JP7716264B2 - Authentication System - Google Patents

Description

The present invention relates to a user authentication system for online meetings.

The use of online meetings has increased in recent years. When allowing those who wish to participate in such online meetings to do so, it is important to verify and authenticate the identity of participants. For example, in the case of meetings that require confidentiality, participants are limited to those with specific qualifications. Furthermore, when a pharmacy sells a specific drug online in person, it is necessary to prove the identity of the purchaser. Furthermore, online social gatherings that bring together fans of a specific person or organization, such as a celebrity, singer, sports team or player, may also require proof of identity of participants.

When a guest user who has not previously registered an account joins an online conference, a method is known in which, with the cooperation of a registered user, the unregistered user's participation is authenticated on the spot and the unregistered user is allowed to use the online conference system (see, for example, Patent Document 1).

The guest user uses the camera on their conference terminal (client terminal) to capture a QR code (registered trademark) displayed on the conference board in the real-world conference room or on an adjacent conference terminal of a registered user. The guest user decodes the QR code to obtain conference identification information and sends that conference identification information and the guest user's own user information to the conference server (web server). The conference server sends the guest user's information to the registered user's conference terminal and requests authentication. The registered user performs password authentication, fingerprint authentication, etc. on the guest user, determines whether to authorize or deny their participation in the conference, and reports the result to the conference server.

A remote pharmaceutical sales system is also known in which a pharmacist meets face-to-face with a purchaser via a networked video conferencing system to answer questions, decides on a recommended drug while viewing each other on screen, and delivers the drug directly to the purchaser without going through a third party (see, for example, Patent Document 2).

Medicine purchasers register in advance and possess an IC card that stores their personal information. Each time they purchase a medicine, they insert this IC card into the IC card slot of the pharmaceutical sales system to authenticate their identity. The personal information stored on the IC card includes the purchaser's name, date of birth (age), history of medications taken, medical records, chronic illnesses, address, mobile phone number, email address, height, weight, etc., and the purchaser's photograph can also be attached to the card itself.

Japanese Patent Application Laid-Open No. 2017-111608 JP 2013-109414 A

However, in systems such as those described in Patent Document 1, authentication is performed using passwords or fingerprints, which leaves the possibility of impersonation or counterfeiting low, making them less reliable. Furthermore, in systems using authentication using personal information stored on IC cards, such as those described in Patent Document 2, IC card readers are used in systems dedicated to pharmaceutical sales. Most general-purpose PC (personal computer) terminals used in regular online conferences are not equipped with IC card readers, and there is a problem in that if a borrowed PC with IC card reader functionality is used, the security of that PC cannot be guaranteed.

Generally, face-to-face identity verification is done by presenting identification documents that only the individual possesses, but physical documents, including photographs, can be forged. Furthermore, when these documents are presented in video form in online meetings, their credibility is even lower. Therefore, there is a need for a method of identity verification that is difficult to forge and whose authenticity can be guaranteed even online.

The present invention aims to solve the above problems by providing a user authentication system for online conferences that allows users to participate in conferences using general-purpose electronic devices as conference terminals and that can verify the identities of users participating in conferences with a high degree of reliability.

In order to achieve the above object, the user authentication system for an online conference according to the present invention comprises:
1. An authentication system for authenticating a user participating in a video-based online conference, comprising:
a client terminal used by the user to participate in the conference;
a web server that provides services related to the conference to participants of the conference;
the web server includes an application providing unit that provides an authentication application to the client terminal in an installable manner in response to access from the client terminal, and an authentication unit that authenticates the user;
the client terminal comprises: an IC data acquisition unit that acquires personal information including data of a facial photograph of the user from an IC card owned by the user; and a data transmission unit that transmits the personal information to the web server as identity verification data using the authentication application;
the authentication application operates the IC data acquisition unit and the data transmission unit,
The authentication unit of the web server receives the personal information sent from the client terminal and authenticates the user as the user of the client terminal to verify the user's identity.

