[Technical Field]
5 [0001]
The some non-limiting embodiments relates to a gate device, an
authentication system, a gate control method, and a storage medium.
[Background Art]
[0002]
10 Services using face authentication have started to spread . For
example, face authentication has started to be applied to various
procedures (for example, check in, baggage check, security check, and the
like) at airports. A service using face authentication is often provided
using a gate device (see PTLs 1 and 2).
15 [0003]
For example, PTL 1 describes that unauthorized passage of an
unauthenticated person can be prevented while maintaining convenience
of walk-through face authentication with a simple configuration . The
face authentication system disclosed in PTL 1 includes an image
20 acquisition means, a storage means, a face collation means, and an
authorizing means. The image acquisition means sequentially acquires
input images by photographing the authentication region . The storage
means stores a registered face image of the user registered in advance .
The face collation means colla tes the face image of the person extracted
25 from the input image with the registered face image, and authenticates
that the person is the user. When the size of the region indicating the
authenticated person in the input image is equal to or more than a
predetermined size, the authorizing means permits passage of the person .
The face authentication system disclosed in PTL 1 does not permit
3
passage when the person to be authenticated is located away from the
camera even when the person to be authenticated is authenticated as an
authorized user by face authentication, and permits passage when
detecting approach of the person to be authenticated to the camera side.
5 [Citation List]
[Patent Literature]
[0004]
[PTL 1] JP 2015-001790 A
[PTL 2] JP 2019-133364 A
10 [Summary of Invention]
[Technical Problem]
[0005]
As disclosed in PTL 1, there is an authentication method of
performing face authentication by photographing a user at a walking pace
15 without stopping the user in front of a camera . When the walking pace
face authentication is performed, the area sensor is used to detect that the
user has reached a predetermined area in front of the gate device . When
it is detected that the user has reached the predetermined area, the
authentication process starts.
20 [0006]
Here, in order to image a person to be authenticated without
stopping the person in front of the camera, it is desirable to extend the
detection range of the area sensor. However, when the detection range
of the area sensor is extended, there is a high po ssibility that the
25 authentication process using the face image of the user who does not pass
through the gate device in the end is performed . When the gate is
opened in response to successful authentication of the user, there is a
possibility that a third party who has not succeeded in authentication is
permitted to pass through the gate.
4
[0007]
In this regard, the face authentication system disclosed in PTL 1
determines that the person to be authenticated is located near the gate
device by the image process (image process of determining whether the
5 size of the person is equal to or more than a predetermined value).
However, the size (height) of the person varies greatly among individuals,
and there is no guarantee that the gate is opened at the correct t iming in
the method of determining the position of the person using the image
process. For example, even when the tall user is located far from the
10 gate device, there is a strong tendency to determine that the tall user is
approaching the gate device, and there is room for the third party to pass
through the gate.
[0008]
A main object of the some non-limiting embodiments is to provide
15 a gate device, an authentication system, a gate control method, and a
storage medium that contribute to preventing passage of an
unauthenticated user.
[Solution to Problem]
[0009]
20 According to a first aspect of the some non-limiting embodiments,
there is provided a gate device including an acquisition unit that acquires
biological information about a person to be authenticat ed present in an
authentication area, an authentication request unit that transmits an
authentication request including the acquired biological information to a
25 server device, a determination unit that detects an approaching person
using a sensor that detects the approaching person into the gate device and
determines whether the approaching person and the person to be
authenticated are identical, and a gate control unit that controls a gate in
such a way that the person to be authenticated is permitted to p ass when
5
authentication by the server device is successful and the approaching
person and the person to be authenticated are identical.
[0010]
According to a second aspect of the some non-limiting
5 embodiments, there is provided an authentication system in cluding a
server device that stores biological information about each of a plurality
of system users and performs an authentication process using the plurality
of pieces of biological information, and a gate device connected to the
server device, wherein a gate device includes an acquisition unit that
10 acquires biological information about a person to be authenticated present
in an authentication area, an authentication request unit that transmits an
authentication request including the acquired biological i nformation to the
server device, a determination unit that detects an approaching person
using a sensor that detects the approaching person into the gate device and
15 determines whether the approaching person and the person to be
authenticated are identical, and a gate control unit that controls a gate in
such a way that the person to be authenticated is permitted to pass when
authentication by the server device is successful and the approaching
person and the person to be authenticated are identical.
20 [0011]
According to a third aspect of the some non-limiting embodiments,
there is provided a gate control method including the steps, performed by
a gate device, of acquiring biological information about a person to be
authenticated present in an authentication area, transmitting an
25 authentication request including the acquired biological information to a
server device, detecting an approaching person using a sensor that detects
the approaching person into the gate device and determining whether the
approaching person and the person to be authenticated are identical, and
controlling a gate in such a way that the person to be authenticated is
6
permitted to pass when authentication by the server device is successful
and the approaching person and the person to be aut henticated are
identical.
