JP7653387B2 - Information processing device, information processing method, and information processing program - Google Patents

Description

The present invention relates to an information processing device, an information processing method, and an information processing program.

A technology related to FIDO (Fast Identity Online) authentication that uses an authentication device has been disclosed (see Patent Document 1).

JP 2020-141331 A

However, the above conventional technologies still have room for improvement in terms of FIDO authentication, including identity verification during authentication.

This application was made in consideration of the above, and aims to further improve the efficiency of authentication.

The information processing device according to the present application is characterized in that it comprises an acquisition unit that collects observation results of authentication time for each user and/or authentication method, an estimation unit that estimates an expected effect of changing the authentication method based on the collected observation results, a proposal unit that presents the estimated effect to a user and proposes a change of authentication method to the user, a reception unit that receives an authentication context from the user 's authentication device, thereby confirming that the authenticator has successfully authenticated the user and that the user has agreed to the change of authentication method , a calculation unit that calculates an effect or benefit actually generated by the change of authentication method, and a provision unit that provides an incentive to the user according to the calculated effect or benefit.

According to one aspect of the embodiment, the efficiency of authentication can be further improved.

FIG. 1 is an explanatory diagram showing an overview of an information processing method according to an embodiment. FIG. 2 is an explanatory diagram showing an overview of incentive payments for security migration. FIG. 3 is an explanatory diagram showing an overview of the advance collection of authentication information. FIG. 4 is a diagram illustrating an example of the configuration of an information processing system according to the embodiment. FIG. 5 is a diagram illustrating an example of the configuration of a terminal device according to the embodiment. FIG. 6 is a diagram illustrating an example of the configuration of a server device according to the embodiment. FIG. 7 is a diagram illustrating an example of the user information database. FIG. 8 is a diagram illustrating an example of the history information database. FIG. 9 is a diagram illustrating an example of the authentication setting database. FIG. 10 is a flowchart showing a processing procedure according to the embodiment. FIG. 11 is a diagram illustrating an example of a hardware configuration.

Below, the information processing device, information processing method, and information processing program according to the present application will be described in detail with reference to the drawings. Note that the information processing device, information processing method, and information processing program according to the present application are not limited to these embodiments. In addition, the same components in the following embodiments will be denoted by the same reference numerals, and duplicated descriptions will be omitted.

[1. Overview of information processing method]
First, an overview of an information processing method performed by an information processing device according to an embodiment will be described with reference to Fig. 1. Fig. 1 is an explanatory diagram showing an overview of an information processing method according to an embodiment. Note that Fig. 1 describes an example in which authentication efficiency is further improved.

As shown in FIG. 1, the information processing system 1 includes a terminal device 10 and a server device 100. The terminal device 10 and the server device 100 are connected to each other via a network N (see FIG. 4) in a wired or wireless manner so as to be able to communicate with each other. In this embodiment, the terminal device 10 cooperates with the server device 100.

The terminal device 10 is a smart device such as a smartphone or tablet terminal used by a user U, and is a mobile terminal device capable of communicating with any server device via a wireless communication network such as 4G (Generation) or LTE (Long Term Evolution). The terminal device 10 has a screen such as a liquid crystal display with a touch panel function, and accepts various operations on displayed data such as content, such as tapping, sliding, scrolling, etc., performed by the user U with a finger or a stylus. An operation performed on an area of the screen where content is displayed may be considered to be an operation on the content. The terminal device 10 may be not only a smart device, but also an information processing device such as a desktop PC (Personal Computer) or a notebook PC.

In this embodiment, the terminal device 10 functions as a FIDO client in FIDO authentication (Fast Identity Online). The FIDO client authenticates the user in cooperation with an authenticator. The authenticator may be implemented in the same device as the FIDO client (built-in authenticator), or may be implemented in a device that is physically different from the FIDO client (external authenticator).

For example, FIDO authentication can implement authentication methods that use stored or owned items such as a PIN (Personal Identification Number), a USB (Universal Serial Bus) security key, or a smart card, or authentication methods that use biometric or behavioral information such as a fingerprint, face, iris, vein, or voiceprint. Authentication methods are not limited to these, and any method can be implemented. In addition, multiple authentication methods can be combined to achieve multimodal biometric authentication or multifactor authentication.

In the following, for the sake of simplicity, no distinction will be made between the FIDO client and the authenticator, and the terminal device 10 will be described as both a FIDO client and an authenticator. In other words, the case where the authenticator is an internal authenticator will be described as an example. Note that in reality, the authenticator may be an external authenticator that is physically independent from the terminal device 10 and can be linked to the terminal device 10.

It is also possible to implement a Web authentication API (Application Programming Interface) that calls the authenticator from web content displayed in the FIDO client's web browser and enables FIDO authentication through interaction with the authentication server, but a description of this will be omitted in this embodiment.

The server device 100 is an information processing device that functions as an authentication server (FIDO server) in FIDO authentication, and is realized by a computer, a cloud system, or the like. The authentication server corresponds to an RP (Relying Party)/IdP (Identity Provider). In FIDO authentication, no "secrets" such as passwords or biometric information are shared between the authenticator and the authentication server, making it resistant to phishing.

As shown in Figure 1, in FIDO authentication, when an authentication server receives an authentication request from a user, it sends a challenge to the authenticator on the user's side. The challenge is a random character string that is valid only once, and is a different data string each time determined based on random numbers. The user performs user verification using the authenticator to locally verify the user's identity. The authenticator then signs the verification result with its private key and sends it to the authentication server as a signed response. When the authentication server receives the signed response, it verifies the signature with its public key.

In this way, in FIDO authentication, the authentication server uses a public key to verify that the authenticator on the user side holds the appropriate private key, thereby achieving authentication. The authenticator and authentication server do not share a "private key."

The server device 100 also functions as a federated RP/SP (Service Provider) that provides identity services through ID federation with an RP/IdP that supports FIDO authentication. When FIDO authentication and ID federation are combined, the authentication context is propagated from the authenticator to the federated RP/SP via the RP/IdP.

In the following, for the sake of simplicity, no distinction is made between the RP/IdP and the linked RP/SP, and the server device 100 is described as both the RP/IdP and the linked RP/SP. Note that in practice, the server device 100 as the RP/IdP and the server device 100 as the linked RP/SP may be different, physically independent server devices 100.

For example, the server device 100 may cooperate with the terminal device 10 of each user U and provide API (Application Programming Interface) services for various applications (hereinafter, apps), etc., and various data to the terminal device 10 of each user U.

The server device 100 may also be an information processing device that provides some kind of web service online to the terminal device 10 of each user U. For example, the server device 100 may provide services such as Internet connection, search services, SNS (Social Networking Service), electronic commerce (EC), electronic payment, online games, online banking, online trading, accommodation and ticket reservations, video and music distribution, news, maps, route searches, route guidance, line information, operation information, and weather forecasts as web services. In practice, the server device 100 may cooperate with various servers that provide the above-mentioned web services, and may act as an intermediary for the web services or be responsible for processing the web services.

The server device 100 can acquire user information about the user U. For example, the server device 100 acquires information about the attributes of the user U, such as the gender, age, and area of residence of the user U. The server device 100 then stores and manages the information about the attributes of the user U together with identification information (such as a user ID) indicating the user U.

