JP2023022618A - Authentication system - Google Patents

Abstract

To provide a user authentication system for an online conference that confirms, with high credibility, identity of users participating in the conference.SOLUTION: An authentication system 10 includes a client terminal 1A that is used by a user A to participate in a conference, a mobile terminal 3, and a web server 2. The user A uses an IC card 4 as an identification card. A code transmission unit 22 transmits a QR code 5 embedded with a conference ID identifying the conference to the client terminal 1A in response to an access from the client terminal 1A. An ID acquisition unit 31 acquires the conference ID from the QR code 5 displayed on the client terminal 1A, meanwhile, an IC data acquisition unit 33 acquires personal information 3c including face photograph data of the user A from the IC card 4. An authentication unit 23 receives the personal information 3c and the conference ID: 3a transmitted from the mobile terminal 3 to authenticate the user A as the user A of the client terminal 1A, thereby, confirming identity of the user.SELECTED DRAWING: Figure 2

Description

The present invention relates to an online conference user authentication system.

In recent years, the use of online conferences has increased. In such an online conference, when permitting participation in the conference of those who wish to participate, identification and authentication of the participants are important. For example, in the case of confidential meetings, participants are limited to certain qualified persons. Also, when a pharmacy sells a given drug face-to-face online, the purchaser's identity is required. Furthermore, an online meet-and-greet for fans of a specific person or group, such as a celebrity, singer, sports team or athlete, may also require identification of the participants.

When a guest user who has not registered an account in advance participates in an online conference, with the cooperation of a registered user, the participation of the unregistered person is authenticated on the spot, and the unregistered person A method of allowing a registered person to use an online conference system is known (see Patent Document 1, for example).

The guest user uses the camera of the conference terminal (client terminal) to scan the QR code (registered trademark) displayed on the conference board in the conference room in the real space or displayed on the conference terminal of the adjacent registered user. Take an image. The guest user decodes the QR code to obtain the conference identification information, and transmits the conference identification information and the guest user's own user information to the conference server (web server). The conference server transmits the information of the guest user to the conference terminal of the registered user and requests the authentication decision. The registered user performs password authentication, fingerprint authentication, or the like for the guest user, determines whether to authenticate or refuse to participate in the conference, and reports to the conference server.

In addition, pharmacists use a teleconferencing system through the network to meet with purchasers and answer questions, decide which drugs to recommend while confirming each other's appearance on the screen, and pass drugs through the hands of a third party. There is known a remote pharmaceutical sales system in which the drug is delivered directly to the purchaser without the need to purchase the drug (see, for example, Patent Document 2).

A purchaser of pharmaceuticals has an IC card that stores personal information after being registered as a user in advance. , authentication is performed. The personal information stored in the IC card includes the person's name, date of birth (age), history of medicines taken, records of illnesses, chronic diseases, person's address, mobile phone number, e-mail address, height, weight, etc. Furthermore, the card itself can be attached with a photo of the person himself/herself.

Japanese Unexamined Patent Application Publication No. 2017-111608 JP 2013-109414 A

However, in the system as shown in the above-mentioned Patent Document 1, authentication is performed using a password or a fingerprint, but there is a possibility of spoofing or forgery, which lowers credibility. Further, in a system using authentication based on personal information stored in an IC card as disclosed in Patent Document 2, an IC card reader provided in a system dedicated to drug sales is used. Most general-purpose PC (personal computer) terminals used for ordinary online meetings are not equipped with an IC card reader. is not guaranteed at all.

Face-to-face identification is generally performed by presenting an identification card that only the person can have, but physical certificates, including photographs, can be forged. Furthermore, when presented in video form in an online face-to-face meeting, the credibility is lower. Therefore, there is a need for an identity verification method that is difficult to forge and that guarantees authenticity even online.

DISCLOSURE OF THE INVENTION The present invention is intended to solve the above problems, and allows users to participate in a conference using a general-purpose electronic device as a conference terminal, and to verify the identity of the user who participates in the conference with high credibility. An object of the present invention is to provide a user authentication system for an online conference that can be held.

In order to achieve the above objects, an online conference user authentication system according to the present invention includes:
An authentication system for authenticating users participating in a video-based online conference,
a client terminal used by the user to participate in the conference;
a web server that provides services related to the conference to participants of the conference;
The web server includes an application providing unit that provides an authentication application to be installable on the client terminal in response to access from the client terminal, and an authentication unit that authenticates the user,
The client terminal includes an IC data acquisition unit that acquires personal information including face photograph data of the user from an IC card owned by the user; a data transmission unit for transmitting to a web server;
The authentication unit of the web server is characterized by authenticating the user as a user of the client terminal by receiving the personal information transmitted from the client terminal and confirming the identity of the user.