[0012]
5 According to a fourth aspect of the some non-limiting
embodiments, there is provided a computer-readable storage medium
storing a program for causing a computer mounted on a gate device to
execute the steps of acquiring biological information about a person to be
authenticated present in an authentication area, transmitting an
10 authentication request including the acquired biological information to a
server device, detecting an approaching person using a sensor that detects
the approaching person into the gate device and determining whether the
approaching person and the person to be authenticated are identical, and
controlling a gate in such a way that the person to be authenticated is
15 permitted to pass when authentication by the server device is successful
and the approaching person and the person to be authenticated are
identical.
[Advantageous Effects of Invention]
[0013]
20 According to each aspect of the some non-limiting embodiments,
there is provided a gate device, an authentication system, a gate control
method, and a storage medium that contribute to preventing passage of an
unauthenticated user. The effects of the some non-limiting embodiments
are not limited to the above. According to the some non-limiting
25 embodiments, other effects may be exhibited instead of or in addition to
the effects.
[Brief Description of Drawings]
[0014]
Fig. 1 is a diagram for describing an outline of an example
7
embodiment.
Fig. 2 is a diagram illustrating an example of a schematic
configuration of an authentication system according to the first example
embodiment.
5 Fig. 3 is a view illustrating an example of an appearance of the
gate device according to the first example embodiment.
Fig. 4 is a view illustrating an example of a pla n view of the gate
device according to the first example embodiment.
Fig. 5 is a diagram illustrating an example of a processing
10 configuration of the gate device according to the first example
embodiment.
Fig. 6 is a diagram illustrating an example of an authentication
request.
Fig. 7 is a flowchart illustrating an example of an operation of the
15 gate device according to the first example embodiment.
Fig. 8 is a diagram illustrating an example of a processing
configuration of the server device according to the first example
embodiment.
Fig. 9 is a diagram illustrating an example of a user database.
20 Fig. 10 is a sequence diagram illustrating an example of an
operation of the authentication system according to the first example
embodiment.
Fig. 11 is a flowchart illustrating an example of the operation of a
gate device according to the second example embodiment.
25 Fig. 12 is a diagram illustrating an example of a hardware
configuration of the gate device.
Fig. 13 is a diagram illustrating an example of a n authentication
request.
Fig. 14 is a diagram illustrating an example of an authentication
8
request.
[Example Embodiment]
[0015]
First, an outline of an example embodiment will be described .
5 The reference numerals in the drawings attached to this outlin e are
attached to respective elements for convenience as an example for
assisting understanding, and the description of this outline is not intended
to be any limitation. In a case where there is no particular explanation,
the block described in each drawing represents not a configuration of a
10 hardware unit but a configuration of a functional unit . Connection lines
between blocks in each drawing include both bidirectional and
unidirectional lines. The unidirectional arrow schematically indicates a
flow of a main signal (data), and does not exclude bidirectionality. In
the present specification and the drawings, elements that can be similarly
15 described are denoted by the same reference numerals, and redundant
description can be omitted.
[0016]
The gate device 100 according to an example embodiment includes
an acquisition unit 101, an authentication request unit 102, a
20 determination unit 103, and a gate control unit 104 (see Fig. 1). The
acquisition unit 101 acquires biological information about a person to be
authenticated who is in an authentication area . The authentication
request unit 102 transmits to a server device an authentication request
including the acquired biological information . The determination unit
25 103 detects an approaching person into the gate device by using a sensor
that detects approaching persons, and determines whether the approaching
person and the person to be authenticated are identical . When
authentication by the server device is successful and the approaching
person and the person to be authenticated are identical, then the gate
9
control unit 104 controls the gate to allow passage of the person to be
authenticated.
[0017]
The gate device 100 acquires the biological information about the
5 user who has reached the authentication area, and requests the server
device to perform an authentication process using the acquired biological
information. In parallel with the authentication process by the server
device, the gate device 100 detects a user entering an internal area of the
gate device (an area surrounded by a main body of the gate device 100).
10 At this time, since the gate device 100 uses a highly reliable means, such
as a passage sensor, to detect an approaching person, reliable detection
(detection of an approaching person) is performed. The gate device 100
opens the gate when it is determined that the user who has succeeded in
the authentication has entered the area . As a result, an unauthenticated
15 user can be prevented from passing through the gate.
[0018]
Hereinafter, specific example embodiments will be described in
more detail with reference to the drawings.
[0019]
20 (First example embodiment)
The first example embodiment will be described in more detail
with reference to the drawings.
[0020]
Fig. 2 is a diagram illustr ating an example of a schematic
25 configuration of the authentication system according to the first example
embodiment. Referring to Fig. 2, the authentication system includes a
plurality of gate devices 10-1 to 10-3 and a server device 20.
[0021]
In the following description, in a case where there is no particular
10
reason to distinguish the gate devices 10-1 to 10-3, they are simply
referred to as a “gate device 10”. The configuration illustrated in Fig. 2
is an example and is not intended to limit the number of gate devices 10
or the like. The authentication system may include at least one or more
5 gate devices 10.
