JP7397771B2 - Authentication system and authentication method - Google Patents

Description

The present invention relates to an authentication system and an authentication method.

When users receive services or purchase products at stores, etc., they may be required to provide documents for identity verification. However, documents useful for identity verification, such as passports and driver's licenses, have a high risk of being lost or stolen (risk of being misused, etc.). Therefore, users need to handle them carefully, and their use may become a barrier to using services, etc. On the other hand, there is a problem in that it takes time and effort for the service provider to check such identity verification documents.

Therefore, for example, Patent Document 1 discloses a technology that is used for shopping at duty-free facilities by registering biometric information in advance with the passport information of a foreign traveler and authenticating this registration. There is.

International Publication WO2017/033291 Publication

According to Patent Document 1, if biometric information and passport information are not correctly associated and registered, unauthorized use may occur, and as a result, the service provider may suffer unexpected damage. For example, if shopping is repeated over a long period of time, the service provider needs to be able to guarantee the reliability of the correspondence (authenticity of the traveler's registration) and carry out operations accordingly. more preferable for

The present invention has been made in view of this background, and its purpose is to provide an authentication system and an authentication method that allow service providers to safely and flexibly provide services.

One of the present inventions for solving the above problems is to collect user registration information, which is information unique to a registered user, from a registration terminal managed by a registration company that performs user registration, and the registered user. A registration information reception process that receives user certification information, which is information for certification, and information about the registered vendor, and information specific to the user requesting the service from a usage terminal managed by a service provider that provides a predetermined service. Authentication information is received, and the user is authenticated based on the received authentication information and the received user registration information of the registered user, and if the user authentication is successful, the received user authentication information and a service identification process of identifying services that can be provided among the services requested by the user based on a predetermined database based on the received information regarding the registered vendor, and transmitting information on the identified service to the usage terminal. An authentication system includes an arithmetic device that executes the following.

Another aspect of the present invention for solving the above-mentioned problems is that the information processing device obtains information unique to a registered user who is a registered user from a registration terminal managed by a registration company that performs user registration. A registration information reception process that receives user registration information, user certification information that is information for certifying the registered user, and information regarding the registered vendor, and from a usage terminal managed by a service provider that provides a predetermined service. When authentication information specific to the user requesting the service is received, the user is authenticated based on the received authentication information and the received user registration information of the registered user, and the user is successfully authenticated. Based on the received user certification information and the received information regarding the registered vendor, the service that can be provided among the services requested by the user is identified based on a predetermined database, and the information on the identified service is provided. An authentication method that executes a service specifying process to be sent to the usage terminal.

According to the present invention, a service provider can provide services safely and flexibly.

Problems, configurations, and effects other than those described above will be made clear by the following description of the embodiments.

FIG. 1 is a diagram illustrating an outline of the configuration of an authentication system according to the present embodiment. FIG. 2 is a diagram showing an example of a hardware configuration included in a server device. FIG. 2 is a diagram illustrating an example of a hardware configuration included in a registration terminal. It is a diagram showing an example of a hardware configuration included in a user terminal. It is a figure explaining an example of the function with which a server device is provided. It is a diagram showing an example of a user registration information DB. It is a diagram showing an example of a user certification information DB. It is a diagram showing an example of a registration process information DB. It is a diagram showing an example of a registered trader DB. It is a figure showing an example of employee DB. It is a diagram showing an example of an authentication history DB. It is a diagram showing an example of an authenticity confirmation history DB. It is a diagram showing an example of a service determination DB. FIG. 2 is a diagram illustrating an overview of authentication processing. FIG. 2 is a flow diagram illustrating an example of user registration processing. FIG. 2 is a flow diagram illustrating an example of user registration processing. It is a flow diagram explaining an example of employee registration processing. FIG. 2 is a flow diagram illustrating an example of service information provision processing. FIG. 2 is a flow diagram illustrating an example of service information provision processing. It is a figure which shows an example of a video confirmation screen. It is a figure which shows an example of a registered vendor confirmation screen. It is a figure which shows an example of an employee confirmation screen. It is a figure showing an example of a service provision screen.

FIG. 1 is a diagram illustrating an outline of the configuration of an authentication system 1 according to the present embodiment. The authentication system 1 is configured to include a server device 100, one or more registration terminals 200, and one or more usage terminals 300.

The registration terminal 200 is, for example, an information processing device installed at an airport, bank, hotel, or other store. The registration terminal 200 is managed by a trader (hereinafter referred to as a registered trader) that manages these stores.

The registration terminal 200 is a device for each user such as a tourist to register his or her identity (user registration). In this embodiment, user registration includes biometric information such as a fingerprint or finger vein as user registration information, predetermined user certification information linked to this (e.g., passport, driver's license, etc.), and supplementary user certification information to be described later. Information, etc. is required. These pieces of information acquired by the registration terminal 200 are transmitted to the server device 100. User registration is performed by the user and an employee of the registered company (hereinafter referred to as registered employee). Further, user registration may be performed by transmitting information necessary for user registration to the registration terminal 200 or the server device 100 from a terminal owned by the user or a registered employee.

The user terminal 300 is installed, for example, in a hotel, an art museum, a museum, a rental car facility, or other stores. The usage terminal 300 is a device used when a business providing a predetermined service or product (hereinafter referred to as a service business) provides various services to users.

When the server device 100 receives a user's request for service provision from the usage terminal 300, the server device 100 performs predetermined user authentication and the authenticity (correctness) of the user registration based on the user registration information received from the registration terminal 200 in advance. and provides service information to the user terminal 300 according to the results of these authentication and authenticity checks.

A LAN (Local Area
They are communicably connected via a wired or wireless communication network 5 such as a WAN (Wide Area Network), the Internet, or a dedicated line.

Next, the hardware configuration of each information processing device will be explained.