The server device 100 also acquires various history information (log data) indicating the behavior of the user U from the terminal device 10 of the user U or from various servers based on the user ID, etc. For example, the server device 100 acquires a location history, which is a history of the location and date and time of the user U, from the terminal device 10. The server device 100 also acquires a search history, which is a history of search queries entered by the user U, from a search server (search engine). The server device 100 also acquires a browsing history, which is a history of content viewed by the user U, from a content server. The server device 100 also acquires a purchase history (payment history), which is a history of product purchases and payment processing by the user U, from an electronic commerce server or a payment processing server. The server device 100 may also acquire a listing history and a sales history, which are a history of listings on the marketplace by the user U, from an electronic commerce server or a payment processing server. The server device 100 also acquires a posting history, which is a history of posts by the user U, from a posting server that provides a word-of-mouth posting service or an SNS server. The various servers and the like described above may be the server device 100 itself. In other words, the server device 100 may function as the various servers and the like described above.

[1-1. Guidance for FIDO certification]
An overview of incentive (reward, reward) payment for security migration (migration: migration to a new environment) will be described with reference to Fig. 2. Fig. 2 is an explanatory diagram showing an overview of incentive payment for security migration. Note that in reality, it is not limited to migration, and may be conversion (system conversion, replacement).

Authentication is the act of a service provider (business operator) verifying the authenticity of a user, and users hope to use services through authentication. In this case, performing authentication also benefits the user, and the user's benefit is the impetus for the active introduction of strong authentication such as FIDO authentication, but the benefit that the service provider receives from performing authentication (improved security of the entire system) may be able to be distributed to the user.

[1-1-1. Incentive payment system]
(1) Visualization of the effects of changing the authentication method The server device 100, which is an authentication server, estimates the benefits of changing a specified authentication method, and presents benefit information based on the estimated benefits to the terminal device 10 of the user U via the network N (see Figure 4).

At this time, the server device 100 calculates the cost per hour from the user U's hourly wage or minimum wage, and presents profit information based on the calculation result. For example, the server device 100 presents profit information to the terminal device 10 of the user U, such as "FIDO authentication will shorten the authentication time by ○ seconds. You will need to authenticate △ times this year, and the effect of the time reduction will be equivalent to XX yen (total/per time)."

(2) Payment of incentives for effectiveness The server device 100 pays the user U for the time it takes to register. Alternatively, the server device 100 bills the user U for the time it takes to register, as compensation for the service provided. Alternatively, the server device 100 pays the user U for the time that would have been required if the user had entered a password (PW) for PW authentication, for each purchase made through FIDO authentication in electronic commerce, etc.

1-1-2. System Overview
For example, as shown in FIG. 2, the server device 100, which is an authentication server, distributes an observation script for the time required for authentication (hereinafter, authentication time) to the terminal device 10, which is the authenticator, in advance via the network N (see FIG. 4) (step S1).

Then, the server device 100 presents the expected effect of changing the authentication method to the terminal device 10 via the network N (see FIG. 4) (step S2). Note that changing the authentication method includes adding an authentication method or setting a new authentication method. At this time, the server device 100 may collect observation results from an unspecified number of terminal devices 10 using an observation script of the authentication time for each user and authentication method, and may determine the expected effect of changing the authentication method based on the collected observation results and present the effect.

Next, the terminal device 10, which is the authenticator, accepts an authentication operation from the user U (step S3). At this time, the terminal device 10 may accept, from the user U who has been presented with the expected effect, an instruction to change the authentication method, an authentication operation using the changed authentication method, etc.

Then, the terminal device 10 generates a transaction (TX) in response to the authentication operation from the user U between the terminal device 100 and the server device 100 via the network N (see FIG. 4) (step S4). Note that this transaction is not limited to transactions, but also occurs for occasions related to authentication, such as registration. At this time, the terminal device 10 provides metrics to the server device 100. In this embodiment, the terminal device 10 provides the observation results of the authentication time after the authentication method is changed, using an observation script.

Then, the server device 100 pays the terminal device 10 an incentive (reward, bonus) for the effect that has actually occurred via the network N (see FIG. 4) (step S5). The server device 100, which is an authentication server, has an authentication incentive calculation function that calculates an incentive for the effect. At this time, the server device 100 may obtain the effect that has actually occurred from the observation result of an observation script of the authentication time after the authentication method has been changed, and pay an incentive for that effect.

For example, if the authentication method before the change was password authentication, the authentication method after the change will be FIDO authentication.

The server device 100 calculates the reduction in the time required for authentication as an effect of changing the authentication method. For example, the server device 100 calculates how much the reduced time would be equivalent to if converted into a monetary value. At this time, the server device 100 may estimate this from the user's past authentication frequency.

The server device 100 may also pay incentives not only at the time of authentication but also at the time of registration. For example, the server device 100 may pay incentives when multiple authenticators are registered for the purpose of backup or account recovery.

In addition, in electronic commerce transactions that have undergone the changed authentication method, the server device 100 may provide points, coupons, etc. for each purchase for the time saved by FIDO, or may provide benefits according to the purchase amount.

The server device 100 may also calculate the difference between the time required for the original authentication by the user and the time estimated to be required if the authentication is changed to FIDO authentication. In other words, the server device 100 may calculate the difference between the time required for the original authentication by the user and the time estimated to be required for the changed authentication.

The server device 100 may also calculate an estimated time required for the changed authentication depending on the "number of authentications" in multi-step authentication, multi-factor authentication, etc., and the "type of authentication" such as SNS authentication, password authentication, etc.

The server device 100 may also estimate the benefit to the service provider (business operator) of the user changing to FIDO authentication, and determine the benefit to the user based on this benefit to the service provider.

The server device 100 may convert the service provider's profit into labor hours or costs. For example, the server device 100 may estimate the profit from a reduction in the service provider's communication costs, server power or number, reduction in management costs, reduction in password servers (no need for password servers), etc., and determine the profit to the user according to this profit from the service provider.

The server device 100 may also reallocate the overall profit. For example, the server device 100 may estimate the profits from improvements in the conversion rate (CVR), measures to prevent hijacking, etc., and determine the profits to be given to users according to the profits of the service provider.

The server device 100 may also hold a prize draw using benefits for users. For example, the server device 100 may allow the first user to win a prize draw to take all the benefits for an unspecified number of users, which correspond to the service provider's benefits, or may distribute them in the order of winners (first come, first served). Alternatively, the server device 100 may split the benefits on a first come, first served basis (a maximum limit may be set for each user).

In addition, for promotional or security purposes, the server device 100 may provide incentives based on the performance of authentication by encouraging or guiding users to perform authentication using a specific authentication device.

[1-2. Advance collection of authentication information]
An overview of the advance collection of authentication information will be described with reference to Fig. 3. Fig. 3 is an explanatory diagram showing an overview of the advance collection of authentication information.

Currently, one issue with authentication is that the authentication and consent processes are often separated. For example, there are cases where a user wishes to consent to the purchase of a product, but is first authenticated and then asked to consent again. Therefore, in this embodiment, an authentication element is embedded in the consent process as user verification in FIDO authentication.

For example, the terminal device 10 as an authentication device performs fingerprint authentication by reading the user's fingerprint when scrolling to read the terms and conditions to which consent is required. At this time, the terminal device 10 may read the user's fingerprint when scrolling to a specific part of the terms and conditions or to the end (end of the sentence). Furthermore, instead of fingerprint authentication, the terminal device 10 may perform vein authentication using the veins of the user's finger or hand.

In addition, the terminal device 10 performs facial authentication by reading the user's face at the time the user looks at the screen to read the terms and conditions to which the user is asked to agree. In addition, the terminal device 10 may perform iris authentication by reading the user's eyes.

The terminal device 10 also performs gesture authentication by reading the characteristics of the movements of the user's fingers, face, eyes, etc. when reading the terms and conditions to which consent is requested. For example, the terminal device 10 may perform gesture authentication by reading the characteristics of the user's flick operation, etc.

