JP2007328695A - Authentication device, authentication method, and authentication program - Google Patents

Abstract

To provide an authentication device capable of reducing a burden related to confirmation of an identity verification document.
Prior to reception of image data, an authentication apparatus that authenticates a user based on image data picked up by an image pickup device of a terminal device (mobile phone) on a user side and transmitted by the terminal device. And an appropriate means (control module 60, communication module 61) for transmitting the setting information for setting the imaging device to the terminal device and optimizing the image data captured by the imaging device, Receiving means (communication module 61) for receiving image data picked up by the imaging device of the terminal device set based on the setting information sent by the converting means, and appropriateness of the image data received by the receiving means Determination means (control module 60, coincidence rate determination module 62).
[Selection] Figure 4

Description

  The present invention relates to an authentication device, an authentication method, and an authentication program.

  In business transactions using the Internet, identity verification may be performed to prevent impersonation.

  Japanese Patent Application Laid-Open No. 2004-133867 also discloses a technique for performing identity verification by imaging a document for identity verification (for example, a driver's license) using a camera-equipped mobile phone and transmitting image data captured via a network. Proposed.

JP 2005-242770 A (abstract, drawing)

  By the way, in the technique of Patent Document 1, the image data sent by the mobile phone is finally visually confirmed by a human. For this reason, if a document that does not correspond to the identity verification document is sent, or if a document other than the user is sent, the image data is sent to the user again after confirming it visually. You need to request to send. Therefore, the technique of Patent Document 1 has a problem that it requires labor of the confirmer.

  In the technique disclosed in Patent Document 1, since image data is captured by the user, unclear image data may be sent depending on the imaging environment or the degree of proficiency of the user. Even in such a case, it is necessary to request the user to send the image data again after visually confirming by the confirmer, as in the case described above. Therefore, in this case as well, there is a problem that it takes labor of the confirmer.

  Furthermore, in recent years, the so-called “Personal Information Protection Law” has been enforced, and in principle, the collection of sensitive information (sensitive information) is prohibited. For this reason, in the technique described in Patent Document 1, if sensitive information is included in the transmitted image data, it is necessary for the confirmer to delete it by a manual operation or the like. For this reason, there exists a problem that the burden of a checker increases.

  The present invention has been made based on the above circumstances, and an object of the present invention is to provide an authentication device, an authentication method, and an authentication program capable of reducing the burden related to the confirmation of the identity verification document. It is to be.

  In order to achieve the above-described object, an authentication apparatus according to the present invention is an image authentication apparatus that performs image authentication by an image capturing apparatus included in a terminal device on a user side and performs user authentication based on image data transmitted by the terminal apparatus. Prior to receiving the data, setting information for setting the imaging device is transmitted to the terminal device, and the optimization unit for optimizing the image data captured by the imaging device and the optimization unit transmit the setting information. Receiving means for receiving image data picked up by the image pickup device of the terminal device set based on the set information, and determining means for determining the appropriateness of the image data received by the receiving means.

  For this reason, the authentication apparatus which can reduce the burden concerning confirmation of the document for identity verification can be provided.

  In addition to the above-described invention, another authentication device of the present invention includes setting information storage means for storing information indicating the type of terminal device and setting information corresponding to each type of terminal device in association with each other. , Referring to the request means for requesting the terminal device to send information for identifying the type, and the information sent as a result of the request from the request means, the corresponding setting information from the setting information storage means Setting information search means for searching, and the optimization means transmits the setting information obtained by the setting information search means to the terminal device and sets the imaging device to be in an appropriate state. I am doing so. For this reason, it is possible to obtain appropriate image data regardless of the terminal device. For this reason, it becomes possible to reduce the burden of the confirmation work of the document for identity verification. In addition, the burden on the user can be reduced.

  In addition to the above-described invention, another authentication device according to the present invention may be configured such that the optimization unit transmits mask information for masking unnecessary portions of the subject in the imaging device, and only information necessary for authentication is transmitted. The imaging device is made to take an image. For this reason, the trouble of masking information unnecessary for the person who performs the confirmation work by, for example, a manual operation can be omitted.

  In addition to the above-described invention, the authentication device according to the present invention is configured such that the subject is a document for verifying the identity, and the optimization unit stores information that is not necessary for verifying the identity of the document for verifying the identity. Mask information for masking is transmitted. For this reason, it is not necessary for the person who performs the confirmation work to delete or mask the sensitive information of the personal identification document by manual operation, so the burden on the confirmer can be reduced.

  In addition to the above-described invention, another authentication apparatus of the present invention is a mask information storage means for storing information indicating the type of document for identity verification and mask information corresponding to the type of each document in association with each other. And an inquiry means for inquiring of the terminal device about the type of document for identity verification as a subject, and a mask for searching from the mask information storage means for mask information corresponding to the type of document found as a result of the inquiry by the inquiry means Information search means, and the optimization means transmits the mask information obtained by the mask information search means to the terminal device, and information that is not necessary for identity verification among the documents for personal authentication. The image information is masked by the imaging device. For this reason, no matter what kind of personal identification document is selected, sensitive information can be reliably masked and the user's personal information can be appropriately protected.

  According to another authentication apparatus of the present invention, in addition to the above-described invention, the determination unit performs predetermined image processing on the image data received by the reception unit, and obtains the image data obtained as a result thereof. Appropriateness of the image data is determined based on the characteristic information indicating the characteristics. For this reason, it is possible to reduce the burden on the confirmer by automatically excluding image data having no appropriateness.

  According to another authentication apparatus of the present invention, in addition to the above-described invention, when the determination unit determines that the image data received by the reception unit is not appropriate, the terminal device captures the image data again. And request to send. For this reason, when image data having no appropriateness is transmitted, the user can be prompted to re-image and transmit, so that inappropriate image data is excluded and appropriate image data is transmitted. By assuring it, the burden on the confirmer can be further reduced.

  According to another authentication apparatus of the present invention, in addition to the above-described invention, the characteristic information of the image data includes at least one of information indicating the resolution, brightness, contrast, sharpness, and layout state of the image data, or These are combinations. Therefore, it is possible to obtain image data having appropriate characteristics as image data, and when it is determined to be inappropriate, it is possible to reliably notify the user which characteristic is inappropriate. Therefore, the burden on not only the confirmer but also the user can be reduced.

  According to another authentication device of the present invention, in addition to the above-described invention, the terminal device has an input device capable of inputting text information, and the determination means is provided for a document for personal authentication captured by the imaging device. The included character information is converted into text data, and the text data is compared with text data input from the input device. Yes. For this reason, if it is inappropriate based on the contents described in the identification document, it will be determined to be inappropriate before confirmation by the confirmer, thus reducing the burden on the confirmer. Can do.

  According to another authentication apparatus of the present invention, in addition to the above-described invention, the determination means is based on information indicating a correspondence relationship between information included in the document for identity verification and information included in the text data. Thus, the matching rate of these pieces of information is determined. For this reason, it is possible to determine the appropriateness of the document for identity verification from various perspectives based on a plurality of information, so that the confirmer can confirm only the document for more reliable identity verification. The burden can be reduced.

  In addition to the above-described invention, in the other authentication device of the present invention, when the determination unit determines that it is inappropriate, it notifies the terminal device to that effect. For this reason, when the document for identity verification is inappropriate, the burden on the confirmer can be reduced by notifying the user to that effect as compared with the case where the confirmer is contacted. . Further, if necessary, the image data of the personal identification document can be transmitted to the user again.

