JP7757983B2 - Authentication server, system, authentication server control method and program - Google Patents

Description

The present invention relates to an authentication server, a system, a control method for an authentication server, and a recording medium.

In recent years, various services using biometric information have begun to become widespread. For example, facial recognition is used for various procedures at airports (check-in, baggage drop-off, etc.) and hotel check-ins. Various technological developments related to biometric authentication have been underway in recent years.

For example, Patent Document 1 states that it is possible to centralize the biometric information used for biometric authentication. The information processing terminal described in Patent Document 1 includes an acquisition unit that acquires biometric information for biometric authentication and identification information of the device to which the service is provided, and a transmission unit that transmits the identification information in response to successful biometric authentication.

Patent Document 2 describes how the system efficiently authenticates users when they perform various procedures. The authentication system in Patent Document 2 accesses a management device from the user's mobile terminal to perform initial registration, including a video image of the user. When the user uses a service at a financial institution or convenience store, the authentication system sends a video image to the management device, performs authentication processing according to the type of use, and notifies the user of the authentication result.

Patent Document 3 describes how the payment support server in Patent Document 3 makes shopping at duty-free facilities for foreign tourists efficient and comfortable. The payment support server in Patent Document 3 comprises a communications device, a storage device, and a computing device. The communications device communicates with other devices. The storage device stores the traveler's passport information, information on the means of transportation or facilities used during the trip, and biometric authentication information, all associated with each other. The computing device compares the traveler's biometric information included in the payment information received from the duty-free facility terminal with the biometric authentication information in the storage device that is associated with passport information and information on the means of transportation or facilities used, which indicates a predetermined validity. If biometric authentication information matching the biometric information is registered, the computing device returns payment permission information to the terminal.

International Publication No. 2018/096772 Japanese Patent Application Laid-Open No. 2020-113107 Japanese Patent Application Laid-Open No. 2017-123202

As mentioned above, technological developments related to biometric authentication have progressed in recent years, and a variety of services using biometric authentication are being provided to users. More specifically, private businesses such as accommodation providers and public institutions such as local governments are providing or considering providing services using biometric authentication.

Biometric authentication is achieved by comparing the biometric information of the person being authenticated with biometric information registered in a database, and the basic mechanism of authentication is the same whether the authenticator (authenticating entity; service provider) is a private business or a public institution. However, current authentication systems are often configured to be specialized for each business, which increases the hurdles to introducing biometric authentication.

The primary objective of the present invention is to provide an authentication server, system, authentication server control method, and recording medium that will contribute to the further spread of biometric authentication.

According to a first aspect of the present invention, an authentication server is provided, comprising: a database that stores, in association with each other, a user's biometric information, a first ID (identifier) that identifies a provider that provides a service to the user, a second ID that is uniquely determined by the combination of the user and the provider, and public information identification data that identifies public information the user has authorized to be provided; an authentication means that, upon receiving from a first provider an authentication request that includes the biometric information of the person to be authenticated and the first ID of the first provider, performs an authentication process and transmits the second ID of the person who is successfully authenticated to the first provider; and an information provision means that, upon receiving from a second provider a public information provision request that includes the biometric information of the user who wishes to access public information and the type of public information that the second provider wishes to access, uses the public information identification data to obtain the public information that the second provider wishes to access from a public server that stores the public information that the second provider desires to access, and transmits the obtained public information to the second provider.

According to a second aspect of the present invention, a system is provided, comprising: a first terminal installed at a first service provider; a second terminal installed at a second service provider; and an authentication server connected to the first and second terminals, wherein the authentication server comprises a database that stores, in association with each other, a user's biometric information, a first ID that identifies a service provider that provides services to the user, a second ID that is uniquely determined by the combination of the user and the service provider, and public information identification data for identifying public information the provision of which is permitted by the user; authentication means that, upon receiving from the first terminal an authentication request including the biometric information of the person to be authenticated and the first ID of the first service provider, performs an authentication process and transmits the second ID of the person who has been successfully authenticated to the first terminal; and information provision means that, upon receiving from the second terminal a public information provision request including the biometric information of the user whose public information the second service provider wishes to access and the type of public information the second service provider wishes to access, uses the public information identification data to obtain the public information the second service provider wishes to access from a public server that stores the public information, and transmits the obtained public information to the second terminal.

According to a third aspect of the present invention, there is provided a control method for an authentication server having a database that stores, in association with each other, a user's biometric information, a first ID that identifies a provider that provides a service to the user, a second ID that is uniquely determined by the combination of the user and the provider, and public information identification data that identifies public information that the user has authorized to be provided. In response to receiving an authentication request from a first provider that includes the biometric information of the person to be authenticated and the first ID of the first provider, the authentication server performs an authentication process, transmits the second ID of the person who has been successfully authenticated to the first provider, and, upon receiving from a second provider a public information provision request that includes the biometric information of the user who wishes to access public information and the type of public information that the second provider wishes to access, uses the public information identification data to obtain the public information that the second provider wishes to access from a public server that stores the public information that the user wishes to access, and transmits the obtained public information to the second provider.

According to a fourth aspect of the present invention, a computer-readable recording medium is provided that records a program to cause a computer installed in an authentication server having a database that stores, in association with each other, a user's biometric information, a first ID that identifies a provider that provides a service to the user, a second ID that is uniquely determined by the combination of the user and the provider, and public information identification data that identifies public information the user has authorized to be provided, to perform the following operations: upon receiving from a first provider an authentication request that includes the biometric information of the person to be authenticated and the first ID of the first provider, execute an authentication process, and transmit the second ID of the person who is successfully authenticated to the first provider; and, upon receiving from a second provider a public information provision request that includes the biometric information of the user who wishes to access public information and the type of public information that the second provider wishes to access, use the public information identification data to obtain the public information that the second provider wishes to access from a public server that stores the public information that the user wishes to access, and transmit the obtained public information to the second provider.

In accordance with each aspect of the present invention, an authentication server, a system, an authentication server control method, and a recording medium are provided that contribute to further popularizing biometric authentication. Note that the effects of the present invention are not limited to those described above. The present invention may achieve other effects instead of or in addition to the effects described above.

FIG. 1 is a diagram for explaining an overview of an embodiment. 1 is a diagram illustrating an example of a schematic configuration of an authentication system according to a first embodiment. FIG. 2 is a diagram for explaining the operation in a user registration phase of the authentication system according to the first embodiment. FIG. 10 is a diagram for explaining the operation in the service information registration phase of the authentication system according to the first embodiment. FIG. 10 is a diagram for explaining the operation of the authentication system according to the first embodiment in the public information provision permission phase. FIG. 2 is a diagram for explaining the operation of the authentication system according to the first embodiment in a service provision phase. FIG. 2 is a diagram for explaining the operation of the authentication system according to the first embodiment in a service provision phase. FIG. 2 is a diagram illustrating an example of a processing configuration of an authentication server according to the first embodiment. FIG. 2 is a diagram illustrating an example of a business information database according to the first embodiment. FIG. 2 is a diagram illustrating an example of a business information database according to the first embodiment. FIG. 2 is a diagram illustrating an example of a business information database according to the first embodiment. FIG. 2 is a diagram illustrating an example of a public information database according to the first embodiment. FIG. 2 is a diagram illustrating an example of a public information database according to the first embodiment. 10 is a flowchart illustrating an example of an operation of an authentication unit according to the first embodiment. 10 is a flowchart illustrating an example of an operation of a public information providing unit according to the first embodiment. FIG. 2 is a diagram illustrating an example of a processing configuration of a management server according to the first embodiment; FIG. 3 is a diagram illustrating an example of a user information database according to the first embodiment. FIG. 2 is a diagram illustrating an example of a processing configuration of an authentication terminal according to the first embodiment. FIG. 2 is a diagram illustrating an example of a processing configuration of a staff terminal according to the first embodiment. 5A and 5B are diagrams for explaining the operation of an information provision request unit according to the first embodiment; 5A and 5B are diagrams for explaining the operation of an information provision request unit according to the first embodiment; FIG. 4 is a diagram for explaining the operation of a message output unit according to the first embodiment. FIG. 2 is a diagram illustrating an example of a processing configuration of a terminal according to the first embodiment. FIG. 10 is a diagram for explaining the operation of a user support unit according to the first embodiment. FIG. 4 is a diagram for explaining the operation of a user registration support unit according to the first embodiment. FIG. 10 is a diagram for explaining the operation of a user registration support unit according to the first embodiment. FIG. 4 is a diagram for explaining the operation of a service registration support unit according to the first embodiment. FIG. 4 is a diagram for explaining the operation of a service registration support unit according to the first embodiment. FIG. 4 is a diagram for explaining the operation of a service registration support unit according to the first embodiment. FIG. 4 is a diagram for explaining the operation of a provision permission support unit according to the first embodiment. FIG. 4 is a diagram for explaining the operation of a provision permission support unit according to the first embodiment. FIG. 3 is a sequence diagram showing an example of an operation of the authentication system according to the first embodiment. FIG. 3 is a sequence diagram showing an example of an operation of the authentication system according to the first embodiment. FIG. 3 is a sequence diagram showing an example of an operation of the authentication system according to the first embodiment. FIG. 3 is a sequence diagram showing an example of an operation of the authentication system according to the first embodiment. FIG. 2 is a diagram illustrating an example of a hardware configuration of an authentication server disclosed herein. FIG. 10 is a diagram illustrating an example of an authentication information database according to a modified example of the present disclosure.

First, an overview of one embodiment will be described. Note that the reference numerals in this overview are added to each element for convenience as an example to aid understanding, and the description of this overview is not intended to be limiting in any way. Furthermore, unless otherwise specified, the blocks shown in each drawing represent functional units, not hardware units. Connection lines between blocks in each drawing include both bidirectional and unidirectional lines. Unidirectional arrows are used to schematically indicate the flow of the main signal (data) and do not exclude bidirectionality. Note that in this specification and drawings, elements that can be similarly described may be assigned the same reference numerals to avoid redundant explanation.

An authentication server 100 according to one embodiment includes a database 101, an authentication unit 102, and an information providing unit 103 (see FIG. 1). The database 101 stores, in association with each other, a user's biometric information, a first ID identifying a service provider providing services to the user, and a second ID uniquely determined by the combination of the user and the service provider. Furthermore, the database 101 stores, in association with each other, the user's biometric information, etc., and public information identification data for identifying public information the user has authorized to be provided. The authentication unit 102 executes an authentication process in response to receiving, from a first service provider, an authentication request including the biometric information of the person to be authenticated and the first ID of the first service provider, and transmits the second ID of the successfully authenticated person to the first service provider. The information providing unit 103 receives, from a second service provider, a public information provision request including the biometric information of the user whose public information the second service provider wishes to access and the type of public information desired to access. The information providing unit 103 acquires the public information that the user wishes to refer to from a public server that stores the public information by using the public information identification data, and transmits the acquired public information to the second business operator.