The terminal device 10 also performs voice authentication (voiceprint authentication) by picking up the voice when reading out the terms and conditions or the specified keywords to which consent is sought. At this time, the terminal device 10 may request the user to read out the terms and conditions or the specified keywords.

In this embodiment, "agreement to the terms" and "user authentication" can be performed simultaneously. Furthermore, in this embodiment, the act of the user giving consent also serves as authentication of the user. By treating the act of giving consent to the terms as a form of authentication, it is possible to disallow denial of subsequent actions such as purchases (such as the user claiming that they did not purchase the product). Alternatively, instead of requesting consent for each set of terms, authentication of the user can be automatically performed while the user is reading each set of terms, and the user can be considered to have given consent if they proceed with the process as is.

In addition, according to this embodiment, it is possible to simultaneously confirm that the user has read the terms and conditions and that the user is the user's true identity. This makes it possible to prevent the user from pressing the "agree" button and proceeding without reading the terms and conditions (by simply opening them).

In practice, however, this is not limited to when the terms and conditions are read. For example, the terminal device 10 may read the user's biometric information and perform authentication when the user is operating an authentication device or registering user information. Furthermore, the terminal device 10 may subsequently read the user's biometric information and perform authentication at the same time when the user is performing a specific operation such as searching, browsing, or purchasing.

In addition, in this embodiment, the terminal device 10 collects information for authenticating the actual action in a preliminary action leading up to the actual action. At this time, the terminal device 10 may request the user to perform a preliminary action for collecting information to be used for the actual authentication.

1-2-1. System Overview
3, the terminal device 10 serving as the authentication device receives an operation (user operation) from a user U (step S11). The user operation in step S11 may be the authentication operation in step S3 shown in FIG.

Then, the terminal device 10, which is an authenticator, or the sensor device 200, such as an external device, senses the movements associated with the operation while the user U is performing the authentication operation (step S12). In this embodiment, the terminal device 10 or the sensor device 200 senses the movements of the user U while the user U is reading the terms and conditions to which he or she is asked to agree, as described above, and acquires biometric information from the user U.

The sensor device 200 is, for example, a camera or a microphone. The sensor device 200 may be a wireless device or a smart device. The sensor device 200 may also be a terminal device 10 of another user. The sensor device 200 may also be installed in a facility such as a store or a train station used by the user U, or in a vehicle such as a vehicle, ship, or aircraft. The sensor device 200 provides the results of sensing to the terminal device 10, which is an authentication device.

Next, the terminal device 10, which is the authentication device, performs biometric authentication based on the biometric information acquired from the user U (step S13).

Then, the terminal device 10, which is the authenticator, transmits the authentication context to the server device 100, which is the authentication server, via the network N (see FIG. 4) (step S14). The authentication context indicates the authentication method of the user at the IdP (Identity Provider).

Next, the server device 100, which is an authentication server, has an authentication consent judgment function and judges that authentication of user U has been successful and that user U has agreed to the terms and conditions according to the authentication context (step S15). For example, when the server device 100 receives a signed verification result signed with a private key from the authenticator, it verifies the signature with a public key, and if the signature verification is successful, it judges that authentication of user U has been successful.

According to this embodiment, by embedding authentication elements in the consent process, authentication can be performed simultaneously with the process of consenting to the terms and conditions. This is expected to improve the convenience of authentication and reduce the burden on users. It also leads to a reduction in the time required for consent and authentication.

2. Example of information processing system configuration
Next, a configuration of an information processing system 1 including a server device 100 according to an embodiment will be described with reference to Fig. 4. Fig. 4 is a diagram showing an example of a configuration of the information processing system 1 according to an embodiment. As shown in Fig. 4, the information processing system 1 according to an embodiment includes a terminal device 10 and a server device 100. These various devices are connected to each other via a network N so as to be able to communicate with each other by wire or wirelessly. The network N is, for example, a LAN (Local Area Network) or a WAN (Wide Area Network) such as the Internet.

Furthermore, the number of devices included in the information processing system 1 shown in FIG. 4 is not limited to that shown. For example, in FIG. 4, only one terminal device 10 is shown to simplify the illustration, but this is merely an example and is not limiting, and there may be two or more devices.

The terminal device 10 is an information processing device used by a user U. For example, the terminal device 10 is a smart device such as a smartphone or tablet terminal, a feature phone, a PC (Personal Computer), a PDA (Personal Digital Assistant), a game console or AV device with a communication function, a car navigation system, a wearable device such as a smart watch or a head-mounted display, smart glasses, etc. The terminal device 10 may also be a house/building, a car, a home appliance, an electronic device, etc. that is compatible with the Internet of Things (IOT).

In addition, the terminal device 10 can connect to the network N via a wireless communication network such as LTE (Long Term Evolution), 4G (4th Generation), or 5G (5th Generation: 5th generation mobile communication system), or via short-range wireless communication such as Bluetooth (registered trademark) or wireless LAN (Local Area Network), and communicate with the server device 100.

The server device 100 is, for example, a computer such as a PC or a blade server, or a mainframe or a workstation. The server device 100 may also be realized by cloud computing.

3. Example of terminal device configuration
Next, the configuration of the terminal device 10 will be described with reference to Fig. 5. Fig. 5 is a diagram showing an example of the configuration of the terminal device 10. As shown in Fig. 5, the terminal device 10 includes a communication unit 11, a display unit 12, an input unit 13, a positioning unit 14, a sensor unit 20, a control unit 30 (controller), and a storage unit 40.

(Communication unit 11)
The communication unit 11 is connected to a network N (see FIG. 4 ) by wire or wirelessly, and transmits and receives information to and from the server device 100 via the network N. For example, the communication unit 11 is realized by a network interface card (NIC), an antenna, or the like.

(Display unit 12)
The display unit 12 is a display device that displays various information such as position information. For example, the display unit 12 is a liquid crystal display (LCD) or an organic electro-luminescent display (OLED). The display unit 12 is also a touch panel display, but is not limited to this.

(Input unit 13)
The input unit 13 is an input device that accepts various operations from the user U. For example, the input unit 13 has buttons for inputting characters, numbers, and the like. The input unit 13 may be an input/output port (I/O port) or a Universal Serial Bus (USB) port, and the like. In addition, when the display unit 12 is a touch panel display, a part of the display unit 12 functions as the input unit 13. In addition, the input unit 13 may be a microphone that accepts voice input from the user U, and the like. The microphone may be wireless.

(Positioning unit 14)
The positioning unit 14 receives signals (radio waves) transmitted from satellites of a GPS (Global Positioning System), and acquires position information (e.g., latitude and longitude) indicating the current position of the terminal device 10 based on the received signals. That is, the positioning unit 14 measures the position of the terminal device 10. Note that the GPS is merely an example of a GNSS (Global Navigation Satellite System).

The positioning unit 14 can also measure the position using various methods other than GPS. For example, the positioning unit 14 may measure the position using various communication functions of the terminal device 10 as an auxiliary positioning means for position correction, etc., as described below.

(Wi-Fi positioning)
For example, the positioning unit 14 uses the Wi-Fi (registered trademark) communication function of the terminal device 10 or a communication network provided by each communication company to measure the position of the terminal device 10. Specifically, the positioning unit 14 performs Wi-Fi communication or the like and measures the distance to a nearby base station or access point to measure the position of the terminal device 10.

(Beacon positioning)
Furthermore, the positioning unit 14 may measure the position by using a Bluetooth (registered trademark) function of the terminal device 10. For example, the positioning unit 14 measures the position of the terminal device 10 by connecting to a beacon transmitter connected by the Bluetooth (registered trademark) function.