In this certification system,
The web server includes a code transmission unit that transmits a QR code embedded with a conference ID that identifies the conference in response to access from the client terminal so that the QR code can be displayed on the client terminal,
The client terminal includes an ID acquisition unit that acquires the conference ID from the QR code data transmitted from the web server,
the data transmission unit of the client terminal transmits the meeting ID to the web server together with the personal information;
Preferably, the authentication unit of the web server receives the meeting ID in addition to the personal information transmitted from the client terminal, thereby authenticating the user as a user of the client terminal and confirming the identity of the user. .

In this certification system,
The IC data acquisition unit and the data transmission unit of the client terminal are provided in a portable terminal separated from the client terminal,
The application providing unit of the web server provides the authentication application so as to be installable on the mobile terminal in response to access from the mobile terminal,
The web server includes a code transmission unit that transmits a QR code embedded with a conference ID that identifies the conference in response to access from the client terminal so that the QR code can be displayed on the client terminal,
The mobile terminal includes an ID acquisition unit that captures the QR code displayed on the client terminal and acquires the conference ID,
the IC data acquisition unit of the mobile terminal acquires personal information including face photograph data of the user from an IC card owned by the user;
the data transmission unit of the mobile terminal transmits the meeting ID to the web server together with the personal information;
Preferably, the authentication unit of the web server receives the meeting ID in addition to the personal information transmitted from the mobile terminal, thereby authenticating the user as a user of the client terminal and confirming the identity of the user. .

In this certification system,
The web server has a data distribution unit that distributes the data of the user's facial photograph to a predetermined terminal used by the conference participant so that the conference participant can confirm the user's facial photograph on the screen. It is desirable to have

In this certification system,
The authentication unit of the web server uses an AI function to perform image processing on the face photo data of the user and the face image data of the user in a video image transmitted from a predetermined terminal used by the user, and authenticates the identity of the user. It is preferable that a face recognition unit for confirmation is provided, and authentication processing is performed based on a result of personal identification by the face recognition unit.

In this certification system,
The IC card is desirably a My Number card or an IC card containing an electronic certificate including face photo data of the person issued by a public personal authentication service.

According to the authentication system of the present invention, the mobile terminal acquires the personal information including the data of the user's face photograph from the IC card and transmits it to the web server as the data for identity verification. It can be done with confidence.

1 is a schematic diagram showing the configuration of an online conference user authentication system according to a first embodiment of the present invention; FIG. FIG. 2 is a block diagram for explaining the configurations and interrelationships of a client terminal, a mobile terminal, and a web server that constitute the same authentication system; FIG. 4 is a sequence diagram for explaining the operation of the same authentication system; FIG. 4 is a diagram showing an example of a screen before authentication of user (A) displayed on a screen of a client terminal of user (B) different from user (A) who requests authentication in the same authentication system; FIG. 5 is a diagram showing an example of a screen displayed on the screen of the client terminal in FIG. 4 after user (A) has been authenticated; FIG. 2 is a schematic diagram showing the configuration of an online conference user authentication system according to a second embodiment of the present invention; FIG. 2 is a block diagram for explaining each configuration and interrelationships of a client terminal composed of a portable terminal and a web server, which constitute the same authentication system. FIG. 4 is a sequence diagram for explaining the operation of the same authentication system; FIG. 11 is a schematic diagram showing the configuration of an online conference user authentication system according to a third embodiment of the present invention; FIG. 2 is a block diagram for explaining each configuration and interrelationships of a client terminal composed of a portable terminal and a web server, which constitute the same authentication system. FIG. 4 is a sequence diagram for explaining the operation of the same authentication system;

An online conference user authentication system (hereinafter referred to as an authentication system) according to a first embodiment of the present invention will now be described with reference to the drawings. In the following description, the term "online" means that participants in the conference face each other through images through data communication, and that actual people do not face each other directly. In addition, a meeting is not limited to the participation of a plurality of related parties to make some kind of decision, but also includes the exchange of opinions and information, as well as the simple face-to-face meeting. Such meetings also include two-party one-on-one meetings. Online meetings include planning meetings, countermeasures meetings, board meetings, workshops, lectures, and other various meetings at companies, schools, and various organizations.

