WO2024161580A1

WO2024161580A1 - Server device, server device control method, and recording medium

Info

Publication number: WO2024161580A1
Application number: PCT/JP2023/003346
Authority: WO
Inventors: 雅典小林; 翼荻窪
Original assignee: 日本電気株式会社
Priority date: 2023-02-02
Filing date: 2023-02-02
Publication date: 2024-08-08

Abstract

The present invention provides a server device with which biometric information can be updated while moderating increases in load. The server device comprises a storage means, an accumulation period control means, and an update control means. The storage means stores registered biometric information to be used for biometric authentication. The accumulation period control means sets, at a predetermined frequency, a biometric information accumulation period of predetermined length, which is a period for accumulating biometric information about a user. The update control means updates the registered biometric information using at least one piece of biometric information accumulated during the biometric information accumulation period.

Description

Server device, server device control method and storage medium

The present invention relates to a server device, a control method for a server device, and a storage medium.

Technology exists for updating facial data used for biometric authentication.

For example, Patent Document 1 describes a system that can update face data stored in a database in a simple manner. The control unit of the communication terminal in Patent Document 1 captures an image of the operator with an imaging unit to acquire face data, and judges whether the operator is legitimate or not by comparing this face data with face data pre-stored in an authentication data storage unit in a face authentication unit. If the face authentication unit judges the operator to be legitimate, the control unit of the communication terminal repeatedly performs a process of newly storing the face data acquired by the imaging unit in the authentication data storage unit as face data of a registrant, and a process of sending the face data judged to be legitimate to a management device as face data of a registrant. The face data sent to the management device is used to update the registrant face data stored in the registrant database of the management device.

JP 2016-224751 A

As described in Patent Document 1, biometric information (e.g., facial image) used in biometric authentication needs to be updated. For example, a facial image registered when the service is first used and a facial image acquired a long time after the service is first used may give a different impression (different facial features) even if they are of the same person. If biometric authentication is performed using such a facial image, there is a high possibility that the authentication will fail. For this reason, it is necessary to update the biometric information (facial image), but performing this update process constantly is not appropriate as it increases the load on the server.

The main objective of the present invention is to provide a server device, a control method for a server device, and a storage medium that contribute to enabling biometric information to be updated while suppressing an increase in load.

According to a first aspect of the present invention, a server device is provided that includes a storage means for storing registered biometric information used for biometric authentication, an accumulation period control means for setting a biometric information accumulation period having a predetermined length at a predetermined frequency, which is a period for accumulating a user's biometric information, and an update control means for updating the registered biometric information using at least one piece of biometric information accumulated within the biometric information accumulation period.

According to a second aspect of the present invention, a method for controlling a server device is provided, which stores registered biometric information used for biometric authentication in the server device, sets a biometric information accumulation period having a predetermined length at a predetermined frequency, and updates the registered biometric information using at least one piece of biometric information accumulated within the biometric information accumulation period.

According to a third aspect of the present invention, a computer-readable storage medium is provided that stores a program for causing a computer mounted on a server device to execute the following processes: storing registered biometric information used for biometric authentication; setting a biometric information storage period having a predetermined length at a predetermined frequency, which is a period for storing a user's biometric information; and updating the registered biometric information using at least one piece of biometric information stored within the biometric information storage period.

In accordance with each aspect of the present invention, a server device, a control method for a server device, and a storage medium are provided that contribute to enabling updating of biometric information while suppressing an increase in load. Note that the effects of the present invention are not limited to the above. The present invention may achieve other effects instead of or in addition to the effects.

FIG. 1 is a diagram for explaining an overview of an embodiment. FIG. 2 is a flow chart illustrating the operation of one embodiment. FIG. 3 is a diagram illustrating an example of a schematic configuration of an information processing system according to the first embodiment. FIG. 4 is a diagram for explaining the operation of the information processing system according to the first embodiment. FIG. 5 is a diagram for explaining a biological information accumulation period according to the first embodiment. FIG. 6 is a diagram illustrating an example of a processing configuration of a server device according to the first embodiment. FIG. 7 is a diagram illustrating an example of a display on the terminal according to the first embodiment. FIG. 8 is a diagram illustrating an example of a user management database according to the first embodiment. FIG. 9 is a diagram illustrating an example of the accumulation period management database according to the first embodiment. FIG. 10 is a flowchart illustrating an example of the operation of the authentication control unit according to the first embodiment. FIG. 11 is a diagram illustrating an example of the biological information management database according to the first embodiment. FIG. 12 is a diagram illustrating an example of a processing configuration of the authentication terminal according to the first embodiment. FIG. 13 is a sequence diagram illustrating an example of the operation of the information processing system according to the first embodiment. FIG. 14 is a diagram illustrating an example of a display on a terminal according to a modification of the first embodiment. FIG. 15 is a diagram illustrating an example of a display on a terminal according to a modification of the first embodiment. FIG. 16 is a diagram illustrating an example of a display on a terminal according to a modification of the first embodiment. FIG. 17 is a diagram illustrating an example of a display on a terminal according to a modification of the first embodiment. FIG. 18 is a diagram illustrating an example of a hardware configuration of a server device according to the present disclosure.

First, an overview of one embodiment will be described. Note that the reference numerals in the drawings attached to this overview are added to each element for convenience as an example to aid understanding, and the description of this overview is not intended to be limiting in any way. Furthermore, unless otherwise specified, the blocks illustrated in each drawing represent a functional configuration, not a hardware configuration. The connection lines between blocks in each drawing include both bidirectional and unidirectional. Unidirectional arrows are used to diagrammatically indicate the flow of the main signal (data), and do not exclude bidirectionality. Note that in this specification and drawings, elements that can be described in the same way may be labeled with the same numerals to avoid duplicated explanations.

The server device 100 according to one embodiment includes a storage means 101, an accumulation period control means 102, and an update control means 103 (see FIG. 1). The storage means 101 stores registered biometric information used for biometric authentication (step S1 in FIG. 2). The accumulation period control means 102 sets a biometric information accumulation period of a predetermined length, which is a period for accumulating a user's biometric information, at a predetermined frequency (step S2). The update control means 103 updates the registered biometric information using at least one piece of biometric information accumulated during the biometric information accumulation period (step S3).

The server device 100 sets a biometric information accumulation period for accumulating biometric information necessary to update the registered biometric information, and updates the registered biometric information using the biometric information obtained during the biometric information accumulation period. The biometric information accumulation period is set with a predetermined frequency and a predetermined length, and the server device 100 updates the registered biometric information, for example, after the end of the biometric information accumulation period. In other words, the server device 100 does not update the biometric information all the time (after each successful authentication), so the increase in load on the server device 10 is limited. In other words, a server device 100 is provided that enables updating of biometric information while suppressing an increase in load.