In this authentication system,
the web server includes a code sending unit that sends a QR code in which a conference ID for identifying the conference is embedded to the client terminal in a displayable manner in response to access from the client terminal;
the client terminal includes an ID acquisition unit that acquires the conference ID from the QR code data transmitted from the web server;
the data transmission unit of the client terminal transmits the conference ID together with the personal information to the web server;
It is desirable that the authentication unit of the web server authenticates the user as a user of the client terminal and verifies the user's identity by receiving the conference ID in addition to the personal information sent from the client terminal.

In this authentication system,
1. An authentication system for authenticating a user participating in a video-based online conference, comprising:
a client terminal used by the user to participate in the conference;
a mobile terminal used by the user in combination with the client terminal;
a web server that provides services related to the conference to participants of the conference;
the web server includes an application providing unit that provides an authentication application to the mobile terminal in an installable manner in response to access from the mobile terminal, and an authentication unit that authenticates the user;
the mobile terminal comprises an IC data acquisition unit that acquires personal information including data of a facial photograph of the user from an IC card owned by the user, and a data transmission unit that transmits the personal information to the web server as identity verification data using the authentication application;
the web server includes a code sending unit that sends a QR code in which a conference ID for identifying the conference is embedded to the client terminal in a displayable manner in response to access from the client terminal;
the mobile terminal includes an ID acquisition unit that acquires the conference ID by capturing an image of the QR code displayed on the client terminal;
the authentication application operates the ID acquisition unit, the IC data acquisition unit, and the data transmission unit,
The ID acquisition unit of the mobile terminal acquires the conference ID,
The IC data acquisition unit of the mobile terminal acquires the personal information,
the data transmission unit of the mobile terminal transmits the conference ID together with the personal information to the web server;
It is desirable that the authentication unit of the web server authenticates the user as a user of the client terminal and verifies the user's identity by receiving the conference ID in addition to the personal information sent from the mobile terminal.

In this authentication system,
It is desirable that the web server includes a data distribution unit that distributes data of the user's facial photograph to a specified terminal used by the participants of the conference so that the participants of the conference can view the user's facial photograph on a screen.

In this authentication system,
It is desirable that the authentication unit of the web server is equipped with a face recognition unit that performs image processing using an AI function on the data of the user's face photo and the data of the user's face image in a video image sent from a specified terminal used by the user to verify the user's identity, and that the authentication process is performed based on the results of the identity verification by the face recognition unit.

In this authentication system,
The IC card is preferably a My Number card or an IC card on which an electronic certificate including the person's facial photograph data issued by a public personal authentication service is recorded.

With the authentication system of the present invention, the mobile terminal obtains personal information, including the user's facial photo data, from the IC card and transmits it to the web server as identity verification data, enabling the identity of the user requesting authentication to be verified with a high degree of reliability.

1 is a schematic diagram showing the configuration of a user authentication system for an online conference according to a first embodiment of the present invention; FIG. 2 is a block diagram illustrating the configurations and interrelationships of the client terminal, mobile terminal, and web server that make up the authentication system. FIG. 2 is a sequence diagram illustrating the operation of the authentication system. FIG. 10 is a diagram showing an example of a screen displayed on the screen of a client terminal of a user (B) other than the user (A) requesting authentication in the authentication system before authentication of the user (A). FIG. 5 is a diagram showing an example of a screen displayed on the screen of the client terminal of FIG. 4 after authentication of a user (A). FIG. 10 is a schematic diagram showing the configuration of a user authentication system for an online conference according to a second embodiment of the present invention. FIG. 2 is a block diagram illustrating the configurations and interrelationships of a client terminal, which is a mobile terminal, and a web server, which constitute the authentication system. FIG. 2 is a sequence diagram illustrating the operation of the authentication system. FIG. 10 is a schematic diagram showing the configuration of a user authentication system for an online conference according to a third embodiment of the present invention. FIG. 2 is a block diagram illustrating the configurations and interrelationships of a client terminal, which is a mobile terminal, and a web server, which constitute the authentication system. FIG. 2 is a sequence diagram illustrating the operation of the authentication system.