FIG. 2 is a diagram illustrating an example of a hardware configuration included in the server device 100. The server device 100 includes an arithmetic device 101 including a CPU, a main storage device 102 such as a ROM (Read Only Memory), a RAM (Random Access Memory), and an HDD (Hard Disk Drive) or S
An auxiliary storage device 103 such as an SD (Solid State Disk), an input device 104 such as a keyboard, mouse, or touch panel, an output device 105 such as a display, and a communication device 106 such as a network interface for communicating with other information processing devices. Equipped with

FIG. 3 is a diagram illustrating an example of the hardware configuration of the registration terminal 200. The registration terminal 200 includes an arithmetic unit 201 including a CPU, a main storage device 202 such as a ROM (Read Only Memory), a RAM (Random Access Memory), and an HDD (Hard Disk Drive) or SSD.
An auxiliary storage device 203 such as a solid state disk (Solid State Disk), an input device 204 such as a keyboard, mouse, or touch panel, an output device 205 such as a display, and a communication device 206 such as a network interface that communicates with other information processing devices. It includes an electronic information reading device 207 such as an IC card reader, a photographing device 208 such as a video camera that photographs images or moving images, and an image reading device 209 that acquires images such as a camera or scanner. Note that the electronic information reading device 207, the photographing device 208, and the image reading device 209 may be provided outside the registration terminal 200.

FIG. 4 is a diagram illustrating an example of the hardware configuration of the usage terminal 300. The user terminal 300 includes an arithmetic unit 301 such as a CPU, a main storage device 302 such as ROM (Read Only Memory) and RAM (Random Access Memory), and an HDD (Hard Disk Drive) or SSD.
(Solid State Disk) or the like; an input device 304 such as a keyboard, mouse, or touch panel; an output device 305 such as a display; and a communication device 306 such as a network interface that communicates with other information processing devices. It includes an electronic information reading device 307 such as an IC card reader, and an image reading device 309 that acquires images such as a camera or scanner. Note that the electronic information reading device 307 and the image reading device 309 may be provided outside the usage terminal 300.

Next, the details of the functions of the server device 100 will be explained.

FIG. 5 is a diagram illustrating an example of the functions included in the server device 100. The server device 100 includes a registration information receiving section 30 and a service information providing section 50.

The registration information receiving unit 30 receives information related to user registration from the registration terminal 200.

Specifically, the registration information receiving section 30 has the functions of a user registration information receiving section 31, a user certification information receiving section 32, a registration process information receiving section 33, a registered vendor information receiving section 34, and an employee information receiving section 35. Department.

The user registration information receiving unit 31 receives user registration information that is information specific to each user who is attempting to register as a user. The user registration information is registered in a user registration information DB 110, which will be described later.

In this embodiment, it is assumed that the user registration information is biometric information such as a fingerprint, voiceprint, or vein.

The user certification information receiving unit 32 receives user certification information that is information for proving the identity of the user. The user certification information is registered in a user certification information DB 120, which will be described later.

In this embodiment, it is assumed that the user certification information is the user's information in an object where the user's information is stored electronically, such as a passport or driver's license (for example, name, nationality, date of birth, issue number, etc.).

The registration process information receiving unit 33 receives registration process information that is information indicating the process of user registration. The registration process information is recorded in a registration process information DB 130, which will be described later.

In this embodiment, the registration process information is an image or a video of at least one of the user, the registered employee, and the item presented by the user to the employee. The items presented by the user to the registered employee are, for example, pages of a passport, driver's license, or landing permit.

The registered trader information receiving unit 34 receives information regarding registered traders (registered trader information). The registered trader information is registered in a registered trader DB 140, which will be described later.

Note that in this embodiment, the registered trader information is information representing the degree of reliability of the registered trader.

The employee information receiving unit 35 receives information regarding registered employees. Registered employee information is registered in an employee DB 150, which will be described later.

Note that in this embodiment, the registered employee information is information representing the degree of reliability of the registered employee.

Next, the service information providing section 50 includes functional sections of an authentication information receiving section 51, an authenticity determining section 52, and a service specifying section 53.

The authentication information receiving unit 51 receives authentication information unique to the service requesting user from a registered user requesting a service (hereinafter referred to as a service requesting user) from a usage terminal 300 managed by a service provider that provides a predetermined service.

In this embodiment, it is assumed that this authentication information is biometric information corresponding to the biometric information received by the user registration information receiving section 31.

The authenticity determining unit 52 authenticates the user based on the authentication information received by the authentication information receiving unit 51 and the user registration information of the registered user received by the user registration information receiving unit 31. Note that this authentication information is registered in an authentication history DB 160, which will be described later.

Then, if the authentication of the user is successful, the authenticity determining unit 52 combines the user certification information received by the user certification information receiving unit 32, the registration process information received by the registration process information receiving unit 33, and the registrar information. Based on the information regarding the registered vendor received by the receiving unit 34, the services that can be provided among the services requested by the usage terminal 300 (service requesting user) are identified based on the service determination DB 180 (described later), and information on the identified services is determined. is sent to the user terminal 300.

In the present embodiment, the authenticity determination unit 52 inputs confirmation of information related to reliability (authenticity) of user registration, such as user certification information, registration process information, and registration vendor, from a service provider (user). The degree of reliability is specified by receiving the information from the terminal 300). Information on these confirmations is registered in an authenticity confirmation history DB 170, which will be described later.

In addition, in this embodiment, the content of the identified service is registered in the service usage history DB 195.

Next, the database stored in the server device 100 will be explained.

The server device 100 has each database: user registration information DB 110, user certification information DB 120, registration process information DB 130, registered vendor DB 140, employee DB 150, authentication history DB 160, authenticity confirmation history DB 170, service judgment DB 180, and service usage history DB 195. I remember.