[0022]
Gate device 10 and server device 20 are configured to be able to
communicate with each other by wired or wireless communication means.
Server device 20 may be installed in the same building as gate device 10,
10 or may be installed on a network (cloud).
[0023]
The gate device 10 is, for example, a device installed in an airport
or a station. Gate device 10 controls passage of a user. The gate
device 10 permits passage of a user (hereinafter, it is described as an
15 authentication successful person) who has been successfully authenticated
by the server device 20. Gate device 10 does not permit passage of a
user who has not been authenticated by the server device 20 or a user who
has failed in authentication (hereinafter, it is described as an
authentication failure person). In the following description, a user who
20 is not authenticated by the server device 20 is referred to as an
“unauthenticated person”.
[0024]
The server device 20 is a device that performs an authentication
process. Specifically, server device 20 stores biological information
25 about a user (system user) who is permitted to pass through the gate
device 10. The server device 20 performs the authentication process
using the biological information acquired from the gate device 10 and the
biological information stored in advance, and notifies the gate device 10
of a result of authentication (authentication succeeded, authentica tion
11
failed).
[0025]
When it is determined that the result of authentication is
“authentication succeeded” and the authentication successful person
5 enters the internal area of the gate device, the gate device 10 opens the
gate to permit passage of the person to be authenticated. In other words,
even when “authentication succeeded” is received from the server device
20, the gate device 10 does not open the gate unless the authentication
successful person enters the internal area of the gate device.
10 [0026]
Examples of the biological information about the user include data
(feature amount) calculated from physical features unique to an individual
such as a face and an iris pattern (pattern). Alternatively, the biological
information about the user may be image data such as a face image and an
15 iris image. The biological information about the user may include the
physical characteristics of the user as information.
[0027]
Next, details of each device included in the authentication system
according to the first example embodiment will be described . In the
20 following description, a “face image” of the user will be described as an
example of the biological information.
[0028]
[Gate device]
Fig. 3 is a view illustrating an example of an appearance of the
25 gate device 10 according to the first example embodiment.
[0029]
Referring to Fig. 3, the gate device 10 includes a face
authentication module 11. The face authentication module 11 is attached
to the main body of the gate device 10. The face authentication module
12
11 includes a camera 12. The “main body” of the gate device 10 is a
structure forming the center of the gate device 10, and is a member that is
in contact with the floor and to which a face authentication module and
the like are attached.
5 [0030]
The face authentication module 11 includes a light emitting diode
(LED) (not illustrated) for dimming and a display 13 . The gate device
10 controls an environment (light irradiated to the user) at the time of
acquiring the user’s face image using the LED for dimming. Gate device
10 10 notifies the user of a necessary message or the like by using display
13. For example, the gate device 10 displays a result of authentication
(authentication succeeded, authentication failed) by the server device 20.
[0031]
The gate device 10 includes a display 14. Gate device 10 notifies
15 the user of a necessary message or the like by using the display 14 . For
example, the gate device 10 displays a result of authentication
(authentication succeeded, authentication failed) b y the server device 20.
Alternatively, the gate device 10 may notify the user of a necessary
message by using a speaker (not illustrated).
20 [0032]
The gate device 10 includes an area sensor 15 . The area sensor
15 is a sensor that detects whether a person is present in a predetermined
area (an area surrounded by a dotted line in Fig. 3) set in front of the gate
device 10. The area sensor 15 can be configured using a sensor (so -
25 called motion sensor) using infrared rays.
[0033]
When confirming that a person is present in the predetermined area
based on the detection signal from the area sensor 15, the gate device 10
controls the camera 12 to acquire image data . In the following
13
description, an area where the area sensor 15 detects the presence of a
person is referred to as an “authentication area”. When detecting that a
person is present in the authentication area, the gate device 10 captures an
image of the user located in the authentication area.
5 [0034]
The gate device 10 includes an in-gate sensor 16. The in-gate
sensor 16 is a sensor that detects that a person enters the inside of the
gate device (gate device 10). As the in-gate sensor 16, for example, a
sensor (so-called passage sensor using light) including an optical
10 transmission device and an optical reception device can be used. For
example, the optical transmission device and the optical reception device
are installed to face each other (two devices are installed in an inner wall
of the main body). The transmission device constantly transmits light,
and the reception device receives the transmitted light. The gate device
15 10 determines that a person enters gate device 10 when the reception
device cannot receive the light. Fig. 3 illustrates one of the two devices
constituting the in-gate sensor 16. A plurality of pairs of the in-gate
sensors 16 may be provided at substantially equal intervals in the
traveling direction of the person.
20 [0035]
The gate device 10 includes a gate 17. When confirming that the
user is present in the authentication area, the gate device 10 acquires a
face image of the user. The gate device 10 generates a feature amount
(biological information) from the acquired image to transmit an
25 authentication request including the generated feature amount to the
server device 20. The gate device 10 opens the gate 17 when it is
determined that the authentication by the server device 20 is successful
and the authentication successful person enters the gate device . The
gate device 10 closes the gate 17 after the authentication suc cessful
14
person passes through the gate 17.
