rejection rate” and the “other person acceptance rate” in the processing apparatus or the like become a problem in relation to the determination criteria for face authentication. “Person refusal rate” means a rate at which a registered person rejects when face authentication is performed. The “other person acceptance rate” means a rate at which permission is erroneously determined when another person other than the registered person performs face authentication. In either case, the lower the rate, the higher the performance as a face authentication device. However, the stricter the judgment criteria, the lower the “other person acceptance rate”, but the “individual rejection rate” becomes higher. In order to reduce the time and effort for managing facial image information, it may be possible to set the judgment criteria softly. However, in this case, the “acceptance rate of others” will be high and the security performance of the equipment used will be reduced, which is not preferable. .

  The present invention has been made in view of the above circumstances, and its purpose is related to the use management of various devices, and information management of a person's face image used for face authentication without deteriorating the security performance by face authentication. It is an object of the present invention to provide a security system and a security method that can be simplified.

  In order to achieve the above object, the invention described in claim 1 is a security system for managing the use of various devices, and the identification information input for inputting the user's identification information before using the various devices. The first photographing means for photographing the face of the user whose identification information is input to the identification information input means, and the identification information input by the identification information input means coincides with the pre-registered personal information And a face image storage means for storing a face image photographed by the first photographing means as a personal face image used for a short-term limitation, and photographing a user's face when the user uses various devices. And a use permission for permitting the user to use various devices when it is determined that the face image captured by the second image capturing means matches the face image stored in the face image storage means. And the spirit that was a stage.

  According to the configuration of the above invention, before the user uses various devices, the user's identification information is input by the identification information input unit, and the face of the user is captured by the first imaging unit. At this time, when the input identification information matches the pre-registered personal information, the face image photographed by the first photographing means is stored in the facial image storage means as a personal face image used for a short period of time. The Thereafter, when the user uses various target devices, the user's face is photographed by the second photographing means. When it is determined that the face image photographed at this time matches the person's face image stored in the face image storage means, the use permission means permits the use of various devices by the user. Here, “short term” means, for example, a period of one day to several days (the same applies hereinafter). Accordingly, the face image storage means stores only the face image of the user who desires to use various devices as information used for a short period of time. It is not necessary to memorize the person's face image. In addition, since the face image storage means stores the person's face image used for a short period of time, the latest and most suitable face image is always stored in the face image storage means as the person's face image. Further, the authorized user stores the person's face image at the beginning of a limited short period, and during the limited short period of time, the user can use various devices only by photographing the face image by the second photographing means. It becomes possible.

  In order to achieve the above object, the invention described in claim 2 is a security system for managing the use of various devices provided in a building or room, and a door provided at the entrance of the building or room; An electric lock provided on the door, an identification information input means for inputting identification information of the user who wants to operate the electric lock before entering the building or room, and a face of the user who wants to operate the electric lock. The first photographing means for photographing, the second photographing means for photographing the user's face when the user uses various devices, and the identification information input by the identification information input means are pre-registered. Face image storage means for storing the face image photographed by the first photographing means when matching with the identity information being used as the identity face image used for a short time, and the identification information input by the identification information input means There Unlocking control means for unlocking the electric lock when it matches the registered personal information, and a face image photographed by the second photographing means when a user entering the building or room uses various devices Is provided with use permission means for permitting the user to use various devices when it is determined that the image matches the personal face image stored in the face image storage means.

  According to the configuration of the above invention, the user who intends to operate the electric lock before entering the building or room inputs the user's identification information by the identification information input means, and first photographs the face of the user. Take a picture by means. At this time, when the input identification information matches the pre-registered personal information, the face image photographed by the first photographing means is stored in the facial image storage means as a personal face image used for a short period of time. At the same time, the electric lock is unlocked by the unlock control means. Thereafter, when the user who enters the building or room uses various target devices, the user's face is photographed by the second photographing means. When it is determined that the face image photographed at this time matches the person's face image stored in the face image storage means, the use permission means permits the use of various devices by the user. Therefore, the face image storage means only stores the face image of the user who wishes to use various devices as information used for a short period of time. There is no need to memorize the person's face image. In addition, since the face image storage means stores the person's face image used for a short period of time, the latest and most suitable face image is always stored in the face image storage means as the person's face image. Furthermore, a legitimate user memorizes the person's face image when operating the electric lock to open the door at the beginning of a limited short period. It is possible to use various devices just by shooting. In addition, the user's entry into a building or room provided with various devices is restricted by collating identification information and photographing a face.