(User registration information DB)
FIG. 6 is a diagram showing an example of the user registration information DB 110. The user registration information DB 110 includes a registration procedure ID 111 assigned to each user registration, a registered user ID 112 that identifies the user (registered user) who has registered in the user registration, and a user biometric authentication template 113 (user biometric information data processed for authentication), the date and time 114 when the user was authenticated, the registered company ID 115 of the registered company that authenticated the user, and the employee ID 116 of the registered employee who authenticated the user. It is a database with records having each piece of information.

Template information generated from information such as a user's fingerprint and veins is registered in the biometric authentication template 113, for example. For example, the ID of the registration terminal 200 is set in the registered trader ID 115.

(User certification information DB)
FIG. 7 is a diagram showing an example of the user certification information DB 120. The user certification information DB 120 includes a registration procedure ID 121 for user registration, a user ID 122 of the user related to user registration, user certification information 123 of the user, supplementary user certification information 124 of the user, user certification information 123, and supplementary user certification information. This is a database that includes records having various pieces of information including 124 registration dates and times 125.

The user certification information 123 is set to, for example, information directly read electronically by an IC chip of a passport or driver's license. The user certification information 123 is, for example, information such as the user's passport number, driver's license number, name, date of birth, nationality, date of entry, and expiration date.

Registered in the user certification supplementary information 124 is information whose contents, unlike the user certification information 123, cannot be uniquely specified electronically (requiring visual confirmation by a human). The user certification supplementary information 124 is, for example, a scanned or photographed image of an entry stamp on a passport, a scanned or photographed image of a landing permit, a scanned or photographed image of the notes column on the back of a driver's license, or the like.

(Registration process information DB)
FIG. 8 is a diagram showing an example of the registration process information DB 130. The registration process information DB 130 includes a registration procedure ID 131 for user registration, a user ID 132 of the user related to user registration, process record information 133 which is information recording the process of user registration, and information about the employee (registered employee) who performed the user registration. This is a database that includes records having various pieces of information including the employee ID 134 of the employee) and the date and time 135 of registration.

In this embodiment, the process record information 133 is a moving image or an image photographed by the photographing device 208 or the like of the registration terminal 200 during user registration. This video or image records the actual user registration process performed between the user and the registered employee. Further, the process record information 133 includes an image of an object (passport, driver's license, etc., landing permit, etc.) related to the user certification information 123 or user certification supplementary information 124 used in user registration.

(Registered vendor DB)
FIG. 9 is a diagram showing an example of the registered trader DB 140. The registered trader DB 140 stores the registered trader ID 141 of the registered trader, the registered trader information 142 (for example, information on the installation location of the registration terminal 200, the name of the trader, and the reliability of the trader), and the registration system ( For example, a database that includes records containing information including the registration system information 143, which is information on the reliability of programs installed in the registration terminal 200 and each device connected to the registration terminal 200, such as the photographing device 208. It is.

(Employee DB)
FIG. 10 is a diagram showing an example of the employee DB 150. The employee DB 150 includes an employee ID 151 of a registered employee, a registered company ID 152 of a registered company to which the registered employee belongs, and a business rank 153 that is information regarding the reliability of the registered employee (for example, the number of years engaged in the registered work, This is a database that includes records having various information including information such as the rate of business errors related to registration work, information on evaluations received from registered companies), and employee registration information 154 that is information specific to registered employees.

Note that the employee registration information 154 is biometric information such as a fingerprint, voice print, or vein pattern.

(Authentication history DB)
FIG. 11 is a diagram showing an example of the authentication history DB 160. The authentication history DB 160 includes the authentication task ID 161 assigned to each authentication task, the date and time 162 when the authentication task was performed, the service provider ID 163 of the service provider who performed the authentication task, and the user information received from the user terminal 300 in the authentication task. The database is a database that includes records containing information including authentication information 164 which is biometric information, an authentication result 165 (authentication success or failure) of an authentication operation, and a user ID 166 of a user identified as a result of authentication.

(Authenticity confirmation history DB)
FIG. 12 is a diagram showing an example of the authenticity confirmation history DB 170. The authenticity confirmation history DB 170 is information that records the history of confirmation of each item of authenticity of user registration by a service provider (confirmation of reliability of user registration) for user registration performed by a registered vendor (registered employee). be.

The authenticity confirmation history DB 170 includes a confirmation ID 171 assigned to each authenticity confirmation, a confirmation date and time 172 when the confirmation was executed, a service provider ID 173 of the service provider who confirmed the authenticity, and the authenticity confirmation. The user ID 174 of the target user, the registration process information confirmation 175 indicating the confirmation result of the registration process information by the service provider (confirmed as reliable (○), confirmed as unreliable (x)), and the confirmation result of the registration process information by the service provider. User certification supplementary information confirmation 176 showing the confirmation result of the user certification supplementary information, registered vendor confirmation 177 showing the confirmation result of the registered employee information by the service provider, and employee showing the confirmation result of the registered employee information by the service provider. Confirmation 178 and an authenticity determination result 179 indicating whether or not the user registration is authentic as the final result of these confirmations.

(Service judgment DB)
FIG. 13 is a diagram showing an example of the service determination DB 180. The service determination DB 180 is information that defines the relationship between reliability requirements for each item of user registration specified by the authenticity confirmation history DB 170 and the like, and services available to the registered user when each requirement is met.

That is, the service judgment DB 180 provides the service ID 181 of each service, the service 182 that is the content of the service (for example, the upper limit of the price of the service or product, the specification of the type of service or product), and the service of the service content. This is a database that includes records having each piece of information including requirements for providing services (provision conditions 183).

The provision conditions 183 include the number of successful authentication information confirmations 184, which is the number of successful authentications based on user registration information, the number of OK video or image confirmations 185, which is the number of times registration process information has been confirmed to be reliable, and the user. The user certification information confirmation OK count 186, which is the number of times the certification information was confirmed to be reliable, and the user certification supplementary information confirmation OK count 187, which is the number of times the user certification supplementary information was confirmed to be reliable. The number of times the registered company was confirmed to be reliable is 188, the number of times the registered employee was confirmed to be reliable is 189, and the company rank is the reliability rank of the registered company. 190.