[0036]
The type of the gate 17 is not particularly limited, and is, for
example, a flapper gate in which a flapper provided from one side or both
5 sides of the passage opens and closes, a turn coil gate in which t hree bars
rotate, or the like.
[0037]
The face authentication module 11 is installed to be inclined at a
predetermined angle with respect to the direction in which the user walks
10 toward the gate device 10. Fig. 4 is a view (plan view) illustrating a
case where the gate device 10 is viewed from above.
[0038]
As illustrated in Fig. 4, the face authentication module 11 is
installed to be inclined at an angle θ with respect to a direction in which
15 the user walks (a direction perpendicular to the gate 17). The angle θ is
selected (adjusted) in such a way that the camera 12 can image the user U
in the authentication area.
[0039]
When the angle θ is reduced, only the vicinity of the gate device
20 10 can be imaged, and there is a possibility that the user enters the inside
of the gate device 10 before the authentication process using the face
image ends. In this case, the user is required to stop and stand by until
the authentication process is completed, and it cannot be said that
comfortable walk-through can be achieved. On the other hand, when the
25 angle θ is increased, it is possible to capture an image far away from the
gate device 10. In this case, although it is advantageous for achieving a
comfortable walk-through, there is a possibility that even a user who is
not walking toward the gate device may be authenticated . For example,
in the example of Fig. 2, the gate device 10-1 captures an image of a user
15
who is not walking toward gate device 10 -1, and requests the server
device 20 for authentication. As described above, when the angle θ is
too large, there is a possibility that the useless authentication process
occurs. It is desirable that the administrator and the operator of the
5 system determine the optimum angle in consideration of the advantages
and disadvantages caused by the setting angle θ of the face authentication
module 11 as described above. As a result of intensive studies by the
inventors, it has been found that the angle θ is desirably selected from a
range of 30 to 60 degrees.
10 [0040]
Fig. 5 is a diagram illustrating an example of a processing
configuration (processing module) of the gate device 10 according to the
first example embodiment. Referring to Fig. 5, the gate device 10
includes a communication control unit 201, a person to be au thenticated
15 detection unit 202, a biological information acquisition unit 203, an
authentication request unit 204, an approaching person determination unit
205, a gate control unit 206, a message output unit 207, and a storage unit
208.
[0041]
20 The communication control unit 201 is a means configured to
control communication with another device . Specifically, the
communication control unit 201 receives data (packet) from the server
device 20. The communication control unit 201 transmits data to the
server device 20. The communication control unit 201 delivers data
25 received from another device to another processing module . The
communication control unit 201 transmits data acquired from another
processing module to another device . In this manner, the other
processing modules transmit and receive data to and from another device
via the communication control unit 201.
16
[0042]
The person to be authenticated detection unit 202 is a means
configured to detect a person to be authenticated (a user who is a target of
the authentication process) in the authentication area . The person to be
5 authenticated detection unit 202 detects a person (user) present in the
authentication area based on the detection signal from the area sensor 15 .
When the output of the area sensor 15 indicates that “there is a user in the
authentication area”, the person to be authenticated detection unit 202
notifies the biological information acquisition unit 203 of the fact.
10 [0043]
The biological information acquisition unit 203 is a means
configured to acquire biological information about a person to be
authenticated present in the authentication area . Upon acquiring the
notification related to “there is a user in the authentication area ” from the
15 person to be authenticated detection unit 202, the biological information
acquisition unit 203 controls the camera 12 and captures an image of the
user located in the authentication area.
[0044]
The biological information acquisition unit 203 attempts to extract
20 a face image (face region) from the obtained image. For example, the
biological information acquisition unit 203 extracts a face image (face
region) from the image data by using a learning model learned by a
convolutional neural network (CNN). Alternatively, the biological
information acquisition unit 203 may extract the face image using a
25 method such as template matching.
[0045]
In a case where the face image can be extracted, the biological
information acquisition unit 203 generates a feature amount (a feature
vector including a plurality of feature amounts) from the face image .
17
Specifically, the biological information acquisition unit 203 extracts
feature points from the acquired face image . An existing technique can
be used for the feature point extraction processing, and thus a d etailed
description thereof will be omitted. For example, the biological
5 information acquisition unit 203 extracts eyes, a nose, a mouth, and the
like as feature points from the face image . Thereafter, the biological
information acquisition unit 203 calculates the position of each feature
point and the distance between the feature points as feature amounts to
generate a feature vector (vector information characterizing the face
10 image) including a plurality of feature amounts.
[0046]
The biological information acquisition unit 203 delivers the
generated feature amount (feature vector) to the authentication request
unit 204.
15 [0047]
The authentication request unit 204 is a means configured to
request the server device 20 to perform the authentication process of the
person to be authenticated. The authentication request unit 204
generates an authentication request including the feature amount
20 (biological information) acquired from the biological information
acquisition unit 203 to transmit the authentication request to the server
device 20.
