JP7192293B2 - Issuing device, issuing method - Google Patents

Description

The present invention relates to an issuing device and the like for issuing media.

In order to receive the Individual Number Card, it is necessary to prepare and apply for a face photo, etc., and then go through the issuance procedure at the window of the municipality, etc., and the preparation of the face photo and the procedures at the window are burdensome for the user. In order to alleviate such a burden, Patent Literature 1 discloses a system for carrying out procedures necessary for card issuance using a street ID photo machine.

When issuing a My Number card, it is necessary to verify the identity of the user to prevent impersonation. In Patent Document 1, the user's IC driver's license is read by an ID photo machine to obtain data for identity verification.

Patent No. 6064569

Such a system requires high reliability in order to prevent fraudulent card acquisition by spoofing, and further reliability needs to be achieved for practical use of the system.

SUMMARY OF THE INVENTION The present invention has been made in view of the above problems, and an object of the present invention is to provide a highly reliable issuing device and the like.

A first invention for solving the above-mentioned problems is an acquisition unit for acquiring an image of a personal identification card with a face image of a user, and determining the authenticity of the personal identification card based on the image of the personal identification card. An authenticity determination unit, a photographing unit for photographing a face image of the user, and the identity of the user is verified by determining whether or not the face image of the user photographed by the photographing unit matches the face image of the identity verification card. and an issuing unit that issues a medium to a user when the authenticity determination unit determines that the identity verification certificate is true and the identity verification unit determines that the face images match. The issuing device , wherein the authenticity determination unit determines the authenticity of the personal identification card based on whether or not there is a contradiction between the contents of two pieces of character information obtained from the image of the personal identification card. is.

In order to issue a medium to a user, the issuing apparatus of the present invention determines the authenticity of the personal identification card from the image of the personal identification card, confirms that the user has a true personal identification card, and then confirms the identity. Unauthorized acquisition of the medium can be prevented and high reliability can be realized by performing personal identification by biometric authentication using the face image of the certificate and the face image taken by the issuing device.

The issuing device is, for example, a certification photo machine.
In the present invention, since biometric authentication is performed by photographing a user's face image, a conventional ID photo machine installed on the street or the like can be used as an issuing device, and high popularization can be realized.

The acquisition unit is for taking an image of the personal identification card inserted into the insertion slot, for example. Alternatively, the personal identification card placed on the place may be photographed.
As a result, it is possible to easily incorporate the image acquisition function of the personal identification card into the issuing device. In the former case, the personal identification card can be set in an accurate position when the personal identification card is photographed.

In the first invention, the authenticity determination of the personal identification card can be suitably performed using the character information on the face of the personal identification card.
The issuing device transmits the facial image of the user photographed by the photographing unit to a server that records the facial image and is communicably connected to the issuing device after the issuing unit issues a medium to the user. It is desirable to

In a second aspect of the invention, an issuing device acquires an image of a personal identification card with a face image of a user; determines the authenticity of the personal identification card based on the image of the personal identification card; a step of photographing a face image; a step of confirming the identity of the user by determining whether or not the photographed face image of the user and the face image of the identity verification card match; and determining that the identity verification certificate is true. and issuing a medium to the user if the face image is found to match , wherein the determination of the authenticity of the identity verification card is based on two characters obtained from the image of the identity verification card. This issuance method is characterized in that it is carried out depending on whether or not there is a contradiction between the contents of the information .
A second invention is a method of issuing a medium by the issuing device of the first invention.

According to the present invention, it is possible to provide a highly reliable issuing device and the like.

The figure which shows the issuing system 1. FIG. 4 is a diagram showing the appearance of an issuing device 2; FIG. 2 is a diagram showing the system configuration of an issuing device 2; FIG. 2 is a diagram showing the hardware configuration of a control device 20; FIG. An example of an acquisition unit 26 . 3 is a diagram showing the hardware configuration of a server 3; FIG. 4 is a diagram showing the hardware configuration of a user terminal 5; FIG. 4 is a diagram showing the functional configuration of an issuing device 2; FIG. An example of issue data 100 . A flow chart showing the procedure for applying for an ID card. An example of an input screen for application information 120. FIG. Code 300 example. 4 is a flowchart showing a procedure for issuing an ID card; An example of a screen of the display unit 21. FIG. An example of the identification card 10. 4 is a flow chart showing the flow of authenticity determination of the personal identification card 10. FIG. A flow chart showing a flow of personal identification.