A user authentication system for online conferences (hereinafter referred to as the authentication system) according to a first embodiment of the present invention will be described below with reference to the drawings. In the following description, the term "online" means that participants in the conference meet face-to-face via images transmitted via data communication, and not face-to-face with live humans. Furthermore, a conference is not limited to a decision-making session involving multiple participants, but also includes the exchange of opinions and information, or even simply meeting face-to-face. Such conferences also include one-on-one meetings between two people. Online conferences include planning meetings, strategy meetings, board meetings, training sessions, lectures, and various other types of meetings held at companies, schools, and various organizations.

As shown in Figures 1 and 2, authentication system 10 is an authentication system that authenticates user A participating in a video-based online conference, and is configured with a client terminal 1A and a mobile terminal 3 that user A uses to participate in the conference, and a web server 2. In this authentication system 10, user A participating in the conference carries his or her own IC card 4, which is used as identification.

In this embodiment, users B, C, D, and E who participate in a conference using authentication system 10 participate using their respective client terminals 1B, 1C, 1D, and 1E. Each of users B, C, D, and E possesses a mobile terminal 3 and their own IC card 4. Each of client terminals 1A-1E (collectively referred to as client terminal 1), web server 2, and mobile terminal 3 are connected to network 9, enabling data communication.

Client terminal 1A is equipped with a browser 11 that displays the conference screen and the QR code 5 sent from web server 2. Client terminal 1A can be a general-purpose PC (personal computer) that has browser 11 functionality and can connect to network 9. In addition to displaying conference scenes and participant videos sent from other terminals, client terminal 1 is also equipped with a video camera consisting of a camera, microphone, speaker, etc. that captures images and audio so that users A to E can take their own images and send them to other client terminals 1.

The web server 2 is a server that provides conference-related services to users who are conference participants, and includes an application providing unit 21, a code sending unit 22, an authentication unit 23, and a data distribution unit 24.

The application providing unit 21 provides the authentication application 30 in an installable manner on the mobile device 3 in response to access from the mobile device 3.

In response to access from client terminal 1A, code sending unit 22 sends QR code 5, into which a conference ID that identifies the online conference is embedded, to client terminal 1A. The conference ID is not limited to information that identifies the online conference, but also includes information that identifies the user who has requested authentication to participate in the conference. Therefore, QR code 5 is a code unique to user A, who requested and received it.

The authentication unit 23 authenticates user A and client terminal 1A based on the data sent from the mobile terminal 3. By receiving personal information 3c and conference ID 3a sent from the mobile terminal 3, the authentication unit 23 authenticates user A as user A of client terminal 1A and verifies his or her identity.

The authentication unit 23 may optionally include a face recognition unit 23a that performs image processing using AI functions on user A's facial photograph data and user A's facial image data in video footage sent from a specific device used by user A to verify the identity of the user. Based on the identity verification results obtained by the face recognition unit 23a, the authentication unit 23 can perform authentication processing and authentication decisions more strictly and appropriately over time.

The data distribution unit 24 distributes data of User A's facial photo to the specified terminals used by the conference participants so that the conference participants can view User A's facial photo on their screens.

The mobile terminal 3 includes an ID acquisition unit 31, an IC data acquisition unit 33, and a data transmission unit 34. The mobile terminal 3 is a portable electronic device that has an imaging unit 32 (camera) and can connect to the network 9, such as a smartphone or tablet. Such a mobile terminal 3 includes a browser as a user interface.

An authentication application 30 downloaded from the web server 2 is installed on the mobile terminal 3. The authentication application 30 supports the user, processes data, and controls the hardware of the mobile terminal 3 to operate the ID acquisition unit 31, IC data acquisition unit 33, and data transmission unit 34.

The ID acquisition unit 31 captures the QR code 5 displayed on the client terminal 1A and acquires the conference ID.

The IC data acquisition unit 33 acquires personal information 3c, including data of user A's facial photograph, from the IC card 4 owned by user A. The IC data acquisition unit 33 reads or writes data from the IC chip built into the IC card 4 via near-field wireless communication (NFC).