[0048]
For example, the authentication request unit 204 generates an
25 authentication request including an identifier (hereinafter, referred to as a
gate identifier) of the gate device, a feature amount, and the like (see F ig.
6). As the gate identifier, a media access control (MAC) address or an
Internet protocol (IP) address of the gate device 10 can be used.
[0049]
18
When transmitting the authentication request to the server device
20, the authentication request unit 204 delivers the feature amount
included in the request to the approaching person determination unit 205.
[0050]
5 The authentication request unit 204 receives a response to the
authentication request from the server device 20 . The authentication
request unit 204 delivers a response (authentication succeeded,
authentication failed) from the server device 20 to the gate control unit
206.
10 [0051]
The approaching person determination unit 205 is a means
configured to detect an approaching person using an in -gate sensor 16 that
detects an approaching person into the gate device (gate device 10) and
determines whether the approaching person and the person to be
15 authenticated are identical. The approaching person determination unit
205 monitors (polls) the output of the in-gate sensor 16. When the
output of the in-gate sensor 16 indicates “there is an approaching person
inside”, the approaching person determination unit 205 determines
whether the approaching person and the person to be authenticated match .
20 Specifically, the approaching person determination unit 205 controls the
camera 12 to acquire a face image, similarly to the biological information
acquisition unit 203. The approaching person determination unit 205
calculates a feature amount (a feature amount of an approaching person)
from the obtained face image.
25 [0052]
The approaching person determination unit 205 determines whether
the calculated feature amount (the feature amount of the approaching
person) and the feature amount (the feature amount of the pe rson to be
authenticated) acquired from the authentication request unit 204
19
substantially match. Specifically, the approaching person determination
unit 205 calculates the similarity between the two feature amounts. A
chi-square distance, a Euclidean distance, or the like can be used as the
similarity. The similarity is lower as the distance is longer, and the
5 similarity is higher as the distance is shorter. When the similarity is
equal to or more than a predetermined value, the approaching person
determination unit 205 determines that the two feature amounts
substantially match (the approaching person and the person to be
authenticated are identical).
10 [0053]
In this manner, the approaching person determination unit 205
detects an approaching person based on the detection signal from the
passage sensor (the in-gate sensor 16) using light. Thereafter, the
approaching person determination unit 205 performs one -to-one collation
15 using two feature amounts (feature amount of approaching person, feature
amount of person to be authenticated). Whether the approaching person
and the person to be authenticated are identical is determined by the one -
to-one collation (one-to-one collation using the biological information
about the approaching person and the biological information about the
20 person to be authenticated).
[0054]
When determining that the approaching person and the person to be
authenticated are identical, the approaching person determination unit 205
notifies the gate control unit 206 of the determin ation.
25 [0055]
The gate control unit 206 is a means configured to control the gate
17 included in the gate device 10. The gate control unit 206 opens the
gate 17 when the result of authentication of the server device 20 is
“authentication succeeded” and the approaching person and the person to
20
be authenticated are identical. In other words, in principle, the gate
control unit 206 does not open the gate 17 unless the above condition
(authentication succeeded, approaching person and person to be
authenticated are identical) is satisfied. The gate control unit 206 closes
5 the gate 17 after a user permitted to pass by using a distance sensor or the
like passes through the gate 17.
[0056]
The message output unit 207 is a means configured to output a
message to be notified to the user. The message output unit 207 notifies
10 the user of a necessary message using the displays 13 and 14, a speaker,
or the like.
[0057]
The storage unit 208 is a means configured to store information
necessary for the operation of the gate device 10.
15 [0058]
Fig. 7 is a flowchart illustrating an example of the operation of the
gate device 10 according to the first example embodiment.
[0059]
Gate device 10 detects whether the person to be authenticated is
20 present in the authentication area (step S101). When the person to be
authenticated is not detected (step S101: No branch), the gate device 10
repeats the process of step S101.
[0060]
When the person to be authenticated is detected (step S101: Yes
25 branch), the gate device 10 captures an image of the user (person to be
authenticated) located in the authentication area to acquire a face image
(step S102).
[0061]
Gate device 10 calculates a feature amount from the face image
21
(step S103).
[0062]
The gate device 10 transmits an authentication request including
the calculated feature amount to the server device 20, and receives a
5 response (result of authentication) to the authentication request (step
S104).
[0063]
Gate device 10 determines whether an approaching person is
present inside the gate device (step S105). When the approaching person
10 cannot be detected even after the lapse of the predetermined time from the
start of the process of detecting the approaching person (step S105: No
branch), the gate device 10 performs the pr ocess related to step S109.
[0064]
When the approaching person is detected during the predetermined
15 period (step S105: Yes branch), the gate device 10 determines whether the
approaching person and the person to be authenticated are identical (step
S106). When the approaching person and the person to be authenticated
are not identical (step S106: No branch), the gate device 10 performs the
process related to step S109.