(geomagnetic positioning)
In addition, the positioning unit 14 locates the position of the terminal device 10 based on a geomagnetic pattern of a structure that has been measured in advance and a geomagnetic sensor provided in the terminal device 10 .

(RFID positioning)
Furthermore, for example, if the terminal device 10 has a function of an RFID (Radio Frequency Identification) tag equivalent to a contactless IC card used at station ticket gates, stores, etc., or has a function of reading an RFID tag, the location of use is recorded together with information on a payment or the like made by the terminal device 10. The positioning unit 14 may obtain such information to measure the location of the terminal device 10. Furthermore, the location may be measured by an optical sensor, an infrared sensor, or the like provided in the terminal device 10.

If necessary, the positioning unit 14 may use one or a combination of the positioning means described above to determine the position of the terminal device 10.

(Sensor unit 20)
The sensor unit 20 includes various sensors mounted on or connected to the terminal device 10. The connection may be wired or wireless. For example, the sensors may be detection devices other than the terminal device 10, such as wearable devices and wireless devices. In the example shown in FIG. 5, the sensor unit 20 includes an acceleration sensor 21, a gyro sensor 22, an air pressure sensor 23, a temperature sensor 24, a sound sensor 25, a light sensor 26, a magnetic sensor 27, and an image sensor (camera) 28.

The sensors 21 to 28 described above are merely examples and are not limiting. In other words, the sensor unit 20 may be configured to include some of the sensors 21 to 28, or may include other sensors, such as a humidity sensor, in addition to or instead of the sensors 21 to 28.

The acceleration sensor 21 is, for example, a three-axis acceleration sensor, and detects the physical movement of the terminal device 10, such as the direction of movement, speed, and acceleration of the terminal device 10. The gyro sensor 22 detects the physical movement of the terminal device 10, such as the tilt in three axial directions, based on the angular velocity of the terminal device 10. The air pressure sensor 23 detects, for example, the air pressure around the terminal device 10.

Since the terminal device 10 is equipped with the above-mentioned acceleration sensor 21, gyro sensor 22, air pressure sensor 23, etc., it is possible to determine the position of the terminal device 10 using technology such as Pedestrian Dead-Reckoning (PDR) that utilizes these sensors 21 to 23. This makes it possible to obtain indoor position information that is difficult to obtain using positioning systems such as GPS.

For example, the number of steps, walking speed, and distance walked can be calculated using a pedometer that uses the acceleration sensor 21. In addition, the gyro sensor 22 can be used to know the user U's direction of travel, line of sight, and body inclination. In addition, the air pressure detected by the air pressure sensor 23 can be used to know the altitude and floor on which the user U's terminal device 10 is located.

The air temperature sensor 24 detects, for example, the air temperature around the terminal device 10. The sound sensor 25 detects, for example, sound around the terminal device 10. The light sensor 26 detects the illuminance around the terminal device 10. The magnetic sensor 27 detects, for example, the geomagnetism around the terminal device 10. The image sensor 28 captures an image around the terminal device 10.

The above-mentioned air pressure sensor 23, temperature sensor 24, sound sensor 25, light sensor 26, and image sensor 28 can detect the environment and situation around the terminal device 10 by detecting air pressure, temperature, sound, and illuminance, and capturing images of the surroundings. In addition, it becomes possible to improve the accuracy of the location information of the terminal device 10 based on the environment and situation around the terminal device 10.

(Control unit 30)
The control unit 30 includes, for example, a microcomputer having a central processing unit (CPU), a read only memory (ROM), a RAM, an input/output port, and various other circuits. The control unit 30 may also be configured with hardware such as an integrated circuit, for example, an application specific integrated circuit (ASIC) or a field programmable gate array (FPGA). The control unit 30 includes a transmission unit 31, a reception unit 32, a processing unit 33, a reception unit 34, an acquisition unit 35, and an authentication processing unit 36.

(Transmitter 31)
The transmission unit 31 can transmit, for example, various information input by the user U using the input unit 13, various information detected by each sensor 21 to 28 mounted on or connected to the terminal device 10, and location information of the terminal device 10 measured by the positioning unit 14 to the server device 100 via the communication unit 11.

(Receiving unit 32)
The receiving unit 32 can receive various information provided by the server device 100 and requests for various information from the server device 100 via the communication unit 11 .

(Processing Unit 33)
The processing unit 33 controls the entire terminal device 10, including the display unit 12, etc. For example, the processing unit 33 can output various information transmitted by the transmission unit 31 and various information received from the server device 100 by the reception unit 32 to the display unit 12 for display.

The reception unit 34, acquisition unit 35, and authentication processing unit 36 described below may be part of the processing unit 33. Furthermore, the processing unit 33 may function as the reception unit 34, acquisition unit 35, and authentication processing unit 36 described below by starting an app or executing a program.

(Reception unit 34)
The accepting unit 34 accepts a user's operation via the input unit 13. For example, the accepting unit 34 accepts a user's operation when the user views or selects the content displayed on the display unit 12.

(Acquisition unit 35)
The acquisition unit 35 acquires biometric information of the user while the user is performing an operation other than authentication. For example, the acquisition unit 35 acquires biometric information of the user via the input unit 13 or the sensor unit 20 while the user is performing an operation.

In this embodiment, the acquisition unit 35 acquires biometric information of the user during the process of requesting consent from the user. For example, the acquisition unit 35 reads the user's fingerprint when the user scrolls to read the terms and conditions to which consent is requested. Alternatively, the acquisition unit 35 reads the veins of the user's finger or hand when the user scrolls to read the terms and conditions to which consent is requested.

The acquisition unit 35 also reads the user's face when the user is looking at the screen to read the terms and conditions to which consent is required. Alternatively, the acquisition unit 35 reads the user's iris when the user is looking at the screen to read the terms and conditions to which consent is required.

The acquisition unit 35 also reads the characteristics of the user's movements when reading the terms and conditions to which consent is sought. The acquisition unit 35 also picks up the user's voice when reading out the terms and conditions to which consent is sought or predetermined keywords.

At this time, the acquisition unit 35 may acquire the user's biometric information via an external device while the user is performing operations other than authentication.

(Authentication Processing Unit 36)
The authentication processing unit 36 performs biometric authentication based on the biometric information of the user. For example, the authentication processing unit 36 performs biometric authentication based on the biometric information of the user to confirm the identity of the user in FIDO authentication.

The authentication processing unit 36 performs biometric authentication based on the user's biometric information while simultaneously requesting consent from the user. For example, the authentication processing unit 36 performs fingerprint authentication based on the user's fingerprint. Alternatively, the authentication processing unit 36 performs vein authentication based on the veins of the user's finger or hand.

The authentication processing unit 36 also performs face authentication based on the user's face. Alternatively, the authentication processing unit 36 performs iris authentication based on the user's irises. The authentication processing unit 36 also performs gesture authentication based on the characteristics of the user's movements. The authentication processing unit 36 also performs voice authentication based on the user's voice.

Furthermore, the authentication processing unit 36 may consider the user's act of giving consent itself as one form of authentication.

(Memory unit 40)
The storage unit 40 is realized by, for example, a semiconductor memory element such as a random access memory (RAM) or a flash memory, or a storage device such as a hard disk drive (HDD), a solid state drive (SSD), an optical disk, etc. Various programs and various data are stored in the storage unit 40.