As shown in FIGS. 1 and 2, an authentication system 10 is an authentication system for authenticating a user A who participates in a video-based online conference. 3 and a web server 2 . In this authentication system 10, a user A who participates in a conference has his own IC card 4 used as an identification card.

In this embodiment, users B, C, D, and E who participate in the conference using the authentication system 10 participate using respective client terminals 1B, 1C, 1D, and 1E. Each of users B, C, D, and E possesses a mobile terminal 3 and an IC card 4 of the user himself/herself. Each of the client terminals 1A to 1E (generally referred to as the client terminal 1), the web server 2, and the portable terminal 3 are connected to the network 9, thereby enabling data communication.

The client terminal 1</b>A has a browser 11 that displays a conference screen and a QR code 5 sent from the web server 2 . A general-purpose PC (personal computer) that has the function of the browser 11 and is connectable to the network 9 can be used as the client terminal 1A. In addition, the client terminal 1 displays the scene of the conference and the images of the participants transmitted from other terminals. Therefore, a video camera including a camera, a microphone, a speaker, etc. for acquiring images and sounds is provided.

The web server 2 is a server that provides conference-related services to users who are participants in the conference, and includes an application providing unit 21 , a code transmission unit 22 , an authentication unit 23 , and a data distribution unit 24 .

The application providing unit 21 provides the authentication application 30 so as to be installable on the mobile terminal 3 in response to access from the mobile terminal 3 .

The code transmission unit 22 transmits the QR code 5 embedded with the conference ID specifying the online conference to the client terminal 1A in response to the access from the client terminal 1A. The conference ID is not limited to information identifying the online conference, but also includes information identifying the user who has requested authentication for participating in the conference. Therefore, QR code 5 is a unique code for user A who requested and received it.

The authentication unit 23 authenticates the user A and the client terminal 1A based on the data transmitted from the mobile terminal 3. FIG. The authentication unit 23 receives the personal information 3c and the meeting ID: 3a transmitted from the portable terminal 3, and authenticates the user A as the user A of the client terminal 1A to confirm the identity.

As an option, the authentication unit 23 performs image processing on the data of the photograph of the face of the user A and the data of the face image of the user A in the video image transmitted from the predetermined terminal used by the user A, using the AI function to perform identity verification. A face recognition unit 23a may be provided. The authentication unit 23 can perform authentication processing and authentication determination more strictly and as appropriate over time based on the result of personal identification by the face recognition unit 23a.

The data distribution unit 24 distributes the data of the face photograph of user A to the predetermined terminals used by the participants of the conference so that the participants of the conference can confirm the photograph of user A's face on the screen.

The mobile terminal 3 includes an ID acquisition section 31 , an IC data acquisition section 33 and a data transmission section 34 . The portable terminal 3 is a portable electronic device that has an imaging means 32 that is a camera and that can be connected to the network 9, such as a smart phone or a tablet. Such a mobile terminal 3 has a browser as a user interface.

An authentication application 30 downloaded from the web server 2 is installed in the mobile terminal 3 . The authentication application 30 supports the user, performs data processing, and controls the hardware of the mobile terminal 3 to operate the ID acquisition section 31, the IC data acquisition section 33, and the data transmission section .

The ID acquisition unit 31 captures the QR code 5 displayed on the client terminal 1A and acquires the conference ID.

The IC data acquisition unit 33 acquires the personal information 3c including data of the face photograph of the user A from the IC card 4 owned by the user A. FIG. The IC data acquisition unit 33 reads from or writes to an IC chip built in the IC card 4 by near field communication (NFC).

The data transmission unit 34 transmits the meeting ID: 3a and the personal information 3c as the personal identification data 3b to the web server 2 using the authentication application 30 .

The IC card 4 is a card containing an IC chip capable of reading and writing by near field communication (NFC). The IC chip of the IC card 4 contains an electronic certificate (user authentication certificate, electronic signature certificate) and a photo of the owner as authentication information used to authenticate user A who is the owner. Image data and the like are stored. As the IC card 4, for example, a personal number card (my number card) issued under a public personal authentication service that can be obtained at a municipal office may be used.

User A is required to enter a PIN code or the like when the IC data acquisition unit 33 performs short-range wireless communication with the IC card 4 . The fact that data such as personal information has been read from the IC card 4 means that a PIN code or the like that only the owner of the IC card 4 knows has been input. Therefore, the user A who is the operator of the mobile terminal 3 is recognized as the owner of the IC card 4 . Also, the user A is identified as a person by the personal identification data 3b.