20 [0065]
When the approaching person and the person to be authenticated
are identical (step S106: Yes branch), the gate device 10 determines
whether the result of authentication acquired from the server device 20 is
“authentication succeeded” (step S107). When the result of
25 authentication is “authentication failed”, the gate device 10 performs the
process related to step S109. It is a matter of course that the processing
related to step S107 may be performed before the processing related to
step S105.
[0066]
22
When the result of authentication is “authentication succeeded”,
the gate device 10 opens the gate 17 (step S108). When a gate opening
condition (authentication succeeded, and the approaching person and the
person to be authenticated are identical) is satisfied, the gate device 10
5 controls the gate 17 in such a way that the person to be authenticated is
permitted to pass through. At this time, the gate device 10 may display
on displays 13 and 14 that the authentication of the person to be
authenticated has succeeded.
[0067]
10 When the above condition is not satisfied (No branch in any of
steps S105, S106, and S107), the gate device 10 performs an error process
(step S109). Specifically, when the approaching person cannot be
detected during the predetermined period (step S105: No branch), the gate
device 10 discards the result of authentic ation acquired from the server
15 device 20. When the approaching person and the person to be
authenticated are different (step S106: No branch), the gate device 10
displays the fact on displays 13, 14. When the authentication by the
server device 20 fails (step S107: No branch), the gate device 10 displays
the fact on displays 13, 14.
20 [0068]
[Server device]
Fig. 8 is a diagram illustrating an example of a processing
configuration (processing module) of the server device 20 according to
the first example embodiment. Referring to Fig. 8, the server device 20
25 includes a communication control unit 301, a user registration unit 302,
an authentication unit 303, and a storage unit 304.
[0069]
The communication control unit 301 is a means configured to
control communication with another device . Specifically,
23
communication control unit 301 receives data (packet) from the gate
device 10. The communication control unit 301 transmits data to the
gate device 10. The communication control unit 301 delivers data
received from another device to another processing module . The
5 communication control unit 301 transmits data acquired from another
processing module to another device . In this manner, the another
processing module transmits and receives data to and from the a nother
device via the communication control unit 301.
[0070]
10 The user registration unit 302 is a means configured to perform
system registration of a user (system user) who is permitted to pass
through the gate device 10. The user registration unit 302 acquires
biological information (for example, a face image) of a user who is
permitted to pass through the gate device 10 using any means.
15 [0071]
For example, in a case where the gate device 10 is a device
installed at an airport, the system user inputs b iological information and
personal information (name, passport number, etc.) to the server device 20
using a web page of an airline company or a kiosk terminal installed at the
20 airport. Alternatively, in a case where the gate device 10 is a device
installed at a ticket gate of a station, the system user inputs biological
information, personal information, and the like to the server device 20
from a web page of a railway company or the like or a terminal installed
at a station.
25 [0072]
When acquiring a face image, the user registration unit 302
calculates a feature amount from the face image . The user registration
unit 302 registers the biological information (for example, the feature
amount calculated from the face image) of the system user in the “user
24
database”. The user registration unit 302 registers, in the user database
as necessary, a user identifier (ID) for identifying the system user, and
personal information (for example, name, nationality, gender, and the
like) in association with biological information (see Fig. 9). The user
5 database illustrated in Fig. 9 is an example, and other items may be stored
in association with the biological information (feature amount). For
example, a “face image” may be registered in the user database.
[0073]
Authentication unit 303 is a means configured to process the
10 authentication request received from the gate device 10 . Specifically,
the authentication unit 303 sets the biological information (feature
amount) included in the authentication request as the coll ation target, and
performs the collation process with the biological information registered
in the user database.
15 [0074]
More specifically, the authentication unit 303 sets the feature
amount extracted from the authentication request as the collation targ et,
and performs one-to-N (N is a positive integer, and the same applies
hereinafter) collation with the plurality of feature amounts registered in
20 the user database.
[0075]
The authentication unit 303 calculates similarity between the
feature amount (feature vector) to be collated and each of the plurality of
feature amounts registered. The authentication unit 303 sets the result
25 as “authentication succeeded” if the feature amount whose similarity is
equal to or more than the predetermined value is registered in the user
database. The authentication unit 303 sets the result as “authentication
failed” if the feature amount whose similarity is equal to or more than the
predetermined value is not registered in the user database.
25
[0076]
The authentication unit 303 identifies a feature amount whose
similarity with the feature amount of the collation target is equal to or
more than a predetermined value and is the highest among the plurality of
5 feature amounts registered in the user database . The authentication unit
303 transmits the user ID and the personal information related to the
identified feature amount to another module and the gate device 10 as
necessary. For example, in a case where the gate device 10 is a device
installed in an airport, the progress (check-in passage, security check
10 passage, etc.) of the procedure is managed using the information (name,
passport number, etc.) identified by the authentication unit 303 . For
example, in a case where gate device 10 is a device installed at a ticket
gate of a station, the fare payment process or the like is performed using
the identified information.
15 [0077]
The storage unit 304 stores various types of information necessary
for the operation of the server device 20 . In the storage unit 304, a user
database is constructed.