Preferred embodiments of the present invention will be described in detail below with reference to the drawings.

(1. Issuing system 1)
FIG. 1 is a diagram showing an issuing system 1 according to an embodiment of the invention. The issuing system 1 issues an ID card (medium) for a user's application to a user, and includes an issuing device 2, a server 3, a user terminal 5, and the like. An ID card is a card that can identify a user, and includes, but is not limited to, a driver's license, my number card, residence card, special permanent resident card, and the like.

The issuing device 2 also has a function as a photographing device for a user to take a picture of himself/herself, and is, for example, an ID photo machine installed on the street. The issuing device 2 takes a picture of the user and prints the image as an ID photo (certificate photo service), and also issues an ID card.

FIG. 2 is a diagram showing the appearance of the issuing device 2, and FIG. 3 is a diagram showing the system configuration of the issuing device 2. As shown in FIG.

The issuing device 2 has a box-like appearance, and includes a control device 20, a display unit 21, a billing unit 22, an imaging unit 23, a lighting unit 24, a printer 25, an acquisition unit 26, a reading unit 27, a curtain 28, a sensor 29, and the like. .

The control device 20 is provided inside the issuing device 2 and controls the entire processing of the issuing device 2 .

FIG. 4 is a diagram showing the hardware configuration of the control device 20. As shown in FIG. As shown in FIG. 4, the control device 20 can be implemented by a computer configured by connecting, for example, a control unit 201, a storage unit 202, an input unit 203, a communication unit 204 and the like via a bus or the like. However, without being limited to this, various configurations can be appropriately adopted.

A control unit 201 is composed of a CPU, a ROM, a RAM, and the like. The CPU calls the program related to the processing of the control device 20 stored in the storage medium such as the storage unit 202 and ROM to the work area on the RAM and executes it, and controls each unit of the issuing device 2 to realize the processing described later. do. ROM is a non-volatile memory that permanently holds programs such as boot programs and BIOS, data, and so on. The RAM is a volatile memory, temporarily holds programs and data loaded from the storage unit 202, ROM, etc., and has a work area used by the control unit 201 to perform various processes.

The storage unit 202 is a hard disk drive, a solid state drive, a flash memory, or the like, and stores programs to be executed by the control device 20 during processing described later, data necessary for executing the programs, an operating system (OS), and the like. These programs and data are read and executed by the control unit 201 as necessary. The authenticity determination unit 102 and the personal identification unit 104 (see FIG. 8), which will be described later, are implemented by the control unit 201 executing the program.

The input unit 203 inputs various settings to the control device 20 .
A communication unit 204 is a communication interface that mediates communication via a network or the like, and communicates with the server 3 or the like.

Returning to the description of FIGS. The display unit 21 is implemented by a touch panel display or the like that also serves as an input unit of the issuing device 2 . The display unit 21 displays various screens related to user's operations and selections, and accepts user instruction inputs and the like by touch panel operations on the screen.

The billing unit 22 includes a coin and bill slot, a change return slot, a receipt outlet, a receipt printer, and the like (not shown), and manages user billing and receipt issuance.

The photographing unit 23 is provided with a camera or the like inside a photographing window. For example, a high-resolution digital camera is used as the camera, but it is not limited to this.

The lighting 24 is lighting that illuminates the entire inside of the box of the issuing device 2 . The illumination 24 is, for example, a surface light source that emits white light, and is provided above the imaging unit 23, but is not limited to this. A strobe light source is also provided in the box of the issuing device 2 for flash during photography.

The printer 25 prints images on paper and is provided inside the issuing device 2 . The printed matter on which the image is printed is discharged to a printed matter outlet (not shown). The type of the printer 25 and the number of installed printers are not particularly limited. It is also possible to provide a dedicated card printer for issuing ID cards.

The acquiring unit 26 acquires the image of the personal identification card with the face image of the user. For example, as shown in FIG. 5(a), the acquisition unit 26 carries the personal identification card inserted into the insertion slot 261 and captures an image with an internal line camera (not shown), or as shown in FIG. 5(b). As shown, an area camera (not shown) photographing an identification card placed on a predetermined placement location 262 can be used. Personal identification will be described later.