When authentication server 100 receives an authentication request from a first business (e.g., a private business), it transmits to the first business a second ID (service user ID) uniquely determined by the combination of the user and the business. The first business associates and stores the second ID with service information required to provide services to the user, thereby identifying the necessary service information based on the second ID obtained from authentication server 100. Furthermore, when authentication server 100 receives a request for public information from a second business (e.g., a public institution such as a city hall), it identifies the user through biometric authentication and obtains data (e.g., a passport number) for identifying the public information requested. Authentication server 100 obtains the corresponding public information (e.g., passport information) by transmitting the public information identification data to a public server that stores and manages the public information. Authentication server 100 then transmits the obtained public information to the second business. The second business can use the obtained public information to provide services to the user. In this way, the authentication server 100 processes requests from private businesses and public institutions by performing authentication and matching processes using the database 101. In other words, private businesses and public institutions do not need to build their own authentication systems, lowering the barrier to introducing biometric authentication. As a result, biometric authentication will become even more widespread.

Specific embodiments will be described in more detail below with reference to the drawings.
[First embodiment]
The first embodiment will be described in more detail with reference to the drawings.
[System configuration]
Fig. 2 is a diagram showing an example of a schematic configuration of an authentication system according to the first embodiment. As shown in Fig. 2, the authentication system includes at least one or more businesses, an authentication center, and a group of public servers.

Each business participating in the authentication system will provide services using biometric authentication.

The business operator (service provider) that provides services to users may be a private business operator or a public institution.

Examples of private businesses include retailers, accommodation providers, event companies, and medical institutions. For example, retailers may provide payment services using biometric authentication. Accommodation providers may use biometric authentication to manage check-in procedures and guest room entry and exit. Event companies may use biometric authentication to manage entry and exit to event venues.

Examples of public institutions include city halls, health centers, hospitals, etc. For example, biometric authentication is used when city hall employees verify the identity of users (residents). Biometric authentication may also be used to verify eligibility for benefits, etc.

The businesses disclosed in this application may be either private businesses or public institutions, as long as they can provide any service using biometric authentication.

As shown in Figure 2, each business has a variety of internal configurations. For example, the internal configuration of a business may be, as in the case of business S1, a configuration including a management server 20 and an authentication terminal 30.

The management server 20 is a server that controls and manages the overall business of the business. For example, if the business is a retail store, the management server 20 performs inventory management of products and payment processing.
Alternatively, if the business is an accommodation business, the management server 20 manages reservation information of guests.

In addition to the functions related to providing the above services, the management server 20 also has control and management functions related to user biometric authentication.

The authentication terminal 30 is a device (first terminal) that serves as an interface for users (customers) visiting the business. Users receive various services via the authentication terminal 30. For example, if the business is a retail store, users use the authentication terminal 30 to pay for their purchases. Alternatively, if the business is an accommodation business, users use the authentication terminal 30 to complete check-in procedures.

In the first embodiment, the authentication terminal 30 is described as a terminal used by the user himself (self-terminal). However, this is not intended to limit the manner in which the authentication terminal 30 is used; employees, staff, etc. of the business operator may use the authentication terminal 30 to provide services to users, or both users and employees may use the authentication terminal 30.

It is also possible for an operator to have an internal configuration that does not have a server installed, but instead has an employee terminal 31, such as operator S2 shown in Figure 2. For example, employee terminal 31 is a terminal (second terminal) installed at the reception desk of a city hall, hospital, etc. City hall employees provide services to users while operating employee terminal 31. For example, city hall employees use employee terminal 31 to confirm the service eligibility, etc., of users who wish to receive administrative services.

In the first embodiment, the staff terminal 31 is described as a terminal used by a third party other than the user. However, the staff terminal 31 can also be a terminal used by the user, similar to the authentication terminal 30, or a terminal used by both the user and staff, etc.

The authentication center provides authentication services and information provision services. An authentication server 10 is installed in the authentication center. The authentication server 10 operates as an authentication authority for authentication using biometric information. The authentication server 10 may be a server installed on the authentication center's premises, or a server installed on the cloud.

Examples of a user's biometric information include data (features) calculated from physical characteristics unique to an individual, such as the face, fingerprint, voiceprint, veins, retina, and iris pattern. Alternatively, the user's biometric information may be image data such as a face image or fingerprint image. The user's biometric information may be any information that includes the user's physical characteristics. In the first embodiment, a face image or features generated from a face image will be described as biometric information.

The authentication server 10 is a server device for realizing services based on biometric authentication. The authentication server 10 provides authentication services and information provision services to each business operator.

The public server group is a collection of servers (public servers) that handle public information. For example, the public server group includes a passport server 41 that stores and manages passport information and an insurance card server 42 that stores and manages insurance card information. Public servers are managed and operated by government agencies such as the Ministry of Foreign Affairs or by businesses commissioned by those agencies.

The devices shown in Figure 2 are connected to each other. For example, the authentication server 10 and the management server 20 are connected by wired or wireless communication means and are configured to be able to communicate with each other.

The configuration shown in FIG. 2 is an example and is not intended to limit the configuration of the authentication system disclosed herein. For example, the authentication center may include two or more authentication servers 10. Alternatively, the functions of the management server 20 and the authentication terminal 30 may be integrated, and services using biometric authentication may be provided by this single integrated device. Furthermore, each public server included in the public server group may handle two or more pieces of public information. For example, the passport server 41 and the health insurance card server 42 may be integrated, and this single integrated server may handle the public information of passports and health insurance cards.
[System Operation Overview]
Next, the general operation of the authentication system according to the first embodiment will be described.

The operation of the authentication system involves four phases.

The first phase is the phase in which users register in the system (user registration phase).

The second phase is the service information registration phase, in which information necessary for users to receive services, particularly service information necessary to receive services from private businesses, is registered in the system.

The third phase is the phase in which the authentication center registers (gives) the user's permission to provide the user's public information to the business operator (public information provision permission phase).

The fourth phase is a phase (service provision phase) in which each business provides users with services using biometric authentication. The service provision phase includes service provision using service information registered by users in the system and service provision using the users' own public information.
[User registration phase]
FIG. 3 is a diagram for explaining the operation in the user registration phase of the authentication system according to the first embodiment.

Users who wish to use services using biometric authentication must register in advance. The user then enters their biometric information (e.g., a facial image) and identity verification documents into the system. Note that identity verification documents that can be used in this disclosure are documents that contain biometric information, such as a passport or driver's license.

The user enters the above two pieces of information (biometric information and identity document) into the system using any means. For example, the user may mail a document containing the above two pieces of information to the authentication center, and an employee of the authentication center may enter the above two pieces of information into the authentication server 10. Alternatively, the user may mail an external storage device, such as a USB (Universal Serial Bus), on which the above two pieces of information are stored to the authentication center.

Alternatively, the user may input the above two pieces of information into the authentication server 10 using an application installed on the terminal 40. Examples of terminals 40 include mobile terminal devices such as smartphones, mobile phones, game consoles, and tablets, as well as computers (personal computers, laptops).

In the first embodiment, a case will be described in which a user performs the above-mentioned user registration, etc. using an application installed on terminal 40. In the following description, the above-mentioned application will be referred to as a "user assistance application" or simply an "assistance app." A user assistance application is an application that assists a user in entering information, etc., required when receiving services from a business operator.

The terminal 40 (support app) sends a "user registration request" to the authentication server 10, which includes the user's biometric information (e.g., a facial image) and identification documents (e.g., a copy of a passport).

For example, the authentication server 10 performs identity verification using the acquired facial image and the facial image printed on the passport (hereinafter referred to as the passport facial image). If the two facial images are essentially of the same person, the authentication server determines that identity verification has been successful.

If identity verification is successful, the authentication server 10 generates features (feature vectors consisting of multiple features) from the acquired facial image. The authentication server 10 then generates an ID (user ID) to uniquely identify the user.

The authentication server 10 associates the generated feature (biometric information) with the user ID and stores them in a database. More specifically, the authentication server 10 adds entries to both the business information database and the public information database, and stores the generated biometric information and user ID. In the first embodiment, the authentication server 10 manages the user's biometric information using two databases. However, the authentication server 10 may also manage the user's biometric information, authentication information, etc. using a database that integrates the two databases.

The business information database is a database required when processing authentication requests from businesses that use service information. Details of this database will be provided later. Service information is information required by businesses (especially private businesses) to provide services to users. Examples of service information include reservation information required by hotel businesses when providing accommodation services, and ticket information issued by event organizers.

The public information database is a database that stores biometric information and the information necessary to provide public information, in association with each other. Details of this database will be described later. Public information is information that is generated, issued, and managed by public institutions. Examples of public information include the information written on a passport or an insurance card.

The authentication server 10 also issues the generated user ID to the terminal 40. The terminal 40 (assistance application) stores the acquired user ID.
[Service information registration phase]
FIG. 4 is a diagram for explaining the operation in the service information registration phase of the authentication system according to the first embodiment.

A user who wishes to receive a service from a business operator registers service information in the system.
More specifically, the user selects a business from which the user wishes to receive services through biometric authentication, and registers the selected business and the service information to be used (referenced) by the business in the system.

For example, in Figure 2, if a user wishes to receive a service from business operator S1, the user registers business operator S1 and the service information required by business operator S1 in the system. For example, if business operator S1 is an accommodation business operator, the user registers in the system the fact that they will receive a service from the accommodation business operator (business operator S1) and the service information required by the accommodation business operator when providing the service (reservation information; name, date of stay, etc.).

In addition, the user will register the user ID issued during the user registration phase in the system along with the above service information.

In this disclosure, service information is defined as information that does not include the biometric information of the user (person to be authenticated). In other words, biometric information and features generated from that biometric information are excluded from the "service information" disclosed in this disclosure.

The user inputs the above two pieces of information (user ID, service information) to the business operator using any means. In the first embodiment, as shown in Figure 4, a case will be described in which the user operates the terminal 40 to input the above two pieces of information to the management server 20. In this case, the user inputs the above two pieces of information to the management server 20 via a support app installed on the terminal 40. Specifically, the terminal 40 sends a "service information registration request" including the user's user ID and service information to the management server 20.

The management server 20 receives a service information registration request that includes the above two pieces of information (user ID, service information). In response to receiving the service information registration request, the management server 20 sends a "business registration request" to the authentication server 10. Specifically, the management server 20 sends a business registration request that includes the user ID and business ID to the authentication server 10.

The business ID is identification information used to uniquely identify a business (an entity participating in an authentication infrastructure that uses biometric authentication) included in the authentication system. In the example of Figure 2, different business IDs are assigned to businesses S1 and S2.