Each function of the server device 100, the registration terminal 200, and the usage terminal 300 explained above is performed by the arithmetic device 101, 201, 301 of each terminal, This is achieved by reading and executing each program that implements each function, which is stored in the . Note that each program may be recorded in advance on an external storage medium, or may be introduced when necessary via a predetermined communication network.

Next, the processing performed in the authentication system 1 will be explained.

<Authentication process>
FIG. 14 is a diagram illustrating an overview of the processing (authentication processing) performed in the authentication system 1.

First, the server device 100 executes a user registration process s100 in which the server device 100 receives information such as user registration information, user certification information, user certification supplementary information, etc. regarding the user who is attempting to register from the registration terminal 200.

The server device 100 also executes an employee registration process s200 in which the server device 100 receives employee registration information of an employee (registered employee) of the registered trader who has performed the user registration in the user registration process s100 from the registration terminal 200.

Thereafter, the registered user (registered user) goes to a service provider related to the usage terminal 300 and requests a predetermined service.

The server device 100 receives the authentication information of the registered user from the usage terminal 300, authenticates the registered user based on the authentication information, determines the authenticity of the registered user's user registration, and uses the determination result to determine the authenticity of the user registration of the registered user. Information on the corresponding service is provided to the user terminal 300 (service determination process s300).

The details of these processes will be explained below.

<User registration process>
15 and 16 are flow diagrams illustrating an example of the user registration process s100 (divided into two diagrams due to space limitations). The user registration process s100 is started at an arbitrary timing after the server device 100 is started.

The server device 100 waits to receive user certification information regarding a certain user (a user who desires user registration; hereinafter, the same applies in this process) from the registration terminal 200 (s1).

Specifically, for example, the electronic information reading device 207 of the registration terminal 200 reads information registered in the IC chip of the passport or driver's license presented by the user to the registered employee, and transfers the read information to the server device 100. Send to.

At this time, the photographing device 208 of the registration terminal 200 is assumed to have started recording images or videos (registration process information) of the status of the user registration work started between the user and the registered employee. do.

The server device 100 determines whether the user certification information received in s1 is valid (s2). For example, the server device 100 determines whether the expiration date indicated by the user certification information received in s1 is after today.

If the user certification information is not valid (s2: NO), the server device 100 transmits a predetermined error message to the registration terminal 200, and the registration terminal 200 displays this error message (s3). This ends the user registration process s100.

If the user certification information is valid (s2: YES), the server device 100 registers the information received in s1 in the user certification information DB 120 (s4).

For example, the server device 100 registers information such as the name or expiration date of the passport received in s1 in the user certification information 123 of the user certification information DB 120.

Further, the server device 100 waits to receive the user's user certification supplementary information from the registration terminal 200 (s5).

Note that the method for acquiring the user certification supplementary information is not particularly limited. For example, the registration terminal 200 uses the image reading device 209 to capture an image of the entry date stamp on the passport that the user has presented to the registered employee, and sends the captured image to the server device 100 . Further, for example, the input device 204 of the registration terminal 200 receives input from the employee of entry date information written on the landing permit presented by the user to the registered employee, and transfers the input date and time information to the server. The information is transmitted to the device 100.

The server device 100 determines whether the user certification supplementary information received in s5 is valid (s6). For example, the server device 100 determines whether the image of the entry stamp received in s5 is clearly fraudulent, or whether there is an obvious numerical discrepancy in the date of the stamp on the landing permit.

If the user certification supplementary information is not valid (s6: NO), the server device 100 transmits a predetermined error message to the registration terminal 200, and the registration terminal 200 displays this error message (s7). This ends the user registration process s100.

If the user certification supplementary information is valid (s6: YES), the server device 100 registers the user certification supplementary information received in s5 in the user certification information DB 120 (s8).

For example, the server device 100 registers information such as the image of the entry stamp and the entry date received in s5 in the user certification supplementary information 124 of the user certification information DB 120.

Furthermore, as shown in s9 of FIG. 16, the server device 100 waits to receive the user's user registration information from the registration terminal 200.

For example, the registration terminal 200 reads biometric information such as a user's fingerprint, voiceprint, or vein using the image reading device 209 and transmits the read biometric information to the server device 100 .

The server device 100 generates an authentication template by performing predetermined processing on the user registration information received in s9, and stores the generated authentication template in association with the user registration information DB 110 (s10).

Specifically, the server device 100 registers the biometric information received in s9, for example, in the biometric authentication template 113 of the user registration information DB 110. Additionally, the server device 100 registers the ID of the registration terminal 200 that transmitted the biometric information in the registrar ID 115.

The server device 100 checks whether the user certification information, user certification supplementary information, and authentication template registered in steps s4, s8, and s10 are correctly registered in each database (s11 to s13).

If there is information that has not been correctly registered in each database (s13: NO), the server device 100 sends an error message to that effect to the registration terminal 200, and the registration terminal 200 displays this error message (s14). ). The server device 100 re-executes the process (s1, s5, s9) regarding registration of information that was not successfully registered (s15).

If each piece of information is normally registered in each database (s13: YES), the server device 100 waits to receive registration process information (video, etc.) from the registration terminal 200 (s16).

The server device 100 registers the registration process information received in s16 in the registration process information DB 130 (s17).

Specifically, the server device 100 registers the video related to the registration process information received in s16 in the process record information 133 of the registration process information DB 130. Further, the server device 100 registers the ID of the registered employee attached to the registration process information in the employee ID 134. With this, the user registration process s100 ends.