  In order to achieve the above object, the invention described in claim 3 identifies in the invention described in claim 2 that the user who intends to operate the electric lock before leaving the building or room is the person himself / herself. Unlocking / invalidating the person's face image stored in the face image storing means and unlocking the electric lock when the user identifying means identifies the user and the user identifying means The purpose of the present invention is to further include a control unit.

  According to the configuration of the invention described above, in addition to the operation of the invention according to claim 2, the person identifying means identifies that the user who tries to operate the electric lock before leaving the building or room is the person himself / herself. The electric lock is unlocked by the unlocking / invalidating control means, and the person's face image stored in the face image storing means is invalidated. Accordingly, the user can leave the building or room by opening the door, and the personal face image stored in the face image storage means cannot be used accordingly. The device cannot be used.

  In order to achieve the above object, the invention described in claim 4 is a security method for managing the use of various devices, and personal information in which user identification information is pre-registered before using the various devices. The user's face is photographed by the first photographing means, and the photographed face image is stored in the face image storage means as a personal face image used for a short-term limitation. When using various devices, the user's face is photographed by the second photographing means, and when it is determined that the photographed face image matches the personal face image stored in the face image storage means, The intent is to permit use of the device and not permit the user to use various devices when it is determined that the photographed face image does not match the stored personal face image.

  According to the configuration of the above invention, the face image storage means only stores the face image of the user who desires to use various devices as information used for a short period of time. It is not necessary to memorize the face image of the user who is not used for the user. In addition, since the face image storage means stores the person's face image used for a short period of time, the latest and most suitable face image is always stored in the face image storage means as the person's face image. Further, the authorized user stores the person's face image at the beginning of a limited short period, and during the limited short period of time, the user can use various devices only by photographing the face image by the second photographing means. It becomes possible.

  According to the first aspect of the present invention, security performance by face authentication can be ensured in relation to use management of various devices, and information management of a person's face image used for face authentication can be simplified. .

  According to the second aspect of the present invention, security performance by face authentication can be ensured in relation to use management of various devices, and information management of the personal face image used for face authentication can be simplified. . In addition, security performance can be improved by the amount that the user can enter the building or room where various devices are provided.

  According to the invention described in claim 3, in addition to the effect of the invention described in claim 2, the user can only use various devices when in a building or a room, and the security performance of various devices. Can be further improved.

  According to the fourth aspect of the present invention, it is possible to ensure the security performance by face authentication in relation to the use management of various devices, and it is possible to simplify the information management of the personal face image used for the face authentication. .

[First Embodiment]
Hereinafter, a security system and a security method according to a first embodiment of the present invention will be described in detail with reference to the drawings.

  FIG. 1 is a perspective view showing a management room 1 in a building. In this embodiment, the entrance / exit 2 of the management room 1 is provided with an entrance reader 3 and an exit leader 4. An electric lock 6 is provided on the door 5 of the doorway 2. In the management room 1, a face authentication valuables locker 7, a face authentication safe 8, and a face authentication library 9 are installed. These face authentication valuables locker 7, face authentication safe 8 and face authentication library 9 correspond to various devices of the present invention. The face authentication valuable locker 7, the face authentication safe 8, and the face authentication library 9 have a “face authentication” function. Here, “face authentication” means a function of collating a person's face image registered in advance with a captured face image.

  FIG. 2 shows the entrance reader 3 in a front view. This entrance reader 3 is provided on the front of the main case 11 by an input device 12 made of a numeric keypad, a first display portion 13 made of a target lamp, a second display portion made of an OK / error lamp, and a non-contact type IC card reader. A personal authentication device 15, one first camera 16, and a plurality of infrared lights 17 a to 17 d, and a sub case 18 provided separately from the main case 11, and a control device 19 and a storage device 20.

  Before entering the management room 1, the first camera 16 of the entrance reader 3 is used to photograph the face of the user who is going to operate the electric lock 6 to open the door 5. The first camera 16 is disposed substantially at the center of the main case 11, and the infrared lights 17 a to 17 d are disposed at the four corners of the main case 11 with the first camera 16 as the center. A band filter (not shown) is provided in front of the lens of the first camera 16. This bandpass filter is used to minimize excess light by allowing only a specific wavelength to pass through near infrared light in a wide wavelength range included in sunlight. Here, the two infrared lights 17a and 17b on the right side of the main case 11 are collectively referred to as “main lights”, and the two infrared lights 17c and 17d on the left side are collectively referred to as “second lights”. The infrared lights 17a to 17d irradiate the user's face with infrared rays from different directions in the vicinity of the first camera 16. Therefore, the main lights 17a and 17b emit infrared rays from the right side of the user, and the second lights 17c and 17d emit infrared rays from the left side of the user. Here, the first camera 16, the plurality of infrared lights 17a to 7d, and the control device 19 of the entrance reader 3 constitute the first photographing means of the present invention.