Specific embodiments are described in more detail below with reference to the drawings.

[First embodiment]
The first embodiment will be described in more detail with reference to the drawings.

[System Configuration]
As shown in FIG. 3, the information processing system (authentication system) according to the first embodiment includes a server device 10 and at least one authentication terminal 20.

The server device 10 and authentication terminal 20 are managed and operated by a service provider that provides services to users using biometric authentication.

A service provider is any organization that provides a service using biometric authentication. Examples of service providers include businesses such as the user's employer, retail stores, hotels, airports, banks, hospitals, schools, and theme parks. In addition, a service provider may not be a private company, but may be a public institution such as a local government.

The server device 10 stores information about users. The server device 10 stores the user's name, date of birth, biometric information, etc. The server device 10 provides services to users through biometric authentication using the biometric information. The server device 10 may be installed in the service provider's building or on a network (cloud).

The authentication terminal 20 is a device that serves as an interface when providing services to users. The authentication terminal 20 is installed at the location where services are provided to users. As shown in FIG. 3, the first embodiment will be described using a gate-type authentication terminal 20 as an example.

However, the authentication terminal 20 is not limited to a gate-type terminal, and may be a tablet-type or signage-type terminal. Alternatively, the authentication terminal 20 may be a kiosk terminal. The authentication terminal 20 may be any device or apparatus equipped with a camera. The service provider may be provided with a terminal or device that is suited to the type of business as the authentication terminal 20.

The user operates the terminal 30 to input information to the server device 10 and to obtain information from the server device 10.

The devices shown in FIG. 3 are interconnected. Specifically, the server device 10 and the authentication terminal 20 are connected by wired or wireless communication means and are configured to be able to communicate with each other.

The configuration of the information processing system shown in FIG. 3 is an example and is not intended to be limiting. For example, the information processing system may include multiple server devices 10.

[Outline of operation]
Next, an outline of the operation of the information processing system according to the first embodiment will be described.

<User registration>
A user who wishes to receive a service using biometric authentication must register in advance. The user operates the terminal 30 to access the server device 10. The user inputs user information such as name, sex, date of birth, address, login information, email address, and biometric information on a website or the like provided by the server device 10.

Furthermore, the user inputs information necessary for the service to be provided to the server device 10. For example, a user who wishes to enter a workplace using biometric authentication inputs the department to which he or she belongs to the server device 10. Alternatively, a user who wishes to make a payment using biometric authentication (face payment) inputs information such as credit card account or bank account information to the server device 10.

Note that examples of the user's biometric information include data (features) calculated from physical characteristics unique to an individual, such as the face, fingerprint, voiceprint, veins, retina, and iris pattern. Alternatively, the user's biometric information may be image data such as a face image or fingerprint image. The user's biometric information may be anything that includes the user's physical characteristics as information. In the first embodiment, the biometric information is a person's face image or features generated from a face image.

When the server device 10 acquires the name, biometric information, etc. from the user, it generates a user ID to identify the user. The server device 10 associates the generated user ID with the acquired user information and registers them in the user management database. Details of the user management database will be described later.

Users can also register other people on their behalf. For example, a parent can enter their child's name, biometric information, etc. into the server device 10.

<Provision of services>
A user who wishes to receive a service from a service provider visits a place where the service is provided (e.g., a workplace or a retail store). The authentication terminal 20 acquires biometric information (e.g., a face image) of the user in front of the user. The authentication terminal 20 transmits an authentication request including the acquired biometric information to the server device 10 (see FIG. 4).

The server device 10 performs biometric authentication using the biometric information included in the authentication request and the biometric information registered in the user management database. The server device 10 identifies the person to be authenticated by a matching process (authentication process) using the biometric information. The server device 10 authenticates the identified person to be authenticated. For example, if the person to be authenticated has the authority to enter the workplace, the server device 10 determines that the authentication is successful. If the person to be authenticated does not have the authority to enter the workplace, the server device 10 determines that the authentication is unsuccessful.

The server device 10 notifies the authentication terminal 20 of the authentication result (authentication successful, authentication failed).

The authentication terminal 20 performs processing according to the authentication result. For example, if successful authentication is notified, the authentication terminal 20 opens the gate and allows the person to be authenticated to pass through the gate. If unsuccessful authentication is notified, the authentication terminal 20 closes the gate and denies the person to be authenticated from passing through the gate.

<Storage and updating of biometric information>
Here, if the physical characteristics (e.g., facial features) of the person to be authenticated change over time, the authentication accuracy may decrease. In other words, biometric information for biometric authentication needs to be maintained in an appropriate state. Taking this fact into consideration, the server device 10 updates the user's biometric information (biometric information registered in the server device 10; hereinafter, referred to as registered biometric information).

Specifically, the server device 10 sets a period for storing registered biometric information for each user (hereinafter referred to as the "biometric information storage period" or "storage period").

The server device 10 sets a biometric information accumulation period of a predetermined length at a predetermined frequency. The server device 10 accumulates biometric information acquired during the biometric information accumulation period (biometric information acquired from the authentication terminal 20) that has been determined to have been successfully authenticated. The server device 10 selects (extracts) biometric information suitable for biometric authentication purposes from among the accumulated biometric information.

For example, the server device 10 sets a "biometric information accumulation period" for each user, once per year or once per three years, and a length (period) of "one week" or "one month." The server device 10 automatically updates the registered biometric information using the biometric information acquired within the biometric information accumulation period. For example, if the frequency is once per year and the period is one week, the period indicated by the bold line in FIG. 5 corresponds to the biometric information accumulation period.

The server device 10 stores biometric information (e.g., facial images) that is determined to be a successful authentication during the biometric information storage period. At a predetermined timing (e.g., when the biometric information storage period ends), the server device 10 extracts (selects) from the stored biometric information the biometric information that is most suitable for the registered biometric information.

For example, if 10 biometric authentication attempts are successful within the biometric information accumulation period, the server device 10 selects one piece of biometric information that is most suitable for biometric authentication purposes from the 10 pieces of biometric information (e.g., 10 facial images).

The server device 10 uses the selected biometric information to update the existing biometric information (registered biometric information).

The server device 10 discards biometric information acquired outside the biometric information accumulation period and determined to have resulted in successful authentication. Since biometric information acquired outside the biometric information accumulation period is discarded, the resources (memory, storage media, etc.) of the server device 10 are not strained. Note that biometric information determined to have resulted in failed authentication is discarded regardless of whether it is acquired inside or outside the biometric information accumulation period.