Note that in the user registration process s100, the reception and registration of user certification information (s1 to s3) may be performed multiple times. Further, the reception and registration of the supplementary user certification information (s5 to s8) may be performed multiple times or may be omitted. Further, the reception and registration of user authentication information (s9 to s15) may be performed multiple times.

<Employee registration process>
FIG. 17 is a flow diagram illustrating an example of the employee registration process s200. The employee registration process s200 is performed in association with the user registration process s100, for example, at a timing immediately before or after the user registration process s100.

First, the server device 100 waits to receive employee registration information of a registered employee who has performed (performed) user registration for a registered user from the registration terminal 200 (s31).

For example, the registration terminal 200 reads biometric information such as a fingerprint, voiceprint, or vein of the registered employee using the image reading device 209 and transmits the read biometric information to the server device 100 .

The server device 100 generates an authentication template by performing predetermined processing on the employee registration information received in s31, and stores the generated authentication template in association with the employee DB 150 (s32).

Specifically, the server device 100, for example, registers the biometric information received in s31 in the employee registration information 154 of the record related to the registered employee in the employee DB 150. Additionally, the server device 100 registers the employee ID attached to the biometric information in the employee ID 151 of the employee DB 150.
Note that by using the employee registration information registered here as a private key (biometric signature), it may be used to prevent tampering with various data and to confirm whether or not tampering has occurred.

The server device 100 checks whether the employee registration information registered in s32 is properly registered in the employee DB 150 (s33).

If the employee registration information is not properly registered in the employee DB 150 (s33: NO), the server device 100 sends an error message to that effect to the registration terminal 200, and the registration terminal 200 displays this message. (s34). Then, the server device 100 re-executes the processing after s31. On the other hand, if the employee registration information is normally registered in the employee DB 150 (s33: YES), the employee registration process s200 ends.

In addition, in the employee registration process s200, the reception and registration of the employee registration information of the registered employee may be performed multiple times.

<Service information provision processing>
18 and 19 are flow diagrams illustrating an example of the service information providing process s300 (due to space limitations, the flowcharts are divided into two diagrams). The service information providing process s300 is started after the user registration process s100 and the employee registration process s200 are executed at least once.

First, the server device 100 waits to receive authentication information from a user terminal 300 of a certain service provider of a registered user who requests a service of that service provider (hereinafter referred to as a service requesting user) (s51).

Specifically, for example, the usage terminal 300 reads biometric information such as a fingerprint, voiceprint, or vein of the service requesting user using the image reading device 309 and transmits the read biometric information to the server device 100 . Note that this biometric information is assumed to be accompanied by the ID of the usage terminal 300.

The server device 100 performs authentication regarding the authentication information received in s51 (s52).

For example, the server device 100 determines whether or not there is a record in the user registration information DB 110 in which the authentication information received in s51 is registered in the biometric authentication template 113. If the record exists, the server device 100 acquires the registered user ID 112 of the record.

If the authentication regarding the authentication information fails (s52: NO), the server device 100 sends an error message to the user terminal 300 to the effect that the authentication has failed, and the user terminal 300 displays this (s53) and sends the service information. The provision process s300 ends.

On the other hand, if the authentication regarding the authentication information is successful (s52: YES), the server device 100 acquires the user certification information and user certification supplementary information of the service requesting user (s54).

For example, the server device 100 acquires the contents of the user certificate information 123 and the user certificate supplementary information 124 of the record related to the registered user ID 112 acquired in s52 from the user certificate information DB 120.

Then, the server device 100 determines whether the service requesting user satisfies the minimum conditions for using the service based on the user certification information and user certification supplementary information of the service requesting user acquired in s54 (s55 ).

For example, the server device 100 checks whether the expiration date of the passport of the user certification information 123 acquired in s54 has expired, whether the nationality satisfies predetermined conditions, and whether there is a contradiction in the entry date of the user certification information 124. etc. are determined.

If the service requesting user does not meet the minimum requirements (s55: NO), the server device 100 sends an error message to the user terminal 300 indicating that the service cannot be used, and the user terminal 300 displays this (s56). , the service information providing process s300 ends.

If the service requesting user satisfies the minimum conditions (s55: YES), the server device 100 confirms whether to confirm the authenticity of the service requesting user's user registration (s56 in FIG. 19).

Specifically, the server device 100 transmits to the usage terminal 300 an inquiry screen asking whether to confirm the authenticity of the user registration of the service requesting user. The usage terminal 300 receives an input from the service provider regarding the presence or absence of confirmation, and transmits the input information to the server device 100.

If the authenticity is not confirmed (s56: NO), the server device 100 executes the process of s65 described below, and if the authenticity is confirmed (s56: YES), the server device 100 executes the process necessary for confirming the authenticity. information (registered vendor information, registered employee information, and registration process information) is read (s57).

Specifically, for example, the server device 100 stores a record of the registered vendor DB 140 related to the registered vendor (identified by the user registration information DB 110) related to the user registration of the service requesting user, and a registration process information DB 130 related to the service requesting user. and the record of the employee DB 150 related to the registered employee (identified by the user registration information DB 110) who has registered the service requesting user.

Then, the server device 100 checks the information of each item in the user registration based on the information read in s57 (s58).

For example, as shown in s581, the server device 100 transmits a screen (video confirmation screen) displaying the contents (video or image) of the process record information 133 of the registration process information DB 130 acquired in s57 to the usage terminal 300, The user terminal 300 displays this video confirmation screen. The usage terminal 300 receives input of information regarding the reliability of the video or image from the service provider through the video confirmation screen, and transmits the received information to the server device 100.