  The authentication method of the present invention is an authentication method for authenticating a user based on image data captured by an image capturing device of a terminal device on the user side and transmitted by the terminal device, prior to reception of image data. An image pickup device of a terminal device that transmits setting information for setting the image pickup device to the terminal device, optimizes image data picked up by the image pickup device, and is set based on the sent setting information The image data picked up by is received, and the appropriateness of the received image data is determined.

  Therefore, it is possible to provide an authentication method capable of reducing the burden associated with confirmation of the personal identification document.

  Also, the authentication program of the present invention is a computer-readable program that causes a computer to perform a process of authenticating a user based on image data that is captured by an imaging device of a terminal device on the user side and transmitted by the terminal device. In the authentication program, the computer transmits setting information for setting the imaging device to the terminal device prior to the reception of the image data, and is suitable for optimizing the image data captured by the imaging device. Determining the suitability of the image data received by the receiving means and the receiving means for receiving the image data captured by the imaging device of the terminal device set based on the setting information sent by the optimization means and the optimization means It functions as a determination means.

  Therefore, it is possible to provide an authentication program that can reduce the burden associated with confirmation of the identity verification document.

  Hereinafter, an embodiment of the present invention will be described with reference to the drawings.

  First embodiment

  FIG. 1 is a diagram showing a configuration example of an authentication system according to the first embodiment of the present invention. As shown in this figure, the authentication system according to the first embodiment includes an authentication device 10, a network 20, a base station 30, and a mobile phone 40 as main components. The authentication apparatus according to the present invention will be described using the authentication apparatus 10 as an example. The authentication method according to the present invention will be described as the operation of the authentication device 10. The authentication program according to the present invention will be described as the operation of a program that controls the authentication apparatus.

  Here, the authentication device 10 is, for example, a server device managed by a provider providing the authentication service. The authentication device 10 receives the image data of the personal identification document imaged by the mobile phone 40 via the network 20 and performs a predetermined process, and as a result, the image data determined to have acceptability. Executes the process of registration.

  The network 20 is configured by, for example, the Internet, and transmits and receives information between the authentication device 10 and the mobile phone 40.

  One base station 30 is installed in an area having a predetermined area, and exchanges information with the mobile phone 40, and the mobile phone 40 moves or the communication situation deteriorates for some reason. In this case, a handover process for switching the communication destination from one base station to another base station is executed.

  A mobile phone 40 as a terminal device is a mobile phone owned by a user who performs identity verification, and has an imaging device for imaging an identity verification document, and has a function of accessing the authentication device 10 via the network 20. .

  FIG. 2 is a diagram illustrating a detailed configuration example of the authentication device 10 illustrated in FIG. 1. As shown in this figure, the authentication device 10 includes a central processing unit (CPU) 10a, a read only memory (ROM) 10b, a random access memory (RAM) 10c, a hard disk drive (HDD) 10d, an image processing circuit 10e, I / F (Interface) 10f, bus 10g, display device 10h, and input device 10i are main components. The display device 10h and the input device 10i may be displayed and input via a network, for example, and in such a case, these may be omitted. Also for the HDD 10d, other types of storage devices (for example, streamers) can be used.

  Here, the CPU 10a is a central processing unit that controls each unit of the apparatus and executes various arithmetic processes based on a program or data stored in the ROM 10b or the HDD 10d.

  The ROM 10b is a semiconductor storage device that stores basic programs and data executed by the CPU 10a. The RAM 10c is a semiconductor storage device that temporarily stores programs and data executed by the CPU 10a.

  The HDD 10d is a storage device that can read and write information from and to a hard disk that is a magnetic recording medium. In this embodiment, the HDD 10d stores an OS (Operating System) 10d1 and a program 10d2. The OS 10d1 is a basic program for controlling the authentication device 10 and executes processing related to input / output from the input device 10i and management of storage devices such as the ROM 10b, RAM 10c, and HDD 10d. The program 10d2 is a program for realizing processing to be described later. Details of the program 10d2 will be described later.

  The image processing circuit 10e has a built-in VRAM (Video RAM), receives a drawing command supplied from the CPU 10a, executes a drawing process according to the drawing command, stores the obtained image data in the VRAM, The signal is converted into a signal and supplied to the display device 10h to be displayed.

  When the I / F 10 f inputs data from the input device 10 i, the I / F 10 f converts the data representation format according to the internal format of the authentication device 10 and also exchanges data with the mobile phone 40 via the network 20. Then, processing for packetizing and unpackaging data is executed.

  The bus 10g is a signal line group for mutually connecting the CPU 10a, the ROM 10b, the RAM 10c, the HDD 10d, the image processing circuit 10e, and the I / F 10f so that data can be exchanged between them.

  The display device 10h is composed of, for example, a CRT (Cathode Ray Tube) monitor or LCD (Liquid Crystal Display), and displays the video signal supplied from the image processing circuit 10e on the display unit. As described above, the display device 10h can be omitted depending on the configuration of the device.

  The input device 10i is configured by a keyboard and / or mouse, and generates and outputs data corresponding to a user operation. As described above, the input device 10i can be omitted depending on the configuration of the device.

  FIG. 3 is a diagram showing a detailed configuration example of the mobile phone 40 shown in FIG. As shown in this figure, the cellular phone 40 includes a CPU 40a, ROM 40b, RAM 40c, EEPROM (Electronically Erasable and Programmable ROM) 40d, image processing circuit 40e, I / F 40f, bus 40g, LCD 40h, input device 40i, imaging device 40j, The audio processing circuit 40k and the communication circuit 40m are main components. The CPU 40a, the ROM 40b, the RAM 40c, the image processing circuit 40e, and the bus 40g are the same as those in the authentication device 10 described above, and thus the description thereof is omitted. Note that another storage device (for example, a FLASH memory or the like) can be used instead of the EEPROM 40d.

  Here, the EEPROM 40d is a semiconductor memory device that can retain the stored contents even when the power of the battery as the power source is lost, and can electrically change the contents. The EEPROM 40d stores an OS 40d1 and a program 40d2. As described above, the OS 40d1 is a basic program that executes various input / output processes and memory management processes.

  The input device 40i is composed of, for example, numeric keys and other keys, and generates and outputs data corresponding to user operations. The imaging device 40j is constituted by, for example, a CCD (Charge Coupled Device) camera or the like, and focuses an image of a subject on the CCD by an optical system, and converts the subject image into corresponding image data by the CCD and outputs the image data.

  The audio processing circuit 40k converts an audio signal output from a microphone (not shown) into a corresponding digital signal and supplies it to the CPU 40a, and converts the digital signal supplied from the CPU 40a into an audio signal and outputs it from an unshown speaker. Output.

  The communication circuit 40m is a circuit for exchanging information with the base station 30 using radio waves as a medium, for example, based on a CDMA (Code Division Multiple Access) system.

  Next, an example of functional blocks realized in the authentication device 10 shown in FIG. 2 will be described with reference to FIG. FIG. 4 shows that when the program 10d2 is activated and executed under the OS 10d1 in the authentication device 10 shown in FIG. 2, the hardware of the authentication device 10 and the program 10d2 as software cooperate. It is a figure explaining the functional block implement | achieved by.