  The personal authentication device 15 is used to read identification information (personal ID information) recorded on an IC card carried by a user who intends to enter the management room 1. The ID information includes, for example, the registration number of the user himself / herself. The personal authentication device 15 has an antenna (not shown) that receives a signal transmitted from the IC card. When the IC card is approached, the personal authentication device 15 receives a signal including ID information recorded on the card with an antenna and reads the ID information. The personal authentication device 15 of the entrance reader 3 corresponds to the identification information input means of the present invention.

  The input device 12 is used to input a personal identification number of the user. The input device 12 of the entrance reader 3 corresponds to the identification information input means of the present invention. The display units 13 and 14 are lit to give instructions and information to the user. The first display unit 13 is lit to cause the user to gaze at the camera 16 during shooting.

  The control device 19 controls the locking or unlocking of the electric lock 6. The control device 19 of the entrance reader 3 corresponds to the unlock control means of the present invention. The storage device 20 stores in advance control programs, ID information for personal authentication, and the like, and records the input ID information and the face image captured by the first camera 16 as history information. The storage device 20 of the entrance reader 3 corresponds to the face image recording means of the present invention. Since the basic configuration of the exit leader 4 is the same as that of the entrance leader 3, description thereof is omitted. However, the camera of the exit leader 4, the plurality of infrared lights, and the control device do not constitute the first photographing means of the present invention. Both readers 3 and 4 control the locking or unlocking of one common electric lock 6. Therefore, in this embodiment, each of the entrance reader 3 and the electric lock 6 and the exit reader 4 and the electric lock 6 constitute a lock device.

  The configuration of the face authentication library 9 will be described in detail as a representative of the face authentication valuables locker 7, the face authentication safe 8 and the face authentication library 9 provided in the management room 1. FIG. 3 is a front view of the face authentication library 9. The face authentication library 9 includes a cabinet 22 including a plurality of storage units 21, an operation panel 23 provided in front of the cabinet 22, and a control device 24 and a storage device 25 provided inside the cabinet 22. An electric lock 27 is provided in each door (including “drawer”) 26 of each storage unit 21. The operation panel 23 includes a display unit 28 and an input device 29 made up of a touch panel display, a personal authentication device 30 made up of a non-contact type IC card reader, one second camera 31, and a plurality of infrared lights 32a to 32d.

  The second camera 31 is used to photograph the user's face when the user uses the library 9. The second camera 31 is disposed substantially at the center of the operation panel 23, and the infrared lights 32 a to 32 d are disposed in four directions with the second camera 31 as the center. Here, the two infrared lights 32a and 32b on the right side of the operation panel 23 are collectively referred to as “main lights”, and the two infrared lights 32c and 32d on the left side of the operation panel 23 are collectively referred to as “second lights”. Each infrared light 32a to 32d irradiates the user's face with infrared rays from different directions in the vicinity of the second camera 31. Accordingly, the main lights 32a and 32b emit infrared rays from the right side of the user, and the second lights 32c and 32d emit infrared rays from the left side of the user. Here, the 2nd camera 31, the some infrared light 32a-32d, and the control apparatus 24 comprise the 2nd imaging | photography means of this invention.

  The personal authentication device 30 is used to read the ID information of the person recorded on the IC card carried by the user of the library 9, and the basic configuration thereof conforms to that of the entrance reader 3 described above. However, in this embodiment, in principle, it is not necessary to use the personal authentication device 30 in order to use the library 9. The input device 29 is used for inputting a personal identification number of the user. The display unit 28 displays the input identification information, password, and necessary message.

  The control device 24 controls the locking or unlocking of the electric lock 27 of each storage unit 21. The control device 24 corresponds to use permission means of the present invention. The storage device 25 stores in advance control information, ID information for personal authentication, and the like, and records input ID information and a face image taken by the second camera 31 as history information. Further, the storage device 25 can store the personal face image stored in the storage device 20 of the entrance reader 3 upon receiving transmission from the entrance reader 3. Therefore, this storage device also corresponds to the face image storage means of the present invention. Since the basic configuration of the face authentication valuable locker 7 and the face authentication safe 8 is the same as that of the face authentication library 9, the description thereof is omitted. Therefore, in this embodiment, each of the face authentication valuables locker 7, the face authentication safe 8, and the face authentication library 9 can be operated by the face authentication function.