(Video confirmation screen)
FIG. 20 is a diagram showing an example of a video confirmation screen 1000. A video confirmation screen 1000 shows a series of user registration operations performed between a registered employee 1002 and a service requesting user 1004 (things exchanged at the time of user registration 1006 (user certification information or user certification supplement). A video playback screen 1008 in which an object (on which information is written) is recorded is displayed. The video confirmation screen 1000 also displays an OK button 1010 that is selected by the service provider when it is determined that the video is reliable, and an authenticity NG button 1012 that is selected by the service provider when it is determined that the video is not reliable. .

In this case, for the convenience of the service provider, the video confirmation screen 1000 includes user certification information and user certification supplements registered in the user certification information DB 120 for comparison with what is displayed on the video playback screen 1008. Information may also be displayed.

Furthermore, as shown in s582 of FIG. 19, the server device 100 transmits a screen (registered vendor confirmation screen) displaying the information of the registered vendor DB 140 acquired in s57 to the user terminal 300, and the user terminal 300 Display a confirmation screen. The user terminal 300 receives input of information regarding the reliability of the registered vendor from the service provider via the registered vendor confirmation screen, and transmits the accepted information to the server device 100.

(Registered vendor confirmation screen)
FIG. 21 is a diagram showing an example of the registered vendor confirmation screen 1100. The registered vendor confirmation screen 1100 includes information regarding the reliability of the registered vendor who has registered the user, such as the name, location, or reliability information 1102 of the registered vendor, and information on the reliability of the registration system installed by the registered vendor. 1104, an OK button 1106 that is selected by the service provider if the service provider is reliable, and an NG button 1108 that is selected by the service provider if the service provider is not reliable are displayed.

Furthermore, as shown in s583 of FIG. 19, the server device 100 transmits a screen (employee confirmation screen) displaying the information of the employee DB 150 acquired in s57 to the user terminal 300, and the user terminal 300 Display a confirmation screen. The user terminal 300 receives input of information regarding the reliability of the registered employee from the service provider through the employee confirmation screen, and transmits the received information to the server device 100.

(Employee confirmation screen)
FIG. 22 is a diagram showing an example of the employee confirmation screen 1200. The employee confirmation screen 1200 includes, as information regarding the reliability of the registered employee, information 1202 on the reliability rank of the registered employee's work, and OK information selected by the service provider when the registered employee is deemed reliable. A button 1206 and an NG button 1208, which is selected by the service provider when the registered employee is deemed unreliable, are displayed.

Note that the employee confirmation screen 1200 is provided with an execution button 1204 for performing biometric authentication for registered employees, and the server device 100 authenticates registered employees who have performed user registration for service requesting users. Good too.

For example, if the registered employee is at a service provider's office, the server device 100 causes the user terminal 300 to display a screen requesting the registered employee's authentication information. The usage terminal 300 reads the authentication information (biometric information) of the registered employee using the image reading device 309 and transmits the read biometric information to the server device 100 . The server device 100 executes authentication by comparing the received authentication information with the employee registration information 154 in the employee DB 150, and if the authentication is successful, a message indicating successful authentication is displayed on the employee confirmation screen 1200. Information 1205 is displayed.

Note that here, the aforementioned private key (biometric signature based on employee registration information) may be used to confirm whether or not the registered employee's registered information has been tampered with.

After the above s58 is completed, as shown in FIG. The process information confirmation 175, registered vendor confirmation 177, and employee confirmation 178 are registered (s59). Note that, if the reliability of the user certification supplementary information is confirmed based on the registration process information (s581), the server device 100 may set the confirmation result in the user certification supplementary information confirmation 176.

The server device 100 finally determines whether the user registration of the service requesting user is authentic (s60). For example, the server device 100 determines whether all the items or a predetermined percentage or more of the items checked in s58 are reliable. Alternatively, for example, the server device 100 transmits an inquiry screen to the usage terminal 300 asking whether or not the user registration of the service requesting user is authentic, and receives input from the service provider. The usage terminal 300 transmits the input information to the server device 100.

If the user registration of the service requesting user is not authentic (s60: NO), the server device 100 records information to that effect (s61). Specifically, the server device 100 sets a mark (x) indicating that there is no authenticity in the authenticity determination result 179.

Then, the server device 100 requests the usage terminal 300 to provide user certification information of the service requesting user (s62).

For example, the server device 100 transmits to the usage terminal 300 a screen requesting the service requesting user to provide a passport as user certification information. The usage terminal 300 displays this screen, and uses the electronic information reading device 307 to read the information registered in the IC chip of the user's passport or driver's license that the service requesting user has presented to the service provider, and reads the read information. It is transmitted to the server device 100.

The server device 100 determines whether the user registration of the service requesting user is authentic based on the user certification information received as a result of s62 (s63). For example, the server device 100 transmits to the usage terminal 300 a confirmation screen asking whether the user registration of the service requesting user is authentic. The user terminal 300 displays this screen and receives input from the service provider regarding information regarding authenticity. The usage terminal 300 transmits the input authenticity information to the server device 100.

If the user registration of the service requesting user is not authentic (s63: NO), the service information providing process s300 ends, and if the user registration of the service requesting user is authentic (s63: YES), the server device 100 executes the process of s65, which will be described later.

On the other hand, if the user registration of the service requesting user is authentic in s60 (s60: YES), the server device 100 records information to that effect (s64). Specifically, the server device 100 sets the authenticity determination result 179 of the authenticity confirmation history DB 170 to the effect that there is authenticity (◯).

Then, the server device 100 identifies services that the service provider can provide to the service requesting user based on the authenticity confirmation history DB 170, the registered vendor DB 140, the employee DB 150, and the service determination DB 180 (s65).

Specifically, first, the server device 100 acquires the history of authenticity confirmation, registered vendors, and employee information.

For example, the server device 100 counts the number of items that are confirmed as "reliable" among each item by totaling the contents of records related to service requesting users and service providers in the authenticity confirmation history DB 170. do. Further, for example, the server device 100 acquires the registrar information 142 and registration system information 143 of the record related to the service provider from the registrar DB 140. Further, for example, the server device 100 acquires the job rank 153 of the record related to the registered employee in the employee DB 150.