[0078]
20 Fig. 10 is a sequence diagram illustrating an example of the
operation of the authentication system according to the first example
embodiment. It is assumed that the system user is registered in advance
prior to the operation of Fig. 10.
[0079]
25 Gate device 10 detects a person to be authenticated located in the
authentication area (step S01). The gate device 10 may take a measure
such that the user can recognize that the authentication process is being
performed when the person to be authenticated is detected. For example,
the gate device 10 may display the face image of the person to be
26
authenticated on the displays 13 and 14. Alternatively, the gate device
10 may display, on displays 13 and 14, a message or a symbol (for
example, an arrow or the like) prompting the user to enter the internal
area of the gate device 10 from the authentication area.
5 [0080]
Gate device 10 acquires the biological information about the
person to be authenticated (the user located in the authentication area) to
transmit an authentication request including the biological information to
the server device 20 (step S02).
10 [0081]
The server device 20 performs the authentication process using the
biological information included in the authentica tion request and the
biological information registered in the user database (step S11).
[0082]
15 The server device 20 transmits the result of authentication
(authentication succeeded, authentication failed) to the gate device 10
(step S12).
[0083]
The gate device 10 determines whether the person to be
20 authenticated enters the gate device in parallel with the authentication
process of the server device 20 (detection of an approaching person; step
S03).
[0084]
Gate device 10 checks whether a condition for op ening the gate 17
25 (gate opening condition) is satisfied (step S04). Specifically, the gate
device 10 checks whether the authentication succeeds and whether the
approaching person and the person to be authenticated are identical.
[0085]
When the gate opening condition is satisfied, the gate device 10
27
opens the gate 17 (step S05).
[0086]
As described above, the authentication system according to the
first example embodiment acquires the biological information about the
5 user who has reached the authentication area, and performs the
authentication process using the acquired biological information . In
parallel with the authentication process, the gate device 10 detects a user
entering the gate device. At this time, since the gate device 10 uses a
highly reliable means, such as a “passage sensor”, to detect an
10 approaching person, reliable detection (detection of an approaching
person) that is not affected by the height or the like of the user is
performed. The gate device 10 opens the gate 17 when it is determined
that the user who has succeeded in the authentication has entered the area .
As a result, in the authentication system according to the first example
15 embodiment, the gate 17 can be opened at the timing when the
authentication successful person reache s the inside of the gate device 10,
the passage of the unauthenticated user can be prevented, and the
comfortable walk-through can be achieved.
[0087]
20 (Second example embodiment)
Next, the second example embodiment will be described in detail
with reference to the drawings.
[0088]
In the first example embodiment, the case where the gate 17 is
25 opened when the person to be authenticated enters the inside of the gate
device 10 is described. However, in this response, there is room for a
third party (authentication failure person, unauthenticated person) who
has not succeeded in authentication to pass through the gate 17 together
with the person to be authenticated.
28
[0089]
In the second example embodiment, an authentication system that
prevents a third party together with a person to be authenticated from
passing through the gate 17 will be described . That is, in the second
5 exemplary example embodiment, the description will be given about
preventing the “tailgating” in which another third party also passes
through the gate device 10 when the authentication successful person
passes through the gate device 10.
[0090]
10 Since the configuration of the authentication system according to
the second example embodiment can be the same as that of the first
example embodiment, the description related to Fig. 2 is omitted . Since
the processing configurations of the gate device 10 and the server device
20 according to the second example embodiment can be the same as those
15 of the first example embodiment, the description thereof will be omitted.
Hereinafter, differences between the first and second example
embodiments will be mainly described.
[0091]
When the detection result based on the detection signal of the in -
20 gate sensor 16 is “there is an approaching person inside”, the approaching
person determination unit 205 of the gate device 10 according to the
second example embodiment controls the camera 12 to image the
approaching person. When two or more face images are included in the
acquired image, the approaching person determination unit 205 determines
25 that “tailgating has occurred”.
[0092]
When detecting the occurrence of tailgating, the approaching
person determination unit 205 notifies the gate control unit 206 of the
fact.
29
[0093]
The gate control unit 206 does not open the gate 17 when
tailgating occurs. That is, the gate opening condition according to the
second example embodiment is “authentication succeeded, the person to
5 be authenticated and the approaching person are identical, and no
tailgating”.
[0094]
Fig. 11 is a flowchart illustrating an example of the operation of
the gate device 10 according to the second exemplary example
10 embodiment. In the flowcharts illustrated in Figs. 7 and 11, the same
processes are denoted by the same reference numer als (steps), and
redundant description is omitted.
[0095]
When the approaching person is detected (step S105: Yes branch),
15 the gate device 10 analyzes the image to determine whether the tailgating
has occurred (step S110). When tailgating has occurred (step S110: Yes
branch), the gate device 10 performs an error process (step S109). For
example, the gate device 10 outputs a message indicating that tailgating
has been detected and that the tailgating person goes outside.