  FIG. 4 is a block diagram showing an electrical configuration of the entrance reader 3 and the exit leader 4. In this embodiment, the readers 3 and 4 include a user interface 41, a control device 19, and a storage device 20 as basic configurations. The user interface 41 includes an input device 12, display units 13 and 14, a personal authentication device 15, a first camera 16, and a plurality of infrared lights 17a to 17d. The control device 19 includes a control unit 19a and a determination unit 19b. The storage device 20 includes a storage unit 20a for history information, a storage unit 20b for authority information, and a storage unit 20c for login and logout information. The control unit 19a is connected to the input device 12, the display units 13 and 14, the personal authentication device 15, the first camera 16, and the infrared lights 17a to 17d. The control unit 19a causes each of the infrared lights 17a to 17d to emit light and causes the first camera 16 to perform photographing in accordance with the light emission timing. An electric lock 6 provided on the door 5 and a magnet switch 42 are connected to the control unit 19a. The magnet switch 42 is for detecting opening and closing of the door 5, and in this embodiment, is integrally assembled with the electric lock 6.

  FIG. 5 is a block diagram showing an electrical configuration related to the face authentication library 9. The face authentication library 9 includes a user interface 43, a control device 24, and a storage device 25 as basic components. The user interface 43 includes a display unit 28, an input device 29, a personal authentication device 30, a second camera 31, and a plurality of infrared lights 32-32d. The control device 24 includes a control unit 24a and a determination unit 24b. The storage device 25 includes a history information storage unit 25a, an authority information storage unit 25b, and a login / logout information storage unit 25c. The display unit 28, the input device 29, the personal authentication device 30, the second camera 31, and the infrared lights 32a to 32d are connected to the control unit 24a. The control unit 24a causes each of the infrared lights 32a to 32d to emit light, and causes the second camera 31 to perform photographing in accordance with the light emission timing. An electric lock 27 and a magnet switch 44 provided in each storage unit 21 are connected to the control unit 24a. The magnet switch 44 is for detecting opening and closing of the door 26, and in this embodiment, is integrally assembled with the electric lock 27.

  FIG. 6 is a block diagram showing the entire security system of this embodiment. The entrance reader 3, exit leader 4, face authentication valuables locker 7, face authentication safe 8, and face authentication library 9 are connected to each other via a LAN (local area network) 50 so that they can communicate with each other. FIG. 7 is a schematic diagram showing the relationship between the arrangement and connection of these devices 3, 4, 7 to 9 constituting the security system. As can be seen from FIG. 7, in this embodiment, in order to use the various devices 7 to 9 provided in the management room 1, it is necessary to operate the entrance reader 3 to unlock the electric lock 4. When the reader 3 is operated, the face of the user is photographed by the first camera 16 and the face image is stored in the storage device 20 of the entrance reader 3 as the person's face image. Thereafter, the user unlocks the electric lock 4 by the operation, opens the door 5, and enters the management room 1. The user is provided in each of the devices 7 to 9 to use the various devices 7 to 9. The second camera 31 shoots his / her face and authenticates the face. As a result of the face authentication, when it is determined that the person is the person, the use of the individual devices 7 to 9 is permitted.

  Here, the control contents executed by the control device 19 of the room entrance reader 3 will be described with reference to the flowchart shown in FIG.

  When the process proceeds to this routine, the control device 19 reads the ID information of the IC card input by the personal authentication device 15 in step 100.

  Next, in step 110, the control device 19 performs an authentication process of ID information. That is, the input ID information is collated with the ID information of the person registered in advance in the storage device 20.

  Next, in step 120, the control device 19 determines whether or not the input ID information matches the ID information of the person registered in advance, that is, whether or not the authentication is successful. If the authentication is not successful at step 120, the control device 19 shifts the processing to steps 180 and 190. In step 180, the control device 19 causes the display unit 14 to display an error indicating that the authentication has failed. Subsequently, in step 190, the control device 19 records the fact that there has been an error operation in the storage device 20 as history information, and terminates the subsequent processing once.

  On the other hand, if the authentication is successful in step 120, in step 130, the control device 19 executes a face photographing process. That is, the control device 19 causes each of the infrared lights 17a to 17d to emit light and causes the first camera 16 to perform photographing in accordance with the light emission timing.

  Next, in step 135, the control device 19 determines whether or not the photographed face image is a human face. If this determination result is negative, the control device 19 proceeds to steps 180 and 190 and performs the error processing described above. On the other hand, if the determination result of step 135 is affirmative, the control device 19 proceeds to step 140.