Then, the server device 100 identifies a service that can be provided from the service determination DB 180 based on the acquired information. For example, the server device 100 refers to each record in the service determination DB 180 and determines for each record whether the provision condition 183 satisfies the acquired information.

The server device 100 transmits a service providing screen displaying the details of the service specified in s65 to the user terminal 300 (s66). The usage terminal 300 receives a service selection from a service requesting user by displaying a service provision screen.

Thereafter, the usage terminal 300 starts processing regarding the selected service.

(Service provision screen)
FIG. 23 is a diagram showing an example of the service provision screen 1300. A service provision screen 1300 displays a list 1302 of services currently available to the service requesting user.

As described above, the authentication system 1 of this embodiment receives the user's user registration information, user certification information, and information regarding the registered vendor from the registration terminal 200 as registered user information. Further, the server device 100 performs user authentication based on the user authentication information received from the usage terminal 300 and the user registration information of the registered user, and if the user authentication is successful, the user authentication information and the registered vendor Based on the information, the service that can be provided among the requested services is specified based on the service determination DB 180, and the information on the specified service is transmitted to the usage terminal 300.

That is, if the server device 100 succeeds in authenticating the registered user, it can determine the services that can be provided based on the user certification information related to user registration and the registered vendor. As a result, the service provider can provide services in accordance with the authenticity of the user registration determined based on the attributes of the registered company that registered the user, and therefore can safely and flexibly develop the service.

The present invention is not limited to the embodiments described above, and includes various modifications. The above-described embodiments have been described in detail for better understanding of the present invention, and are not necessarily limited to those having all the configurations described.

For example, some functions of each information processing device may be provided in another information processing device.

Further, in this embodiment, the registration process information is an image or a video recording the user registration process, but it may also be information on a memo or text created by a registered employee or user.

In addition, the server device 100 may use the confirmation history of another service provider (authenticity confirmation history DB 170) to confirm each reliability item in the service information provision processing s30, or may use its own confirmation history. History may also be used. In this case, reliability items may be weighted depending on the service provider.

Further, in this embodiment, the server device 100 checks the reliability of each item based on the selection input by the service provider, but the server device 100 checks the reliability of each item using a predetermined algorithm (for example, a predetermined judgment condition table). , the reliability of each item may be automatically checked.

Furthermore, the server device 100 may check the reliability of not all items but any item selected by a predetermined rule or the service provider.

In addition, in this embodiment, the content of the service is determined based on the number of times the authenticity was confirmed as "○" (authenticity was determined), but based on the percentage of authenticity confirmed, etc. The content of the service may be determined based on the information provided.

Furthermore, in this embodiment, biometric information is used as user registration information and employee registration information, but other types of information, for example, may be obtained by a predetermined authentication device (such as a smartphone that has undergone predetermined authentication). , may be information unique to the user.

In this embodiment, the reliability results are confirmed using two options: reliable (◯) or unreliable (x), but confirmation may also be performed using parameters expressed by numerical values or the like.

Further, in this embodiment, the service content in the service determination DB 180 may be the same for each service provider, or may be different for each service provider.

The above description of this specification clarifies at least the following. That is, the authentication system, as the predetermined database, associates requirements regarding the reliability of the registrant, requirements regarding the reliability of the user certification information, and services that can be provided when each of the requirements is satisfied. The computing device may include a storage device that stores a database, and in the service specifying process, the computing device may specify a service that can be provided among the services requested by the user based on the database.

In this way, by specifying the services that can be provided based on the authenticity confirmation history DB 170 that associates the reliability of registrant and user certification information with each service, the service provider can respond to the authenticity of user registration. It is possible to flexibly provide services to users.

Further, in the present embodiment, in the registration information receiving process, the computing device includes the user registration information, the user certification information, information regarding the registered vendor, and a registration process that is information indicating the user registration process. information, and if the user is successfully authenticated in the service identification process, a request is made from the user based on the received user certification information, information regarding the registered vendor, and registration process information. Services that can be provided among the provided services may be specified based on a predetermined database.

In this way, if the user is successfully authenticated, the service provider identifies services that can be provided based on registration process information indicating the user registration process, in addition to the user certification information and information regarding the registered vendor. can provide the user with a service corresponding to the authenticity of the registration that is correctly determined based on the actual status of the user registration.

In the present embodiment, in the registration information receiving process, the arithmetic device may include at least one of the registered user, an employee of the registered trader, and information provided to the employee by the registered user, as the registration process information. If any one receives an image or video taken and the user is successfully authenticated in the service identification process, the registered user, employee, or the user photographed in the received registration process information The service that can be provided among the services requested by the user may be specified based on at least one of the things that the registered user has provided to the employee.

In this way, by identifying services that can be provided based on registered users, registered employees, and images or videos of things provided by registered users to employees, service providers can It is possible to accurately and precisely grasp the status of the registration, thereby providing the user with services that correspond to the authenticity of the registration that has been correctly evaluated.

In the present embodiment, in the registration information receiving process, the arithmetic device represents, as information regarding the registered trader, the degree of reliability of the registered trader and the employee who has performed the user registration at the registered trader. If the information is received and the user is successfully authenticated in the service identification process, the information requested by the user is determined based on the reliability of the registered vendor and the employee in the received information regarding the registered vendor. It is also possible to specify the services that can be provided among the services.

In this way, by identifying the services that can be provided based on the degree of reliability of registered vendors and registered employees, service providers can provide appropriate services that correspond to the reliability of registered vendors and registered employees. can do.

Further, in the present embodiment, in the registration information receiving process, the arithmetic device receives employee registration information specific to the employee who has performed the user registration at the registered trader as information regarding the registered trader; In the service identification process, if the user is successfully authenticated, based on the received employee registration information specific to the employee and the authentication information of the employee at the registered vendor received from the usage terminal. Authentication may be performed, and if the authentication is successful, a service that can be provided among the services requested by the user may be specified.