The data transmission unit 34 transmits the conference ID 3a and personal information 3c as identity verification data 3b to the web server 2 using the authentication application 30.

IC card 4 is a card with a built-in IC chip that can be read and written via near-field communication (NFC). The IC chip of IC card 4 stores authentication information used to authenticate the owner, User A, such as an electronic certificate (user authentication certificate, electronic signature certificate) and image data of the owner's photo on the card face. For example, an individual number card (My Number Card) issued under the public personal authentication service and available at a city, ward, town, or village office can be used as IC card 4.

When the IC data acquisition unit 33 performs short-range wireless communication with the IC card 4, user A is required to enter a PIN code or the like. The fact that personal information or other data has been read from the IC card 4 means that a PIN code or the like that can only be known by the owner of the IC card 4 has been entered. Therefore, user A, who is the operator of the mobile terminal 3, is recognized as the owner of the IC card 4. User A's identity is also confirmed by the personal identification data 3b.

Facial photo data obtained from IC card 4 and included in identity verification data 3b can be displayed as a visually verifiable facial photo, and if IC card 4 is a My Number card, resident registration data (name, address, etc.) is included as official personal authentication, allowing for highly reliable identity verification.

Under the operation and control of authentication application 30, which is application software for authentication, the data in QR code 5 displayed on the screen of client terminal 1A is read, and the data in IC card 4 is read. Through these two operations, the two devices, client terminal 1A and mobile terminal 3, are associated, and the data between the devices is associated.

Next, with reference to Figures 1 and 2, as well as the operational sequence of Figure 3, we will explain the user authentication performed in authentication system 10 in chronological order. To participate in a conference after being authenticated by web server 2, user A of client terminal 1A uses mobile terminal 3 to request web server 2 to provide, via download, app 30 used for user authentication (S1).

When the mobile terminal 3 requests the application 30 to be downloaded, the application providing unit 21 of the web server 2 transmits the application 30 to the mobile terminal 3. The mobile terminal 3 then executes the download (S2). The application 30 is downloaded from the application providing unit 21 of the web server 2. Once the application 30 is installed on the mobile terminal 3, the ID acquisition unit 31, IC data acquisition unit 33, and data transmission unit 34 become operational (S3).

User A operates client terminal 1A to request authentication to participate in the conference from web server 2 (S4).

In response to access from the client terminal 1A, the code sending unit 22 of the web server 2 sends a QR code 5 with an embedded conference ID that identifies the online conference to the client terminal 1A (S5).

The QR code 5 is displayed on the screen of the client terminal 1A by the browser 11 (S6).

In response to an operation by user A, the mobile terminal 3 captures an image of the QR code 5 displayed on the screen of the client terminal 1A using the imaging means 32 (S7). The image data of the QR code 5 is decoded by the ID acquisition unit 31 of the mobile terminal 3, and the conference ID: 31a embedded in the QR code 5 is acquired (S8).

The IC data acquisition unit 33 of the mobile terminal 3 acquires personal information 3c, including data of User A's face photo, from the IC card 4 in response to User A's operation (S9).

In response to user A's operation, the data transmission unit 34 of the mobile terminal 3 transmits the conference ID 3a and personal information 3c as identity verification data 3b to the web server 2 (S10).

The authentication unit 23 of the web server 2 receives the identity verification data 3b (personal information 3c including facial photograph data and the conference ID: 3a) sent from the mobile terminal 3 and verifies the identity of User A as User A of the client terminal 1A. Furthermore, by performing person authentication based on the identity verification data 3b, the client terminal 1A is authorized to allow User A to participate in the conference (S11).

The authentication unit 23 of the web server 2 sends a notification to the client terminal 1A via the data distribution unit 24 or directly from the data distribution unit 24 that user A's participation in the conference has been authenticated (S12).

The data distribution unit 24 of the web server 2 distributes a notification to client terminals 1B-1E to notify other users B-E that user A's participation in the conference has been authenticated (S13). The client terminals 1B-1E to which this notification is distributed may or may not be limited to client terminals 1B of users who have been authenticated to participate in the online conference.