  In step 140, the control device 19 stores the face image captured by the first camera 16 in the storage device 20 in association with the ID information as a personal face image used for a short-term limitation. That is, the control device 19 stores information such as the person's face image obtained by photographing with the first camera 16 in the storage device 20 as information used for a short period of time. Here, “short term” means, for example, a period of one day to several days, but individually, the day of use is set as “short term”. Accordingly, the stored information such as the person's face image is effectively handled only on the shooting day, and is invalidated after the next day. For example, the stored information may be automatically deleted from the storage device 20 on the next day. The person's face image and ID information are stored in the storage device 20 as history information indicating that the user has operated the unlocking of the electric lock 4 by a regular operation, and later referred to as necessary.

  In step 150, the control device 19 unlocks the electric lock 6 of the door 5. Thereafter, in step 160, the control device 19 waits for the door 5 to open and close. That is, the control device 19 determines whether or not the door 5 is opened and closed again based on the detection result of the magnet switch 42 after unlocking the electric lock 6. If this determination result is affirmative, in step 170, the control device 19 locks the electric lock 6 of the door 5 and temporarily ends all the processes.

  Next, the control content executed by the control device 24 of the various devices 7 to 9 will be described with reference to the flowchart shown in FIG. This control is executed when a user who enters the management room 1 uses the various devices 7 to 9.

  When the processing shifts to this routine, in step 200, the control device 24 waits for the photographing start operation by the user and shifts to step 210. The control device 24 makes this determination based on the operation of the input device 29 performed by the user.

  In step 210, the control device 24 executes a face photographing process. That is, the control device 24 causes each of the infrared lights 32a to 32d to emit light and causes the second camera 31 to perform photographing in accordance with the light emission timing.

  Next, in step 220, the control device 24 performs a collation process with the person's face image. That is, the face image taken this time is collated with the person's face image stored in the storage device 20 of the entrance reader 3. Here, the person's face image stored in the storage device 20 of the entrance reader 3 can be transferred to the various devices 7 to 9 and temporarily stored in the storage device 25 for reference.

  Next, in step 230, the control device 24 determines whether or not face authentication has been performed, that is, whether or not the photographed face image matches the person's face image. If the face authentication cannot be performed in step 230, the control device 24 moves the process to steps 270 and 280. In step 270, the control device 24 causes the display unit 28 to display an error indicating that face authentication has failed. Subsequently, in step 280, the control device 24 records the fact that there has been an error operation in the storage device 25 as history information, and then temporarily terminates the subsequent processing.

  On the other hand, if the authentication is successful in step 230, the control device 24 permits the use of the devices 7 to 8 in step 240. That is, in this case, the unlocking of the electric lock 27 in the devices 7 to 9 is permitted according to the operation of the user.

  Thereafter, in step 240, the control device 24 waits for the use of the devices 7 to 9 to end. That is, in this case, the control device 24 determines whether the door 26 is opened and closed again based on the detection result of the magnet switch 44 after unlocking the electric lock 27. If this determination result is affirmative, in step 260, the control device 24 prohibits the use of the devices 7-9. That is, in this case, the electric lock 27 of the door 26 is locked and all the processes are temporarily ended.

  That is, in this embodiment, the following security method is adopted in the security system that manages the use of the various devices 78 to 9. That is, before the various devices 7 to 9 are used, when the ID information input by the user operating the entrance reader 3 is encoded with the ID information of the person registered in advance, the user's face is displayed. The image is taken by the first camera 16, and the photographed face image is stored in the storage device 20 as a personal face image used only for the day. Thereafter, when the user uses the various devices 7 to 9, the user's face is photographed by the second camera 31, and the photographed face image is collated with the person's face image stored in the storage device 20. When it is determined that they match, that is, when face authentication is possible, the user is permitted to use the various devices 7 to 9. On the other hand, when it is determined that the photographed face image does not match the stored personal face image, that is, when face authentication cannot be performed, the user is not permitted to use the various devices 7 to 9.

  According to the security system and the security method of this embodiment described above, the user who wants to operate the electric lock 6 of the door 5 of the management room 1 before using the various devices 7 to 9 The user's ID information is input by the input device 12 and the personal authentication device 15 and the user's face is photographed by the first camera 16. At this time, when the input ID information matches the ID information of the person pre-registered in the storage device 20 of the room entrance reader 3, the face image taken by the first camera 16 is used for the day only. While being stored in the storage device 20 as a face image, the electric lock 6 is unlocked by the control device 19. Thereafter, when the user who enters the management room 1 uses the target devices 7 to 9, the user's face is photographed by the second camera 31 provided in the devices 7 to 9. When it is determined that the face image photographed at this time matches the person's face image stored in the storage device 20 of the entrance reader 3, that is, when face authentication is successful, the control device 24 of the devices 7 to 9 uses it. The person will be allowed to use the devices 7 to 9.