  In the first embodiment, when the mobile phone 40 captures a document for identity verification (for example, a driver's license (hereinafter simply referred to as “license”)), the sensitive information described above is used. Is transmitted from the authentication device 10 to the mobile phone 40, and the mobile phone 40 masks the sensitive information of the captured personal identification document using the mask information. Then, the image data with the sensitive information masked is transmitted to the authentication device 10, where character recognition processing is executed, and the character information described in the personal identification document is converted into text information. The text data obtained in this way is compared with text information separately input by the user operating the input device 40i of the mobile phone 40. If the coincidence rate is high, the text data is identified and managed. Judge. If the match rate is low, the user is requested to retransmit or not accept image data.

  Returning to FIG. 4, the functional blocks implemented in the authentication apparatus 10 mainly include the control module 60, the communication module 61, the coincidence rate determination module 62, the region extraction module 63, the character recognition module 64, and the storage module 65. There is.

  Here, a part of the optimization unit, the inquiry unit, and the control module 60 as the mask information search unit are central control modules that control other modules. Specifically, the control module 60 communicates with the mobile phone 40 via the communication module 61, supplies a drawing command to the image processing circuit 10e, and displays a predetermined image on the display device 10h. Let In addition, the control module 60 supplies image data to the region extraction module 63 to extract a region to be recognized, and supplies the extracted image data to the character recognition module 64 to execute character recognition processing. . Then, the matching rate determination module 62 determines the matching rate between the obtained recognition result and the text data sent from the mobile phone 40. Further, the control module 60 manages information stored in the storage module 65.

  The communication module 61 as a part of the optimization unit and the reception unit performs data packing and unpacking processing based on a predetermined protocol when communicating with the mobile phone 40 via the network 20. It is a module. The match rate determination module 62 determines the match rate between the text data input by the user operating the mobile phone 40 and the text data obtained by the character recognition module 64 recognizing the identity verification document. The area extraction module 63 is a module for extracting an area including character information for identity verification from image data obtained by imaging an identity verification document. The character recognition module 64 is a module that performs character recognition processing on the image data of the region extracted by the region extraction module 63 and converts it into corresponding text data.

  The storage module 65 is a module that stores data related to processing. The storage module 65 includes screen display information 65a, user information 65b, document management information 65c, mask image 65d, layout information 65e, and correspondence information 65f.

  Here, the screen display information 65a is information relating to a screen to be displayed on the display device 10h and the LCD 40h of the mobile phone 40 (for example, an HTML (Hyper Text Markup Language) document). The user information 65b is configured by image data (image data of the identity verification document) determined to have a high matching rate by the matching rate determination module 62 and text information sent separately.

  As will be described later, the document management information 65c is information for managing information related to the layout of each document for identity verification. FIG. 5 shows an example of document management information. In the example of this figure, the document type, layout information, correspondence information, and mask image are stored in association with each other. For example, in the case of a license, it is indicated that the file with the file name “liclay.txt” is the corresponding layout information stored in the layout information 65e. Further, it is indicated that the file having the file name “licrel.txt” is the corresponding correspondence information stored in the correspondence information 65f. Further, it is shown that the file with the file name “licmask.gif” is the corresponding mask image stored in the mask image 65d. Details of each file will be described later.

  Returning to FIG. The mask image 65d as the mask information storage means is a mask image group as mask information for masking the sensitive information of each identification document. In the example of the license in FIG. 5, “licmask.gif” corresponds. The layout information 65e is information indicating the layout of the description content described in each identification document. In the example of the license, “liclay.txt” corresponds. The correspondence relationship information 65f is information indicating a correspondence relationship between the text data transmitted from the mobile phone 40 and the character information described in the identity verification document. In the example of the license, “licrel.txt” corresponds.

  Next, the operation of the first embodiment will be described. In the following, a process in which the system administrator operates the authentication device 10 to set the confirmation location and mask location of the personal identification document will be described with reference to FIG. Referring to FIG. 9, the process for performing identity verification will be described.

  6 is executed when the system administrator operates the input device 10i and makes a request to edit (or newly add) the document management information 65c shown in FIG. 4 in the authentication device 10 shown in FIG. Process. When this flowchart is started, the following steps are executed.

  Step S1: The control module 60 inputs the information input from the input device 10i via the communication module 61, recognizes that the administrator has made a request to edit the document management information 65c, and stores it in the storage module 65. The stored information for displaying the screen for editing the document management information is acquired from the screen display information 65a and written in a VRAM (not shown) of the image processing circuit 10e. As a result, drawing processing is performed by the image processing circuit 10e, and the obtained image is converted into a video signal and displayed on the display device 10h.

  FIG. 7 is an example of information displayed on the display unit of the display device 10h as a result of the process of step S1. In this example, a frame 100 is displayed, and buttons 100a to 100d, check boxes 100e to 100i, buttons 100j to 100p, a personal identification document image 100q, and buttons 100r and 100s are displayed therein.

  Here, the buttons 100a to 100d are buttons for selecting an identification document to be edited. Specifically, the buttons 100a to 100d are operated when selecting a license, a passport, an insurance card, and a pension book, respectively. In this example, the highlighted button 100a is selected and corresponds to it. Information about your license is displayed. Check boxes 100e to 100i are checked when an item displayed on the right side of each is selected.

  The identity verification document image 100q displays an image corresponding to the identity verification document selected by any of the buttons 100a to 100d. In this example, since the button 100a is selected, an image corresponding to the license is displayed. The button 100r is operated when registering input content. The button 100s is operated when canceling the input content.

  Step S2: The control module 60 determines whether or not the type of the personal identification document is selected by the administrator operating the buttons 100a to 100d with the input device 10i. If selected, the control module 60 proceeds to Step S3. In other cases, the same processing is repeated. For example, when the administrator operates the button 100a to edit the document management information related to the license, the process proceeds to step S3.

  Step S3: The control module 60 acquires information relating to the personal identification document corresponding to the button selected in Step S2 from the screen display information 65a and the document management information 65c, and displays the information on the display device 10h. For example, in the case of a license, first, an image including the license identification document image 100q, the check boxes 100e to 100i, and the buttons 100j to 100p is read from the screen display information 65a and put in the frame 100. indicate. Further, when information is already registered in the document management information 65c, information based on these information is displayed in the frame 100. The example in FIG. 7 corresponds to a state in which the document management information 65c is not registered, and only the identity verification document image 100q, check boxes 100e to 100i, and buttons 100j to 100p are displayed. When information is already registered in the document management information 65c, for example, information as shown in FIG. 8 described later is displayed.

  The administrator can input layout information and the like by performing a predetermined operation on the screen shown in FIG. That is, in the screen shown in FIG. 7, after the button 100j is operated, an operation for designating the region of the date of birth displayed in the upper right corner of the personal identification document image 100q is performed from the input device 10i. As shown in FIG. 8, this area is hatched and associated with each other. Also, the check box 100e is automatically checked.

  When the button 100r is operated later, in step S5, which will be described later, the position information of the hatched area (for example, position information designating four locations of the area) and the date of birth that is the description content Are associated with each other and stored in the corresponding layout information.

  In the present example, since the license is selected, the input information is licra.file as a license layout information file. stored in txt.