Next, we will explain the details of each device included in the information processing system according to the first embodiment.

[Server device]
Fig. 6 is a diagram showing an example of a processing configuration (processing module) of the server device 10 according to the first embodiment. Referring to Fig. 6, the server device 10 includes a communication control unit 201, a user management unit 202, a storage period control unit 203, an authentication control unit 204, an update control unit 205, and a storage unit 206.

The communication control unit 201 is a means for controlling communication with other devices. For example, the communication control unit 201 receives data (packets) from the authentication terminal 20. The communication control unit 201 also transmits data to the authentication terminal 20. The communication control unit 201 passes data received from other devices to other processing modules. The communication control unit 201 transmits data acquired from other processing modules to other devices. In this way, the other processing modules transmit and receive data to and from other devices via the communication control unit 201. The communication control unit 201 has a function as a receiving unit that receives data from other devices, and a function as a transmitting unit that transmits data to other devices.

The user management unit 202 is a means for managing users who receive services. For example, the user management unit 202 registers user information such as the user's name, sex, date of birth, address, email address, login information, and biometric information.

When a user operates the terminal 30 to access a specific website or the like provided by the server device 10, the user management unit 202 displays a GUI (Graphical User Interface) on the terminal 30 for user registration.

For example, the user management unit 202 acquires user information such as name, sex, date of birth, email address, and biometric information (e.g., face image) using a GUI such as that shown in FIG. 7.

When a face image is acquired as biometric information, the user management unit 202 generates features from the acquired face image. Existing technology can be used for the feature generation process by the user management unit 202, so a detailed description is omitted. For example, the user management unit 202 extracts the eyes, nose, mouth, etc. as feature points from the face image. The user management unit 202 then calculates the position of each feature point and the distance between each feature point as feature amounts (generating a feature vector consisting of multiple feature amounts).

Furthermore, when the user information of the user (or another person related to the user; for example, a child) is acquired, the user management unit 202 generates a user ID for identifying the user. The user ID may be any information that can uniquely identify the user. For example, the user management unit 202 may assign a unique value each time a user is registered as the user ID.

When the user ID is generated, the user management unit 202 generates an account for the user. Specifically, the user management unit 202 associates the generated user ID with the name, sex, date of birth, address, biometric information (feature values), email address, login information, etc., and registers them in the user management database (see FIG. 8).

The biometric information (e.g., feature amounts) registered in the user management database is biometric information used for biometric authentication, and corresponds to the registered biometric information described above. Note that the user management database shown in FIG. 8 is an example, and is not intended to limit the items to be stored. For example, a "face image" may be registered in the user management database.

When the user management unit 202 creates an account for a user (when it adds an entry to the user management database), it notifies the accumulation period control unit 203 of the user's user ID.

The user management unit 202 also acquires information necessary for services provided to the user (information specific to each individual service). For example, the user management unit 202 acquires the "department" as information necessary for entering the workplace. Alternatively, the user management unit 202 acquires account information (credit card information, bank account information) for biometric authentication payment. Note that a description of individual services and information necessary for providing individual services is omitted as it is outside the scope of the present disclosure.

The user management unit 202 also controls the suspension of service provision to users and the cancellation of services. When a user requests the cancellation of a service on a portal site (a website to which the user logs in using login information), the user management unit 202 deletes the entry for that user (the entry in the user management database).

The accumulation period control unit 203 is a means for controlling the biometric information accumulation period set for each user. Specifically, the accumulation period control unit 203 is a period for accumulating the user's biometric information, and sets a biometric information accumulation period of a predetermined length at a predetermined frequency.

When the user ID of a user who has completed account creation is obtained from the user management unit 202, the accumulation period control unit 203 determines the biometric information accumulation period for that user. For example, the accumulation period control unit 203 determines the biometric information accumulation period based on a predetermined rule (period setting rule) or a predetermined policy (period setting policy).

For example, the accumulation period control unit 203 determines the biometric information accumulation period based on rules regarding the "frequency" at which the biometric information accumulation period is set and the "length (period)" of the accumulation period. For example, the accumulation period control unit 203 determines the biometric information accumulation period for a user based on a rule (policy) such as "set the biometric information accumulation period to one week one year after the account creation date, and thereafter set the biometric information accumulation period in the same manner."

For example, if the account creation date is "January 20, 2023" and the above rule is adopted, the accumulation period control unit 203 sets the biometric information accumulation period to one week one year after the account creation date, from "January 20, 2024" to "January 27, 2024."

The accumulation period control unit 203 registers the determined biometric information accumulation period in an accumulation period management database (see FIG. 9). As shown in FIG. 9, the accumulation period management database stores the user ID, the account creation date, the rules (frequency, length) used to determine the biometric information accumulation period, the status, and the biometric information accumulation period. Note that the accumulation period management database shown in FIG. 9 is an example, and is not intended to limit the items to be stored.

The accumulation period control unit 203 adds an entry to the accumulation period management database, sets the biometric information accumulation period, and sets the status field to "updated."

The accumulation period control unit 203 accesses the accumulation period management database periodically or at a specified timing, and extracts entries for which the biometric information accumulation period has elapsed. The accumulation period control unit 203 searches the user management database using the user ID of the extracted entry as a key, and determines whether or not a corresponding entry (user) exists.

If there is no corresponding entry (if the user has stopped or cancelled the service), the accumulation period control unit 203 deletes the corresponding entry (user) from the accumulation period management database.

If a corresponding entry exists (if the service is being provided to the user continuously), the accumulation period control unit 203 determines a new biometric information accumulation period for that user and registers it in the accumulation period management database.

For example, the accumulation period control unit 203 determines a new biometric information accumulation period using the period setting rules (frequency and length of the biometric information accumulation period) stored in the accumulation period management database. In the above example, "January 20, 2025" to "January 27, 2025" is registered in the accumulation period management database as the new biometric information accumulation period.

In addition, when the accumulation period control unit 203 sets a new biometric information accumulation period in the accumulation period management database, it sets the status field of the corresponding entry to "not updated."

The authentication control unit 204 is a means for controlling the biometric authentication of the person to be authenticated. The authentication control unit 204 receives an authentication request including the biometric information of the person to be authenticated from the authentication terminal 20, and executes authentication processing using the biometric information included in the authentication request and the registered biometric information stored in the user management database. The authentication control unit 204 also accumulates biometric information that is determined to have been successfully authenticated within the biometric information accumulation period, and discards biometric information that is determined to have been successfully authenticated outside the biometric information accumulation period.