  Therefore, according to the security system and the security method of this embodiment, the storage device 20 of the entrance reader 3 has information on the face image of the user who wants to use the various devices 7 to 9 as limited to the day. Since it is only memorized, it is not necessary to memorize the face image of the user who is not used on the day. For this reason, it is not necessary to register information related to a huge amount of the person's face image in the storage device 20 in advance, and it is not necessary to manage the huge amount of information. This means that it is not necessary to manage an enormous amount of personal face image information even when the users of various devices 7 to 9 reach a large number of people of 100 or more. In addition, since the personal face image used on the day is stored in the storage device 20, the latest and optimal face image is always stored in the storage device 20 as the personal face image. For this reason, it is not necessary to jeopardize the deterioration of the personal face image information stored in the storage device 20, and the pre-registered information is updated even if the face appearance of the user changes due to wearing glasses or the like. There is no need for management. In this sense, information management of the person's face image used for face authentication can be simplified.

  Further, in this embodiment, since the latest face image can always be used as the face image for face authentication, it is not necessary to set the determination criteria for face authentication sweetly. In other words, it is possible to set the criteria for determining face authentication strictly, thereby lowering the “person rejection rate” and “other person acceptance rate”, and ensuring or improving the security performance related to the use of the various devices 7 to 9. it can. That is, according to the security system and the security method of this embodiment, information management of a person's face image used for face authentication can be simplified without deteriorating the security performance by face authentication in connection with use management of various devices 7-9. It can be made.

  Furthermore, in this embodiment, a legitimate user photographs a face with the first camera 16 when operating the electric lock 6 to open the door 5 at the beginning of the day, and stores the face image of the person in the storage device 20. Thus, on the day after entering the management room 1, the devices 7 to 9 can be used only by photographing the face with the second camera 31 of the various devices 7 to 9. For this reason, the user can use the devices 7 to 9 by a simple operation only for performing face authentication when using the various devices 7 to 9.

  In this embodiment, the user's entry into the management room 1 provided with the various devices 7 to 9 is restricted by collation of ID information by the entry reader 3 and photographing of the user's face. . That is, unless the user collates the ID information with the room entrance reader 3 to photograph the face, the user cannot enter the management room 1 and cannot use the various devices 7 to 9. In this sense, it is possible to double security for use management of the various devices 7 to 9 and to improve security performance. Moreover, since the person who did not photograph the face before entering the management room 1 cannot use the various devices 7 to 9 after entering the room, it can obtain a substantial co-prevention function. Performance can be improved.

[Second Embodiment]
Next, a second embodiment that embodies the security system of the present invention will be described. In this embodiment, in addition to the contents of the first embodiment, when the user tries to leave the management room 1, the following control is executed using the exit leader 4.

  In other words, the exit leader 4 and its control device are provided as the person identification means of the present invention for identifying that the user who intends to operate the electric lock 6 before leaving the management room 1 is the person himself / herself. Similarly, when the control device of the exit reader 4 is identified as the user, the electric lock 6 is unlocked and the person's face image stored in the storage device 20 of the entrance reader 3 is invalidated. It is provided as an unlocking / invalidating control means.

  Here, the user can be identified by the personal authentication device of the exit reader 4 or the user's face image taken with the camera of the exit reader 4 can be checked against the user's face image. The identity may be identified, or the user may be identified by combining these two functions. Further, as the invalidation of the personal face image, the personal face image information may be deleted from the storage device 20, or the personal face image information stored in the storage device 20 may be disabled.

  With the above configuration, when the exit leader 4 identifies that the user who intends to operate the electric lock 6 before leaving the management room 1 is the person himself / herself, the electric lock 6 is unlocked by the control device of the exit leader 4. At the same time, the person's face image stored in the storage device 20 of the entrance reader 3 is invalidated. As a result, the door 5 opens and the user can leave the management room 1, and the person's face image stored in the storage device 20 of the entrance reader 3 can no longer be used in accordance with this, and the second camera 31 changes his face. The various devices 7 to 9 cannot be used by photographing. As a result, the user can only use the various devices 7 to 9 only when in the management room 1, and the security performance of the various devices 7 to 9 can be further improved.

  In addition, this invention is not limited to each said embodiment, In the range which does not deviate from the meaning of invention, it can also implement as follows.

  (1) In each of the above-described embodiments, the “short-term” limited to the short-term is set as the current day (one day). Alternatively, this “short-term” can be performed again using the exit leader 4 before leaving the management room 1 after the user unlocked the electrical lock 6 using the entrance reader 3 before entering the management room 1. It may be a time until the lock 6 is unlocked or a predetermined “several hours” on that day.