4. Example of Server Device Configuration
Next, the configuration of the server device 100 according to the embodiment will be described with reference to Fig. 6. Fig. 6 is a diagram showing an example of the configuration of the server device 100 according to the embodiment. As shown in Fig. 6, the server device 100 includes a communication unit 110, a storage unit 120, and a control unit 130.

(Communication unit 110)
The communication unit 110 is realized by, for example, a network interface card (NIC), etc. The communication unit 110 is also connected to a network N (see FIG. 4) in a wired or wireless manner.

(Memory unit 120)
The storage unit 120 is realized by, for example, a semiconductor memory element such as a random access memory (RAM) or a flash memory, or a storage device such as a HDD, an SSD, an optical disk, etc. As shown in FIG. 6 , the storage unit 120 has a user information database 121, a history information database 122, and an authentication setting database 123.

(User Information Database 121)
The user information database 121 stores user information related to the user U. For example, the user information database 121 stores various information such as attributes of the user U. Fig. 7 is a diagram showing an example of the user information database 121. In the example shown in Fig. 7, the user information database 121 has items such as "User ID (Identifier)", "Age", "Gender", "Home", "Workplace", and "Interests".

"User ID" indicates identification information for identifying user U. Note that "user ID" may be contact information for user U (telephone number, email address, etc.) or may be identification information for identifying user U's terminal device 10.

Furthermore, "age" indicates the age of user U identified by the user ID. Note that "age" may be information indicating the specific age of user U (e.g., 35 years old) or information indicating the generation of user U (e.g., 30s). Alternatively, "age" may be information indicating user U's date of birth or information indicating user U's generation (e.g., born in the 1980s). Furthermore, "gender" indicates the gender of user U identified by the user ID.

"Home" indicates the location information of the home of user U, which is identified by the user ID. In the example shown in FIG. 7, "Home" is illustrated as an abstract code such as "LC11", but it may also be latitude and longitude information, etc. For example, "Home" may also be the name of a region or an address.

"Workplace" indicates the location information of the workplace (school in the case of a student) of user U identified by the user ID. In the example shown in FIG. 7, "workplace" is illustrated as an abstract code such as "LC12", but it may also be latitude and longitude information, etc. For example, "workplace" may also be the name of a region or an address.

Furthermore, "interests" indicate the interests of user U identified by the user ID. In other words, "interests" indicate subjects in which user U identified by the user ID is highly interested. For example, "interests" may be search queries (keywords) entered by user U into a search engine. Note that, although one "interest" is illustrated for each user U in the example shown in FIG. 7, there may be multiple "interests."

For example, in the example shown in FIG. 7, the age of user U identified by user ID "U1" is "20s" and the gender is "male." Also, for example, user U identified by user ID "U1" indicates that his home address is "LC11." Also, for example, user U identified by user ID "U1" indicates that his workplace is "LC12." Also, for example, user U identified by user ID "U1" indicates that he is interested in "sports."

In the example shown in FIG. 7, abstract values such as "U1", "LC11", and "LC12" are used to illustrate the data, but it is assumed that specific information such as character strings and numerical values is stored in "U1", "LC11", and "LC12". In the following figures relating to other information, abstract values may also be illustrated.

The user information database 121 may store various information according to the purpose, not limited to the above. For example, the user information database 121 may store various information related to the terminal device 10 of the user U. The user information database 121 may also store information related to the attributes of the user U, such as demographic attributes, psychographic attributes, geographic attributes, and behavioral attributes. For example, the user information database 121 may store information such as name, family structure, place of origin (hometown), occupation, position, income, qualifications, type of residence (detached house, apartment, etc.), whether or not the user has a car, commuting time, commuting route, commuter pass section (station, line, etc.), frequently used station (other than the nearest station to home or workplace), extracurricular activities (location, time period, etc.), hobbies, interests, and lifestyle.

(History information database 122)
The history information database 122 stores various information related to history information (log data) indicating the behavior of the user U. Fig. 8 is a diagram showing an example of the history information database 122. In the example shown in Fig. 8, the history information database 122 has items such as "user ID", "location history", "search history", "browsing history", "purchase history", and "posting history".

"User ID" refers to identification information for identifying user U. "Location history" refers to location history, which is a history of user U's location and movements. "Search history" refers to search history, which is a history of search queries entered by user U. "Browse history" refers to browse history, which is a history of content viewed by user U. "Purchase history" refers to purchase history, which is a history of purchases made by user U. "Post history" refers to posting history, which is a history of posts made by user U. "Post history" may include questions about user U's possessions.

For example, in the example shown in FIG. 8, user U identified by user ID "U1" moves as shown in "location history #1," searches as shown in "search history #1," views content as shown in "browsing history #1," purchases specific products at specific stores as shown in "purchase history #1," and posts as shown in "post history #1."

In the example shown in FIG. 8, abstract values such as "U1", "Location History #1", "Search History #1", "Browse History #1", "Purchase History #1", and "Post History #1" are used for illustration, but it is assumed that specific information such as character strings and numerical values is stored in "U1", "Location History #1", "Search History #1", "Browse History #1", "Purchase History #1", and "Post History #1".

The history information database 122 may store various information depending on the purpose, not limited to the above. For example, the history information database 122 may store the usage history of a specific service by the user U. The history information database 122 may also store the history of the user U's visit to a physical store or the history of the user U's visit to a facility. The history information database 122 may also store the payment history of payments (electronic payments) made using the user U's terminal device 10.

(Authentication setting database 123)
The authentication setting database 123 stores various information related to the authentication of the user U. Fig. 9 is a diagram showing an example of the authentication setting database 123. In the example shown in Fig. 9, the authentication setting database 123 has items such as "user ID", "authentication method", "authentication context", "authentication success", "agreement to terms and conditions", and "incentive".

"User ID" indicates identification information for identifying user U. Furthermore, "authentication method" indicates the authentication method (authentication means) performed on user U. For example, the authentication method may be password authentication, SNS authentication, FIDO authentication, etc.

"Authentication context" indicates the authentication context in FIDO authentication. "Authentication successful" indicates that authentication of user U has been successful. "Terms agreed" indicates that user U has agreed to the terms. In this embodiment, the server device 100 confirms authentication success and agreement to the terms by receiving the authentication context. "Incentive" indicates an incentive according to the effect or benefit arising from the change in authentication method.

For example, in the example shown in FIG. 9, user U, identified by user ID "U1," is set to be authenticated using "authentication method #1," and "authentication context #1" is sent from the authenticator, confirming "authentication success" and "agreement to terms and conditions," indicating that "incentive #1" will be paid due to the change in authentication method.

In the example shown in FIG. 9, abstract values such as "U1", "authentication method #1", "authentication context #1", and "incentive #1" are used for illustration, but specific information such as character strings and numerical values is stored in "U1", "authentication method #1", "authentication context #1", and "incentive #1".

The authentication setting database 123 may store various information according to the purpose, not limited to the above. For example, the authentication setting database 123 may store information related to the user's authentication device, such as the identification information and public key of the authentication device. The authentication setting database 123 may also store an observation script for the time required for authentication (hereinafter, authentication time). The authentication setting database 123 may also store observation results by an observation script for the authentication time. The authentication setting database 123 may also store effects or benefits of changing the authentication method. The authentication setting database 123 may also store an incentive estimated (forecasted) in advance and an actually calculated incentive separately.

(Control unit 130)
Returning to Fig. 6, the description will be continued. The control unit 130 is a controller, and is realized by, for example, a central processing unit (CPU), a micro processing unit (MPU), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA), or the like, executing various programs (corresponding to an example of an information processing program) stored in a storage device inside the server device 100 using a storage area such as a RAM as a working area. In the example shown in Fig. 6, the control unit 130 has an acquisition unit 131, a reception unit 132, an estimation unit 133, a calculation unit 134, and a provision unit 135.