The reading unit 27 has an image scanner or the like for reading.
The curtain 28 shields the inside of the box of the issuing device 2 from the outside.
The sensor 29 is a sensor that detects a user who has entered the box of the issuing device 2 . The sensor 29 is, for example, an infrared sensor, but is not limited to this.

The server 3 is a server of an ID card issuer, and is communicably connected to the issuing device 2 via a network. The server 3 stores ID card issuance data related to user applications, and performs various processes related to ID card issuance, including management of ID cards based on the issuance data. Issue data will be described later.

FIG. 6 is a diagram showing the hardware configuration of the server 3. As shown in FIG. As shown in FIG. 6, the server 3 can be implemented by a computer configured by connecting, for example, a control unit 31, a storage unit 32, a display unit 33, an input unit 34, a communication unit 35, and the like via a bus or the like. However, without being limited to this, various configurations can be appropriately adopted.

Functions of the control unit 31, the storage unit 32, the input unit 34, and the communication unit 35 are substantially the same as those of the control unit 201, the storage unit 202, the input unit 203, and the communication unit 204 described above. The display unit 33 includes a display device such as a liquid crystal panel. The input unit 34 has a keyboard, a pointing device such as a mouse, and an input device such as a numeric keypad.

A user terminal 5 is a computer terminal used by a user. As the user terminal 5, for example, a mobile terminal such as a smart phone or a tablet terminal can be used.

FIG. 7 is a diagram showing the hardware configuration of the user terminal 5. As shown in FIG. As shown in FIG. 7, the user terminal 5 is configured by connecting a control unit 51, a storage unit 52, a display unit 53, an input unit 54, a communication unit 55, a camera 56, an audio input/output unit 57, etc. via a bus or the like. . However, the user terminal 5 is not limited to this and can have various configurations as appropriate, and it is also possible to use a PC (Personal Computer) having a configuration similar to that of FIG.

Functions of the control unit 51, the storage unit 52, the input unit 54, and the communication unit 55 are substantially the same as those of the control unit 201, the storage unit 202, the input unit 203, and the communication unit 204 described above. The display unit 53 has a display device such as a liquid crystal panel, and is provided with a touch panel as the input unit 54 . A voice input/output unit 57 is a microphone, a speaker, or the like. The storage unit 52 stores a program for executing processing of the user terminal 5, which will be described later.

FIG. 8 is a diagram showing the functional configuration of the issuing device 2. As shown in FIG. As shown in FIG. 8, the issuing device 2 includes an acquisition unit 101, an authenticity determination unit 102, an imaging unit 103, an identity verification unit 104, an issuing unit 105, and the like.

The obtaining unit 101 is for the obtaining unit 26 of the issuing device 2 to obtain the image of the personal identification card with the face image of the user.

The authenticity determination unit 102 is for the control unit 201 of the issuing device 2 to determine the authenticity of the personal identification card based on the image of the personal identification card.

The photographing unit 103 is used by the issuing device 2 to photograph the face image of the user by the photographing unit 23 .

The identity confirmation unit 104 confirms the identity of the user based on whether or not the user's face image captured by the imaging unit 103 matches the face image of the identity verification card. be.

When the authenticity determination unit 102 determines that the identity verification card is true and the identity verification unit 104 determines that the face images match, the issuing unit 105 prints out the ID card using the printer 25 and sends it to the user. An ID card is issued for each person.

FIG. 9 is a diagram showing the issue data 100. As shown in FIG. As shown in FIG. 9, the issued data 100 is, for example, a unique ID 110, application information 120, face image 130, etc., which are linked and stored in the storage unit 32 of the server 3. FIG.

The unique ID 110 is identification information that uniquely identifies the ID card issue data 100 .

The application information 120 is application text information input by the user to issue an ID card, and includes the user's personal information.

The face image 130 is a face image of the user, and is taken by the issuing device 2 when the ID card is issued.

(2. Processing of Issuing System 1)
Next, processing of the issuing system 1 will be described. In the issuing system 1 of the present embodiment, an application for an ID card is performed from the user terminal 5, and an ID card is issued by the issuing device 2. Therefore, each procedure will be described below.