FIG. 10 is a flowchart showing an example of the operation of the authentication control unit 204 according to the first embodiment. The operation of the authentication control unit 204 will be described with reference to FIG. 10.

The authentication control unit 204 performs a matching process using the biometric information included in the authentication request and the biometric information stored in the user management database (step S101).

More specifically, the authentication control unit 204 generates features from the face image included in the authentication request. The authentication control unit 204 sets the generated features as a matching target and performs a matching process (1:N matching; N is a positive integer, same below) with the features stored in the user management database.

The authentication control unit 204 calculates the similarity between the feature to be matched and each of the multiple feature values on the registration side. The similarity can be calculated using chi-square distance, Euclidean distance, or the like. Note that the greater the distance, the lower the similarity, and the closer the distance, the higher the similarity.

The authentication control unit 204 determines that the matching process has failed if there is no feature among the multiple features stored in the user management database that has a similarity with the feature to be matched that is equal to or greater than a predetermined value.

The authentication control unit 204 determines that the matching process is successful if, among the multiple features stored in the user management database, there is a feature whose similarity with the feature to be matched is equal to or greater than a predetermined value. In this case, the user of the entry with the highest similarity is identified as the person to be authenticated.

If the matching process fails (step S102, No branch), the authentication control unit 204 sets the authentication result to authentication failure (step S103).

If the matching process is successful (step S102, Yes branch), the authentication control unit 204 uses the user information identified by the matching process to determine whether or not to provide the service (step S104).

For example, the authentication control unit 204 determines whether the authenticated person has the authority to enter the installation location based on the department to which the authenticated person belongs and the installation location of the authentication terminal 20 (e.g., the office). If the authenticated person has the authority, the authentication control unit 204 determines that the service can be provided to the authenticated person (entry to the office is permitted). If the authenticated person does not have the authority, the authentication control unit 204 determines that the service cannot be provided to the authenticated person (entry to the office is prohibited).

If the service cannot be provided to the authenticated person (step S105, No branch), the authentication control unit 204 sets the authentication result to authentication failure (step S103).

If the service can be provided to the authenticated person (step S105, Yes branch), the authentication control unit 204 sets the authentication result to authentication success (step S106).

If the authentication is successful, the authentication control unit 204 determines whether the date on which the authentication request was processed is included in the biometric information accumulation period (accumulation period determination; step S107).

The authentication control unit 204 searches the accumulation period management database using the user ID of the person to be authenticated identified by the matching process as a key, and identifies the corresponding entry. The authentication control unit 204 makes the above determination based on the setting value of the biometric information accumulation period field of the identified entry and the date of processing the authentication request.

If the date of processing the authentication request falls outside the biometric information accumulation period (step S108, No branch), the authentication control unit 204 does not perform any special operation.

If the date of processing the authentication request is within the biometric information storage period (step S108, Yes branch), the authentication control unit 204 stores the biometric information (face image) included in the authentication request (step S109).

Specifically, the authentication control unit 204 stores the user ID of the person to be authenticated, the authentication date and time, and the biometric information of the successfully authenticated person (e.g., a facial image) in the biometric information management database (see FIG. 11). Note that the biometric information management database shown in FIG. 11 is an example, and is not intended to limit the items to be stored.

The authentication control unit 204 sends the authentication result (authentication successful, authentication failed) to the authentication terminal 20 (step S110).

The update control unit 205 is a means for controlling the updating of the biometric information (registered biometric information) of a user registered for biometric authentication. The update control unit 205 updates the registered biometric information using at least one piece of biometric information accumulated during the biometric information accumulation period.

The update control unit 205 periodically or at a specified timing accesses the accumulation period management database and identifies entries whose status is set to "not updated." The update control unit 205 searches the biometric information management database using the user ID of the identified entry as a key, and obtains the biometric information (e.g., face images) accumulated during the biometric information accumulation period.

The update control unit 205 calculates an index (referred to as an "appropriateness score" or simply "score") indicating the appropriateness of each piece of biometric information stored during the biometric information storage period as registered biometric information. In other words, the update control unit 205 calculates an appropriateness score indicating the appropriateness of each piece of biometric information stored during the biometric information storage period as biometric information for biometric authentication purposes.

For example, the update control unit 205 inputs biometric information (face image) into a learning model obtained by machine learning and obtains an appropriateness score.

The learning model is obtained by machine learning using a large amount of training data in which labels (suitability scores) are assigned to image data (face images). Any algorithm, such as a support vector machine, boosting, or neural network, can be used to generate the learning model. Note that the algorithms, such as the support vector machine, can use publicly known technologies, so a description of them will be omitted.

　Teacher data is obtained by having experts with knowledge of biometric authentication assign scores to image data (face images). The experts assign a score to each image data piece, taking into account the orientation and state of the face shown in the image data (for example, eyes closed or open), the influence of the external environment (image is too bright or too dark), etc.

The update control unit 205 selects biometric information (e.g., a facial image) to be used to update already registered biometric information (registered biometric information) based on the calculated score. For example, the update control unit 205 selects the facial image with the highest score as the biometric information to be updated.

The update control unit 205 generates features from the selected biometric information (face image). The update control unit 205 accesses the user management database and updates the features set in the registered biometric information field of the corresponding user with the features generated above (replaces the features, overwrites the features).

The update control unit 205 sets "updated" to the status field of the corresponding entry in the accumulation period management database (the entry corresponding to the user whose biometric information has been updated).

The storage unit 206 is a means for storing information necessary for the operation of the server device 10. The storage unit 206 stores registered biometric information used for biometric authentication.

[Authentication device]
Fig. 12 is a diagram showing an example of a processing configuration (processing module) of the authentication terminal 20 according to the first embodiment. Referring to Fig. 12, the authentication terminal 20 includes a communication control unit 301, a biometric information acquisition unit 302, an authentication request unit 303, and a storage unit 304.

The communication control unit 301 is a means for controlling communication with other devices. For example, the communication control unit 301 receives data (packets) from the server device 10. The communication control unit 301 also transmits data to the server device 10. The communication control unit 301 passes data received from other devices to other processing modules. The communication control unit 301 transmits data acquired from other processing modules to other devices. In this way, the other processing modules transmit and receive data to and from other devices via the communication control unit 301. The communication control unit 301 has a function as a receiving unit that receives data from other devices and a function as a transmitting unit that transmits data to other devices.

The biometric information acquisition unit 302 is a means for controlling the camera and acquiring the biometric information (e.g., a facial image) of the user. The biometric information acquisition unit 302 captures an image in front of the device periodically or at a specified timing. The biometric information acquisition unit 302 determines whether or not the acquired image contains a human facial image, and if a facial image is included, extracts the facial image from the acquired image data.