(2) In each of the above embodiments, as shown in FIG. 7, the entrance reader 3 is operated to use the face authentication valuables locker 7, the face authentication safe 8 and the face authentication library 9 as various devices of the present invention. The electric lock 4 needs to be unlocked, and when the entry reader 3 is operated, the user's face is photographed by the first camera 16 and the face image is taken as the person's face image to enter the entry reader 3 (storage device 20). To remember. Thereafter, the user unlocks the electric lock 4 by the operation, opens the door 5, and enters the management room 1. The user is provided in each of the devices 7 to 9 to use the various devices 7 to 9. The second camera 31 shoots his / her face and authenticates the face.
On the other hand, as shown in FIG. 10, the second camera 31 is also provided in the entrance reader 3 and the exit reader 4, and the face authentication valuables locker 7, the face authentication safe 8 and the face authentication library 9 are similar to those of the present invention. In addition to being included in various devices, a dedicated reader 10 is provided separately from the entrance reader 3. The user collates the ID information using the dedicated reader 10 and stores the face image photographed by the first camera 16 as a personal face image used only for the day. In this case, after the user's face image is stored by the dedicated reader 10, the user takes a face by photographing the face with the second camera 31 when using the entrance reader 3, the exit leader 4, and other various devices 7 to 9. The devices 3, 4, 7 to 9 can be used only by performing authentication. Further, in this case, the “short term” of the present invention is not limited to “short term”, but before the user leaves the management room 1 after first storing his / her face image using the dedicated reader 10. Alternatively, the time until the user unlocks the electric lock 6 using the exit reader 4 or the time until the user invalidates the personal face image information again using the dedicated reader 10 may be used.

  (3) As shown in FIG. 11, the door 5 and the electric lock 6 are omitted from the entrance 2 and the entrance reader 3 and the exit leader 4 are omitted, and the first camera 16 is placed inside or outside the management room 1. A dedicated reader 10 provided with The user collates the ID information using the dedicated reader 10 and stores the face image photographed by the first camera 16 as a personal face image used only for the day. In this case, the user can freely enter and exit the management room 1, and after the personal face image is stored by the dedicated reader 10, the face is photographed by the second camera 31 when using the various devices 7 to 9. The devices 7 to 9 can be used simply by performing face authentication. Also, in this case, the short-term “short-term” of the present invention is not the “limited to the day”, but the user first stores the person's face image using the dedicated reader 10 and then uses the dedicated reader 10 again. The time until the information of the person's face image is invalidated may be used.

  (4) Alternatively, in FIG. 11, the dedicated reader 10 is omitted, an ID information authentication function before use is given to each of the various devices 7 to 9, and the second camera 31 of the devices 7 to 9 is set to the first. The camera can also function as a camera. And before using the various apparatuses 7-9, a user collates ID information using the operation panel 23 of the various apparatuses 7-9, and the 2nd camera 31 provided in the various apparatuses 7-9. Is used as a first camera to photograph a user's face, and the face image is stored as a person's face image used only for the day. In this case, the user can freely enter and exit the management room 1 and can store the person's face image by any of the various devices 7 to 9. Thereafter, when using the various devices 7 to 9, The devices 7 to 9 can be used simply by photographing a face with the second camera 31 and performing face authentication. In this case, the short term “short term” of the present invention is not “limited to the day”, but the user first uses the various devices 7 to 9 to store the person's face image and then again the various devices 7 to 9. It is good also as time until it invalidates the information of a personal face image using.

  (5) Or, the entrance reader, the exit leader, and various devices provided in the management room are allowed to be used based on authentication of normal ID information and the like. In addition to this, a small room to be further managed is provided in the management room, and an entrance reader and an exit leader having the same functions as the entrance reader 3 and exit leader 4 of each of the above embodiments are provided at the entrance of this small room. Various devices such as a face authentication safe that can be used only by face authentication may be provided in the room. In this case, only various devices in the small room provided in the management room can be used only by face authentication, and double security performance can be ensured.

  (6) In each of the above embodiments, the face authentication valuables locker 7, the face authentication safe 8 and the face authentication library 9 are provided as various devices. However, office devices such as personal computers, facsimiles and copy machines, various manufacturing devices, and the like. Can also be provided as various devices.

  (7) In each of the above embodiments, as input means for inputting the identification information of the person, the personal authentication devices 15 and 30 for reading the ID information recorded on the IC card, and the input device for inputting the personal identification number of the user However, instead of these devices, or in addition to these devices, a fingerprint reader or voice input device for inputting body information such as fingerprint information and voiceprint information as identification information of the person is provided. You may provide as an input means.