In addition, in conjunction with the delivery of the notification of user A's authentication, the data delivery unit 24 delivers data of user A's facial photograph to the specified terminals (client terminals 1B to 1E) used by the conference participants so that the conference participants can view user A's facial photograph on their screens.

In addition, from the time the authentication process for user A begins, the data distribution unit 24 may distribute notifications regarding the authentication process to the client terminals 1B-1E of other users B-E so that each user can view them at their own discretion (see Figures 4 and 5).

(Example of a client terminal screen)
4 and 5 show examples of the screen 6 of the client terminal 1B of a user B, who is different from the user A requesting authentication, before (FIG. 4) and after (FIG. 5) authentication after the start of the authentication process for user A. In this example, the screen 6 is divided into a large partial screen 61 on the left, a small screen on the lower right, and a small screen 63 on the upper right.

Such a screen is provided, for example, by accessing a homepage on the web server 2 regarding the authentication system 10 and the operation of video-based online conferences. The web server 2 may be configured with separate functions: a conference server that processes data and information related to the online conference itself and provides it to users, and an authentication server that handles authentication-related processes related to conference participants.

Partial screen 61 is a screen on which a video image of the face of user A requesting authentication is displayed. In the upper right corner of partial screen 61, a facial photo 6a obtained from user A's IC card 4 and sent is displayed in the top row, user A's name 6b in the middle row, and authentication status 6c regarding conference participation in the bottom row. In Figure 4, since authentication has not yet occurred, authentication status 6c is displayed as "Authentication: Not Yet", and in Figure 5 it is displayed as "Authentication: Completed".

Small screen 62 displays a photo of the face of user B of client terminal 1B displaying screen 6. Whether to display the face photo or another image on small screen 62 is optional and can be selected by user B. Small screen 63 displays a QR code 5 unique to user B, with the conference ID information embedded in it.

(User B requests authentication)
Next, focusing on screen 6 of client terminal 1, the authentication process sequence for user B, not user A, will be described. The configuration of screen 6 in Figures 4 and 5 can also be used as a screen for user B to proceed with the authentication process when user B is not yet authenticated and is not yet permitted to participate in the conference. First, a video-based online conference using online conference user authentication system 10 begins. Use of authentication system 10 does not require prior authentication, and access to web server 2 can be made from mobile terminal 4 and client terminal 1.

When User B starts the authentication process and steps (S1) to (S6) in Figure 3 are completed, User B's unique authentication QR code 5 is displayed on the small screen 63 of the screen 6 of client terminal 1B. When requesting this QR code 5 from the web server 2, User B enters his or her name in the application. Therefore, User B's name is displayed as the name 6b in the middle of the upper right corner of the partial screen 61 of the screen 6 of the client terminal 1 of a user other than User B, and "Authentication: Not yet" is displayed as the authentication status 6c in the lower line.

When a user wishes to be authenticated, the user captures their own authentication QR code 5 displayed on the screen with the mobile terminal 3, and the identifier (conference ID: 3a) contained in the QR code 5 is read by the ID reader 31 using the dedicated authentication app 30.

In addition, the IC card 4 held by user B is read by the IC data acquisition unit 33 using the authentication application 30, and personal information (face photo, name, address, etc.) contained on the IC card 4 is acquired.

User B's information is read from the IC card 4 by the data transmission unit 34 using the authentication application 30 and transmitted to the web server 2 along with an identifier (conference ID: 3a) and other information.

The web server 2 identifies the currently running conference using an identifier or the like, changes User B's status to authenticated, and displays User B's face photo 6a, name 6b, and authentication status 6c (i.e., "Authentication: Completed") on the screen 6 of other users who are viewing User B's video footage on the partial screen 61.

According to the authentication system 10 of this embodiment, a user seeking authentication acquires personal information, including data of the user's face photograph, from the user's IC card 4 using the mobile terminal 3 and transmits this information to the web server 2 as personal identification data, allowing the user to be authenticated with a high degree of reliability.