(Acquisition unit 131)
The acquisition unit 131 acquires a search query input by the user U. For example, when the user U inputs a search query into a search engine or the like to perform a keyword search, the acquisition unit 131 acquires the search query via the communication unit 110. That is, the acquisition unit 131 acquires, via the communication unit 110, the keywords input by the user U into a search box of a search engine, a site, or an app.

The acquisition unit 131 also acquires user information about the user U via the communication unit 110. For example, the acquisition unit 131 acquires identification information (such as a user ID) indicating the user U, location information of the user U, attribute information of the user U, and the like from the terminal device 10 of the user U. The acquisition unit 131 may also acquire identification information indicating the user U, attribute information of the user U, and the like when registering the user U. Then, the acquisition unit 131 registers the user information in the user information database 121 of the storage unit 120.

The acquisition unit 131 also acquires various types of history information (log data) indicating the behavior of the user U via the communication unit 110. For example, the acquisition unit 131 acquires various types of history information indicating the behavior of the user U from the terminal device 10 of the user U, or from various servers, etc. based on the user ID, etc. Then, the acquisition unit 131 registers the various types of history information in the history information database 122 of the storage unit 120.

The acquisition unit 131 also acquires the observation results of the authentication time using the observation script from the terminal device 10 of the user U via the communication unit 110.

(Reception unit 132)
The reception unit 132 receives a change in the authentication method from the user via the communication unit 110. In this embodiment, the reception unit 132 receives a change in the authentication method from the terminal device 10 of the user U via the communication unit 110. Note that the reception unit 132 may be integrated with the acquisition unit 131.

Furthermore, when the reception unit 132 receives an authentication context from the terminal device 10 of the user U via the communication unit 110, it determines that the authentication by the authenticator has been successful. For example, by receiving an authentication context from the terminal device 10 of the user U via the communication unit 110, the reception unit 132 confirms that the authentication (user verification) of the user U by the authenticator has been successful and that the terms and conditions have been agreed to. At this time, the reception unit 132 may receive a signed verification result signed by the authenticator with a private key, and verify the signature with a public key.

(Estimation unit 133)
The estimation unit 133 estimates in advance the effect or benefit resulting from the change of the authentication method. At this time, the estimation unit 133 may estimate in advance an incentive according to the effect or benefit resulting from the change of the authentication method. For example, the estimation unit 133 estimates the cost of the time required for authentication from the user's hourly wage or minimum wage as the effect or benefit resulting from the change of the authentication method. Furthermore, the estimation unit 133 estimates the time required for authentication after the change according to the number and type of authentication as the effect or benefit resulting from the change of the authentication method.

The estimation unit 133 also estimates the benefit to the service provider from changing the authentication method as the effect or benefit resulting from changing the authentication method. For example, the estimation unit 133 estimates the benefit from reduced communication costs, server power or number, or management costs on the service provider side as the effect or benefit resulting from changing the authentication method. The estimation unit 133 also estimates the benefit from improved conversion rate or security measures as the effect or benefit resulting from changing the authentication method.

Here, the estimation unit 133 may perform machine learning to construct a model (estimation model) for estimating (inferring) the effect or benefit resulting from the change in the authentication method. For example, the estimation unit 133 may perform machine learning to construct a model for estimating the difference in time required for authentication before and after the change for user U, based on the difference in time required for authentication before and after the change for an unspecified number of users. In addition, the estimation unit 133 may perform machine learning to construct a model for estimating the time and cost required for authentication after the change, based on the time and cost required for authentication on the service provider side.

(Calculation Unit 134)
The calculation unit 134 calculates the effect or benefit actually produced by the change of the authentication method. At this time, the calculation unit 134 may calculate an incentive according to the effect or benefit actually produced by the change of the authentication method. For example, the calculation unit 134 may collect observation results by an observation script of the authentication time for each user and each authentication method, and calculate the effect expected from the change of the authentication method based on the collected observation results. Note that the calculation unit 134 may be integrated with the estimation unit 133.

(Providing Unit 135)
The providing unit 135 provides an observation script for the authentication time to the terminal device 10 of the user U via the communication unit 110 .

The provision unit 135 also provides an incentive to the terminal device 10 of the user U via the communication unit 110 according to the effect or benefit resulting from the change in the authentication method. The provision unit 135 also presents an incentive to the terminal device 10 of the user U via the communication unit 110 according to the effect or benefit estimated in advance, and proposes a change in the authentication method to the terminal device 10 of the user U. At this time, the provision unit 135 visualizes the estimated effect or benefit and presents it to the terminal device 10 of the user U, and proposes a change in the authentication method to the terminal device 10 of the user U.

The providing unit 135 also provides an incentive corresponding to the calculated effect or profit to the terminal device 10 of the user U via the communication unit 110. At this time, the providing unit 135 may hold a prize draw using an incentive corresponding to the calculated effect or profit, and provide the incentive to the terminal device 10 of the user U who wins the prize draw.

5. Processing Procedure
Next, a process performed by the terminal device 10 and the server device 100 according to the embodiment will be described with reference to Fig. 10. Fig. 10 is a flowchart showing the process performed according to the embodiment. The process described below is repeatedly executed by the control unit 30 of the terminal device 10 and the control unit 130 of the server device 100.

For example, as shown in FIG. 10, the acquisition unit 131 of the server device 100, which is an authentication server, collects in advance, via the communication unit 110, the observation results of the authentication time for each user and authentication method from an unspecified number of terminal devices 10 (step S101).

Then, the estimation unit 133 of the server device 100 estimates the expected effect of changing the authentication method based on the observed authentication time for each user and authentication method (step S102).

Next, the providing unit 135 of the server device 100 presents the estimated effect (the effect expected from changing the authentication method) to the terminal device 10 of the user U via the communication unit 110 (step S103).

Next, while user U is reading the terms and conditions to which consent is required in order to change the authentication method, the reception unit 34 of user U's terminal device 10 receives user operation via the input unit 13, and the acquisition unit 35 of the terminal device 10 acquires biometric information of user U via the input unit 13 and the sensor unit 20 (step S104).

For example, the acquisition unit 35 reads the fingerprint of the user when scrolling to read the terms and conditions for which consent is required. Alternatively, the acquisition unit 35 reads the veins of the user's finger or hand when scrolling to read the terms and conditions for which consent is required. Furthermore, the acquisition unit 35 reads the face of the user when the user is looking at the screen to read the terms and conditions for which consent is required. Alternatively, the acquisition unit 35 reads the iris of the user when the user is looking at the screen to read the terms and conditions for which consent is required. Furthermore, the acquisition unit 35 reads the characteristics of the user's movements when reading the terms and conditions for which consent is required. Furthermore, the acquisition unit 35 picks up the voice when reading the terms and conditions for which consent is required or a predetermined keyword. At this time, the acquisition unit 35 may acquire the biometric information of the user via an external device while the user is performing operations other than authentication.

Then, the authentication processing unit 36 of the terminal device 10 performs biometric authentication based on the biometric information of the user U (step S105). At this time, the authentication processing unit 36 may perform multi-factor authentication or multi-stage authentication.

Then, the authentication processing unit 36 (or the transmission unit 31) of the terminal device 10 transmits the authentication context to the server device 100, which is the authentication server, via the communication unit 110 (step S106).

Then, the reception unit 132 of the server device 100 receives the authentication context from the terminal device 10 of the user U via the communication unit 110, thereby confirming that the authentication device has successfully authenticated the user U and that the terms and conditions have been agreed to (step S107). In other words, the reception unit 132 determines that the user U has formally agreed to the change in authentication method.