20 [0096]
After the error process is performed, the gate device 10 may
perform the process such as detection of an approaching person (step
S105) and detection of the occurrence of tailgating (step S110) again.
[0097]
25 When tailgating does not occur (step S110: No branch), the gate
device 10 performs the process in and after step S106.
[0098]
[Modified example according to second example embodiment]
As described above, it is desirable that gate device 10 output a
30
predetermined message (for example, a message prompting a tailgating
person to go outside) when detecting the occurrence of tailgating .
Furthermore, the gate device 10 may change the message to be output
according to the analysis result of the image data captured by the
5 approaching person determination unit 205.
[0099]
Specifically, the approaching person determination unit 205 images
an approaching person based on a detection signal of the in -gate sensor
16. The approaching person determination unit 205 determines whether
10 two or more face images are included in the obtained image data. When
two or more face images are included, the approaching person
determination unit 205 determines whether the face image of the person to
be authenticated is included in the image data . For example, the
approaching person determination unit 205 determines whether a face
15 image having a feature amount substantially matching the feature amount
acquired from the authentication request unit 204 is included in the image
data.

WE CLAIM:
[Claim 1]
A gate device comprising:
an acquisition unit that acquires biological information about a
5 person to be authenticated present in an authentication area;
an authentication request unit that transmits an authentication
request including the acquired biological information to a server device;
a determination unit that detects an approaching person using a
sensor that detects the approaching person into the gate device and
10 determines whether the approaching person and the person to be
authenticated are identical; and
a gate control unit that controls a gate in such a way that the
person to be authenticated is permitted to pass when authentication by the
server device is successful and the approaching person and the person to
15 be authenticated are identical.
[Claim 2]
The gate device according to c laim 1, wherein the determination
unit acquires biological information about the approaching person, and
determines whether the approaching person and the person to be
20 authenticated are identical by one -to-one collation using biological
information about the approaching person and biological information
about the person to be authenticated.
[Claim 3]
The gate device according to claim 1 or 2, wherein
25 the determination unit acquires image data including the
approaching person and determines whether two or more face images are
included in the acquired image data, and
the gate control unit controls the gate in such a way that the person
to be authenticated is permitted to pass in a case where two or more face
48
images are not included in the image data.
[Claim 4]
The gate device according to claim 3, further comprising an output
unit that outputs a predetermined message in a case where two or more
5 face images are included in the image data.
[Claim 5]
The gate device according to claim 4, wherein the output unit
changes the output predetermined message according to whether the image
data includes a face image of the person to be authenticated.
10 [Claim 6]
The gate device according to any one of claims 1 to 5, wherein
the acquisition unit acquires a face image of the person to be
authenticated, and
the authentication request unit transmits the authentication request
15 including a feature amount generated from a face image of the person to
be authenticated to the server device.
[Claim 7]
The gate device according to any one of claims 1 to 6, wherein the
determination unit detects the approaching person based on a detection
20 signal from a passage sensor using light.
[Claim 8]
The gate device according to any one of claims 1 to 7, further
comprising a detection unit that detects the person to be authenticated in
the authentication area.
25 [Claim 9]
The gate device according to claim 8, wherein the detection unit
detects the person to be authenticated based on a detection signal from a
motion sensor using infrared rays.
[Claim 10]
49
An authentication system comprising:
a server device that stores biological information about each of a
plurality of system users and performs an authentication process using the
plurality of pieces of biological information; and
5 a gate device connected to the server device, wherein
the gate device includes:
an acquisition unit that acquires biological information about a
person to be authenticated present in an authentication area;
an authentication request unit that transmits an authentication
10 request including the acquired biological information to the server device;
a determination unit that detects an approaching person using a
sensor that detects the approaching person into the gate device and
determines whether the approaching person and the person to be
authenticated are identical; and
15 a gate control unit that controls a gate in such a way that the
person to be authenticated is permitted to pass when authentication by the
server device is successful and the approaching pers on and the person to
be authenticated are identical.
[Claim 11]
20 A gate control method comprising:
by a gate device,
acquiring biological information about a person to be authenticated
present in an authentication area;
transmitting an authentication request including the acquired
25 biological information to a server device;
detecting an approaching person using a sensor that detects the
approaching person into the gate device and determining whether the
approaching person and the person to be authenticated are identical; and
controlling a gate in such a way that the person to be authenticated
50
is permitted to pass when authentication by the server device is successful
and the approaching person and the person to be authenticated are
identical.
[Claim 12]
5 A computer-readable storage medium storing a program for causing
a computer mounted on a gate device to execute processes of:
acquiring biological information about a person to be authenticated
present in an authentication area;
transmitting an authentication request including the acquired
10 biological information to a server device;
detecting an approaching person using a sensor that detects the
approaching person into the gate device and determining whether the
approaching person and the person to be authenticated are identical; and
controlling a gate in such a way that the person to be authenticated
15 is permitted to pass when authentication by the server device is successful
and the approaching person and the person to be authenticated are
identical.