  Also, licrel. In txt, a correspondence relationship between information input from the input screen shown in FIG. 10 described later and the description content of the personal identification document shown in FIG. 8 is stored. Similarly, when the button 100k is operated and the area in the upper right corner of the document image for identity verification 100q is designated, the corresponding information is written in the layout information 65e and the correspondence information 65f. The same process is performed for the button 100m. Furthermore, when the button 100n is operated and the area of the permanent address is designated, an image for masking the area is generated and stored as a mask image (licmask.gif).

  Step S4: The control module 60 determines whether or not the input has been completed and the button 100r has been operated. If the button has been operated, the process proceeds to step S5, and otherwise the same processing is repeated.

  Step S5: As described above, the control module 60 executes a process of registering (or updating) the layout information, the correspondence information, and the mask image in the storage module 65 based on the information input in FIG. To do.

  Through the above processing, the information input on the screen of FIG. 8 is registered in the storage module 65. The administrator can make settings for each of the personal identification documents by performing a predetermined operation on the screen shown in FIG. In the above, information is generated and registered according to the operation of the administrator. However, such information may be created and registered in advance, and may be edited as necessary. .

  Next, processing when the user accesses the authentication device 10 from the mobile phone 40 and performs identity verification will be described.

  FIG. 9 is a flowchart for explaining the flow of processing when the user accesses the authentication device 10 from the mobile phone 40 and performs identity verification. When this flowchart is executed, the following steps are executed. This flowchart shows the flow of processing executed in the mobile phone 40 and the authentication device 10.

  Step S10: When the user operates the input device 40i of the mobile phone 40 and gives an instruction to access the URL (Uniform Resource Locator) assigned to the site for authenticating the authentication device 10 The CPU 40a of the mobile phone 40 accesses the authentication device 10 via the I / F 40f, the communication circuit 40m, the base station 30, and the network 20, and requests the authentication device 10 to transmit predetermined information.

  Step S11: The control module 60 that has received the registration request from the mobile phone 40 via the communication module 61 reads information for displaying the registration screen from the screen display information 65a of the storage module 65, and the communication module 61 To the mobile phone 40 that made the request.

  Step S12: In step S11, the CPU 40a of the mobile phone 40 receives the registration screen display information transmitted from the authentication device 10 and writes it in a VRAM (not shown) of the image processing circuit 40e. As a result, the image processing circuit 40e executes drawing processing, converts the obtained image into a video signal, and displays it on the LCD 40h.

  FIG. 10 shows an example of information displayed on the LCD 40h by the process of step S12. In this example, a “registration screen” as the title 110 a is displayed at the top of the frame 110. Below that, text boxes 110b to 110i are displayed, and a button 110j is displayed at the bottom. Here, in the text boxes 110b and 110c, the user's last name and first name to be registered are input in kanji, and in the text boxes 110c and 110d, the last name and first name are input in kana. In addition, in the text boxes 110f to 110h, the year, month, and day of birth are input. The user's address is input in the text box 110i. The button 110j is operated when the input information is transmitted to the authentication device 10.

  Step S13: The CPU 40a determines whether or not the button 110j has been operated after predetermined information is input on the screen shown in FIG. 10, and proceeds to Step S14 if operated, otherwise it proceeds to Step S14. Similar processing is repeated.

  Step S14: The CPU 40a transmits the information input on the screen shown in FIG. 10 to the authentication device 10 as text information. Specifically, a tag indicating the content of each item is assigned to the information input in FIG. 10 and transmitted to the authentication device 10.

  Step S15: The control module 60 receives the text information transmitted from the mobile phone 40 in step S14, and registers it as user information 65b in the storage module 65.

  Step S <b> 16: The control module 60 acquires information for displaying the document selection screen from the screen display information 65 a of the storage module 65 and transmits it to the mobile phone 40 via the communication module 61.

  Step S17: The CPU 40a receives the information for displaying the document selection screen transmitted from the authentication device 10 in step S16, and writes it in the VRAM of the image processing circuit 40e. As a result, a document selection screen as shown in FIG. 11 is displayed on the LCD 40h.

  In the screen shown in FIG. 11, a “document selection screen” as the title 120 a is displayed at the top of the frame 120. Below that, radio buttons 120b to 120e are displayed. A button 120f is displayed at the bottom. Here, the radio buttons 120b to 120e are operated when selecting a license, a passport, an insurance card, and an annuity book, respectively. In this example, since the radio button 120b is checked, a license is selected. The button 120f is operated when transmitting the input information to the authentication device 10.

  Step S18: The CPU 40a proceeds to step S19 when the send button 120f is operated after a predetermined radio button is selected on the screen shown in FIG. 11, and repeats the same processing otherwise. .

  Step S19: The CPU 40a transmits the information input on the screen shown in FIG. In the screen shown in FIG. 11, since the radio button 120 b is checked, information indicating that a license is selected as the personal identification document is transmitted to the authentication device 10.

  Step S20: The control module 60 receives the information transmitted from the mobile phone 40 in step S19. Then, referring to the document management information 65 c, a mask image corresponding to the selected document is acquired from the mask image 65 d and transmitted to the mobile phone 40 via the communication module 61. In the example of FIG. 11, since the license is selected, the control module 60 refers to the document management information 65c, specifies the file name “licmask.gif” of the mask image corresponding to the selected license, The corresponding file is acquired from the mask image 65 d and transmitted to the mobile phone 40. As a result, the mask image registered in FIG. 8 (in the example of FIG. 8, an image for masking the permanent address) is transmitted to the mobile phone 40.

  Step S21: The CPU 40a of the mobile phone 40 receives the mask image transmitted from the authentication device 10 in step S20 and supplies it to the image processing circuit 40e. As a result, for example, the mask image shown in FIG. 12 is displayed on the LCD 40h. In the example of FIG. 12, a frame 130a indicating the shape of the license is displayed on the LCD 40h, and a rectangle 130b for masking the family register is displayed therein. With such a mask image displayed on the LCD 40h, the user directs the lens (not shown) of the mobile phone 40 toward the license so that the license image captured by the imaging device 40j fits within the frame 130a. After adjusting the positional relationship, the license is imaged by the imaging device 40j by operating the input device 40i. As a result, as shown in FIG. 13, an image is captured in a state where the license image 130c is fitted in the frame 130a.

  Step S22: The CPU 40a determines whether or not the imaging of the personal identification document has been completed. If it has been completed, the process proceeds to step S23, and otherwise the same processing is repeated. For example, if an operation indicating completion of imaging is performed on the input device 40i by the user, the process proceeds to step S23.

  Step S23: The CPU 40a executes a process of superimposing the image of the personal identification document imaged in step S22 and the mask image. By this superimposition process, predetermined information (such as sensitive information) of the image of the personal identification document is masked. In the example of FIG. 13, the information described in the permanent address column of the license is masked.

  Step S24: The CPU 40a transmits the image of the personal identification document on which the mask image is superimposed to the authentication device 10 via the I / F 40f and the communication circuit 40m. As a result, the control module 60 of the authentication device 10 receives the information via the communication module 61.

  Step S25: The control module 60 refers to the document management information 65c, and acquires layout information corresponding to the document selected on the selection screen displayed in step S17 from the layout information 65e. In the present example, since the license is selected, the license. txt is obtained.