Furthermore, according to the authentication system 10, the system is configured to use facial photo data recorded on a counterfeit-resistant IC card. Therefore, even during the conference after participation has been authenticated, identity confirmation can be performed as needed in an online face-to-face state by comparing the facial photo based on the facial photo data submitted to the authentication unit 23 with the facial image in the video footage, thereby maintaining the safety of the conference. This identity confirmation through image comparison may be automated using image data matching technology.

Furthermore, according to authentication system 10, the system is composed of a combination of facial photo data recorded on a counterfeit-proof IC card and general-purpose electronic devices (a PC and a smartphone), making it possible to easily and inexpensively build an authentication system that authenticates user A participating in a video-based online conference while ensuring the reliability of authentication.

Second Embodiment
A user authentication system according to a second embodiment of the present invention will be described with reference to Figures 6, 7, and 8. As shown in Figures 6 and 7, in the authentication system 10 of this embodiment, a client terminal 1A used by user A to participate in a video-based online conference is configured as a mobile terminal. The client terminal 1A is configured as a smartphone, for example. Similarly to user A, a client terminal 1D of user D is also configured as a mobile terminal. Users B, C, and E are the same as those in the authentication system 10 of the first embodiment.

In the first embodiment of the authentication system 10, client terminal 1A is assumed to be a PC or the like used by user A, and mobile terminal 3 is assumed to be a smartphone or the like owned by user A. This is because, while many typical users use PCs for online conferences, general-purpose PCs do not have a configuration equivalent to the IC data acquisition unit 33, so personal information can be acquired using a smartphone equipped with this configuration. However, in recent years, it is not uncommon for users to participate in online conferences using only a smartphone without a PC. Therefore, in this embodiment, by using a smartphone equipped with a configuration equivalent to the IC data acquisition unit 33, the procedures previously performed using the combination of client terminal 1A and mobile terminal 3 described above are performed using a single client terminal 1A (mobile terminal). Therefore, in the description of the authentication system 10 of the first embodiment described above, mobile terminal 3 can be read as client terminal 1A.

As shown in Figure 8, the authentication processing sequence in the authentication system 10 of this embodiment is processing between the client terminal 1A, which is a mobile terminal, and the web server 2. In addition, the client terminal 1A, which is a mobile terminal, performs near-field wireless communication (NFC) with the IC card 4 to obtain the data required for authentication.

In contrast, in this embodiment, the QR code 5 sent from the web server 2 to the client terminal 1A and displayed on the screen does not need to be captured by the imaging means 32 (camera). Image data of the QR code 5 obtained using a print screen function or screen capture function is processed by the ID acquisition unit 31 to obtain the conference ID (S48). Alternatively, the ID acquisition unit 31, which is configured by installing the authentication application 30, may directly decode the data in the QR code 5 to obtain the conference ID. Other operations are the same as those of the authentication system 10 shown in the first embodiment above.

The mobile terminals that make up the authentication system 10 may be, for example, tablet-type portable electronic devices or may be connected to an auxiliary display device in order to view the meeting situation on a large screen.

(Third embodiment)
A user authentication system according to a third embodiment of the present invention will be described with reference to Figures 9, 10, and 11. As shown in Figures 9 and 10, the authentication system 10 of this embodiment is designed so that all users A to E participating in a video-based online conference use smartphones (mobile terminals) as client terminals 1.

In addition, in this embodiment, the conference ID information is sent directly to the ID acquisition unit 31 in the form of an encrypted code, rather than in the form of a QR code. Therefore, the QR code is not displayed on the client terminal 1, and the QR code is not photographed. As shown in FIG. 11, when the conference ID code is sent from the web server 2 (S25), the client terminal 1A acquires the received conference ID from the code, acquires personal information in the same manner as above (S29), and then transmits identity verification data including the conference ID to the web server 2 (S30). The other configurations and operations of each unit are the same as those described in the first and second embodiments above.

The present invention is not limited to the above configuration and can be modified in various ways. For example, the configurations of the above-described embodiments can be combined. The first and second embodiments are configured to obtain a conference ID from a QR code sent from the web server 2 to the client terminal 1, and the third embodiment is configured to send a conference ID code other than a QR code from the web server 2 to the client terminal 1. However, for example, a system using these in combination is also possible.