Note that the business ID is an ID assigned to each business, not to each service. For example, in Figure 2, even if businesses S1 and S2 are businesses that provide the same type of service (e.g., accommodation services), if they are managed by different entities, they will be assigned different IDs.

The authentication server 10 and management server 20 share the business ID using any method. For example, when a business participates in the authentication infrastructure, the authentication server 10 generates a business ID and distributes (notifies) the generated servicer ID to the business.

When a business registration request is received, the authentication server 10 searches the business information database using the user ID included in the request as a key to identify the corresponding user. The authentication server 10 then generates a "service user ID."

A service user ID is identification information that uniquely defines the correspondence (combination) between a user and a business. For example, in the example of Figure 2, different values are generated for the service user ID determined from the combination of user U1 and business S1 and the service user ID determined from the combination of user U1 and business S2.

The authentication server 10 associates the user ID, biometric information (features), business ID, and the generated service user ID and stores them in the business information database.

The authentication server 10 sends the generated service user ID to the sender of the business registration request. The authentication server 10 sends a response including the service user ID to the management server 20 and issues the service user ID.

The management server 20 associates the service user ID obtained from the authentication server 10 with the service information obtained from the user and stores them. The management server 20 adds a new entry to the user information database and stores the above information (service user ID, service information).

The user repeats the above-described registration process for each business from which the user wishes to receive services using biometric authentication. In other words, the user does not need to register with businesses from which the user does not need to receive services. Furthermore, a user who does not plan to receive services from a business does not need to perform the service information registration phase.
[Public information provision permission phase]
FIG. 5 is a diagram for explaining the operation of the authentication system according to the first embodiment in the official information provision permission phase.

A user who consents to the provision of their public information (for example, passport details, health insurance card details) to a business operator consents to the provision of that public information to the system. More specifically, the user selects the type of public information (passport details, health insurance card details) that they consent to be provided. The user registers data (hereinafter referred to as "identifying public information data") to identify the type of public information (passport, health insurance card) they have selected in the system. For example, when consenting to the provision of their passport details to a business operator (third party), the user registers their passport number in the system as identifying public information data.

In addition, the user registers the user ID issued in the user registration phase in the system along with the above-mentioned public information identification data.

The user inputs the above two pieces of information (user ID, public information identification data) into the authentication server 10 using any means. In the first embodiment, as shown in Figure 5, a case will be described in which the user operates the terminal 40 to input the above two pieces of information into the authentication server 10. In this case, the user inputs the above two pieces of information into the authentication server 10 via a support app installed on the terminal 40. Specifically, the terminal 40 transmits a public information provision permission including the user ID and public information identification data to the authentication server 10.

Upon receiving a public information provision permission, the authentication server 10 searches the public information database using the user ID included in the permission as a key to identify the corresponding user.

The authentication server 10 associates the user ID, biometric information (features), and public information identification data (e.g., passport number) and stores them in a public information database.

Once the information has been registered in the public information database, the authentication server 10 sends a positive response to the terminal 40 indicating that the process has been completed successfully. If the information cannot be registered in the public information database, the authentication server 10 sends a negative response to the terminal 40 indicating that the process has not been completed successfully.

When the terminal 40 receives a response from the authentication server 10, it outputs a message or the like according to the content of the response.

Users who do not consent to their public information being provided to the business operator do not need to go through the public information consent phase.
[Service provision phase]
The service provision phase includes providing a service using service information and providing a service using public information.

First, we will explain the provision of services using service information. Figure 6 is a diagram for explaining the operation of the authentication system in the service provision phase of the first embodiment.

After completing the service information registration (service information registration phase), the user visits the business operator. The user moves to the authentication terminal 30.

The authentication terminal 30 acquires biometric information from the user in front of the user. Specifically, the authentication terminal 30 captures an image of the user and acquires a facial image. The authentication terminal 30 transmits the acquired facial image to the management server 20.

The management server 20 generates features from the acquired facial image. The management server 20 sends an authentication request including the generated features (biometric information) and the business ID to the authentication server 10.

The authentication server 10 extracts features from the authentication request and performs a matching process (1:N matching; N is a positive integer, same below) using the extracted features with features registered in the business information database.

The authentication server 10 identifies the user through a matching process and identifies the service user ID corresponding to the operator ID included in the authentication request from among the multiple service user IDs associated with the identified user.

The authentication server 10 sends the identified service user ID to the sender of the authentication request. The authentication server 10 sends a response (a positive response to the authentication request) including the identified service user ID to the management server 20.

The management server 20 searches the user information database using the acquired service user ID as a key and identifies the service information corresponding to the service user ID. The business operator (management server 20, authentication terminal 30) provides the user with a service (e.g., payment settlement, check-in procedures, etc.) based on the identified service information.

Next, we will explain the provision of services using public information. Figure 7 is a diagram for explaining the operation of the authentication system of the first embodiment in the service provision phase.

After completing the public information provision permission phase (public information provision permission phase), the user visits the business operator. The user moves to an area where an employee terminal 31 is located (for example, the reception area of a city hall, etc.). In that area, business operators' employees are present, and they use the employee terminal 31 to provide services to the user.

After listening to a user's story (request), staff members may decide that it is necessary to refer to the user's public information. For example, it may be determined that it is necessary to refer to public information to verify the user's identity or eligibility to receive government services. In this case, staff members operate staff terminal 31 to obtain the user's biometric information (facial image). Staff terminal 31 generates features from the facial image.

The employee also determines the type of official information to be referenced (e.g., passport, health insurance card). The employee operates the employee terminal 31 to send a "request for official information" including biometric information (features) and the type of official information (official document) to the authentication server 10.

The authentication server 10 extracts features from the public information provision request and performs a matching process (1:N matching) using the extracted features with features registered in the public information database.

The authentication server 10 identifies the user through a matching process and identifies public information identification data that is associated with the identified user and corresponds to the type of public information included in the public information provision request. For example, if a passport is requested from the staff terminal 31, the authentication server 10 reads the passport number from the public information database.

The authentication server 10 transmits the acquired public information identification data to a group of public servers. More specifically, the authentication server 10 transmits the identified public information identification data to the public server corresponding to the identified public information identification data. In the above passport example, the passport number is transmitted to the passport server 41.

The public server transmits public information corresponding to the acquired public information identification data to the authentication server 10. In the passport example above, the passport server 41 transmits the passport information (name, date of birth, nationality, passport facial image, etc.) corresponding to the acquired passport number to the authentication server 10.

When the authentication server 10 acquires public information from the public server group, it sends a response (positive response; response to the public information request) including the acquired public information to the staff terminal 31. If the authentication server 10 is unable to acquire public information from the public server group, it sends a negative response to that effect to the staff terminal 31.

The employee terminal 31 that has acquired the public information will take action such as displaying the acquired public information. Employees refer to the displayed public information and provide administrative services.

Next, each device included in the authentication system according to the first embodiment will be described in detail.
[Authentication Server]
Fig. 8 is a diagram showing an example of the processing configuration (processing modules) of the authentication server 10 according to the first embodiment. Referring to Fig. 8, the authentication server 10 includes a communication control unit 201, a user registration unit 202, a business registration unit 203, a specific data registration unit 204, an authentication unit 205, a public information provision unit 206, and a storage unit 207.

The communication control unit 201 is a means for controlling communication with other devices. For example, the communication control unit 201 receives data (packets) from the management server 20. The communication control unit 201 also transmits data to the management server 20. The communication control unit 201 passes data received from other devices to other processing modules. The communication control unit 201 transmits data obtained from other processing modules to other devices. In this way, other processing modules send and receive data with other devices via the communication control unit 201.

The user registration unit 202 is a means for realizing the above-mentioned user registration (user system registration). The user registration unit 202 acquires the biometric information (facial image) and identification documents of the user (a user who wishes to receive services using biometric authentication; a system user).

The user registration unit 202 acquires the above two pieces of information (biometric information, identification document) using any means. For example, the user registration unit 202 acquires the above two pieces of information by receiving a user registration request sent by the terminal 40.

When the user registration unit 202 acquires biometric information (facial image), it generates features (feature vectors consisting of multiple features) from the facial image.

Since existing technology can be used for the feature generation process, a detailed explanation will be omitted. For example, the user registration unit 202 extracts the eyes, nose, mouth, etc. from the facial image as feature points. The user registration unit 202 then calculates the position of each feature point and the distance between each feature point as feature amounts, and generates a feature vector (vector information that characterizes the facial image) consisting of multiple feature amounts.

The user registration unit 202 verifies that the generated features do not overlap with features that have already been registered. The user registration unit 202 performs a matching process (one-to-many matching) using the generated features and features registered in two databases (a service information database and a public information database). If the matching process fails, the user registration unit 202 determines that the above-mentioned overlap has not occurred.

If no duplication has occurred, the user registration unit 202 verifies the identity of the user. Specifically, the user registration unit 202 acquires a facial image for identity verification (hereinafter referred to as the verification facial image) from the identification document. The user registration unit 202 extracts the verification facial image from a specified area of the identification document using a technique such as template matching.

When verifying the user's identity, the user registration unit 202 performs one-to-one matching using the user's biometric information included in the user registration request and the biometric information obtained from the identification document. If the matching process is successful, the user registration unit 202 determines that the user's identity has been successfully verified.

Specifically, the user registration unit 202 generates features from each of the acquired face image and the verification face image. Next, the user registration unit 202 calculates the similarity between the two images. The user registration unit 202 performs threshold processing on the similarity and determines whether identity verification has been successful based on the result.

If the similarity is higher than the threshold, the user registration unit 202 determines that identity verification is successful. On the other hand, if the similarity is lower than the threshold, the user registration unit 202 determines that identity verification is unsuccessful.

If identity verification is successful, the user registration unit 202 generates a user ID to be assigned to the user (issued to the user). For example, the user registration unit 202 generates a user ID by assigning a unique value each time it processes a user registration request.

The user registration unit 202 stores the generated user ID and features in the business information database and the public information database.

More specifically, the user registration unit 202 adds a new entry to the two databases and stores the user ID and biometric information (features) in each database. For example, when registering user U1, the user registration unit 202 adds the entry shown in the bottom row of Figures 9A and 10A. Note that at the user registration stage, the business operator ID, service user ID, and public information identification data have not been entered into the system, so nothing is set in these fields.

The user registration unit 202 transmits a response to the user registration request to the terminal 40. When the user registration unit 202 stores the user ID and biometric information in the business information database and the public information database, it transmits an affirmative response to the terminal 40 indicating that the user registration was successful.
If the user ID and biometric information cannot be stored in the two databases, the user registration unit 202 transmits a negative response indicating that the user registration has failed to the terminal 40. For example, if the user has already been registered or if identity verification has failed, a negative response is transmitted to the terminal 40. The user registration unit 202 may transmit a negative response including the above-mentioned reason for the failure of the user registration to the terminal 40.