  Step S26: The control module 60 performs character recognition processing on the image of the personal identification document transmitted from the mobile phone 40, and extracts the described information. Specifically, the control module 60 supplies the image data of the personal identification document and the layout information to the area extraction module 63. The region extraction module 63 refers to the layout information, extracts a predetermined region from the image data, and supplies it to the character recognition module 64 via the control module 60. The character recognition module 64 performs character recognition processing on the supplied area and acquires character information included in the area. By repeating such processing, the character information (name, date of birth, address, etc.) included in the area specified in FIG. 8 among the character information included in the image data of the identity verification document, for example. Etc.) is acquired by the character recognition process. The information acquired in this way is supplied to the control module 60 together with a tag indicating the type of each character information.

  Step S27: The control module 60 acquires correspondence information corresponding to the selected identity verification document from the correspondence information 65f of the storage module 65. In the present example, since the license is selected, the file licrel. txt is acquired from the correspondence information 65f.

  Step S28: The control module 60 acquires the text information registered in step S15 (text information input on the registration screen shown in FIG. 10) from the user information 65b of the storage module 65.

  Step S29: The control module 60 refers to the correspondence information, compares the character information obtained as a result of character recognition with the character information of the text information corresponding to the character information, and determines whether they match. For example, in the example of FIG. 8, the name described on the license is compared with the names entered in the text boxes 110b and 110c on the screen shown in FIG. 10, and it is determined whether or not they match. Such a determination is made for all pieces of information specified on the screen shown in FIG. 8 (namely, name, date of birth, and address).

  Step S30: The control module 60 determines whether or not the coincidence rate is higher than a predetermined threshold based on the determination in step S29. If it is higher, the control module 60 proceeds to step S31, and otherwise proceeds to step S32. For example, if the matching rate is 90% or more for all items, the matching rate is high and the process proceeds to step S31. In the character recognition process, misrecognition also occurs. Therefore, it is necessary to set a threshold value in consideration of the occurrence rate of the misrecognition. Although it depends on the object to be recognized, generally, the character recognition rate is about 90%, and therefore, for example, 90% can be selected as the threshold value.

  Step S31: The control module 60 associates the image data transmitted in step S24 with the text information already registered in step S15, assuming that the identity verification document is highly likely to belong to the user. Register at 65b. The information registered in this way is later confirmed visually by a confirmer who determines whether or not registration is possible, and if the content meets a predetermined standard, the identity confirmation is successful and Notification is made and the demand for a predetermined service by the user becomes possible.

  Step S32: The control module 60 executes rejection processing for notifying the user that the identity verification has failed. Note that the text information already registered in step S15 may be deleted from the storage module 65.

  According to the above processing, the character recognition process is performed on the image data of the personal identification document, the obtained character information is compared with the text information directly input by the user, and the matching rate is greater than a predetermined threshold value. If it is too high, it is determined that the image data of the identification document is valid, and in other cases, the user is notified that the image data is invalid. For this reason, since the confirmer confirms only the image data of the document for identity verification with a high coincidence rate by visual recognition, the burden of work can be reduced by omitting the visual recognition process for other information. it can. Specifically, if you attempt to register using another person's document by mistake as an identity verification document, the image data of the document will be rejected as having a low match rate. Since it can be avoided that the confirmer performs confirmation by visual recognition, the burden on the confirmer is reduced.

  In the above processing, when the personal identification document is imaged, the sensitive information is masked using the mask image and transmitted to the authentication device 10. The trouble of masking information can be omitted. Moreover, it is possible to give the user a sense of security by masking in advance on the user side.

  In addition, since the administrator can edit the recognized items and the mask image on the screens shown in FIGS. 7 and 8, the items to be recognized can be freely changed, and the items to be masked can be freely changed. It becomes possible.

  In addition, since the character recognition processing and the like are executed on the authentication device 10 side, it takes time and effort to create an application program for each type of the mobile phone 40 as compared with the case where the application program is executed on the mobile phone 40 side. Can be omitted. Further, when a new model is released, it is possible to save time and effort to develop a program corresponding to the new model.

  In the above embodiment, the matching rate of characters is determined by targeting all items specified on the screens shown in FIGS. 7 and 8. For example, the order of recognition processing is determined in advance. If there is an item with a low matching rate, the rejection process shown in step S32 may be executed at that time. For example, the process for the date of birth may be executed first, and if the match rate is low, it may be rejected immediately. Since the date of birth is composed of numbers with a small number of characters, the probability of misrecognition by the character recognition process is low, so by clearly identifying the wrong information by making the date of birth the first recognition target Moreover, it can be quickly excluded. The priority order may be, for example, the order of birth date, name (katakana), address, name (kanji). Since the date of birth is a number, it is given the highest priority because there are few types of letters. Similarly, the name katakana is considered as the next candidate due to the small number of characters. The address is located next because the address is fixed information and can be made into a database. In addition, the name's kanji is the last because it has many kinds of characters and is arbitrary. Note that each item may be weighted for determination, and the matching rate for all items may be comprehensively determined. For example, weighting based on the above-described priority order (for example, “4” for the date of birth, “3” for the name (kana), “2” for the address, “1” for the name (kanji)). ), The matching rate may be determined in consideration of the weighting.

  In the screens shown in FIGS. 12 and 13, the mask image is displayed so as to be superimposed on the captured image, and the image capturing process is executed. For example, the mask image is superimposed after the image is captured. Also good. According to such processing, it is possible to reduce the processing burden on the CPU 40a related to the superimposition processing. In addition, by deleting unnecessary information from the screen, it is possible to obtain appropriate image data within the frame 130a by encouraging the user to concentrate on the frame 130a.

  Second embodiment

  Next, a second embodiment of the present invention will be described. The second embodiment has the same configuration as that shown in FIGS. 1 to 3, but the processing executed in the authentication device 10 and the mobile phone 40 is different from the case of the first embodiment. Yes. Therefore, in the following, description of the hardware configuration of the system will be omitted, and description will be made focusing on processing executed in the authentication device 10 and the mobile phone 40.

  FIG. 14 is realized by the cooperation of the hardware of the authentication device 10 and the program 10d2 as software when the program 10d2 shown in FIG. 2 is executed in the second embodiment of the present invention. Functional block. Note that portions corresponding to the functional blocks shown in FIG. 4 are denoted by the same reference numerals and description thereof is omitted. In the example of FIG. 14, as functional blocks realized by cooperation of hardware and software, an appropriate means, a request means, and a control module 60 as a setting information search means, reception The main components are a communication module 61 as a means, a setting information management module 70, a layout determination module 71 as a part of the determination means, an image determination module 72 as a part of the determination means, and a storage module 73.

  The setting information management module 70 is a module that manages setting information 73d for setting imaging conditions and the like of the imaging device 40j of the mobile phone 40.

  The layout determination module 71 is a module that determines whether the layout of the image data of the personal identification document that has been captured by the mobile phone 40 and sent via the network 20 is good or bad.

  The image determination module 72 is a module that determines the quality of the image pickup state of the image data of the personal identification document.

  The storage module 73 includes screen display information 73a, user information 73b, document management information 73c, setting information 73d, layout information 73e, and image determination information 73f as main components.