1, 1A, 1B, 1C, 1D, 1E Client terminal 10 Authentication system 11 Browser 2 Web server 21 Application supply unit 22 Code transmission unit 23 Authentication unit 23a Face recognition unit 24 Data distribution unit 3 Mobile terminal 3a Conference ID
3b Personal identification data 3c Personal information 30 Authentication application 31 ID acquisition unit 32 Imaging means 33 IC data acquisition unit 34 Data transmission unit 4 IC card 5 QR code (registered trademark)

Claims (6)

1. An authentication system for authenticating a user participating in a video-based online conference, comprising:
a client terminal used by the user to participate in the conference;
a web server that provides services related to the conference to participants of the conference;
the web server includes an application providing unit that provides an authentication application to the client terminal in an installable manner in response to access from the client terminal, and an authentication unit that authenticates the user;
the client terminal comprises: an IC data acquisition unit that acquires personal information including data of a facial photograph of the user from an IC card owned by the user; and a data transmission unit that transmits the personal information to the web server as identity verification data using the authentication application;
the authentication application operates the IC data acquisition unit and the data transmission unit,
An authentication system characterized in that the authentication unit of the web server authenticates the user as a user of the client terminal by receiving the personal information sent from the client terminal, thereby confirming the user's identity. the web server includes a code sending unit that sends a QR code in which a conference ID for identifying the conference is embedded to the client terminal in a displayable manner in response to access from the client terminal;
the client terminal includes an ID acquisition unit that acquires the conference ID from the QR code data transmitted from the web server;
the data transmission unit of the client terminal transmits the conference ID together with the personal information to the web server;
2. The authentication system according to claim 1, wherein the authentication unit of the web server authenticates the user as a user of the client terminal and verifies the user's identity by receiving the conference ID in addition to the personal information sent from the client terminal. 1. An authentication system for authenticating a user participating in a video-based online conference, comprising:
a client terminal used by the user to participate in the conference;
a mobile terminal used by the user in combination with the client terminal;
a web server that provides services related to the conference to participants of the conference;
the web server includes an application providing unit that provides an authentication application to the mobile terminal in an installable manner in response to access from the mobile terminal, and an authentication unit that authenticates the user;
the mobile terminal comprises an IC data acquisition unit that acquires personal information including data of a facial photograph of the user from an IC card owned by the user, and a data transmission unit that transmits the personal information to the web server as identity verification data using the authentication application;
the web server includes a code sending unit that sends a QR code in which a conference ID for identifying the conference is embedded to the client terminal in a displayable manner in response to access from the client terminal;
the mobile terminal includes an ID acquisition unit that acquires the conference ID by capturing an image of the QR code displayed on the client terminal;
the authentication application operates the ID acquisition unit, the IC data acquisition unit, and the data transmission unit,
The ID acquisition unit of the mobile terminal acquires the conference ID,
The IC data acquisition unit of the mobile terminal acquires the personal information,
the data transmission unit of the mobile terminal transmits the conference ID together with the personal information to the web server;
An authentication system characterized in that the authentication unit of the web server authenticates the user as a user of the client terminal and verifies their identity by receiving the conference ID in addition to the personal information sent from the mobile terminal. The authentication system described in any one of claims 1 to 3, characterized in that the web server is equipped with a data distribution unit that distributes data of the user's facial photo to a specified terminal used by the conference participants so that the conference participants can view the user's facial photo on their screen. The authentication system of any one of claims 1 to 4, characterized in that the authentication unit of the web server includes a face recognition unit that performs image processing using AI functions on the user's facial photo data and the user's facial image data in video footage sent from a specific terminal used by the user to verify the user's identity, and performs authentication processing based on the results of the identity verification by the face recognition unit. An authentication system according to any one of claims 1 to 5, characterized in that the IC card is a My Number card or an IC card issued by a public personal authentication service and recording an electronic certificate including the person's facial photograph data.