In this way, when the user registration unit 202 receives a user registration request including the user's biometric information and the user's identification document, it verifies the user's identity based on the identification document. The user registration unit 202 registers the biometric information and user ID (third ID) of the user whose identity has been successfully verified in the database. Furthermore, when the user registration unit 202 successfully verifies the user's identity, it issues the user ID to the user.

The business registration unit 203 is a means for processing business registration requests sent from each business and registering the business in the system. When the business registration unit 203 receives a business registration request including a business ID and a user ID from a first business (e.g., a private business), it generates a service user ID. The business registration unit 203 issues the generated service user ID to the first business.

The business registration unit 203 searches the business information database using the user ID included in the acquired business registration request as a key. The business registration unit 203 checks the business ID field of the user identified by the search.

The business registration unit 203 determines whether the business ID included in the business registration request acquired from the management server 20 is set in the business ID field. If the business ID acquired from the management server 20 is already registered in the business information database, the business registration unit 203 notifies the management server 20 of this. In this case, the service (business) that the user is attempting to register is already registered in the business information database, so the business registration unit 203 sends a "negative response" in response to the business registration request.

On the other hand, if the business ID included in the business registration request is not set in the business ID field of the identified user, the business registration unit 203 generates a service user ID corresponding to the user and business.

As described above, the service user ID is identification information that is uniquely determined from the combination of a user and a business. For example, the business registration unit 203 calculates a hash value using the user ID and the business ID, and sets the calculated hash value as the service user ID. Specifically, the business registration unit 203 calculates the concatenated value of the user ID and the business ID, and generates the service user ID by calculating the hash value of the calculated concatenated value.

Note that the generation of a service user ID using the above hash value is an example and is not intended to limit the method of generating a service user ID. The service user ID may be any information that can uniquely identify the combination of a system user and a business. For example, the business registration unit 203 may assign a unique value each time it processes a business registration request and use this as the service user ID.

When the service user ID is generated, the business registration unit 203 registers two IDs (business ID, service user ID) in the business information database. For example, when user U1 registers service information for business S1, the above two IDs are added to the entry shown in the bottom row of Figure 9B.

Since service information is registered for each provider, multiple provider IDs and service user IDs may be set for one user. For example, if user U1 registers service information for each of providers S1 and S2, the entries in the second and third lines of Figure 9C will be generated. Note that if user U2 registers service information for provider S1, the entry in the bottom row of Figure 9C will be generated.

After processing the business registration request, the business registration unit 203 sends a response to the request to the management server 20. Specifically, if the service user ID is successfully generated and stored in the business information database, the business registration unit 203 sends a positive response including the generated service user ID to the management server 20.

On the other hand, if a service user ID is not generated, the business registration unit 203 sends a negative response to the management server 20. At that time, the business registration unit 203 may send a negative response to the management server 20 that includes the reason why the business registration request was not processed normally (for example, business registration has already been completed).

The specific data registration unit 204 is a means for processing the public information provision permission sent from the user (terminal 40 held by the system user) and registering the public information specific data in the system. When the specific data registration unit 204 receives the public information provision permission including the user ID and public information specific data, it stores the public information specific data in the entry corresponding to the user ID.

The specific data registration unit 204 searches the public information database using the user ID included in the acquired public information provision permission as a key. If the search fails (the user ID is not registered in the public information database), the specific data registration unit 204 determines that the user ID is not registered in the system.

If the search is successful, the specific data registration unit 204 stores the public information specific data included in the acquired public information provision permission in the entry of the identified user. More specifically, the specific data registration unit 204 determines the public information corresponding to the data based on the public information specific data, and writes the public information specific data in the corresponding field of the public information database.
For example, when user U1 gives consent for the provision of information regarding the items written on his/her passport, the acquired passport number is written in the passport number field of the entry shown at the bottom of FIG. 10B.

Once the public information provision permission has been processed, the specific data registration unit 204 transmits a response to the permission to the terminal 40. Specifically, when the public information specific data has been stored in the public information database, the specific data registration unit 2034 transmits an affirmative response to the terminal 40 indicating that the permission has been processed successfully.

On the other hand, if the public information identification data is not stored in the public information database because the user ID acquired from terminal 40 is not registered in the public information database, for example, the identification data registration unit 204 sends a negative response to terminal 40. At that time, the identification data registration unit 204 may send a negative response to terminal 40 that includes the reason why the public information provision permission was not processed normally (for example, the user is not registered in the system, etc.).

The business information databases and public information databases shown in Figures 9A-9C, 10A-10B, etc. are examples and are not intended to limit the information stored in these databases. For example, facial images may be registered in each database instead of features for authentication. In other words, features may be generated from facial images registered in each database each time authentication is performed.

The authentication unit 205 is a means for processing authentication requests from businesses. The operation of the authentication unit 205 will be explained below with reference to the drawings. Figure 11 is a flowchart showing an example of the operation of the authentication unit 205 according to the first embodiment.

The authentication unit 205 extracts the features and provider ID contained in the authentication request. The authentication unit 205 searches the provider information database using the extracted features and provider ID as keys to identify the corresponding service user ID.

Specifically, the authentication unit 205 sets the features extracted from the authentication request as the features on the matching side and the features stored in the business information database as the features on the registration side, and performs one-to-many matching (step S101). At this time, the authentication unit 205 calculates the similarity between the features on the matching side and each of the multiple registration sides. The similarity can be calculated using a chi-squared distance, Euclidean distance, or the like. Note that the greater the distance, the lower the similarity, and the closer the distance, the higher the similarity.

The authentication unit 205 determines whether there is a feature among the multiple feature quantities registered in the business information database whose similarity with the feature quantity to be compared is equal to or greater than a predetermined value (step S102). If such a feature quantity does not exist (step S102, No branch), the authentication unit 205 sets the authentication result to "authentication failed" (step S103).

If such a feature exists (step S102, Yes branch), the authentication unit 205 identifies the entry (user) with the feature that has the highest similarity (step S104).The authentication unit 205 determines whether or not there is a business ID that matches the business ID included in the authentication request among at least one or more business IDs associated with the identified user.
That is, the authentication unit 205 determines whether the business ID acquired from the business is registered in the specified user (entry) in the business information database (step S105).

If the business ID is registered (step S105, Yes branch), the authentication unit 205 determines that the user authentication has been successful and sets the authentication result to "Authentication successful" (step S106). On the other hand, if the business ID is not registered (step S105, No branch), the authentication unit 205 sets the authentication result to "Authentication failed" (step S103).

The authentication unit 205 transmits the result of processing the authentication request to the management server 20 (step S107). If the authentication result is "authentication successful," the authentication unit 205 transmits a positive response to the management server 20, including the biometric information and the service user ID identified by the provider ID. If the authentication result is "authentication failed," the authentication unit 205 transmits a negative response to the management server 20.

For example, in the example of Figure 9C, if the feature "FV1" and the provider ID "S1" are included in the authentication request, the entries (users) in the second and third lines are identified by the feature FV1, and the entry in the second line is identified by the provider ID "S1." As a result, the authentication request is processed successfully, and a positive response including the service user ID "U1S1" is sent to the management server 20.

On the other hand, if the authentication request contains the feature "FV2" and the provider ID "S2," the feature will identify the bottom entry, but since the provider ID of that entry is "S1" and not "S2," the authentication request will not be processed successfully. As a result, a negative response will be sent to the management server 20.

In this way, the authentication unit 205 performs authentication processing in response to receiving an authentication request from a first business operator (e.g., a private business operator) that includes the biometric information of the person to be authenticated and the business operator ID (first ID) of the first business operator, and transmits the service user ID (second ID) of the person who has been successfully authenticated (the person to be authenticated who has been determined to have been successfully authenticated) to the first business operator. At that time, the authentication unit 205 performs one-to-N matching using the biometric information stored in the business operator information database and the biometric information of the person to be authenticated included in the authentication request. The authentication unit 205 determines that the authentication processing is successful when the business operator ID included in the authentication request is stored in the business operator information database in association with the user identified by the one-to-N matching.

The public information providing unit 206 is a means for processing public information requests from businesses and providing public information to the businesses. The operation of the public information providing unit 206 will be explained below with reference to the drawings. Figure 12 is a flowchart showing an example of the operation of the public information providing unit 206 according to the first embodiment.

The public information provision unit 206 extracts the features and public information type contained in the public information provision request. The public information provision unit 206 performs a matching process (1:N matching process) using the extracted features and features registered in the public information database (step S201).

The public information providing unit 206 determines whether there is a feature among the multiple feature quantities registered in the public information database whose similarity with the feature quantity to be compared is equal to or greater than a predetermined value (step S202). If such a feature quantity does not exist (step S202, No branch), the public information providing unit 206 sends a negative response to the staff terminal 31 indicating that the requested public information cannot be provided (step S203).

If such a feature exists (step S202, Yes branch), the public information providing unit 206 identifies the entry (user) with the feature that has the highest similarity (step S204). The public information providing unit 206 attempts to read a setting value from the public information identification data field of the identified entry that corresponds to the public information type of the public information provision request. That is, the public information providing unit 206 determines whether public information identification data corresponding to the public information type is registered for the identified user (entry) in the public information database (step S205).

If the public information identification data is not registered (step S205, No branch), the public information provision unit 206 sends a negative response to the staff terminal 31 indicating that the requested public information cannot be provided (step S203).

If public information identification data is registered (step S205, Yes branch), the public information providing unit 206 transmits the registered public information identification data to the corresponding public server in the public server group (step S206).

The public information providing unit 206 acquires public information (e.g., passport information) corresponding to the public information identification data from the public server (step S207). In response to acquiring the information, the public information providing unit 206 transmits a positive response including the requested public information to the staff terminal 31 (step S208).

For example, in the example of Figure 10B, if the feature "FV1" is included in the official information provision request, the feature FV1 identifies the final entry (user). Furthermore, if the official information type included in the official information provision request is "passport", corresponding official information identification data (passport number) exists, and the official information provision unit 206 can obtain the corresponding passport information by sending the passport number to the passport server 41. The official information provision unit 206 sends an affirmative response including the obtained passport information to the staff terminal 31.

On the other hand, when a request for public information is received in which the feature is "F1V" and the public information type is "health insurance card," the feature identifies the entry in the final row of Figure 10B. However, since the public information identification data (health insurance card number) corresponding to the health insurance card is not set in the entry in the final row, the public information provision unit 206 sends a negative response to the staff terminal 31 indicating that the public information cannot be provided.

In this way, the public information providing unit 206 receives a public information request from a second business (e.g., a city hall) that includes biometric information of a user for whom the second business wishes to view public information and the type of public information desired to be viewed. The public information providing unit 206 uses the public information identification data to obtain the public information desired to be viewed from a public server that stores the public information desired to be viewed. The public information providing unit 206 transmits the obtained public information to the second business. The public information providing unit 206 also identifies the user for whom the second business wishes to view public information (a user who visited a city hall, etc.) by performing one-to-many matching using the biometric information stored in the public information database and the biometric information included in the public information provision request. At this time, the public information providing unit 206 transmits to the public server, from among the multiple public information identification data of the identified user, the public information identification data that corresponds to the type of public information included in the public information provision request.