  Here, the screen display information 73a stores information for displaying an input screen or the like on the display device 10h of the authentication device 10 and the LCD 40h of the mobile phone 40. The user information 73b stores information related to user identification. The document management information 73c stores information indicating the relationship between the type of identification document and the corresponding layout information. That is, the document management information 73c stores substantially the same information as that obtained by excluding the correspondence information and the mask image in the table of FIG. The setting information 73d as setting information storage means stores information in which the type of the mobile phone is associated with information relating to the optimum setting of the imaging device of each mobile phone. The layout information 73e stores information indicating the optimum layout (the position of the document in the image data) for each of the personal identification documents. The image determination information 73f stores information for determining whether or not the imaging state of the image data of the personal identification document is acceptable.

  Next, the operation of the second exemplary embodiment of the present invention will be described.

  First, the operation when adding or editing the setting information 73d shown in FIG. 14 will be described. When the administrator operates the input device 10i to make a request to edit the setting information, the control module 60 reads information for displaying a screen for editing the setting information from the screen display information 73a, and the image processing circuit 10e is written into a VRAM (not shown). As a result, the image processing circuit 10e executes a drawing process based on the information written in the VRAM, converts the obtained image into a video signal, supplies it to the display device 10h, and displays it. As a result, information as shown in FIG. 15 is displayed on the display device 10h.

  In the display example of FIG. 15, buttons 150 a to 150 d are displayed at the top of the frame 150, text boxes 150 e to 150 k are displayed below it, and buttons 150 m and 150 n are displayed at the bottom. . Here, the buttons 150a to 150d are buttons for selecting, for example, a mobile phone manufacturer. In this example, companies A to D are selected by selecting buttons 150a to 150d, respectively. In the text box 150e, the model name of the mobile phone is input. In the text box 150f, an optimum resolution when the personal identification document is imaged by the imaging device of the mobile phone is input. Specifically, it is input as the number of pixels in the horizontal and vertical directions. An optimum contrast is input to the text box 150g. Specifically, it is input as a decimal with the maximum value being “1”. An optimal zoom level is input to the text box 150h. Specifically, “close-up mode” or the like is input as the optimum zoom level. In the text box 150i, the necessity of using the flash is input. Information such as whether or not to use autofocus (AF) is input to the text box 150j, for example. In the text box 150k, an optimum format of the image data is input. For example, JPEG (Joint Photographic Experts Group) low compression is designated as the optimum compression method. The button 150m is a button operated when registering the input information, and the button 150n is a button operated when canceling the input information.

  In the screen shown in FIG. 15, after the buttons 150a to 150d are selected, the mobile phone manufacturer is selected, and the setting information for obtaining optimal image data is input to the text boxes 150e to 150k, the button 150m is operated. Then, the control module 60 acquires these pieces of information and stores them in the setting information 73d. Note that if information on the same model is already registered, the stored information is overwritten and updated.

  FIG. 16 is an example of information stored in the setting information 73d by the above processing. In this example, “company name” selected by the buttons 150a to 150d in FIG. 15, “model name”, “resolution”, “contrast”, “zoom level” as information input to the text boxes 150e to 150k, “Flash”, “focus”, and “format” are stored in association with each other. For example, in the case of the first item, the company name is “Company A”, the model name is “A-500”, the resolution is “352 × 288”, and the contrast is “0.9”. Yes, the zoom level is "Close-up mode", the flash is "Use", the focus is "Use AF", and the format is "JPEG (Low)" (JPEG low compression mode) as the optimal setting ing.

  Next, with reference to FIG. 17, a description will be given of processing executed when the mobile phone 40 requests the authentication device 10 to perform identity verification. In the processing shown in FIG. 17, portions corresponding to those in FIG. 9 are denoted by the same reference numerals and description thereof is omitted. Specifically, the processing in steps S10 to S19 is the same as in the case of FIG.

  Step S50: The control module 60 of the authentication device 10 requests the mobile phone 40 to send information for specifying the model of the mobile phone 40 via the communication module 61. As information for specifying the model, for example, the name of the mobile phone manufacturer and the model name are transmitted.

  Step S51: The CPU 40a of the mobile phone 40 transmits information for specifying the model of the mobile phone 40 via the communication circuit 40m, the base station 30, and the network 20 in response to a request from the authentication device 10. .

  Step S52: The control module 60 of the authentication device 10 refers to the information for identifying the model transmitted from the mobile phone 40, identifies and reads out the corresponding information from the setting information 73d, and passes through the communication module 61. Transmit to the mobile phone 40. For example, when “Company A” is sent as the company name and “A-500” is sent as the model name, the first information shown in FIG. 16 is acquired and transmitted.

  Step S53: The CPU 40a of the mobile phone 40 receives the setting information transmitted in step S52, and automatically sets the imaging device 40j based on the setting information. Instead of automatically setting, the setting content may be displayed on the LCD 40h, and the user may perform setting by manual operation based on the displayed information.

  Step S54: The CPU 40a of the mobile phone 40 determines whether or not the imaging by the imaging device 40j has been completed based on the user's operation. If completed, the process proceeds to step S55, otherwise imaging is performed. The same process is repeated until completion.

  Step S55: The CPU 40a of the mobile phone 40 transmits the image data captured by the imaging device 40j to the authentication device 10 via the communication circuit 40m. Note that the image data captured by the imaging device 40j is transmitted via the communication circuit 40m after being compressed based on, for example, the JPEG method.

  Step S56: The control module 60 of the authentication device 10 receives the image data from the mobile phone 40 and obtains layout information corresponding to the information indicating the type of the personal identification document transmitted in step S19 from the layout information 73e. . The layout information includes information as shown in FIG. In this example, an image area 160 of the image data, a rectangle 161a indicating the most appropriate layout of the identification document, a rectangle 161b that is received when it is large, and a rectangle 161c that is received when it is small. Is shown.

  As layout information, not only the outline of the image data of the identification document but also the arrangement state of the ruled lines and the arrangement state of the characters are stored, and pattern matching processing between the information and the image data is executed. The suitability of the layout may be determined based on whether or not the identity is high.

  Step S57: The control module 60 executes processing for determining whether or not the layout is appropriate. Specifically, the contour extraction process is executed on the image data to extract the contour of the identification document. Then, the layout information identified in step S56 is referred to, and the relative positional relationship between the extracted contour and the image data image range is compared. The contour of the identification document is a rectangle 161b shown in FIG. It is determined whether or not it is located between the rectangles 161c. If it is located between them, it is determined that the layout is appropriate.

  Step S58: The control module 60 executes an image determination process for determining whether or not the imaging state of the image data is good.

  FIG. 19 shows details of the image determination process shown in step S58. When this process is executed, the following steps are executed.

  Step S70: The control module 60 refers to information stored in the header of the image data, for example, and detects the number of pixels constituting the image data. Specifically, the number of horizontal and vertical pixels constituting the image data is obtained. For example, in the case of image data compressed by the JPEG method, the number of horizontal pixels and the number of vertical pixels stored in the header are referred to, and a determination is made based on whether these are within a desired range. Information may be obtained from other than the header.

  Step S71: The control module 60 detects the brightness of the image data. For example, the control module 60 samples the image data at a predetermined ratio to generate a histogram, and detects the brightness of the image from the state of the histogram distribution. For example, in the histogram in which the horizontal axis indicates the brightness and the vertical axis indicates the number of dots for each brightness, the brightness is determined to be appropriate when the histogram is located at the center as a whole. Further, when the histogram is located on the left side as a whole, it is determined that the lightness is low, and when the histogram is located as a whole on the right side, it is determined that the lightness is high.