Next, the calculation unit 134 of the server device 100 calculates the effect or benefit actually generated by the change in the authentication method (step S108). At this time, the calculation unit 134 may calculate an incentive according to the effect or benefit actually generated by the change in the authentication method.

Then, the providing unit 135 of the server device 100 provides an incentive corresponding to the calculated effect or profit to the terminal device 10 of the user U via the communication unit 110 (step S109). At this time, the providing unit 135 may hold a prize draw using an incentive corresponding to the calculated effect or profit, and provide the incentive to the terminal device 10 of the user U who wins the prize draw.

6. Modifications
The above-described terminal device 10 and server device 100 may be implemented in various different forms other than the above-described embodiment. Therefore, the following describes modified examples of the embodiment.

In the above embodiment, some or all of the processing executed by the server device 100 may actually be executed by the terminal device 10. For example, the processing may be completed in a stand-alone manner (by the terminal device 10 alone). In this case, the terminal device 10 is assumed to have the functions of the server device 100 in the above embodiment. Also, in the above embodiment, since the terminal device 10 is linked to the server device 100, from the perspective of the user U, it appears that the processing of the server device 100 is also executed by the terminal device 10. In other words, from another perspective, it can also be said that the terminal device 10 is equipped with the server device 100.

In addition, in the above embodiment, the server device 100 may combine FIDO authentication with other authentication to provide multi-step authentication. For example, the server device 100 may combine FIDO authentication with password authentication to provide two-step authentication. Alternatively, the server device 100 may combine FIDO authentication with a secret question to provide two-step authentication.

In addition, in the above embodiment, the server device 100 may perform authentication using a combination of two or more of the three elements of authentication, namely, "knowledge information," "possession information," and "biometric information," in FIDO authentication. In other words, the server device 100 may employ multi-factor authentication (MFA).

In addition, in the above embodiment, when collecting the observation results of the authentication time observation script, the server device 100 may collect the results for each user attribute or segment. This is because there is a possibility that the authentication time may differ depending on the user attribute or segment.

In addition, in the above embodiment, the server device 100 may change the content of the incentive for each user segment when paying an incentive to a user for an effect. For example, the server device 100 may change the content of the incentive benefit depending on the grade of the user who uses the service.

7. Effects
As described above, the information processing device (server device 100) according to the present application includes a receiving unit 132 that receives a change in the authentication method from a user, and a providing unit 135 that provides the user with an incentive according to the effect or benefit resulting from the change in the authentication method.

The information processing device according to the present application further includes an estimation unit 133 that estimates in advance the effect or benefit that will be generated by changing the authentication method. The provision unit 135 presents an incentive to the user in advance according to the estimated effect or benefit, and suggests to the user to change the authentication method.

The providing unit 135 visualizes the estimated effect or benefit, presents it to the user, and suggests to the user to change the authentication method.

The estimation unit 133 estimates the cost of time required for authentication from the user's hourly wage or minimum wage as the effect or benefit resulting from changing the authentication method.

The estimation unit 133 estimates the time required for authentication after the change depending on the number and type of authentication as the effect or benefit resulting from the change in authentication method.

The estimation unit 133 estimates the benefit to the service provider from changing the authentication method as the effect or benefit resulting from changing the authentication method.

The estimation unit 133 estimates the benefits resulting from the change in authentication method, such as the benefits from reduced communication costs for the service provider, the power consumption or number of servers, or management costs.

The estimation unit 133 estimates the improvement of the conversion rate or the benefit of security measures as the effect or benefit resulting from changing the authentication method.

The information processing device according to the present application further includes a calculation unit 134 that calculates the effect or benefit actually generated by changing the authentication method. The provision unit 135 provides the user with an incentive according to the calculated effect or benefit.

The providing unit 135 holds a prize draw using an incentive according to the calculated effect or benefit, and provides the incentive to users who win the prize draw.

Another information processing device (terminal device 10) according to the present application includes a reception unit 34 that receives user operations, an acquisition unit 35 that acquires biometric information of the user while the user is performing operations other than authentication, and an authentication processing unit 36 that performs biometric authentication based on the user's biometric information.

The acquisition unit 35 acquires the user's biometric information during the process of requesting consent from the user. The authentication processing unit 36 performs biometric authentication based on the user's biometric information at the same time as the process of requesting consent from the user.

The acquisition unit 35 reads the user's fingerprint when scrolling to read the terms and conditions to which consent is required. The authentication processing unit 36 performs fingerprint authentication based on the user's fingerprint.

The acquisition unit 35 reads the veins of the user's finger or hand when scrolling to read the terms and conditions to which consent is required. The authentication processing unit 36 performs vein authentication based on the veins of the user's finger or hand.

The acquisition unit 35 reads the user's face while the user is looking at the screen to read the terms and conditions to which the user is asked to agree. The authentication processing unit 36 performs face authentication based on the user's face.

The acquisition unit 35 reads the user's iris while the user is looking at the screen to read the terms and conditions to which the user is asked to agree. The authentication processing unit 36 performs iris authentication based on the user's iris.

The acquisition unit 35 reads the characteristics of the user's movements when reading the terms and conditions to which consent is requested. The authentication processing unit 36 performs gesture authentication based on the characteristics of the user's movements.

The acquisition unit 35 picks up the voice when the terms and conditions to which consent is sought or predetermined keywords are read out. The authentication processing unit 36 performs voice authentication based on the user's voice.

The authentication processing unit 36 considers the act of the user giving consent itself to be a form of authentication.

The acquisition unit 35 acquires the user's biometric information via an external device while the user is performing operations other than authentication.

By using any one or a combination of the above processes, the information processing device according to the present application can further improve the efficiency of authentication.

8. Hardware Configuration
Moreover, the terminal device 10 and the server device 100 according to the above-described embodiment are realized by a computer 1000 having a configuration as shown in Fig. 11, for example. The server device 100 will be described below as an example. Fig. 11 is a diagram showing an example of a hardware configuration. The computer 1000 is connected to an output device 1010 and an input device 1020, and has a configuration in which a calculation device 1030, a primary storage device 1040, a secondary storage device 1050, an output I/F (Interface) 1060, an input I/F 1070, and a network I/F 1080 are connected by a bus 1090.

The arithmetic device 1030 operates based on programs stored in the primary storage device 1040 and the secondary storage device 1050, programs read from the input device 1020, and the like, and executes various processes. The arithmetic device 1030 is realized, for example, by a CPU (Central Processing Unit), an MPU (Micro Processing Unit), an ASIC (Application Specific Integrated Circuit), an FPGA (Field Programmable Gate Array), or the like.

The primary storage device 1040 is a memory device such as a RAM (Random Access Memory) that primarily stores data used by the arithmetic device 1030 for various calculations. The secondary storage device 1050 is a storage device in which data used by the arithmetic device 1030 for various calculations and various databases are registered, and is realized by a ROM (Read Only Memory), a HDD (Hard Disk Drive), a SSD (Solid State Drive), a flash memory, or the like. The secondary storage device 1050 may be an internal storage device or an external storage device. The secondary storage device 1050 may be a removable storage medium such as a USB (Universal Serial Bus) memory or a SD (Secure Digital) memory card. The secondary storage device 1050 may be a cloud storage device (online storage device), a NAS (Network Attached Storage), a file server, or the like.