The storage unit 207 stores information necessary for the operation of the authentication server 10. An operator information database and a public information database are constructed in the storage unit 207. Using these two databases, the storage unit 207 stores the user's biometric information, an operator ID (first ID) that identifies the operator providing the service to the user, and a service user ID (second ID) that is uniquely determined by the combination of the user and the operator, in association with each other. Furthermore, the storage unit 207 stores the user's biometric information, etc., in association with public information identification data for identifying public information the user has authorized to be provided. The public information database can store multiple pieces of public information identification data for each user.
[Administration Server]
13 is a diagram showing an example of a processing configuration (processing modules) of the management server 20 according to the first embodiment. Referring to FIG. 13, the management server 20 includes a communication control unit 301, a service information acquisition unit 302, a service information registration unit 303, an authentication request unit 304, and a storage unit 305.

The communication control unit 301 is a means for controlling communication with other devices. For example, the communication control unit 301 receives data (packets) from the authentication server 10 and the authentication terminal 30. The communication control unit 301 also transmits data to the authentication server 10 and the authentication terminal 30. The communication control unit 301 passes data received from other devices to other processing modules. The communication control unit 301 transmits data obtained from other processing modules to other devices. In this way, other processing modules send and receive data to and from other devices via the communication control unit 301.

The service information acquisition unit 302 is a means for acquiring service information required by the business operator when providing a service. For example, if the business operator is a "retail store," the service information acquisition unit 302 acquires payment information (e.g., credit card information, bank account information) in addition to the user's name, etc. Alternatively, if the business operator is an "accommodation business operator," the service information acquisition unit 302 acquires reservation information related to accommodation (e.g., accommodation date, etc.) in addition to the user's name, etc.

In addition to the above name, etc., the service information acquisition unit 302 acquires the user ID issued when the user registers with the system.

The service information acquisition unit 302 acquires the user ID and service information using any means. In the first embodiment, the service information acquisition unit 302 acquires the above two pieces of information from a service information registration request sent by the terminal 40.

The service information acquisition unit 302 passes the acquired user ID and service information to the service information registration unit 303.

The service information registration unit 303 is a means for registering the acquired service information in the user information database.

The service information registration unit 303 sends a business registration request including the user ID and business ID acquired from the service information acquisition unit 302 to the authentication server 10.

The service information registration unit 303 obtains a response to the business registration request from the authentication server 10. If the obtained response is a "negative response," the service information registration unit 303 notifies the user of this. For example, the service information registration unit 303 sends a negative response (negative response to the service information registration request) to the terminal 40, including information that service registration has already been completed.

If the acquired response is an "affirmative response," the service information registration unit 303 sends an affirmative response to the service information registration request to the terminal 40. The service information registration unit 303 also registers the service user ID included in the response and the service information acquired from the service information acquisition unit 302 in the user information database. For example, when the management server 20 of business operator S1 processes a service information registration request from user U1, the entry shown in the bottom row of Figure 14 is added to the user information database.

The authentication request unit 304 is a means for requesting authentication of the user from the authentication server 10.

When the authentication request unit 304 acquires biometric information (facial image) from the authentication terminal 30, it generates features from the facial image. The authentication request unit 304 then transmits an authentication request including the generated features and the business ID to the authentication server 10.

If the response from the authentication server 10 is a "negative response" (authentication fails), the authentication request unit 304 notifies the authentication terminal 30 of this fact.

If the response from the authentication server 10 is a "positive response" (if authentication is successful), the authentication request unit 304 extracts the service user ID contained in the positive response from the authentication server 10. The authentication request unit 304 searches the user information database using the service user ID as a key and identifies the corresponding entry.

The authentication request unit 304 reads the service information set in the service information field of the identified entry and transmits it to the authentication terminal 30. For example, in the example of Figure 14, if the service user ID is "U1S1", the service information "SI01" in the bottom row is transmitted to the authentication terminal 30.

The storage unit 305 stores information necessary for the operation of the management server 20. A user information database is constructed in the storage unit 305.
[Authentication terminal]
15 is a diagram showing an example of the processing configuration (processing modules) of the authentication terminal 30 according to the first embodiment. Referring to Fig. 15, the authentication terminal 30 includes a communication control unit 401, a biometric information acquisition unit 402, a service providing unit 403, a message output unit 404, and a storage unit 405.

The communication control unit 401 is a means for controlling communication with other devices. For example, the communication control unit 401 receives data (packets) from the management server 20. The communication control unit 401 also transmits data to the management server 20. The communication control unit 401 passes data received from other devices to other processing modules. The communication control unit 401 transmits data obtained from other processing modules to other devices. In this way, other processing modules send and receive data with other devices via the communication control unit 401.

The biometric information acquisition unit 402 is a means for controlling the camera and acquiring the user's biometric information (facial image). The biometric information acquisition unit 402 captures an image of the area in front of the device periodically or at a predetermined timing. The biometric information acquisition unit 402 determines whether the acquired image contains a human facial image, and if a facial image is included, extracts the facial image from the acquired image data.

The facial image detection and extraction processes performed by the biometric information acquisition unit 402 can use existing technologies, so detailed explanations will be omitted. For example, the biometric information acquisition unit 402 may extract facial images (face regions) from image data using a learning model trained by a CNN (Convolutional Neural Network). Alternatively, the biometric information acquisition unit 402 may extract facial images using a technique such as template matching.

The biometric information acquisition unit 402 passes the extracted facial image to the service provision unit 403.

The service providing unit 403 is a unit that provides a predetermined service to a user. The service providing unit 403 transmits the face image acquired from the biometric information acquiring unit 402 to the management server 20.
The management server 20 returns service information corresponding to the facial image (for example, hotel reservation information including the user's name, etc.). The service providing unit 403 uses the returned service information to provide the user with a service.

A detailed description of the service providing unit 403 using the service information will be omitted. The service providing unit 403 simply performs processing according to the content of the service to be provided. For example, if the authentication terminal 30 is a check-in terminal installed in a hotel lobby, etc., the service providing unit 403 simply performs check-in processing according to the acquired reservation information (service information).

The message output unit 404 is a means for outputting various messages to the user.
For example, the message output unit 404 outputs a message regarding the authentication result of the user or a message regarding the provision of a service. The message output unit 404 may display the message using a display device such as a liquid crystal monitor, or may play an audio message using an audio device such as a speaker.

The storage unit 405 stores information necessary for the operation of the authentication terminal 30 .
[Staff terminal]
16 is a diagram showing an example of the processing configuration (processing module) of the staff terminal 31 according to the first embodiment. Referring to FIG. 16, the staff terminal 31 includes a communication control unit 501, an information request unit 502, a message output unit 503, and a storage unit 504.

The communication control unit 501 is a means for controlling communication with other devices. For example, the communication control unit 501 receives data (packets) from the authentication server 10. The communication control unit 501 also transmits data to the authentication server 10. The communication control unit 501 passes data received from other devices to other processing modules. The communication control unit 501 transmits data obtained from other processing modules to other devices. In this way, other processing modules send and receive data with other devices via the communication control unit 501.

The information provision request unit 502 is a means for requesting the authentication server 10 to provide information regarding the user's public information. The information provision request unit 502 displays a GUI (Graphical User Interface) for selecting the public information to be obtained from the authentication server 10 in response to operations by the business's staff, etc. For example, the information provision request unit 502 displays a GUI such as that shown in Figure 17. The information provision request unit 502 uses a GUI such as that shown in Figure 17 to obtain the type of public information (public information type) required when providing the service.

The information provision request unit 502 may change the options displayed in FIG. 17 depending on the location where its own device is installed, etc. For example, if the employee terminal 31 is a terminal installed in a local government such as a city hall, the information provision request unit 502 will display the option shown in FIG. 17. On the other hand, if the employee terminal 31 is a terminal installed in a private business, a display may be displayed that allows selection of documents necessary for the business of the private business. For example, if the employee terminal 31 is a terminal installed in a duty-free shop, only options related to passports may be displayed. Alternatively, when an employee performs an operation related to a request for public information, the information provision request unit 502 may automatically send a request for public information that has been predetermined.

In addition, the information provision request unit 502 acquires the user's biometric information before or after the selection of the above-mentioned public information. For example, the information provision request unit 502 acquires the user's biometric information (facial image) using a GUI such as that shown in FIG. 18. The camera provided on the staff terminal 31 (the camera connected to the staff terminal 31) is installed so that it can capture images of users who visit the staff. In addition, when the information provision request unit 502 acquires the user's facial image, it is desirable that it notify the user to that effect. The information provision request unit 502 generates features from the acquired facial image.

The information provision request unit 502 sends a public information provision request including the acquired public information type and the generated features to the authentication server 10.

The information provision request unit 502 passes the response (response to the public information provision request) obtained from the authentication server 10 to the message output unit 503.

The message output unit 503 is a means for outputting various messages to staff members and the like.
If a negative response is received from the authentication server 10, the message output unit 503 notifies the staff member or the like that acquisition of the official information has failed.

When a positive response is received from the authentication server 10, the message output unit 503 outputs the public information included in the positive response. For example, the message output unit 503 displays the information as shown in FIG. 19.

The storage unit 504 stores information necessary for the operation of the staff terminal 31 .
[Device]
20 is a diagram illustrating an example of a processing configuration (processing module) of the terminal 40 according to the first embodiment. Referring to FIG. 20, the terminal 40 includes a communication control unit 601, a user support unit 602, and a storage unit 603.

The communication control unit 601 is a means for controlling communication with other devices. For example, the communication control unit 601 receives data (packets) from the authentication server 10. The communication control unit 601 also transmits data to the authentication server 10. The communication control unit 601 passes data received from other devices to other processing modules. The communication control unit 601 transmits data obtained from other processing modules to other devices. In this way, other processing modules send and receive data with other devices via the communication control unit 601.

The user support unit 602 is a means of supporting users who wish to receive services through biometric authentication.

The user support unit 602 starts operating when the support app installed on the terminal 40 is launched. Once the user support unit 602 has started operating, it displays a menu (GUI display) as shown in Figure 21 and obtains the operation desired by the user.

The user support unit 602 has sub-modules consisting of a user registration support unit 611, a service registration support unit 612, and a provision permission support unit 613.

The user registration support unit 611 is activated in response to the selection of "User Registration" shown in Figure 21. The user registration support unit 611 is a means of supporting (realizing) user system registration.

User registration requires users to enter their biometric information and identity documents into the system.
The user registration support unit 611 displays a GUI for acquiring this information.