In addition, the face photo data acquired from the IC card 4, which is included in the personal identification data 3b, can be displayed as a face photo that can be visually confirmed. Since the vote data (name, address, etc.) is included, the identity can be verified with high credibility.

Under the operation and control of the authentication application 30, which is application software for authentication, the data of the QR code 5 displayed on the screen of the client terminal 1A is read, and the data of the IC card 4 is read. Two devices, the client terminal 1A and the portable terminal 3, are associated by one operation, and data between the devices is associated.

Next, with reference to the operation sequence of FIG. 3 in addition to FIGS. 1 and 2, user authentication executed in the authentication system 10 will be described in chronological order. User A of the client terminal 1A uses the mobile terminal 3 to request the web server 2 to download the application 30 used for user authentication in order to participate in the conference after being authenticated by the web server 2 (S1 ).

The application providing unit 21 of the web server 2 transmits the application 30 to the mobile terminal 3 upon receiving a download request for the application 30 from the mobile terminal 3 . The portable terminal 3 executes the download (S2). The application 30 is downloaded from the application provider 21 of the web server 2 . By installing the application 30 in the portable terminal 3, the ID obtaining section 31, the IC data obtaining section 33, and the data transmitting section 34 become operable (S3).

The user A operates the client terminal 1A to request the web server 2 for authentication for participating in the conference (S4).

The code transmission unit 22 of the web server 2 transmits the QR code 5 embedded with the conference ID specifying the online conference to the client terminal 1A in response to the access from the client terminal 1A (S5).

The QR code 5 is displayed on the screen of the client terminal 1A by the browser 11 (S6).

The mobile terminal 3 captures an image of the QR code 5 displayed on the screen of the client terminal 1A by the imaging means 32 by the operation of the user A (S7). The image data of the QR code 5 is decoded by the ID obtaining unit 31 of the mobile terminal 3, and the meeting ID: 31a embedded in the QR code 5 is obtained (S8).

The IC data acquisition unit 33 of the portable terminal 3 acquires the personal information 3c including the data of the face photograph of the user A from the IC card 4 by the operation of the user A (S9).

The data transmission unit 34 of the portable terminal 3 transmits the meeting ID: 3a and the personal information 3c as the personal identification data 3b to the web server 2 by the user A's operation (S10).

The authentication unit 23 of the web server 2 recognizes the user A as the user A of the client terminal 1A by receiving the personal identification data 3b (personal information 3c including face photo data and meeting ID: 3a) transmitted from the mobile terminal 3. Confirm your identity as Also, by personal authentication based on the personal identification data 3b, the client terminal 1A authenticates the participation of the user A in the conference (S11).

The authentication unit 23 of the web server 2 transmits to the client terminal 1A, via the data distribution unit 24 or directly from the data distribution unit 24, a notification that user A's participation in the conference has been authenticated (S12).

The data distribution unit 24 of the web server 2 distributes the notification to the client terminals 1B to 1E in order to notify the other users B to E that the conference participation of the user A has been authenticated (S13). The client terminals 1B to 1E to which this notification is delivered may or may not be limited to the client terminals 1 of users who have been authenticated to participate in the online conference.

In addition, the data distribution unit 24 distributes the data of the user A's facial photograph to the meeting so that the participants of the conference can confirm the user A's facial photograph on the screen in accordance with the distribution of the user A's authentication notification. It is distributed to predetermined terminals (client terminals 1B to 1E) used by the participants.

Further, the data distribution unit 24 distributes the notification regarding the authentication process to the client terminals 1B to 1E of the other users B to E from the time when the authentication process of the user A is started so that each user can arbitrarily view it. (See FIGS. 4 and 5).

(Example of client terminal screen)
4 and 5 show the screen 6 of the client terminal 1B of the user B, who is different from the user A requesting authentication. An example of the screen after (FIG. 5) is shown. The screen 6 in this example is divided into a large partial screen 61 on the left, a small screen on the lower right, and a small screen 63 on the upper right.

Such a screen is provided, for example, by accessing the authentication system 10 in the web server 2 and the home page regarding the operation of the video-based online conference. The web server 2 may have a configuration in which functions are shared between a conference server that processes data and information related to the online conference itself and provides it to users, and an authentication server that performs processing related to authentication of participants in the conference.