The output I/F 1060 is an interface for transmitting information to be output to an output device 1010 that outputs various types of information, such as a display, projector, printer, etc., and is realized by a connector conforming to a standard such as USB (Universal Serial Bus), DVI (Digital Visual Interface), or HDMI (registered trademark) (High Definition Multimedia Interface). The input I/F 1070 is an interface for receiving information from various input devices 1020, such as a mouse, keyboard, keypad, button, scanner, etc., and is realized by a USB, etc.

In addition, the output I/F 1060 and the input I/F 1070 may be wirelessly connected to the output device 1010 and the input device 1020, respectively. That is, the output device 1010 and the input device 1020 may be wireless devices.

The output device 1010 and the input device 1020 may be integrated together, such as a touch panel. In this case, the output I/F 1060 and the input I/F 1070 may also be integrated together as an input/output I/F.

The input device 1020 may be a device that reads information from, for example, an optical recording medium such as a CD (Compact Disc), a DVD (Digital Versatile Disc), or a PD (Phase change rewritable Disk), a magneto-optical recording medium such as an MO (Magneto-Optical disk), a tape medium, a magnetic recording medium, or a semiconductor memory.

The network I/F 1080 receives data from other devices via the network N and sends it to the computing device 1030, and also transmits data generated by the computing device 1030 to other devices via the network N.

The arithmetic unit 1030 controls the output device 1010 and the input device 1020 via the output I/F 1060 and the input I/F 1070. For example, the arithmetic unit 1030 loads a program from the input device 1020 or the secondary storage device 1050 onto the primary storage device 1040 and executes the loaded program.

For example, when the computer 1000 functions as the server device 100, the arithmetic unit 1030 of the computer 1000 executes a program loaded onto the primary storage device 1040 to realize the functions of the control unit 130. The arithmetic unit 1030 of the computer 1000 may also load a program acquired from another device via the network I/F 1080 onto the primary storage device 1040 and execute the loaded program. The arithmetic unit 1030 of the computer 1000 may also cooperate with other devices via the network I/F 1080 and use the functions and data of a program by calling them from another program of the other device.

[9. Other]
Although the embodiments of the present application have been described above, the present invention is not limited to the contents of these embodiments. The above-described components include those that can be easily imagined by a person skilled in the art, those that are substantially the same, and those that are within the so-called equivalent range. Furthermore, the above-described components can be appropriately combined. Furthermore, various omissions, substitutions, or modifications of the components can be made without departing from the spirit of the above-described embodiments.

Furthermore, among the processes described in the above embodiments, all or part of the processes described as being performed automatically can be performed manually, or all or part of the processes described as being performed manually can be performed automatically using known methods. In addition, the information including the processing procedures, specific names, various data, and parameters shown in the above documents and drawings can be changed as desired unless otherwise specified. For example, the various information shown in each drawing is not limited to the information shown in the drawings.

In addition, each component of each device shown in the figure is a functional concept, and does not necessarily have to be physically configured as shown in the figure. In other words, the specific form of distribution and integration of each device is not limited to that shown in the figure, and all or part of them can be functionally or physically distributed and integrated in any unit depending on various loads, usage conditions, etc.

For example, the above-mentioned server device 100 may be realized by multiple server computers, and depending on the functions, the configuration can be flexibly changed, such as by calling an external platform using an API (Application Programming Interface) or network computing.

The above-described embodiments and variations can be combined as appropriate to the extent that they do not cause inconsistencies in the processing content.

The above-mentioned "section, module, unit" can be read as "means" or "circuit." For example, an acquisition unit can be read as an acquisition means or an acquisition circuit.

REFERENCE SIGNS LIST 1 Information processing system 10 Terminal device 33 Processing unit 34 Reception unit 35 Acquisition unit 36 Authentication processing unit 100 Server device 110 Communication unit 120 Storage unit 121 User information database 122 History information database 123 Authentication setting database 130 Control unit 131 Acquisition unit 132 Reception unit 133 Estimation unit 134 Calculation unit 135 Provision unit 200 Sensor device

Claims (12)

an acquisition unit that collects observation results of authentication times for each user and/or authentication method;
an estimation unit that estimates an expected effect of changing the authentication method based on the collected observation results;
a suggestion unit that presents the estimated effect to a user and suggests a change in the authentication method to the user;
a reception unit that receives an authentication context from an authentication device of the user , thereby confirming that the authentication device has successfully authenticated the user and that the user has agreed to a change in authentication method ;
A calculation unit that calculates an effect or benefit actually caused by the change in the authentication method;
a providing unit that provides the user with an incentive according to the calculated effect or profit;
An information processing device comprising: The estimation unit estimates in advance an effect or benefit that will be generated by changing the authentication method ,
The information processing device according to claim 1 , wherein the suggestion unit is configured to present an incentive to the user in advance according to the estimated effect or benefit, and to suggest to the user a change in the authentication method. The information processing device according to claim 1 , wherein the suggestion unit visualizes the estimated effect or benefit and presents it to the user, and suggests a change in the authentication method to the user. The information processing device according to claim 1 , wherein the estimation unit estimates a cost for a time required for authentication from an hourly wage or a minimum wage of the user as an effect or benefit resulting from the change in the authentication method. The information processing apparatus according to claim 1 , wherein the estimation unit estimates a time required for authentication after the change in the authentication method in accordance with the number and type of authentication as an effect or benefit resulting from the change in the authentication method. The information processing device according to claim 1 , wherein the estimation unit estimates a benefit to a service provider resulting from changing the authentication method as the effect or benefit resulting from changing the authentication method. The information processing device according to claim 1 , wherein the estimation unit estimates, as the effect or benefit resulting from the change in the authentication method, a benefit resulting from a reduction in communication costs on the service provider's side, power consumption or number of servers, or management costs. The information processing device according to claim 1 , wherein the estimation unit estimates an improvement in a conversion rate or a benefit from a security measure as the effect or benefit resulting from the change in the authentication method. the reception unit, while the user is reading the terms and conditions to which consent is sought for the change of authentication method, causes the authentication device to authenticate the user, and by receiving an authentication context from the authentication device, confirms that the authentication device has successfully authenticated the user and consented to the terms and conditions, and determines that the user has formally consented to the change of authentication method;
The calculation unit calculates an effect or benefit caused by the change of the authentication method,
The information processing apparatus according to claim 1 , wherein the providing unit provides the user with an incentive according to an effect or benefit resulting from the change in the authentication method . The information processing device according to claim 1 , wherein the providing unit holds a contest using an incentive according to the calculated effect or profit, and provides the incentive to a user who wins the contest. An information processing method executed by an information processing device,
an acquisition step of collecting observed results of authentication time for each user and/or authentication method;
an estimation step of estimating an expected effect of changing the authentication method based on the collected observation results;
a suggestion step of presenting the estimated effect to a user and suggesting a change in the authentication method to the user;
a receiving step of receiving an authentication context from the authentication device of the user to confirm that the authentication device has successfully authenticated the user and that the user has agreed to a change in authentication method ;
A calculation step of calculating the effect or benefit actually caused by the change in the authentication method;
providing an incentive to the user according to the calculated effect or profit;
13. An information processing method comprising: an acquisition step for collecting observations of authentication times for each user and/or authentication method;
an estimation procedure for estimating the expected effect of changing the authentication method based on the collected observations;
a proposal step of presenting the estimated effect to a user and proposing a change in the authentication method to the user;
an acceptance step of accepting an authentication context from the user 's authenticator to confirm that the authenticator has successfully authenticated the user and that the user has agreed to the change of authentication method ;
A calculation procedure for calculating the effect or benefit actually caused by the change in the authentication method;
a provision step of providing an incentive to the user according to the calculated effect or profit;
An information processing program characterized by causing a computer to execute the above.

Images