For example, the user registration support unit 611 displays a GUI such as that shown in Figure 22. For example, the user presses the "Select File" button shown in Figure 22 and specifies the image data of the facial image to be registered in the system. The specified facial image is displayed in the preview area (displayed as selected facial image in Figure 22). When registering the previewed facial image, the user presses the "Confirm" button.

Following the acquisition of the facial image, the user registration support unit 611 acquires the identification document. For example, the user registration support unit 611 displays a GUI such as that shown in FIG. 23. For example, the user captures an image of the identification document using the camera of the terminal 40. The user presses the "Select File" button and specifies the image of the captured identification document. The user then presses the "Enter" button and enters the identification document.

Examples of identity verification documents that can be registered in the system include documents containing a facial image, such as a passport or driver's license (documents issued by a public institution that can be used to verify identity). Identification documents also include electronic documents as well as paper documents.

The user registration support unit 611 sends a user registration request including the acquired biometric information (facial image) and identification documents to the authentication server 10.

When a positive response (a response indicating that user registration has been successfully completed) is received from the authentication server 10, the user registration support unit 611 stores the user ID contained in the positive response in the memory unit 603.

In addition, the user registration support unit 611 outputs a message or the like in response to the response (positive response, negative response) received from the authentication server 10.

The service registration support unit 612 is activated in response to the selection of "Service Information Registration" shown in Figure 21. The service registration support unit 612 is a means of supporting (realizing) the user's registration of service information.

The service registration support unit 612 displays the business types of businesses participating in the system, allowing users to select the business type in which they wish to receive services. For example, the service registration support unit 612 displays a GUI such as that shown in FIG. 24, allowing users to select the type of service they wish to receive.

The service registration support unit 612 then displays a GUI that allows the user to select a specific business (service provider). For example, if the user selects "hotel" in Figure 24, the service registration support unit 612 displays a GUI such as that shown in Figure 25. The service registration support unit 612 uses a GUI such as that shown in Figure 25 to obtain information about the business that the user wishes to use (the business that will register service information) from among the businesses participating in the authentication infrastructure.

The service registration support unit 612 obtains service information according to the provider selected by the user. For example, if the user selects a hotel provider, the service registration support unit 612 displays a GUI for obtaining hotel reservation information (see Figure 26).

The service registration support unit 612 sends a service information registration request including the service information acquired using a GUI such as that shown in FIG. 26 and the user's user ID (user ID issued by the authentication server 10) to the management server 20 of the provider selected by the user. For example, in the example of FIG. 2, if the user wishes to receive a service from provider S1, the service registration support unit 612 sends a service information registration request to the management server 20 of provider S1. The service registration support unit 612 determines the management server 20 to which the service information registration request will be sent by referring to table information, etc., which associates the provider selected using a GUI such as that shown in FIG. 25 with the address of the provider's management server 20.

The service registration support unit 612 determines the service information to be acquired by referring to information that associates the selected business with the service information to be acquired. Alternatively, the service registration support unit 612 may inquire about the items to be acquired from the management server 20 of the business selected by the user, or may acquire an input form for entering service information. In the above example, after the user selects business S1, the service registration support unit 612 may obtain the items to be acquired, an input form, etc. from the management server 20 of business S1.

In addition, the service registration support unit 612 outputs messages etc. in response to the response (positive response, negative response) received from the management server 20.

The provision permission support unit 613 is activated in response to the selection of "Public Information Provision Permission" shown in Figure 21. The provision permission support unit 613 is a means for supporting (realizing) the user's permission to provide public information.

The provision permission support unit 613 displays a GUI that allows the user to select the public information for which they wish to consent to provision. For example, the provision permission support unit 613 displays a GUI such as that shown in FIG. 27.

When the public information (public information type) to be provided is selected, the provision permission support unit 613 displays a GUI for inputting public information identification data corresponding to the public information. For example, the provision permission support unit 613 obtains the public information identification data using a GUI such as that shown in FIG. 28.

The provision permission support unit 613 sends a public information provision permission including the user's user ID and public information identification data to the authentication server 10.

The provision permission support unit 613 outputs a message or the like in response to the response (positive response, negative response) received from the authentication server 10.

The storage unit 603 is a means for storing information necessary for the operation of the terminal 40 .
[Public Server]
A description of the internal configuration of the public server will be omitted. The public server only needs to have a database that stores public information identification data in association with public information. The public server searches the database using the public information identification data as a key and transmits the corresponding public information to the authentication server 10.
[System Operation]
Next, a description will be given of the operation of the authentication system according to the first embodiment. Note that the operation will be described for the service information registration phase, the official information provision permission phase, and the service provision phase, and a description of the user registration phase will be omitted.

Figure 29 is a sequence diagram showing an example of operation related to the service information registration phase of the authentication system related to the first embodiment.

The management server 20 obtains service information (information necessary to provide the service) and user ID from the user (terminal 40) (step S01).

The management server 20 sends a business registration request including the acquired user ID and business ID to the authentication server 10 (step S02).

The authentication server 10 generates a service user ID using the acquired user ID and business ID (step S03).

The authentication server 10 stores the business ID and service user ID in the business information database (step S04).

The authentication server 10 sends a response (positive response to the business registration request) including the service user ID to the management server 20 (step S05).

The management server 20 associates the service information obtained in step S01 with the service user ID obtained from the authentication server 10 and stores them in the user information database (step S06).

Figure 30 is a sequence diagram showing an example of operation related to the public information provision permission phase of the authentication system related to the first embodiment.

The terminal 40 uses a GUI or the like to obtain the type of public information and public information specific data that the user consents to be provided (step S11).

The terminal 40 transmits a public information provision permission including the user's user ID and public information identification data to the authentication server 10 (step S12). The terminal 40 may also transmit a public information provision permission including the public information type to the authentication server 10. In other words, the terminal 40 may explicitly indicate to the authentication server 10 the type of public information that the user has permitted to be provided.

The authentication server 10 identifies the user who consents to the provision of information based on the user ID (step S13).

The authentication server 10 stores the public information identification data in the public information identification field of the identified user (step S14).

The authentication server 10 sends a positive response to the public information provision permission to the terminal 40 (step S15).

The terminal 40 displays a message or the like according to the response obtained (step S16).

Figure 31 is a sequence diagram showing an example of operation related to the service provision phase of the authentication system according to the first embodiment. With reference to Figure 31, the system operation when a service is provided using service information will be explained.

The authentication terminal 30 acquires the user's facial image (biometric information) and transmits the acquired facial image to the management server 20 (step S21).

The management server 20 generates features from the acquired facial image (step S22).

The management server 20 sends an authentication request including the generated features and the business ID to the authentication server 10 (step S23).

The authentication server 10 performs authentication processing using the features and business ID contained in the authentication request and identifies the corresponding service user ID (step S24).

The authentication server 10 sends a positive response including the identified service user ID to the management server 20 (send service user ID; step S25).

The management server 20 searches the user information database using the acquired service user ID and identifies the corresponding service information (step S26).

The management server 20 sends the identified service information to the authentication terminal 30 (step S27).

The authentication terminal 30 provides the service using the acquired service information (step S28).

Figure 32 is a sequence diagram showing an example of operation related to the service provision phase of the authentication system related to the first embodiment. With reference to Figure 32, we will explain the system operation when a service is provided using public information.

In response to operations by staff or other personnel, the staff terminal 31 acquires the user's (user receiving the service) biometric information (facial image) and the type of public information to be referenced (step S31). The staff terminal 31 generates features from the facial image.

The staff terminal 31 sends a request for public information provision including the user's characteristics and the type of public information to the authentication server 10 (step S32).

The authentication server 10 performs a matching process using the features contained in the public information provision request and identifies the corresponding user (step S33).

The authentication server 10 reads out from the public information database the public information identification data of the identified user that corresponds to the type of public information included in the public information provision request (acquisition of public information identification data; step S34).

The authentication server 10 transmits the acquired public information identification data to the corresponding public server (step S35).

The public server reads the public information corresponding to the received public information identification data from the database and transmits the public information to the authentication server 10 (step S36).

The authentication server 10 sends a positive response to the public information provision request, including the public information, to the staff terminal 31 (sending public information; step S37).

The employee terminal 31 outputs the received public information (step S38). For example, the employee terminal 31 presents the acquired public information to the employee.

As described above, in the authentication system according to the first embodiment, the authentication server 10 can process requests from private businesses and public institutions. In other words, both private businesses and public institutions can easily use biometric authentication without having to build their own authentication systems. Specifically, when providing a service, private businesses (service providers using service information) simply acquire the user's user ID and service information and request business registration from the authentication server 10. By outsourcing the actual processing of biometric authentication to an authentication center, private businesses can easily provide services using biometric authentication. Similarly, when providing a service, public institutions (service providers using public information) simply request permission from the user to provide public information in advance. By notifying the authentication server 10 of the user's biometric information and necessary public information, public institutions can access the user's public information without actually performing the biometric authentication processing. Furthermore, by registering in advance in the system the public information (public information specific data; for example, a passport number) for which users consent to the provision of information, they can receive administrative services from public institutions even if they do not carry official documents (identification documents; a passport, etc.). Furthermore, since users can select the public information for which they consent to the provision of information, flexible consent to the provision of information can be given according to the nature of the public information, etc.

Furthermore, the user's biometric information is stored in the authentication server 10, and each business does not possess this biometric information. The user's service information (personal information such as name) is stored in the management server 20 managed and operated by the business, and the authentication server 10 does not possess this service information. By distributing information in this manner, the authentication system according to the first embodiment provides an authentication infrastructure that is robust against information leaks. In other words, biometric information (especially feature values) that is not linked to service information is simply a list of numbers and is of little value to criminals and others. Therefore, even if information leaks from the authentication server 10, the impact is limited. Furthermore, the authentication server 10 does not store the actual content of public information related to each user. Because the authentication server 10 retrieves public information from the corresponding public server each time it is needed, the possibility of public information leaking from the authentication server 10 is low. The configuration of the authentication system according to the first embodiment allows participants in the authentication system (users receiving services and businesses providing services) to use the authentication system with peace of mind.

Next, we will explain the hardware of each device that makes up the authentication system. Figure 33 is a diagram showing an example of the hardware configuration of the authentication server 10.

The authentication server 10 can be configured as an information processing device (so-called a computer) and has the configuration shown in Figure 33. For example, the authentication server 10 includes a processor 311, memory 312, an input/output interface 313, and a communication interface 314. The components such as the processor 311 are connected by an internal bus or the like and are configured to be able to communicate with each other.

However, the configuration shown in Figure 33 is not intended to limit the hardware configuration of the authentication server 10. The authentication server 10 may include hardware not shown, and may not have an input/output interface 313 if necessary. Furthermore, the number of processors 311, etc. included in the authentication server 10 is not intended to be limited to the example shown in Figure 33; for example, the authentication server 10 may include multiple processors 311.