(2-1. Application for ID card)
FIG. 10 is a flow chart showing the procedure for applying for an ID card. S101 and S106 in FIG. 10 are executed by the control unit 51 of the user terminal 5 . The processing of S102 to S105 is executed by the control unit 31 of the server 3. FIG.

In this embodiment, a user who applies for an ID card accesses an application website provided by the server 3 from the user terminal 5 and enters application information on the entry screen on the website. The user terminal 5 transmits the input application information to the server 3 (S101), and the server 3 receives the application information (S102).

FIG. 11 is an example of an input screen for application information, and the user inputs personal information such as the user's name, age, sex, address, and e-mail address as application information in respective input areas 501 .

Next, the server 3 newly creates the ID card issuance data 100 related to the user's application, and records it in the storage section 32 (S103).

In S<b>103 , a new unique ID is generated and recorded as the unique ID 110 of the issued data 100 . Also, the application information received in S102 is recorded as the application information 120 of the issued data 100. FIG.

After that, the server 3 generates a code for issuing an ID card (S104) and transmits it to the user terminal 5 (S105). The user terminal 5 receives the code (S106) and terminates the process.

300 in FIG. 12 is an example of code. The code 300 is, for example, the unique ID 110 coded as a two-dimensional code, displayed on the user terminal 5 as shown in FIG.

(2-2. Issuance of ID card)
FIG. 13 is a flow chart showing the procedure for issuing an ID card. S201 to S202 and S205 to S211 in FIG. Other processes are executed by the control unit 31 of the server 3 .

In this embodiment, the user who issues the ID card goes to the issuing device 2 on the street and enters the box of the issuing device 2 . When the sensor 29 detects the user, the issuing device 2 causes the display unit 21 to display the top screen.

FIG. 14(a) is an example of the top screen. In this embodiment, a service can be selected on the top screen, and various services including the ID photo service are selectably displayed by a button 211 . Issuing an ID card is one of the services, and here, the user selects a button 211 for issuing an ID card by operating the touch panel of the display unit 21 .

When issuing an ID card is selected, the issuing device 2 displays guidance on the display section 21 for holding the code 300 over the reading section 27 . Following the guidance, the user causes the user terminal 5 to display the code 300 as shown in FIG. When the reading unit 27 reads the code 300 (S201), the issuing device 2 decodes the code 300 to obtain the unique ID 110, and transmits the unique ID 110 to the server 3 (S202).

When receiving the unique ID 110 (S203), the server 3 transmits part or all of the application information 120 of the issuing data 100 corresponding to the unique ID 110 to the issuing device 2 (S204). The issuing device 2 receives the application information 120 (S205) and displays it on the display unit 21 (S206).

FIG. 14(b) is an example of the display screen of the application information 120. The user confirms whether the application information 120 (name and address in the example of the figure) displayed on the display unit 21 is correct, and if correct, clicks "Confirm". The button 212 is selected by touch panel operation.

Then, the issuing device 2 executes the authenticity determination process of the personal identification card (S207). This authenticity determination processing will be described later.

After performing the authenticity determination process of the personal identification card, the issuing device 2 displays guidance for capturing the user's face image on the display unit 21, and captures the user's face image (S208). The issuing device 2 performs identity verification processing using the photographed face image (S209). This personal identification processing will be described later.

After performing the identity verification process, the issuing device 2 issues an ID card to the user (S210). The ID card is issued by printing, for example, the text information to be displayed on the ID card out of the application information 120 received in S205, the face image obtained by photographing in S208, and the ID card template including text and images. As for the face image, processing such as cropping according to the ID card is performed as necessary.

After issuing the ID card, the issuing device 2 transmits the face image taken in S208 to the server 3 (S211). The server 3 receives the face image (S212) and records it as the face image 130 of the issued data 100 (S213).

(2-2-1) Determination of Authenticity of Identity Verification Certificate In the present embodiment, a identity verification certificate with a face image of the user is used for identity verification when an ID card is issued. In this embodiment, in order to prevent a forged personal identification card from being used, the issuing device 2 performs authentication of the personal identification card in advance.

FIG. 15 is a diagram showing an outline of the personal identification card 10, and schematically shows an example of the face of the personal identification card 10. As shown in FIG. The personal identification card 10 is a medium that can identify a user, and includes, but is not limited to, a driver's license, my number card, residence card, special permanent resident card, and the like.