The partial screen 61 is a screen on which a video image of the face of user A who requests authentication is displayed. In the upper right corner of the partial screen 61, the facial photograph 6a acquired from the IC card 4 owned by the user A and sent is displayed in the upper row, the name 6b of the user A in the middle row, and the authentication status 6c regarding conference participation in the lower row. . In FIG. 4, since it is before authentication, the authentication status 6c is displayed as "authentication: unauthenticated", and in FIG. 5, it is displayed as "authenticated: completed".

On the small screen 62, a photograph of the face of the user B of the client terminal 1B displaying the screen 6 is displayed. User B can select whether or not to display the photograph of the person's face on the small screen 62 or to display another image. On the small screen 63, a QR code 5 specific to user B is displayed, in which the information of the meeting ID is embedded.

(When user B requests authentication)
Next, focusing on the screen 6 of the client terminal 1, the authentication processing sequence for the user B, not the user A, will be described. The configuration of the screen 6 in FIGS. 4 and 5 can also be used as a screen when user B proceeds with authentication processing when user B is not yet authenticated and has not been permitted to participate in the conference. First, a video online conference using the online conference user authentication system 10 is started. Regarding the use of the authentication system 10, the web server 2 can be accessed from the mobile terminal 4 and the client terminal 1 without prior authentication or the like.

When the user B starts the authentication process and steps (S1) to (S6) in FIG. 3 are completed, the authentication QR code 5 unique to the user is displayed on the small screen 63 of the screen 6 of the client terminal 1B. be. When requesting the QR code 5 from the web server 2, the user B enters his/her name. Therefore, in the partial screen 61 of the screen 6 of the client terminal 1 of the user other than the user B, the name of the user B is displayed as the middle name 6b in the upper right corner, and "not authenticated" is displayed as the authentication status 6c in the lower part. be.

If you wish to be authenticated, your own QR code 5 for authentication displayed on the screen is imaged with the mobile terminal 3, and the identifier ( Read Conference ID: 3a).

Also, the IC data acquisition unit 33 using the authentication application 30 reads the IC card 4 possessed by the user B, and acquires personal information (face photo, name, address, etc.) included in the IC card 4 .

The information of user B read from the IC card 4 by the data transmission unit 34 using the authentication application 30 is transmitted to the web server 2 together with the identifier (meeting ID: 3a) and the like.

The web server 2 identifies the conference currently being held by an identifier or the like, changes the user B to authenticated, and displays the face picture 6a of the user B on the screen 6 of another user viewing the video image of the user B on the partial screen 61. , name 6b, and authentication status 6c, that is, "authentication: completed" are displayed.

According to the authentication system 10 of the present embodiment, a user who seeks self-authentication acquires personal information including his/her face photograph data from his/her IC card 4 using the mobile terminal 3 and uses it as identity verification data on the web server. 2, the user can be authenticated with a high degree of authenticity.

In addition, according to the authentication system 10, since the system is configured to use facial photo data recorded in a forgery-prevented IC card, even during the conference after participation is authenticated, online access is possible. In a face-to-face state, the face photograph based on the face photograph data submitted to the authentication unit 23 can be compared with the face image in the video image to appropriately confirm the person's identity, and the conference can be safely maintained. This personal identification by image comparison may be automated using image data matching technology.

Furthermore, according to the authentication system 10, since the system is composed of face photo data recorded in a forgery-prevented IC card and a combination of general-purpose electronic devices (PC and smart phone), it is easy and inexpensive. It is also possible to construct an authentication system that authenticates user A who participates in a video-based online conference by ensuring the reliability of authentication.

(Second embodiment)
A user authentication system according to a second embodiment of the present invention will be described with reference to FIGS. 6, 7 and 8. FIG. As shown in FIGS. 6 and 7, in the authentication system 10 of the present embodiment, a client terminal 1A used by a user A participating in a video online conference is a mobile terminal. The client terminal 1A is composed of, for example, a smart phone. Similarly to user A, user D's client terminal 1D is also a portable terminal. Note that users B, C, and E are the same as in the authentication system 10 of the first embodiment.

In the authentication system 10 of the first embodiment, the client terminal 1A is assumed to be a PC or the like used by the user A, and the mobile terminal 3 is assumed to be a smartphone or the like owned by the user A. FIG. This is because many general users use PCs for online meetings, but general-purpose PCs do not have a configuration corresponding to the IC data acquisition unit 33. It is made possible to obtain However, in recent years, it is not uncommon for users to participate in an online conference with a smartphone alone without using a PC. The above-described procedure performed by combining the client terminal 1A and the portable terminal 3 is performed by one client terminal 1A (portable terminal). Therefore, the mobile terminal 3 in the description of the authentication system 10 of the first embodiment can be read as the client terminal 1A.