Note that the facial image detection process and facial image extraction process performed by the biometric information acquisition unit 302 can use existing technology, so a detailed description will be omitted. For example, the biometric information acquisition unit 302 may extract a facial image (face area) from image data using a learning model trained by a CNN (Convolutional Neural Network). Alternatively, the biometric information acquisition unit 302 may extract a facial image using a method such as template matching.

The biometric information acquisition unit 302 passes the extracted facial image to the authentication request unit 303.

The authentication request unit 303 is a means for requesting authentication of the person to be authenticated from the server device 10. When authentication of the person to be authenticated becomes necessary, the authentication request unit 303 transmits an authentication request including biometric information of the person to be authenticated (the user in front of the authentication terminal 20) to the server device 10.

The authentication request unit 303 receives the authentication result (authentication successful, authentication failed) from the server device 10. The authentication request unit 303 performs an operation according to the received authentication result.

For example, if the response from the server device 10 is a "negative response" (if authentication has failed), the authentication request unit 303 closes the gate and denies the person to be authenticated from entering the office. At that time, the authentication request unit 303 may notify the person to be authenticated that he or she cannot pass through the gate.

If the response from the server device 10 is a "positive response" (authentication is successful), the authentication request unit 303 opens the gate and allows the person to be authenticated to enter the office.

The memory unit 304 is a means for storing information necessary for the operation of the authentication terminal 20.

[Device]
Examples of the terminal 30 include a smartphone, a mobile phone, a game machine, a mobile terminal device such as a tablet, a computer (personal computer, notebook computer), etc. The terminal 30 can be any equipment or device that can accept user operations and communicate with the server device 10, etc. In addition, since the configuration of the terminal 30 is clear to those skilled in the art, detailed explanations will be omitted.

[System Operation]
Next, the operation of the authentication system according to the first embodiment will be described.

FIG. 13 is a sequence diagram showing an example of the operation of the information processing system according to the first embodiment. The operation of the information processing system according to the first embodiment will be described with reference to FIG. 13.

The authentication terminal 20 sends an authentication request including the biometric information of the person to be authenticated to the server device 10 (step S01).

The server device 10 performs biometric authentication using the acquired biometric information and the biometric information stored in the user management database (step S02).

If the biometric authentication is successful and the authentication date (authentication date and time) is within the biometric information storage period, the server device 10 stores the biometric information (e.g., a facial image) acquired from the authentication terminal 20. The server device 10 stores the biometric information that is determined to be a successful authentication within the biometric information storage period.

The server device 10 sends a notification of successful authentication to the authentication terminal 20 (step S04).

The authentication terminal 20 provides the service assigned to the device itself (step S05). For example, the authentication terminal 20 opens the gate and allows the person to be authenticated to pass through the gate.

During the biometric information accumulation period, the authentication terminal 20 and server device 10 repeat the operations of steps S01 to S05 described above.

When the biometric information storage period has elapsed, the server device 10 selects the most suitable biometric information for registration from the stored biometric information (face image) and updates the registered biometric information using the selected biometric information (step S06).

Next, we will explain a modified example of the first embodiment.

<Modification 1>
The server device 10 may notify the user that the service provision date for the user is within the biometric information storage period. For example, when the authentication control unit 204 of the server device 10 succeeds in authenticating the authenticatee during the biometric information storage period, the authentication control unit 204 notifies the user that the biometric information storage period is in progress via the authentication terminal 20. In this case, the authentication control unit 204 may notify the authentication terminal 20 that the authentication is successful and that the biometric information storage period is in progress. Alternatively, the authentication control unit 204 may notify the email address of the user (terminal 30 owned by the user) identified by the matching process that the service provision date is in the biometric information storage period. In this case, the terminal 30 may display a pop-up as shown in FIG. 14 to notify the user of the biometric information storage period. Alternatively, the server device 10 may notify the user that the biometric information storage period is scheduled to be set before the biometric information storage period is set. For example, the server device 10 may notify the user that the biometric information storage period is scheduled to be set a predetermined period before the biometric information storage period to be set (for example, one week before, one month before).

Note that the display shown in FIG. 14 is an example and is not intended to limit the manner in which the user is notified that the service provision date falls within the biometric information storage period. For example, the terminal 30 may notify the user that the service provision date falls within the biometric information storage period by changing the background color or layout. For example, the terminal 30 may notify the user that the service provision date falls within the biometric information storage period by changing a white background to a yellow background, or by other methods. In this way, the terminal 30 may notify the user that the service provision date falls within the biometric information storage period by not only using text (message) but also by using the color scheme, layout, etc. of the screen.

<Modification 2>
The server device 10 may obtain the consent of the user when updating the biometric information. For example, when the update control unit 205 of the server device 10 selects biometric information (e.g., a face image) to be used for updating the registered biometric information, the update control unit 205 transmits an "update inquiry" including the selected face image to the user's terminal 30. Upon receiving the update inquiry, the terminal 30 displays a GUI as shown in FIG. 15 and obtains whether or not the registered face image (registered biometric information) can be updated with the face image selected by the server device 10. The terminal 30 notifies the server device 10 of the user's intention (agree to update, reject update). When the user agrees to update the biometric information (face image), the update control unit 205 updates the registered biometric information using the face image.

Alternatively, the server device 10 may obtain consent from the user to start storing biometric information for updating. For example, the server device 10 transmits an "accumulation period start inquiry" including the registered biometric information to the user's terminal 30 immediately before the start of the biometric information storage period. Upon receiving the inquiry, the terminal 30 displays a GUI such as that shown in FIG. 16 and obtains consent to start storing biometric information to update the registered biometric information. The terminal 30 notifies the server device 10 of the user's intention (agree to storage, reject storage). If the user consents to the storage of biometric information (face image), the server device 10 starts storing the biometric information during the biometric information storage period. In this manner, the server device 10 obtains from the user consent to setting a biometric information storage period during which the initially captured face image is deleted (updated).