  Step S72: The control module 60 detects the contrast of the image data. For example, the control module 60 detects the contrast of the image from the above-described histogram distribution state. For example, in the histogram in which the horizontal axis indicates the brightness and the vertical axis indicates the number of dots for each brightness, the histogram is determined to be low when the histogram is distributed in a concentrated manner as a whole. If the histogram is distributed in a predetermined range, it is determined that the contrast is appropriate, and if the histogram is widely distributed beyond the predetermined range, it is determined that the contrast is high.

  Step S73: The control module 60 detects the sharpness of the image data and returns to the original process. For example, the control module 60 performs DCT (Discrete Cosine Transform) processing on the image data to detect the amount of the high frequency component, and detects sharpness based on the amount of the amount. Specifically, when the amount of the high frequency component falls within a predetermined range, it is determined that the sharpness is appropriate, and when the amount is outside the range, the sharpness is determined to be strong. Is determined to be weak. Note that the two-dimensional high-pass filter processing may be performed on the image data, and sharpness may be detected based on the number of high-frequency components obtained thereby.

  Returning to FIG. 17, the description will be continued.

  Step S59: The control module 60 determines whether or not the sent image data is acceptable based on the determination result of step S57 and the determination result of step S58. In addition, as a method of determining whether or not it can be accepted, for example, it is determined that it is acceptable when all the determination items are within an appropriate range, or within an appropriate range for some important determination items. It can be determined that it is acceptable if it is included. In addition to this, for example, when correction is possible by simple image processing, it may be determined that it is acceptable. Specifically, the brightness, contrast, and sharpness of the image data can be repaired to some extent by image processing, so that these are not within the proper range and are within the repairable range. In some cases, it may be determined that the image can be accepted and repaired later by image processing.

  Step S60: The control module 60 registers the image data determined to be acceptable in step S59 in the user information 73b together with the text information registered in step S15. At this time, processing for correcting the brightness, contrast, and sharpness of the image data may be executed to register image data with higher visibility. Specifically, for brightness, the process of adjusting the value of each pixel is executed so that the histogram distribution described above is near the center. In contrast, the value of each pixel is adjusted so that the spread of the histogram distribution is appropriate. As for sharpness, IDCT (Inverse Discrete Cosine Transform) may be executed after executing processing for increasing the value of a component having a high spatial frequency in the data obtained as a result of DCT. The image data and the user data registered in this way are confirmed by the confirmer, and when the identity can be confirmed, the user is registered in the service.

  Step S61: If it is determined in step S59 that the image data cannot be accepted, the control module 60 performs a process of changing the setting information corresponding to the item determined to be unacceptable in the process of step S57 or step S58. And return to step S52 to execute the same processing.

  Specifically, if it is determined that the brightness of the image data is high and the flash is set to be used, the setting is changed to a setting that does not use the flash. On the contrary, if it is determined that the brightness is low and the setting is such that the flash is not used, the setting is changed to use the flash.

  Further, when it is determined that the contrast is low, the contrast of the setting information shown in FIG. 16 is set high. Conversely, when it is determined that the contrast is high, the contrast of the setting information is decreased. If it is determined that the sharpness is low, for example, if the compression rate of the image compression format is set low in the image data format, the amount of high frequency components of the spatial frequency lost by the image compression processing Therefore, sharpness can be substantially increased.

  When it is determined that the resolution is low, the resolution of the setting information is changed to a higher resolution. Further, when it is determined that the layout is not appropriate, for example, a message such as “Please capture an image so that the document is located in the center a little more” is displayed on the LCD 40h so that the layout is appropriate. You can do it.

  The processing in steps S52 to S61 is repeated until the image data becomes acceptable. If the image data becomes acceptable, the process proceeds to step S60 and the image data is registered. Note that it is possible to notify only the suitability of the sent image data without performing the repetitive processing of steps S52 to S61.

  According to the second embodiment described above, the optimum setting information for each model of the mobile phone 40 is centrally managed in the authentication device 10 and transmitted to the mobile phone 40 at the time of imaging to perform the setting. For example, the burden on the administrator can be reduced as compared with a case where an application program incorporating such optimal setting information is generated for each mobile phone. That is, since the administrator only needs to make settings on the screen shown in FIG. 15, it is possible to omit the compile operation of the program that occurs in the case of the application program, and the operation can be simplified.

  In addition, according to the second embodiment described above, optimal setting information is transmitted in advance for each mobile phone to set the imaging device, and the image data captured in the optimally set state is stored in the authentication device. 10, the burden on the administrator can be reduced. That is, for image data captured with inappropriate settings, the administrator has conventionally confirmed by visual confirmation and instructed the user to retransmit the image data, but the second embodiment of the present invention. In this embodiment, since the image data captured with the optimum setting is transmitted, the burden on the administrator can be reduced.

  Further, as described above, even when an image is captured in an optimal state, image data may not be appropriate depending on, for example, a user's operation mistake or an imaging environment. However, in the second embodiment of the present invention, even in such a case, the layout, resolution, brightness, contrast, sharpness, etc. of the image data are detected. Since the telephone is made to retransmit, the possibility of inappropriate image data being sent can be reduced. As a result, it is possible to reduce the burden of work such that the confirmer performs visual confirmation, notifies the user of the transmission again, and repeats the same processing again.

  In the second embodiment, when it is determined that the image data is unacceptable, the corresponding setting item is automatically changed. Therefore, when the image data is imaged again, an appropriate image is obtained. The possibility of becoming data can be increased. Thereby, a user's burden can be reduced.

  In the second embodiment, the setting information set by the administrator is used to set the imaging device 40j of the mobile phone 40, and a part of the setting information is changed according to the sent image data. I made it. However, for example, each mobile phone may take statistics of the state of the image data sent, and if the statistics are biased, the setting information 73d itself shown in FIG. 16 may be changed. Specifically, when the statistics of the image data sent from the mobile phone with the model name “A-500” are taken and it is found that the contrast tends to be high, the contrast shown in FIG. You may make it change from "0.9" to "0.8". According to such a method, more optimal setting information can be obtained based on the statistical value.

  Each of the above embodiments is an example, and there are various other modified embodiments. For example, in each of the above-described embodiments, the mobile phone 40 has been described as an example of the user-side terminal device. However, for example, PDA (Personal Digital Assistants) with an imaging device may be used.

  In each of the above-described embodiments, a digital camera built in a mobile phone has been described as an example of the imaging device. However, for example, an external digital camera may be used. For example, a scanner can be used instead of the digital camera.

  Also, the processing of the authentication device 10 in each of the above embodiments can be distributed and processed by a plurality of devices. That is, the processing shown in FIGS. 9 and 17 can be moved to another device as necessary. According to such an embodiment, an optimum system can be constructed according to the traffic of the network 20 or the capability of the server.

  The above processing functions can be realized by a server computer and a client computer. In that case, a server program describing the processing content of the function that the authentication device 10 should have and a client program describing the processing content of the function that the mobile phone 40 should have are provided. By executing the server program on the server computer, the processing function of the authentication device 10 is realized on the server computer. Further, the processing function of the mobile phone 40 is realized on the client computer by executing the client program on the client computer.