The personal identification card 10 contains character information such as the user's name 12, date of birth 13, address 14, issue date 15 of the personal identification card 10, issue number 16, expiration date 17, etc., and a face image 18 of the user. It is printed at a predetermined position on the base material 11 .

FIG. 16 is a flow chart showing the flow of authenticity determination of the personal identification card 10 in S207 (see FIG. 13), and each step in the figure is executed by the control device 20 of the issuing device 2. As shown in FIG.

The issuing device 2 first displays a guidance on the display unit 21 to cause the obtaining unit 26 to obtain the image of the personal identification card 10 , and the user follows the guidance to obtain the image of the personal identification card 10 using the obtaining unit 26 . When the issuing device 2 acquires the image of the personal identification card 10 by the obtaining unit 26 (S301), the authenticity of the personal identification card 10 is determined from the image (S302).

Although the method of authenticity determination is not particularly limited, for example, OCR (optical
Character Recognition) processing is performed, and it is determined whether or not there is a contradiction in the obtained character information, and if there is a contradiction, the identity verification card 10 is false, and if there is no contradiction, the identity verification card 10 is true. can be done.

There are various contradictions in the character information, but as an example, there is a predetermined relationship defined by law between the date of birth 13 and the expiration date 17, and when viewed from this relationship, from the image of the personal identification card 10 There is a case where there is a contradiction between the date of birth 13 and the expiration date 17 obtained.

For example, if the expiration date 17 of the identity verification card 10 is legally one month after the date of birth 13, the date of birth 13 of the identity verification card 10 is forged and the expiration date is changed. If the month and day at 17 are missing one month after the month and day at birth 13, it is determined that there is a conflict.

This is a case where there is a contradiction between the content of character information and the content of another character information, but there are also cases where the content of character information itself is inconsistent. For example, if the date of birth 13 obtained from the image of the personal identification card 10 is an impossible date, such as "Showa 70", "December", or "April 31", the content is contradictory. is determined to be present.

The authenticity determination method is not limited to the use of character information obtained by OCR processing as described above. It can also be determined from the image (see, for example, Japanese Patent Application Laid-Open No. 2011-34535), and in this case, the personal identification card 10 printed by a method different from the normal printing method is regarded as false.

When the issuing device 2 determines that the personal identification card 10 is false in the above authenticity determination (S303; NO), the issuing device 2 displays on the display unit 21 that the personal identification card 10 is fake (S304), and ends the process. .

On the other hand, when the issuing device 2 determines that the identification card 10 is true (S303; YES), the face image 18 is extracted from the image of the identification card 10, and the feature amount of the face image 18 is calculated (S305). The process proceeds to S208. Known parameters related to the face image 18 can be used as feature amounts, and the values can be calculated by a known method.

(2-2-2) Identity Verification Processing FIG. 17 is a flow chart showing the flow of identity verification processing in S209 (see FIG. 13).

In S209, the issuing device 2 confirms the identity of the user based on whether or not the face image captured in S208 matches the face image 18 of the identity verification card 10 (biometric authentication). Here, the feature amount of the face image photographed in S208 is calculated (S401), and it is determined whether or not the feature amount matches the feature amount of the face image 18 of the identification card 10 previously calculated in S305 (S402).

If the feature amounts do not match (S402; NO), the issuing device 2 assumes that the identity of the user cannot be verified, displays on the display unit 21 that the ID card cannot be issued (S403), and terminates the process.

If the feature amounts match (S402; YES), the issuing device 2 assumes that the identity of the user has been verified, and proceeds to the process of S210 to issue an ID card.

As described above, in order to issue an ID card to a user, the issuing device 2 of the present embodiment determines the authenticity of the personal identification card 10 from the image of the personal identification card 10, and confirms that the user is authentic. After confirming that the user has a High reliability can be achieved.

In addition, in the present embodiment, biometric authentication is performed by photographing a user's face image, so that a conventional ID photo machine installed on the street can be used as the issuing device 2, and high popularization can be realized.

Further, in the present embodiment, the image acquisition function of the personal identification card 10 can be easily incorporated into the issuing device 2 by the acquisition unit 26 described above. In the case of the acquisition unit 26 of FIG. 5A, the accuracy is improved because the identity verification card 10 can be set at an accurate position when the identity verification card 10 is photographed. 26 is prevented from being unable to take out the personal identification card 10.例文帳に追加

Further, in this embodiment, the authenticity determination of the personal identification card 10 can be performed using the character information on the face of the personal identification card 10 . Since the character information can be obtained even if the image of the personal identification card 10 does not have a high resolution, the cost of the camera of the obtaining unit 26 can be reduced.