<Modification 3>
The storage period control unit 203 of the server device 10 may set the biometric information storage period based on the attribute information (e.g., age, sex) of the user. For example, the storage period control unit 203 may determine the frequency of setting the biometric information storage period according to the age of the user. For example, the biometric information storage period may be set at a frequency such as "under 5 years old: once every 3 months", "5 to 10 years old: once every 6 months", "10 to 15 years old: once a year", "15 to 20 years old: once every 2 years", and "20 years old or older: once every 5 years". That is, the storage period control unit 203 may determine the biometric information storage period of each user based on the above-mentioned period setting rule (period setting policy). Note that there may be a rule such as "no update required" when the user is over a certain age. For example, the storage period control unit 203 may determine the biometric information storage period based on a rule such as "60 years old or older: no update required". In this case, the storage period control unit 203 may set the biometric information storage period to a period far exceeding the lifespan of a person. In this way, the server device 10 may determine the frequency of the biometric information storage period according to age, taking into consideration that children's faces are prone to change. When setting a new biometric information storage period, the server device 10 may set the biometric information storage period based on the age of the user. Alternatively, the server device 10 may determine the length of the biometric information storage period based on the attribute information of the user (e.g., age, sex). For example, taking into consideration that the younger the user is, the more likely the face (physiognomy) is to change, the server device 10 sets a longer biometric information storage period for younger users and a shorter biometric information storage period for older users.

<Modification 4>
The server device 10 may determine the frequency and length of the biometric information storage period based on the number of times authentication is successful but considered to be unsuccessful. For example, the server device 10 stores the number of times authentication is determined to be successful (number of pseudo errors) for each user near the lower limit of the threshold for determining authentication success. When the number of pseudo errors increases, the server device 10 shortens the setting frequency of the biometric information storage period. For example, the server device 10 changes the period setting frequency from once a year to an update frequency once every six months. Alternatively, when the number of pseudo errors increases, the server device 10 lengthens the biometric information storage period. For example, the server device 10 changes the period from one week to three weeks. Alternatively, when the number of pseudo errors increases, the server device 10 may increase the number of times required to determine authentication success within the biometric information storage period (for example, change the required number from 10 times to 15 times). On the other hand, when the number of pseudo errors is small, the server device 10 may lengthen the setting frequency of the storage period for updating biometric information. For example, the server device 10 may change the update frequency from once a year to once every three years. Alternatively, when the number of pseudo errors is small, the server device 10 may shorten the biometric information storage period (e.g., from one week to three days) or reduce the number of required authentications (e.g., from 10 to five).

<Modification 5>
The storage period control unit 203 of the server device 10 may determine the length of the biometric information storage period based on the authentication history of the user. In this case, the server device 10 generates and stores an authentication history including the date, time, and location of successful authentication for each user. The storage period control unit 203 calculates the authentication frequency of the user (the number of successful authentications in a predetermined period). The storage period control unit 203 sets a shorter biometric information storage period for a user with a high authentication frequency. In contrast, the storage period control unit 203 sets a longer biometric information storage period for a user with a low authentication frequency. For example, the storage period control unit 203 calculates the authentication frequency of the user in the most recent month. In addition, the length of the standard biometric information storage period (default value of the storage period) is set to "1 week". In this case, for a user with a high authentication frequency, the storage period control unit 203 sets the length of the biometric information storage period to "3 days", which is shorter than the default value. In contrast, for a user with a low authentication frequency, the storage period control unit 203 sets the length of the biometric information storage period to "2 weeks", which is longer than the default value. A high authentication frequency indicates that a large amount of biometric information is acquired during the biometric information storage period. Therefore, even if the biometric information storage period is set to be short, a sufficient number of facial images are accumulated to select a facial image for updating. On the other hand, a low authentication frequency indicates that a small amount of biometric information is acquired during the biometric information storage period. Therefore, unless the biometric information storage period is set to be long, a sufficient number of facial images are not accumulated to select a facial image for updating. Taking these circumstances into consideration, the server device 10 determines the length of the biometric information storage period according to the authentication frequency (frequency of service use) of each user, and makes it possible to acquire biometric information suitable for updating (biometric information with a sufficiently high appropriateness score).

<Modification 6>
Alternatively, the server device 10 (accumulation period control unit 203) may extend the biometric information accumulation period if the number of times authentication is determined to be successful during the biometric information accumulation period does not reach a predetermined value. For example, if a rule such as "10 successful authentications are required" is set, the server device 10 extends the biometric information accumulation period until 10 successful authentications are confirmed during the biometric information accumulation period (until 10 pieces of biometric information are accumulated). In this case, the accumulation period control unit 203 refers to the biometric information accumulation period field of the accumulation period management database and extracts an entry whose end date of the biometric information accumulation period has arrived. The accumulation period control unit 203 refers to the biometric information management database and acquires the number of pieces of biometric information of the user corresponding to the user ID of the extracted entry. If the number of pieces of biometric information acquired (the number of pieces of biometric information accumulated during the biometric information accumulation period) does not reach a predetermined value (10 in the above example), the accumulation period control unit 203 extends the end date of the biometric information accumulation period in the accumulation period management database.

<Modification 7>
Alternatively, the server device 10 (authentication control unit 204) may notify the user of the accumulation status of biometric information during the biometric information accumulation period (the number of successful authentications). That is, the server device 10 may notify the user of the progress status regarding the accumulation of biometric information required to complete the biometric information accumulation period. In the above example, the number of successful authentications required for the expiration of the biometric information accumulation period is "10", and the number of successful authentications at the time of successful authentication (e.g., seven successful biometric authentications) may be notified to the user. For example, the authentication control unit 204 may notify the terminal 30 of the user identified by the matching process of the accumulation status of biometric information (e.g., the number of required authentications, the current number of authentications). In this case, the terminal 30 may display a pop-up as shown in FIG. 17 to notify the user of the accumulation status of biometric information.

<Modification 8>
The server device 10 may generate biometric information for update from a plurality of pieces of biometric information accumulated during the biometric information accumulation period. For example, the update control unit 205 may synthesize a plurality of face images obtained during the biometric information accumulation period to generate one face image. The update control unit 205 may generate features from the generated face image and register the generated features as biometric information for update in the user management database. Alternatively, the update control unit 205 may generate features from each face image obtained during the biometric information accumulation period and calculate an average value of the generated features. The update control unit 205 may register the calculated average value of the features as biometric information for update in the user management database.

As described above, the server device 10 according to the first embodiment sets a biometric information accumulation period for accumulating biometric information necessary to update the registered biometric information. The server device 10 selects biometric information suitable for updating the registered biometric information from the biometric information obtained during the biometric information accumulation period, and updates the registered biometric information using the selected biometric information. The biometric information accumulation period is set with a predetermined frequency and a predetermined length, and the server device 10 updates the registered biometric information after the end of the biometric information accumulation period, for example. With this configuration, the server device 10 does not need to update the biometric information every time authentication of a user is successful, thereby suppressing an increase in the load on the server device 10.