  The server program and client program describing the processing contents can be recorded on a computer-readable recording medium. Examples of the computer-readable recording medium include a magnetic recording device, an optical disk, a magneto-optical recording medium, and a semiconductor memory. Examples of the magnetic recording device include a hard disk device (HDD), a flexible disk (FD), and a magnetic tape. Examples of the optical disk include a DVD (Digital Versatile Disk), a DVD-RAM (Random Access Memory), a CD-ROM (Compact Disk Read Only Memory), and a CD-R (Recordable) / RW (ReWritable). Magneto-optical recording media include MO (Magneto-Optical disk).

  When distributing server programs and client programs, for example, portable recording media such as DVDs and CD-ROMs on which the programs are recorded are sold. It is also possible to store the client program in a storage device of the server computer and transfer the client program from the server computer to the client computer via a network.

  The server computer that executes the server program stores, for example, the server program recorded on the portable recording medium in its own storage device. Then, the server computer reads the server program from its own storage device and executes processing according to the server program. The server computer can also read the server program directly from the portable recording medium and execute processing according to the server program.

  The client computer that executes the client program stores, for example, the client program recorded on the portable recording medium or the client program transferred from the server computer in its own storage device. Then, the client computer reads the client program from its own storage device and executes processing according to the client program. The client computer can also read the client program directly from the portable recording medium and execute processing according to the client program. Further, each time the client program is transferred from the server computer, the client computer can sequentially execute processing according to the received client program.

  The present invention can be used for identity verification using, for example, a mobile phone.

It is a figure which shows the structural example of the recognition system of this invention. It is a figure which shows the detailed structural example of the authentication apparatus shown in FIG. It is a figure which shows the detailed structural example of the mobile telephone shown in FIG. It is a figure which shows the functional block implement | achieved when a program is performed in the authentication apparatus shown in FIG. It is a figure which shows an example of the document management information shown in FIG. 6 is a flowchart for explaining a flow of processing executed when document management information is edited in the authentication apparatus shown in FIG. 4. It is an example of the screen displayed on a display apparatus when the flowchart shown in FIG. 6 is performed. FIG. 8 is a display example of a screen when predetermined information is input in FIG. 7. It is a flowchart explaining the flow of the process performed between the authentication apparatus shown in FIG. 1, and a mobile telephone. FIG. 10 is an example of a registration screen displayed on the mobile phone when the flowchart shown in FIG. 9 is executed. FIG. FIG. 10 is an example of a document selection screen displayed on the mobile phone when the flowchart shown in FIG. 9 is executed. FIG. 10 is an example of a mask image transmitted to a mobile phone when the flowchart shown in FIG. 9 is executed. FIG. 13 is a diagram showing a state in which an identification document is displayed superimposed on the mask image shown in FIG. 12. It is a figure which shows the other functional block implement | achieved when a program is performed in the authentication apparatus shown in FIG. 15 is a display example of a screen for editing the setting information shown in FIG. It is an example of the setting information shown in FIG. 6 is a flowchart for explaining a flow of other processing executed between the authentication apparatus shown in FIG. 1 and the mobile phone. It is a figure which shows an example of the layout information shown in FIG. It is a flowchart for demonstrating the detail of the process of step S58 of FIG.

Explanation of symbols

  10 authentication device, 40 mobile phone (terminal device), 40i input device, 40j imaging device, 60 control module (part of optimization means, request means, setting information search means, inquiry means, mask information search means), 61 communication Module (part of optimization means, reception means), 65d mask image (mask information storage means), 71 layout determination module (part of determination means), 72 image determination module (part of determination means), 73d setting information (Setting information storage means)

Claims (13)

In an authentication device that authenticates a user based on image data that is captured by an imaging device of a terminal device on the user side and transmitted by the terminal device,
Prior to the reception of image data, transmitting the setting information for setting the imaging device to the terminal device, and an optimization means for optimizing the image data captured by the imaging device;
Receiving means for receiving image data imaged by the imaging device of the terminal device set based on the setting information sent by the optimization means;
Determining means for determining the appropriateness of the image data received by the receiving means;
An authentication apparatus comprising: Setting information storage means for storing information indicating the type of the terminal device and the setting information corresponding to each type of terminal device;
Request means for requesting the terminal device to send information for identifying the type;
A setting information search means for referring to the information sent as a result of the request of the request means and searching for the corresponding setting information from the setting information storage means;
The said optimization means transmits the setting information obtained by the said setting information search means with respect to the said terminal device, and sets so that the said imaging device may be in an appropriate state. Authentication device.   The said optimization means transmits the mask information for masking the unnecessary part of a to-be-photographed object in the said imaging device, and makes the said imaging device image only the information required for authentication. Authentication device. The subject is a document for identity verification,
4. The authentication apparatus according to claim 3, wherein the optimization unit transmits mask information for masking information that is not required for identity verification among the documents for identity verification. Mask information storage means for storing information indicating the type of document for identity verification and mask information corresponding to the type of each document in association with each other;
Inquiry means for inquiring of the terminal device the type of identity verification document to be the subject,
Mask information retrieval means for retrieving mask information corresponding to the type of document found as a result of the inquiry by the inquiry means from the mask information storage means,
The optimization means transmits the mask information obtained by the mask information search means to the terminal device, and information that is not required for identity verification in the personal authentication document is masked. The authentication apparatus according to claim 4, wherein an image is picked up by an image pickup apparatus.   The determination unit performs predetermined image processing on the image data received by the receiving unit, and determines the appropriateness of the image data based on characteristic information indicating the characteristic of the image data obtained as a result. The authentication apparatus according to claim 1, wherein the determination is performed.   The determination unit, when determining that the image data received by the reception unit is not appropriate, requests the terminal device to re-image and transmit the image data. 6. The authentication device according to 6.   8. The characteristic information of the image data is at least one of information indicating resolution, brightness, contrast, sharpness, and layout state of the image data, or a combination thereof. Authentication device. The terminal device has an input device capable of inputting text information,
The determination means converts text information included in a document for personal authentication captured by the imaging device into text data, compares the text data with text data input from the input device, and The authentication apparatus according to claim 1, wherein when the matching rate is equal to or higher than a certain level, it is determined as appropriate.   The determination means determines a matching rate of the information based on information indicating a correspondence relationship between the information included in the identity verification document and the information included in the text data. The authentication device according to claim 9.   10. The authentication apparatus according to claim 9, wherein if the determination unit determines that the determination is inappropriate, the determination unit notifies the terminal device to that effect. In an authentication method for authenticating a user based on image data captured by an image capturing device included in a terminal device on the user side and transmitted by the terminal device,
Prior to reception of image data, setting information for setting the imaging device is transmitted to the terminal device, and image data captured by the imaging device is optimized.
Receiving image data captured by the imaging device of the terminal device set based on the sent setting information;
Determine the appropriateness of the received image data;
An authentication method characterized by that. In a computer-readable authentication program for causing a computer to perform a process of performing user authentication based on image data captured by an image capturing device included in a terminal device on the user side and transmitted by the terminal device,
Computer
Prior to receiving the image data, an appropriate means for transmitting setting information for setting the imaging device to the terminal device and optimizing the image data captured by the imaging device,
Receiving means for receiving image data picked up by the image pickup device of the terminal device set based on the setting information sent by the optimization means;
Determining means for determining the appropriateness of the image data received by the receiving means;
A computer-readable authentication program characterized in that it functions as a computer program.

Images