Processor 311 is a programmable device such as a CPU (Central Processing Unit), MPU (Micro Processing Unit), or DSP (Digital Signal Processor). Alternatively, processor 311 may be a device such as an FPGA (Field Programmable Gate Array) or ASIC (Application Specific Integrated Circuit). Processor 311 executes various programs including an operating system (OS).

Memory 312 is RAM (Random Access Memory), ROM (Read Only Memory), HDD (Hard Disk Drive), SSD (Solid State Drive), etc. Memory 312 stores the OS program, application programs, and various data.

The input/output interface 313 is an interface for a display device and an input device (not shown). The display device is, for example, an LCD display. The input device is, for example, a device that accepts user operations such as a keyboard or mouse.

The communication interface 314 is a circuit, module, etc. that communicates with other devices. For example, the communication interface 314 includes a NIC (Network Interface Card), etc.

The functions of the authentication server 10 are realized by various processing modules. The processing modules are realized, for example, by the processor 311 executing a program stored in the memory 312. The program can be recorded on a computer-readable storage medium. The storage medium can be a non-transitory medium such as a semiconductor memory, a hard disk, a magnetic recording medium, or an optical recording medium. In other words, the present invention can also be embodied as a computer program product. The program can be downloaded via a network or updated using a storage medium that stores the program. Furthermore, the processing modules may be realized by a semiconductor chip.

In addition, the management server 20, authentication terminal 30, staff terminal 31, terminal 40, etc. can also be configured using information processing devices, just like the authentication server 10, and their basic hardware configuration is no different from that of the authentication server 10, so explanations will be omitted. For example, the authentication terminal 30 may be equipped with a camera for capturing images of users.

The authentication server 10 is equipped with a computer, and the computer executes a program to realize the functions of the authentication server 10. The authentication server 10 also executes a control method for the authentication server by the program.
[Modification]
The configuration, operation, etc. of the authentication system described in the above embodiment are merely examples, and are not intended to limit the configuration, etc. of the system.

In the above embodiment, the authentication server 10 has been described as having a business information database and a public information database. However, these databases may be constructed on a database server different from the authentication server 10. Furthermore, the authentication system may include the various means (authentication unit 205, public information provision unit 206, etc.) described in the above embodiment.

In the above embodiment, a case has been described in which two databases are used to store and manage a user's biometric information, etc. However, the authentication server 10 may also manage a user's biometric information, etc. using a database that integrates the two databases. For example, the authentication server 10 may perform biometric authentication and provide information using an authentication information database (corresponding to database 101) such as that shown in FIG. 34.

In the above embodiment, it has been described that information is provided for official documents (passports, health insurance cards) issued domestically, but the information provided is not limited to documents issued by domestic public institutions. That is, official information regarding official documents issued by foreign public institutions may be provided from the authentication system. Even in this case, it is sufficient that official information identification data corresponding to the foreign official information is registered in the authentication system. Furthermore, from a similar perspective, the users of the present disclosure may be not only Japanese people but also foreigners.
In the above embodiment, the operation of the authentication system was described using a public institution as an example of the entity requesting the provision of official information. However, the entity requesting the provision of official information may also be a private business. For example, when a duty-free shop checks a customer's passport, the request for official information described in the above embodiment may be sent to the authentication server 10 from a terminal of the duty-free shop (a terminal corresponding to the staff terminal 31).

In addition, a public institution may provide a service using the service information. For example, hospital reservation information may be registered as service information at the hospital, and the reservation information may be identified using the biometric authentication described in the above embodiment.

In the above embodiment, it was explained that when a user registers, the authentication server 10 generates a user ID and issues the generated user ID to the user. However, the user ID may be determined by the user and entered by the user into the system. For example, the ID, password, or a combination of these used by the user to log in to the authentication server 10 may be used as the user ID.

In the above embodiment, it has been described that the user registration phase and the service information registration phase are executed at different times, but these phases may also be executed at substantially the same time. For example, the above two registration phases may be executed using an authentication terminal 30 installed at the business operator to which the user wishes to provide services. Specifically, the user may use the authentication terminal 30 to perform user registration (input of biometric information and identification documents), and then subsequently register service information (input of user ID and service information).

Similarly, the user registration phase and the public information provision consent phase may be executed at substantially the same time. The user may operate the terminal 40 to input biometric information, identification documents, and the type of public information consented to be provided to the authentication server 10.

In the above embodiment, one operator ID is assigned to one operator, but one operator ID may also be assigned to multiple operators. Multiple operators may be grouped together and an operator ID may be issued for each group. For example, if operators S1 and S2 collaborate and provide the same service, a common operator ID may be issued to these operators S1 and S2.

In the above embodiment, a case has been described in which biometric information related to "features generated from a facial image" is transmitted from the management server 20 or the staff terminal 31 to the authentication server 10. However, biometric information related to a "facial image" may also be transmitted from the management server 20 or the like to the authentication server 10. In this case, the authentication server 10 generates features from the acquired facial image and executes the authentication process (matching process).

In the above embodiment, the authentication terminal 30 acquires a facial image and the management server 20 generates features from the facial image. However, the authentication terminal 30 may generate features from the facial image and transmit the generated features to the management server 20. In other words, the management server 20 does not have to generate features.

When processing permission to provide public information from terminal 40, authentication server 10 may verify the validity of the public information identification data (or may verify whether the public information identification data is correct). If the public information identification data is provided with a checksum or the like, authentication server 10 may verify the validity of the public information identification data using the checksum. Alternatively, authentication server 10 may send the acquired public information identification data to the corresponding public server and request verification of its validity.

The staff terminal 31 may provide the authentication server 10 with information regarding multiple types of official information. For example, the staff terminal 31 may send a request to the authentication server 10 for official information regarding the information written on the passport and health insurance card of the same user. In this case, the authentication server 10 simply transmits the passport number and health insurance card number to the passport server 41 and health insurance card server 42, respectively, to obtain the necessary official information. For example, consider a case where the staff terminal 31 is installed in a drugstore. In this case, the staff (pharmacist) may operate the staff terminal 31 to obtain health insurance card information when providing medicine to a patient, or to obtain passport information when processing a product purchaser's tax exemption. In this way, the staff terminal 31 can be a hybrid terminal that obtains different official information from the authentication server 10 depending on the user's (staff's) operation, etc.

In the above embodiment, it has been described that the authentication terminal 30 transmits the user's authentication request (biometric information) to the authentication server 10 via the management server 20. However, the authentication terminal 30 may transmit the authentication request directly to the authentication server 10. In other words, the authentication terminal 30 may transmit the authentication request (biometric information) to the authentication server 10 directly or indirectly.

Furthermore, in the above embodiment, a case has been described in which the staff terminal 31 sends a public information provision request directly to the authentication server 10. However, the staff terminal 31 may also send the public information provision request to the authentication server 10 via a server connected between the authentication server 10 and the staff terminal 31. In other words, the staff terminal 31 may send the public information provision request (biometric information) to the authentication server 10 directly or indirectly.

A single terminal (authentication terminal 30, staff terminal 31) may send a user's authentication request and a request for official information provision to the authentication server 10. For example, consider a case where the authentication terminal 30 shown in Figure 2 is installed in a hotel. In this case, the authentication terminal 30 may have the functions of a check-in terminal that handles user check-in processing and a tax-free terminal that handles tax-free processing. When functioning as a check-in terminal, the authentication terminal 30 directly or indirectly sends an authentication request including biometric information of guests visiting the hotel to the authentication server 10. The authentication terminal 30 proceeds with the check-in procedure based on the user's service information (reservation information). When functioning as a tax-free terminal, the authentication terminal 30 directly or indirectly sends the biometric information of the tax-free purchaser and a request for official information provision related to the passport to the authentication server 10. The authentication terminal 30 proceeds with tax-free processing in accordance with the passport information obtained from the authentication server 10. In this way, the terminal may selectively send an authentication request or a request for official information provision to the authentication server 10 depending on the function to be implemented. Furthermore, the authentication server 10 notifies the terminal of the service user ID or public information depending on the type of the received request.

In the above embodiment, for example, as shown in FIG. 27, a case was described in which a user consents to the provision of information in units of official information (e.g., passport, health insurance card). However, an interface may be provided to the user that allows the user to input whether or not to consent to the provision of each item of official information. For example, a GUI may be provided to the user that allows input such as consenting to the provision of only the name and nationality of the items listed on a passport.

When obtaining the user's permission to provide public information, terminal 40 may notify the user of the benefits of providing such information. For example, terminal 40 may output a message such as "Providing your passport information will easily complete the tax exemption procedure" on the display shown in FIG. 27.

The authentication server 10 can also store the identification documents acquired during user registration in a public information database, etc. In this case, if the official document authorized by the user to be provided is the same as the identification document registered in the database, the authentication server 10 does not need to acquire public information specific data from the user. For example, consider a case where a "passport" is acquired as an identification document and the user has authorized the provision of the information written on the passport. In this case, the authentication server 10 may read the passport number from the passport (identification document associated with the user ID and biometric information) registered in the database.

Each device included in the authentication system may attach an electronic signature when transmitting information (authentication request, public information provision request, etc.). A device that acquires the information (e.g., authentication server, public server) may verify the attached electronic signature and process only information whose identity has been correctly confirmed.

The form of data transmission and reception between each device (authentication server 10, management server 20, authentication terminal 30, staff terminal 31) is not particularly limited, but data transmitted and received between these devices may be encrypted. Biometric information is transmitted and received between these devices, and in order to properly protect this biometric information, it is desirable that encrypted data be transmitted and received.

In the flow charts (flowcharts, sequence diagrams) used in the above explanation, multiple steps (processes) are listed in order, but the order in which the steps are executed in the embodiments is not limited to the order listed. In the embodiments, the order of the steps shown in the diagrams can be changed to the extent that it does not interfere with the content, for example, by executing each process in parallel.

The above embodiments have been described in detail to facilitate understanding of the present disclosure, and it is not intended that all of the configurations described above are required. Furthermore, when multiple embodiments are described, each embodiment may be used alone or in combination. For example, it is possible to replace part of the configuration of one embodiment with the configuration of another embodiment, or to add the configuration of another embodiment to the configuration of one embodiment. Furthermore, it is possible to add, delete, or replace part of the configuration of one embodiment with another configuration.

The above explanation makes clear the industrial applicability of the present invention, and the present invention is particularly applicable to authentication systems that authenticate users of private businesses and public institutions.