Here, if the facial features of the person to be authenticated change, the authentication accuracy will deteriorate. Children, in particular, grow quickly and their faces change quickly. For this reason, frequent updates of biometric information are required for children. On the other hand, the faces of adults change more slowly, and frequent updates of biometric information are often unnecessary. The server device 10 takes these circumstances into consideration and sets an appropriate biometric information accumulation period according to the attributes of the user (e.g., age). For example, the server device 10 sets the biometric information accumulation period for children so that biometric information is updated frequently. Conversely, the server device 10 sets the biometric information accumulation period for adults so that biometric information is not updated frequently. As a result, it is possible to improve (maintain) the authentication accuracy while suppressing an increase in the load on the server device 10.

Furthermore, the server device 10 can reliably acquire the biometric information used to update the registered biometric information by appropriately selecting the length of the biometric information accumulation period. Also, the server device 10 verifies the quality of the biometric information used for updating, thereby preventing a deterioration in the accuracy of biometric authentication using the updated biometric information.

Next, we will explain the hardware of each device that makes up the information processing system. Figure 18 is a diagram showing an example of the hardware configuration of the server device 10.

The server device 10 can be configured by an information processing device (so-called a computer), and has the configuration shown in FIG. 18. For example, the server device 10 has a processor 311, a memory 312, an input/output interface 313, a communication interface 314, etc. The components such as the processor 311 are connected by an internal bus or the like, and are configured to be able to communicate with each other.

However, the configuration shown in FIG. 18 is not intended to limit the hardware configuration of the server device 10. The server device 10 may include hardware not shown, and may not include an input/output interface 313 as necessary. Furthermore, the number of processors 311 and the like included in the server device 10 is not intended to be limited to the example shown in FIG. 18, and for example, the server device 10 may include multiple processors 311.

The processor 311 is, for example, a programmable device such as a CPU (Central Processing Unit), an MPU (Micro Processing Unit), or a DSP (Digital Signal Processor). Alternatively, the processor 311 may be a device such as an FPGA (Field Programmable Gate Array) or an ASIC (Application Specific Integrated Circuit). The processor 311 executes various programs including an operating system (OS).

Memory 312 may be a RAM (Random Access Memory), a ROM (Read Only Memory), a HDD (Hard Disk Drive), a SSD (Solid State Drive), etc. Memory 312 stores the OS program, application programs, and various data.

The input/output interface 313 is an interface for a display device and an input device (not shown). The display device is, for example, a liquid crystal display. The input device is, for example, a device that accepts user operations such as a keyboard or a mouse.

The communication interface 314 is a circuit, module, etc. that communicates with other devices. For example, the communication interface 314 includes a NIC (Network Interface Card), etc.

The functions of the server device 10 are realized by various processing modules. The processing modules are realized, for example, by the processor 311 executing a program stored in the memory 312. The program can be recorded on a computer-readable storage medium. The storage medium can be a non-transitory medium such as a semiconductor memory, a hard disk, a magnetic recording medium, or an optical recording medium. In other words, the present invention can also be embodied as a computer program product. The program can be downloaded via a network, or updated using a storage medium that stores the program. The processing modules may also be realized by a semiconductor chip.

The authentication terminal 20 can also be configured with an information processing device, just like the server device 10, and its basic hardware configuration is no different from that of the server device 10, so a description of it will be omitted. For example, the authentication terminal 20 may be equipped with a camera device for photographing the person to be authenticated.

The server device 10, which is an information processing device, is equipped with a computer, and the functions of the server device 10 can be realized by having the computer execute a program. The server device 10 also executes a control method for the server device 10 by means of the program. Similarly, the authentication terminal 20 is equipped with a computer, and the functions of the authentication terminal 20 can be realized by having the computer execute a program. The authentication terminal 20 also executes a control method for the authentication terminal 20 by means of the program.

[Modification]
The configuration, operation, etc. of the information processing system described in the above embodiment are merely examples, and are not intended to limit the system configuration, etc.

The user management unit 202 of the server device 10 may calculate an appropriateness score for the biometric information acquired from the user during the initial registration of the biometric information. If the calculated appropriateness score is lower than a threshold, the user management unit 202 may request the user to re-register different biometric information (e.g., a face image).

The server device 10 may select biometric information to be used to update the registered biometric information based on the degree of similarity between the registered biometric information and the accumulated biometric information. For example, the server device 10 may select, as the biometric information for update, the biometric information that has the greatest degree of similarity with the registered biometric information among the biometric information acquired during the biometric information accumulation period.

When registering a user, the user's identity may be verified. The user management unit 202 of the server device 10 acquires the user's name, biometric information, etc., as well as an identification document (e.g., a passport, driver's license, etc.) containing the biometric information. The user management unit 202 performs a one-to-one match using the biometric information on the identification document and the biometric information acquired from the user. If the match is successful, the user management unit 202 may register the user (create an account).

The accumulation period control unit 203 may set the biometric information accumulation period using attribute information obtained from an identification document instead of attribute information (age, gender) acquired from the user. Alternatively, the accumulation period control unit 203 may infer the user's attribute information from the user's registered biometric information (e.g., a face image).

The update control unit 205 may perform statistical processing on the appropriateness scores of the biometric information obtained during the biometric information accumulation period, and select the biometric information to update the registered biometric information according to the results of the statistical processing. For example, the update control unit 205 may calculate a representative value representing the accumulated biometric information, such as the average, median, or mode of the appropriateness scores. The update control unit 205 may select the biometric information having an appropriateness score that matches the representative value (closest to the representative value) as the biometric information to be updated.

Alternatively, the update control unit 205 may select biometric information to update the registered biometric information from the biometric information remaining after excluding the biometric information with the best and worst appropriateness scores. Alternatively, the update control unit 205 may calculate the representative value by excluding the biometric information with the best and worst appropriateness scores.

In the above embodiment, a case has been described in which user information, biometric information accumulation period, and biometric information determined to be successfully authenticated are managed using three databases (user management database, accumulation period management database, and biometric information management database). However, user information, biometric information accumulation period, etc. may be managed by one database. In other words, the above three databases may be integrated and user information, etc. may be managed by one database.

In the above embodiment, the user management database has been described as storing the user's features as registered biometric information. However, the user management database may also store the user's facial image as registered biometric information. In this case, the authentication control unit 204 may generate features from the registered biometric information (facial image) each time authentication processing is performed.

In the above embodiment, a case has been described in which a user management database and the like are configured inside the server device 10, but these databases may also be constructed in an external database server or the like. That is, some of the functions of the server device 10 may be implemented in another server. More specifically, the above-described "accumulation period control unit (accumulation period control means)", "update control unit (update control means)", etc. may be implemented in any of the devices included in the system.