However, the present invention is not limited to this. For example, in the present embodiment, a face image is used as biometric information, and biometric authentication (face authentication) based on the face image is performed. It is also possible to perform multi-factor authentication combining vein authentication and iris authentication. Regarding fingerprint authentication, vein authentication, and iris authentication, a dedicated reading device provided in the user terminal 5 reads a fingerprint image, a vein image, and an iris image at the time of ID card application and records them as issue data 100. Whether or not the fingerprint image, the vein image, and the iris image read at the time of issuing the ID card match with the fingerprint image, the vein image, and the iris image can be determined based on the feature amount.

Also, in this embodiment, an ID card is issued, but the medium to be issued is not limited to this. For example, it may be an examination slip, various reception slips, a pass, an event ticket, or the like. In this embodiment, since the face image 130 obtained by photographing the user is recorded in the server 3, the face image 130 can be used when these media are reissued or when another medium is issued.

In addition, the medium is not limited to a medium that is printed and issued. For example, the same data as the printed content may be issued as an electronic medium by outputting data to the user terminal 5 and displayed on the user terminal 5. .

In this embodiment, the issuing device 2 is an ID photo machine, but the present invention is not limited to this, as long as it can acquire an image of a personal identification card or a user's face image and can issue a medium. For example, it is also possible to use a mobile terminal such as a smart phone.

In addition, it is possible to include the application information 120 in the code 300. In this case, the application information 120 obtained by decoding the code 300 read in S201 is displayed in S206, so that the application information 120 can be displayed in S204. The processing of to S205 can be omitted.

Although the preferred embodiments of the present invention have been described above with reference to the accompanying drawings, the present invention is not limited to such examples. It is obvious that a person skilled in the art can conceive of various modifications or modifications within the scope of the technical ideas disclosed in the present application, and these also belong to the technical scope of the present invention. Understood.

1: Issuing system 2: Issuing device 3: Server 5: User terminal 10: Personal identification card 18, 130: Face image 23, 103: Photographing unit 26, 101: Acquisition unit 100: Issuing data 102: Authenticity determination unit 104: Principal Confirmation unit 105: Issuing unit 110: Unique ID
120: Application information 261: Insertion slot 262: Placement location 300: Code

Claims (6)

an acquisition unit that acquires an image of a personal identification card with a user's face image;
an authenticity determination unit that determines the authenticity of the personal identification card based on the image of the personal identification card;
a photographing unit for photographing a face image of a user;
an identity verification unit that verifies the identity of the user based on whether or not the face image of the user photographed by the photography unit and the face image of the identity verification card match;
an issuing unit that issues a medium to a user when the authenticity determination unit determines that the identity verification certificate is true and the identity verification unit determines that the face images match;
has
The issuing device , wherein the authenticity determination unit determines the authenticity of the personal identification card based on whether or not there is a contradiction between the contents of two pieces of character information obtained from the image of the personal identification card . 2. The issuing device according to claim 1, wherein the issuing device is a certificate photo machine. 3. The issuing device according to claim 1, wherein the obtaining unit photographs the personal identification card inserted into the insertion slot. 3. The issuing device according to claim 1, wherein the acquiring unit takes a photograph of the personal identification card placed on the placement position. The issuing device transmits the facial image of the user photographed by the photographing unit to a server that records the facial image and is communicably connected to the issuing device after the issuing unit issues a medium to the user. 5. The issuing device according to any one of claims 1 to 4, characterized in that: the issuing device
obtaining an image of a user identification card with a face image of the user;
a step of determining the authenticity of the personal identification card based on the image of the personal identification card;
capturing a facial image of the user;
a step of verifying the identity of the user based on whether or not the photographed face image of the user matches the face image of the identity verification card;
issuing a medium to a user if the identification is determined to be true and the facial images match;
and run
An issuance method , wherein the determination of the authenticity of the personal identification card is performed by determining whether or not there is a contradiction between the contents of two pieces of character information obtained from the image of the personal identification card .

Images