  (8) In each of the above embodiments, the present invention is embodied with respect to a security system that manages the use of the various devices 7 to 9 provided in the building management room 1. Regardless, it can be embodied in a security system that manages the use of various devices in the building. For example, the entrance reader and the exit reader having the same functions as the entrance reader 3 and the exit reader 4 described in the above embodiments are provided at the entrance of the building to control the electric lock on the door of the entrance and to enter the building. The face image of the user is photographed by the first camera of the entrance reader and stored as the face image of the user, and the face image of the user who is about to leave the building is invalidated by the exit leader. Then, various devices including the second camera may be provided in the building so that the user can use the various devices only by face authentication in the building.

  (9) In each of the above-described embodiments, the entrance reader 3 and the exit leader 4 are provided at one entrance / exit 2, but the entrance dedicated to entrance and the exit dedicated to exit are provided separately, the entrance leader is provided at the entrance, and the exit is provided at the exit You may comprise each leaving leader.

The perspective view which shows the management room in a building. The front view which shows an entrance reader. The front view which shows a face authentication library. The block diagram which shows the electric constitution which concerns on an entrance reader. The block diagram which shows the electrical structure which concerns on a face authentication library. The block diagram which shows the whole security system. Schematic which shows arrangement | positioning of various apparatuses which comprise a security system, and a connection relationship. The flowchart which shows the control content of a control apparatus. The flowchart which shows the control content of a control apparatus. Schematic which shows arrangement | positioning and connection relation of various apparatuses of a security system. Schematic which shows arrangement | positioning and connection relation of various apparatuses of a security system.

Explanation of symbols

1 management room 2 entrance 3 entrance reader 4 exit leader (person identification means, unlocking / invalidating means)
5 Door 6 Electric lock 7 Face recognition valuables locker (various devices)
8 face authentication safe (various devices)
9 Face authentication library (various devices)
10 Dedicated reader (identification information input means)
12 Input device (identification information input means)
15 Personal authentication device (identification information input means)
16 1st camera (1st imaging means)
17a to 17d infrared light (first photographing means)
19 Control device (first photographing means, unlocking control means)
20 Storage device (face image storage means)
24 Control device (first photographing means, second photographing means, use permission means)
25 Storage device (face image storage means)
29 Input device (identification information input means)
30 Personal authentication device (identification information input means)
31 Second camera (first photographing means, second photographing means)
32a to 32d infrared light (first photographing means, second photographing means)

Claims (4)

A security system that manages the use of various devices,
Identification information input means for inputting user identification information before using the various devices;
First photographing means for photographing a face of a user who has input the identification information to the identification information input means;
For storing a face image photographed by the first photographing means as a personal face image used for a short time only when the identification information input by the identification information input means coincides with the pre-registered personal information. A face image storage means;
A second photographing means for photographing the user's face when the user uses the various devices;
Use permission means for permitting the user to use the various devices when it is determined that the face image photographed by the second photographing means matches the face image stored in the face image storage means. Security system characterized by that. A security system for managing the use of various devices provided in a building or room,
A door provided at the entrance of a building or room;
An electric lock provided on the door;
Identification information input means for inputting identification information of a user who intends to operate the electric lock before entering the building or the room;
First photographing means for photographing a face of a user who intends to operate the electric lock;
A second photographing means for photographing the user's face when the user uses the various devices;
For storing a face image photographed by the first photographing means as a personal face image used for a short time only when the identification information input by the identification information input means coincides with the pre-registered personal information. A face image storage means;
Unlocking control means for unlocking the electric lock when the identification information input by the identification information input means matches the pre-registered personal information;
When the user who has entered the building or the room uses the various devices, it is determined that the face image photographed by the second photographing unit matches the personal face image stored in the face image storing unit. And a use permission means for permitting use of the various devices by the user. Identity identifying means for identifying that the user who intends to operate the electric lock before leaving the building or the room is the identity of the user;
Unlocking / invalidating control for unlocking the electric lock and invalidating the person's face image stored in the face image storage means when the user is identified by the person identifying means as the person The security system according to claim 2, further comprising means. A security method for managing the use of various devices,
When the user's identification information is encoded as pre-registered personal information before using the various devices, the user's face is photographed by the first photographing means, and the photographed face image is limited for a short time. Stored in the face image storage means as the person's face image used in
When the user uses the various devices, the user's face is photographed by the second photographing means, and it is determined that the photographed face image matches the personal face image stored in the face image storage means. The user is allowed to use the various devices, and the user is not permitted to use the various devices when it is determined that the captured face image does not match the stored personal face image. A security method characterized by the above.

Images