The form of data transmission and reception between each device (server device 10, authentication terminal 20) is not particularly limited, but data transmitted and received between these devices may be encrypted. Biometric information and the like is transmitted and received between these devices, and in order to appropriately protect this information, it is desirable to transmit and receive encrypted data.

In the flow diagrams (flowcharts, sequence diagrams) used in the above explanation, multiple steps (processes) are listed in order, but the order in which the steps are executed in the embodiments is not limited to the order listed. In the embodiments, the order of the steps shown in the diagrams can be changed to the extent that does not interfere with the content, for example by executing each process in parallel.

The above embodiments have been described in detail to facilitate understanding of the present disclosure, and it is not intended that all of the configurations described above are necessary. Furthermore, when multiple embodiments are described, each embodiment may be used alone or in combination. For example, it is possible to replace part of the configuration of an embodiment with the configuration of another embodiment, or to add the configuration of another embodiment to the configuration of an embodiment. Furthermore, it is possible to add, delete, or replace part of the configuration of an embodiment with other configurations.

The above explanation makes it clear that the present invention has industrial applicability, and the present invention can be suitably applied to information processing systems that provide users with services using biometric authentication.

A part or all of the above-described embodiments can be described as, but is not limited to, the following supplementary notes.
[Appendix 1]
A storage means for storing registered biometric information used for biometric authentication;
an accumulation period control means for setting a biometric information accumulation period having a predetermined length at a predetermined frequency, the biometric information being a period for accumulating biometric information of a user;
an update control means for updating the registered biometric information by using at least one piece of biometric information stored during the biometric information storage period;
A server device comprising:
[Appendix 2]
an authentication control means for receiving an authentication request including biometric information of a person to be authenticated from an authentication terminal, and performing authentication processing using the biometric information included in the authentication request and the stored registered biometric information;
The server device according to claim 1, wherein the authentication control means accumulates biometric information determined to be successful in authentication within the biometric information accumulation period, and discards biometric information determined to be successful in authentication outside the biometric information accumulation period.
[Appendix 3]
The update control means calculates a score indicating the suitability of the biometric information for biometric authentication purposes for each of at least one or more pieces of biometric information accumulated during the biometric information accumulation period, and selects the biometric information to be used for updating the registered biometric information based on the calculated score.
[Appendix 4]
The server device according to any one of claims 1 to 3, wherein the accumulation period control means sets the biometric information accumulation period based on attribute information of the user.
[Appendix 5]
The server device according to claim 4, wherein the accumulation period control means determines a frequency for setting the biometric information accumulation period in accordance with an age of the user.
[Appendix 6]
The server device according to claim 5, wherein the storage period control means determines the length of the biometric information storage period based on an authentication history of the user.
[Appendix 7]
The server device according to claim 6, wherein the biometric information is a face image or a feature generated from the face image.
[Appendix 8]
In the server device,
Store registered biometric information used for biometric authentication;
Setting a biometric information storage period having a predetermined length at a predetermined frequency, the biometric information storage period being a period for storing the biometric information of the user;
A method for controlling a server device, the method comprising: updating the registered biometric information by using at least one piece of biometric information stored during the biometric information storage period.
[Appendix 9]
A computer installed in the server device
A process of storing registered biometric information used for biometric authentication;
A process of setting a biometric information storage period having a predetermined length at a predetermined frequency, the biometric information storage period being a period for storing biometric information of a user;
updating the registered biometric information using at least one piece of biometric information accumulated during the biometric information accumulation period;
A computer-readable storage medium that stores a program for executing the above.

The disclosures of the above cited prior art documents are incorporated herein by reference. Although the embodiments of the present invention have been described above, the present invention is not limited to these embodiments. Those skilled in the art will understand that these embodiments are merely illustrative and that various modifications are possible without departing from the scope and spirit of the present invention. In other words, the present invention naturally includes various modifications and amendments that a person skilled in the art can make in accordance with the entire disclosure, including the scope of the claims, and the technical ideas.

10 Server device 20 Authentication terminal 30 Terminal 100 Server device 101 Storage means 102 Accumulation period control means 103 Update control means 201 Communication control unit 202 User management unit 203 Accumulation period control unit 204 Authentication control unit 205 Update control unit 206 Storage unit 301 Communication control unit 302 Biometric information acquisition unit 303 Authentication request unit 304 Storage unit 311 Processor 312 Memory 313 Input/output interface 314 Communication interface

Claims

A storage means for storing registered biometric information used for biometric authentication;
an accumulation period control means for setting a biometric information accumulation period having a predetermined length at a predetermined frequency, the biometric information being a period for accumulating biometric information of a user;
an update control means for updating the registered biometric information by using at least one piece of biometric information stored during the biometric information storage period;
A server device comprising:
an authentication control means for receiving an authentication request including biometric information of a person to be authenticated from an authentication terminal, and performing authentication processing using the biometric information included in the authentication request and the stored registered biometric information;
2. The server device according to claim 1, wherein the authentication control means accumulates biometric information determined to be successfully authenticated within the biometric information accumulation period, and discards biometric information determined to be successfully authenticated outside the biometric information accumulation period.
The server device according to claim 2, wherein the update control means calculates a score indicating the suitability of each piece of biometric information for biometric authentication purposes for at least one piece of biometric information accumulated during the biometric information accumulation period, and selects the biometric information to be used to update the registered biometric information based on the calculated score.
The server device according to any one of claims 1 to 3, wherein the accumulation period control means sets the biometric information accumulation period based on attribute information of the user.
The server device according to claim 4, wherein the accumulation period control means determines the frequency at which the biometric information accumulation period is set according to the age of the user.
The server device according to claim 5, wherein the storage period control means determines the length of the biometric information storage period based on the authentication history of the user.
The server device according to claim 6, wherein the biometric information is a face image or a feature amount generated from the face image.
In the server device,
Store registered biometric information used for biometric authentication;
Setting a biometric information storage period having a predetermined length at a predetermined frequency, the biometric information storage period being a period for storing the biometric information of the user;
A method for controlling a server device, the method comprising: updating the registered biometric information by using at least one piece of biometric information stored during the biometric information storage period.
A computer installed in the server device
A process of storing registered biometric information used for biometric authentication;
A process of setting a biometric information storage period having a predetermined length at a predetermined frequency, the biometric information storage period being a period for storing biometric information of a user;
updating the registered biometric information using at least one piece of biometric information accumulated during the biometric information accumulation period;
A computer-readable storage medium that stores a program for executing the above.