Some or all of the above embodiments can be described as, but are not limited to, the following supplementary notes.
[Appendix 1]
a database that stores, in association with each other, biometric information of a user, a first ID that identifies a business that provides a service to the user, a second ID that is uniquely determined by a combination of the user and the business, and public information identification data that identifies public information the provision of which is permitted by the user;
an authentication unit that executes authentication processing in response to receiving an authentication request from a first business entity, the authentication request including biometric information of a person to be authenticated and the first ID of the first business entity, and transmits the second ID of a person who has been successfully authenticated to the first business entity;
an information providing unit that, when the second business receives a public information provision request from a second business, the public information provision request including biometric information of a user who wishes to refer to public information and the type of public information that the second business wishes to refer to, acquires the public information that the user wishes to refer to from a public server that stores the public information that the second business wishes to refer to using the public information identification data, and transmits the acquired public information to the second business;
An authentication server comprising:
[Appendix 2]
the database further stores a third ID for identifying the user;
The authentication server described in Appendix 1 further comprises a user registration unit that, upon receiving a user registration request including the user's biometric information and the user's identification document, verifies the user's identity based on the identification document, and registers the biometric information and the third ID of the user whose identity has been successfully verified in the database.
[Appendix 3]
3. The authentication server according to claim 2, wherein the user registration unit issues the third ID to the user upon successful identity verification of the user.
[Appendix 4]
An authentication server as described in Appendix 2 or 3, wherein the user registration unit determines that the identity of the user has been successfully verified if one-to-one matching is successful using the user's biometric information included in the user registration request and the biometric information obtained from the identification document.
[Appendix 5]
An authentication server according to any one of appendices 2 to 4, further comprising a business registration unit that, upon receiving a business registration request from the first business including the first ID and the third ID, generates the second ID and issues the generated second ID to the first business.
[Appendix 6]
An authentication server described in any one of Appendices 2 to 5, further comprising a specific data registration unit that, upon receiving a public information provision consent including the third ID and the public information identification data, stores the public information identification data in an entry corresponding to the third ID.
[Appendix 7]
An authentication server described in any one of appendices 1 to 6, wherein the authentication unit performs a one-to-N (N is a positive integer) match using the biometric information stored in the database and the biometric information of the person to be authenticated included in the authentication request.
[Appendix 8]
The authentication server described in Appendix 7, wherein the authentication unit determines that the authentication process is successful if the first ID included in the authentication request is stored in the database in correspondence with the user identified by the one-to-N matching.
[Appendix 9]
An authentication server described in any one of Appendices 1 to 8, wherein the information providing unit identifies the user for whom the second business operator wishes to access public information by performing a one-to-N (N is a positive integer) match using the biometric information stored in the database and the biometric information included in the public information provision request.
[Supplementary Note 10]
The database stores a plurality of the public information identification data for each user;
The authentication server described in Appendix 9, wherein the information providing unit transmits to the public server public information identification data corresponding to the type of public information included in the public information provision request from among the multiple public information identification data of the identified user.
[Appendix 11]
11. The authentication server according to claim 1, wherein the biometric information is a facial image or a feature generated from the facial image.
[Appendix 12]
a first terminal installed at a first carrier;
a second terminal installed at a second carrier;
an authentication server connected to the first and second terminals;
Including,
The authentication server
a database that stores, in association with each other, biometric information of a user, a first ID that identifies a business that provides a service to the user, a second ID that is uniquely determined by a combination of the user and the business, and public information identification data that identifies public information the provision of which is permitted by the user;
an authentication unit that executes authentication processing in response to receiving an authentication request including biometric information of an individual to be authenticated and the first ID of the first business operator from the first terminal, and transmits the second ID of an individual who has been successfully authenticated to the first terminal;
an information providing unit that, when the second business receives from the second terminal a request for public information provision including biometric information of a user who wishes to refer to public information and the type of public information that the second business wishes to refer to, acquires the public information that the second business wishes to refer to from a public server that stores the public information that the second business wishes to refer to using the public information identification data, and transmits the acquired public information to the second terminal;
A system comprising:
[Appendix 13]
An authentication server having a database that stores biometric information of a user, a first ID that identifies a business that provides a service to the user, a second ID that is uniquely determined by a combination of the user and the business, and public information identification data that identifies public information the provision of which is permitted by the user, in association with each other;
receiving, from a first business entity, an authentication request including biometric information of the person to be authenticated and the first ID of the first business entity, executing an authentication process, and transmitting the second ID of the person who has been successfully authenticated to the first business entity;
A control method for an authentication server, in which, when the second business receives a request for public information from a second business operator, the request includes biometric information of a user who wishes to access public information and the type of public information the user wishes to access, the method uses the public information identification data to obtain the public information the user wishes to access from a public server that holds the public information the user wishes to access, and sends the obtained public information to the second business operator.
[Appendix 14]
a computer installed in an authentication server that has a database that stores, in association with each other, biometric information of a user, a first ID that identifies a business that provides a service to the user, a second ID that is uniquely determined by a combination of the user and the business, and public information identification data that identifies public information the provision of which is permitted by the user;
a process of executing an authentication process in response to receiving an authentication request including biometric information of a person to be authenticated and the first ID of the first business entity from a first business entity, and transmitting the second ID of the person who has been successfully authenticated to the first business entity;
When the second business receives a request for public information from a second business, the request includes biometric information of the user who wishes to access public information and the type of public information that the second business wishes to access, the process of acquiring the public information that the user wishes to access from a public server that stores the public information that the user wishes to access using the public information identification data, and transmitting the acquired public information to the second business;
A program to execute.

The disclosures of the above cited prior art documents are incorporated herein by reference. While embodiments of the present invention have been described above, the present invention is not limited to these embodiments. Those skilled in the art will understand that these embodiments are merely illustrative and that various modifications are possible without departing from the scope and spirit of the present invention. In other words, the present invention naturally includes various modifications and alterations that may be made by those skilled in the art in accordance with the entire disclosure, including the scope of the claims, and the technical concepts.

This application claims priority based on Japanese Patent Application No. 2020-201061, filed December 3, 2020, the disclosure of which is incorporated herein in its entirety.

10, 100 Authentication server 20 Management server 30 Authentication terminal 31 Staff terminal 40 Terminal 41 Passport server 42 Health insurance card server 101 Database 102, 205 Authentication unit 103 Information provision unit 201, 301, 401, 501, 601 Communication control unit 202 User registration unit 203 Business registration unit 204 Specific data registration unit 206 Public information provision unit 207, 305, 405, 504, 603 Storage unit 302 Service information acquisition unit 303 Service information registration unit 304 Authentication request unit 311 Processor 312 Memory 313 Input/output interface 314 Communication interface 402 Biometric information acquisition unit 403 Service provision unit 404, 503 Message output unit 502 Information provision request unit 602 User support unit 611 User registration support unit 612 Service registration support unit 613 Provision permission support unit

Claims (10)

a database that stores, in association with each other, biometric information of a user, a first ID that identifies a business that provides a service to the user, a second ID that is uniquely determined by a combination of the user and the business, and public information identification data that identifies public information the provision of which is permitted by the user;
an authentication means for executing an authentication process in response to receiving an authentication request from a first business entity, the authentication request including biometric information of a person to be authenticated and the first ID of the first business entity, and transmitting the second ID of a person who has been successfully authenticated to the first business entity;
an information providing means for, when the second business receives from a second business a request for public information provision including biometric information of a user who wishes to refer to public information and the type of public information that the second business wishes to refer to, acquiring the public information that the user wishes to refer to from a public server that stores the public information that the user wishes to refer to using the public information identification data, and transmitting the acquired public information to the second business;
An authentication server comprising: the database further stores a third ID for identifying the user;
The authentication server according to claim 1, further comprising a user registration means for, upon receiving a user registration request including the user's biometric information and the user's identification document, verifying the identity of the user based on the identification document, and registering the biometric information and the third ID of the user whose identity has been successfully verified in the database. The authentication server described in claim 2, wherein the user registration means issues the third ID to the user upon successful identity verification of the user. An authentication server according to claim 2 or 3, wherein the user registration means determines that the identity of the user has been successfully verified if one-to-one matching is successful between the user's biometric information included in the user registration request and the biometric information obtained from the identification document. 5. The authentication server according to claim 2, further comprising a business registration means for generating the second ID upon receiving a business registration request including the first ID and the third ID from the first business and issuing the generated second ID to the first business. The authentication server described in any one of claims 2 to 5 further comprises a specific data registration means that, upon receiving a public information provision consent including the third ID and the public information specific data, stores the public information specific data in an entry corresponding to the third ID. An authentication server according to any one of claims 1 to 6, wherein the authentication means performs one-to-N (N is a positive integer) matching using the biometric information stored in the database and the biometric information of the person to be authenticated included in the authentication request. a first terminal installed at a first carrier;
a second terminal installed at a second carrier;
an authentication server connected to the first and second terminals;
Including,
The authentication server
a database that stores, in association with each other, biometric information of a user, a first ID that identifies a business that provides a service to the user, a second ID that is uniquely determined by a combination of the user and the business, and public information identification data that identifies public information the provision of which is permitted by the user;
an authentication means for executing an authentication process in response to receiving an authentication request including biometric information of a person to be authenticated and the first ID of the first business operator from the first terminal, and transmitting the second ID of a person who has been successfully authenticated to the first terminal;
an information providing means for, when the second business receives from the second terminal a request for public information provision including biometric information of a user who wishes to refer to public information and the type of public information that the second business wishes to refer to, acquiring the public information that the user wishes to refer to from a public server that stores the public information that the user wishes to refer to using the public information identification data, and transmitting the acquired public information to the second terminal;
A system comprising: An authentication server having a database that stores biometric information of a user, a first ID that identifies a business that provides a service to the user, a second ID that is uniquely determined by a combination of the user and the business, and public information identification data that identifies public information the provision of which is permitted by the user, in association with each other;
receiving, from a first business entity, an authentication request including biometric information of the person to be authenticated and the first ID of the first business entity, executing an authentication process, and transmitting the second ID of the person who has been successfully authenticated to the first business entity;
A control method for an authentication server, in which, when the second business receives a request for public information from a second business operator, the request includes biometric information of a user who wishes to access public information and the type of public information the user wishes to access, the method uses the public information identification data to obtain the public information the user wishes to access from a public server that holds the public information the user wishes to access, and sends the obtained public information to the second business operator. a computer installed in an authentication server that has a database that stores, in association with each other, biometric information of a user, a first ID that identifies a business that provides a service to the user, a second ID that is uniquely determined by a combination of the user and the business, and public information identification data that identifies public information the provision of which is permitted by the user;
a process of executing an authentication process in response to receiving an authentication request including biometric information of a person to be authenticated and the first ID of the first business entity from a first business entity, and transmitting the second ID of the person who has been successfully authenticated to the first business entity;
When the second business receives a request for public information from a second business, the request includes biometric information of the user who wishes to access public information and the type of public information that the second business wishes to access, the process of acquiring the public information that the user wishes to access from a public server that stores the public information that the user wishes to access using the public information identification data, and transmitting the acquired public information to the second business;
A program to execute.