In this way, by performing authentication based on employee registration information unique to registered employees and identifying services that can be provided if this authentication is successful, service providers can ensure that they are highly reliable employees. It is possible to provide services with peace of mind to users who have been registered with the involvement of the service provider.

In the present embodiment, in the service identification process, the computing device inputs the received user certification information, the received registration process information, and information on the reliability level or presence or absence of the registrar. Based on the information received and input via the usage terminal and the predetermined database, services that can be provided among the services requested by the user may be specified based on the predetermined database.

In this way, by specifying the services that can be provided based on the input from the user terminal 300 regarding user certification information, registration process information, and information on the degree or presence of reliability of the registered vendor, the service provider can They can judge the level or presence of reliability by themselves and provide appropriate services.

Further, in the present embodiment, the computing device receives biometric information of the registered user as the user registration information in the registration information receiving process, and requests the service from the usage terminal in the service specifying process. The user may be authenticated based on the received authentication information and the received biometric information of the registered user.

In this way, by using biometric information such as fingerprints, voiceprints, veins, etc. as user registration information, service providers can reliably provide services to the correct users.

In the present embodiment, the computing device may determine whether or not at least one of the received user certification information, the received registration process information, and the received registered trader information is reliable in the service identification process. A predetermined screen may be displayed to accept input of degree information from the service provider.

In this way, by displaying a screen that accepts input from the service provider for user certification information, registration process information, and information on whether or not the registrant is reliable, the service provider can, based on its own judgment, Authenticity can be determined and appropriate services can be provided to the user.

1 authentication system, 100 server device, 200 registration terminal, 300 usage terminal

Claims (10)

From a registration terminal managed by a registration company that performs user registration, user registration information, which is information unique to the registered user who is being registered, user certification information, which is information for proving the registered user, and the registration a registration information reception process for receiving information about the vendor;
Authentication information unique to the user requesting the service is received from a usage terminal managed by a service provider that provides a predetermined service, and the user is authenticated based on the received authentication information and the received user registration information of the registered user. At the same time, if the user authentication is successful, the service that can be provided among the services requested by the user is determined based on the received user certification information and the received information regarding the registered vendor. a service identification process of identifying based on a predetermined database and transmitting information on the identified service to the user terminal;
An authentication system comprising a computing device that executes. The predetermined database is a storage device that stores a database that associates requirements regarding the reliability of the registered trader, requirements regarding the reliability of the user certification information, and services that can be provided when each of the requirements is met. Prepare,
In the service identification process, the arithmetic device identifies, based on the database, services that can be provided among the services requested by the user.
The authentication system according to claim 1. The arithmetic device is
In the registration information receiving process, receiving the user registration information, the user certification information, information regarding the registered vendor, and registration process information that is information indicating the user registration process;
In the service identification process, if the user is successfully authenticated, one of the services requested by the user is provided based on the received user certification information, information regarding the registered vendor, and registration process information. identifying possible services based on a predetermined database;
The authentication system according to claim 1. The arithmetic device is
In the registration information receiving process, an image or a video of at least one of the registered user, an employee of the registered vendor, and an item presented to the employee by the registered user is received as the registration process information. death,
In the service identification process, if the user is successfully authenticated, at least one of the registered user photographed in the received registration process information, the employee, or the item provided by the registered user to the employee; identifying services that can be provided among the services requested by the user based on the
The authentication system according to claim 3. The arithmetic device is
In the registration information receiving process, receiving, as information regarding the registered trader, information representing the reliability of the registered trader and the employee who performed the user registration at the registered trader;
In the service identification process, if the user is successfully authenticated, the service that can be provided among the services requested by the user is determined based on the reliability of the registered vendor and its employees in the received information regarding the registered vendor. identify,
The authentication system according to claim 1. The arithmetic device is
In the registration information receiving process, receiving employee registration information specific to the employee who has performed the user registration at the registered trader as information regarding the registered trader;
In the service identification process, if the user is successfully authenticated, the received employee registration information specific to the employee and the authentication information of the employee at the registered company received from the usage terminal are used. perform authentication based on the user's request, and if the authentication is successful, identify a service that can be provided among the services requested by the user;
The authentication system according to claim 1. In the service identification process, the arithmetic device performs the following steps:
The received user certification information, the received registration process information, and the registered vendor information are each received an input of information regarding the reliability or reliability of each of the information through the usage terminal, and the input information and the identifying services that can be provided among the services requested by the user based on a predetermined database;
The authentication system according to claim 3. The arithmetic device is
In the registration information receiving process, receiving biometric information of the registered user as the user registration information,
In the service identification process, biometric information of the user is received from the usage terminal as authentication information specific to the user requesting the service, and based on the received authentication information and the received biometric information of the registered user. , authenticating the user;
The authentication system according to claim 1. In the service identification process, the arithmetic device performs the following steps:
displaying a predetermined screen for receiving input from the service provider of information regarding the reliability or reliability of at least any of the received user certification information, the received registration process information, and the received registered vendor information;
The authentication system according to claim 7. The information processing device
From a registration terminal managed by a registration company that performs user registration, user registration information, which is information unique to the registered user who is being registered, user certification information, which is information for proving the registered user, and the registration a registration information reception process for receiving information about the vendor;
Authentication information unique to the user requesting the service is received from a usage terminal managed by a service provider that provides a predetermined service, and the user is authenticated based on the received authentication information and the received user registration information of the registered user. At the same time, if the user authentication is successful, the service that can be provided among the services requested by the user is determined based on the received user certification information and the received information regarding the registered vendor. a service identification process of identifying based on a predetermined database and transmitting information on the identified service to the user terminal;
An authentication method to perform.

Images