The sequence of authentication processing in the authentication system 10 of this embodiment, as shown in FIG. Also, the client terminal 1A, which is a portable terminal, performs near field communication (NFC) with the IC card 4 to acquire data required for authentication.

On the other hand, in this embodiment, the QR code 5 transmitted from the web server 2 to the client terminal 1A and displayed on the screen does not need to be imaged by the imaging means 32 (camera). For the QR code 5, image data obtained using the print screen function or the screen capture function is processed by the ID obtaining unit 31 to obtain the conference ID (S48). Alternatively, the ID acquisition unit 31 configured by installing the authentication application 30 may directly decode the data of the QR code 5 to acquire the meeting ID. Other operations are the same as those of the authentication system 10 shown in the first embodiment.

The mobile terminal that constitutes the authentication system 10 may use, for example, a tablet-type portable electronic device or an auxiliary display device connected to it so that the status of the conference can be viewed on a large screen.

(Third Embodiment)
A user authentication system according to a third embodiment of the present invention will be described with reference to FIGS. 9, 10 and 11. FIG. As shown in FIGS. 9 and 10, the authentication system 10 of the present embodiment is based on the assumption that all users A to E participating in a video-based online conference use smartphones (portable terminals) as client terminals 1. It is.

Further, in the present embodiment, the information of the meeting ID is sent directly to the ID acquisition unit 31 in the form of an encrypted code, not in the form of a QR code. Therefore, the QR code is not displayed on the client terminal 1, and the QR code is not photographed. As shown in FIG. 11, when the conference ID code is transmitted from the web server 2 (S25), the client terminal 1A acquires the conference ID from the received conference ID code, and obtains the personal information in the same procedure as above. After the acquisition (S29), the personal identification data including the meeting ID is transmitted to the web server 2 (S30). Other configurations and operations of each unit are the same as those described in the first and second embodiments.

It should be noted that the present invention is not limited to the above configuration, and various modifications are possible. For example, it is possible to adopt a configuration in which the configurations of the respective embodiments described above are combined with each other. The first and second embodiments are configured to acquire the meeting ID from the QR code transmitted from the web server 2 to the client terminal 1, and the third embodiment is configured to transmit the QR code from the web server 2 to the client terminal 1. Although it was configured to transmit a conference ID code that is not a conference ID code, for example, a system that uses these together may be used.

Reference Signs List 1, 1A, 1B, 1C, 1D, 1E Client terminal 10 Authentication system 11 Browser 2 Web server 21 Application supply unit 22 Code transmission unit 23 Authentication unit 23a Face recognition unit 24 Data distribution unit 3 Portable terminal 3a Conference ID
3b identity verification data 3c personal information 30 authentication application 31 ID acquisition section 32 imaging means 33 IC data acquisition section 34 data transmission section 4 IC card 5 QR code (registered trademark)

Claims (6)

An authentication system for authenticating users participating in a video-based online conference,
a client terminal used by the user to participate in the conference;
a web server that provides services related to the conference to participants of the conference;
The web server includes an application providing unit that provides an authentication application to be installable on the client terminal in response to access from the client terminal, and an authentication unit that authenticates the user,
The client terminal includes an IC data acquisition unit that acquires personal information including face photograph data of the user from an IC card owned by the user; a data transmission unit for transmitting to a web server;
An authentication system, wherein the authentication unit of the web server authenticates the user as a user of the client terminal by receiving the personal information transmitted from the client terminal, and confirms the identity of the user. The web server includes a code transmission unit that transmits a QR code embedded with a conference ID that identifies the conference in response to access from the client terminal so that the QR code can be displayed on the client terminal,
The client terminal includes an ID acquisition unit that acquires the conference ID from the QR code data transmitted from the web server,
the data transmission unit of the client terminal transmits the meeting ID to the web server together with the personal information;
The authentication unit of the web server receives the meeting ID in addition to the personal information transmitted from the client terminal, thereby authenticating the user as a user of the client terminal and confirming the identity of the user. The authentication system according to claim 1, wherein: The IC data acquisition unit and the data transmission unit of the client terminal are provided in a portable terminal separated from the client terminal,
The application providing unit of the web server provides the authentication application so as to be installable on the mobile terminal in response to access from the mobile terminal,
The web server includes a code transmission unit that transmits a QR code embedded with a conference ID that identifies the conference in response to access from the client terminal so that the QR code can be displayed on the client terminal,
The mobile terminal includes an ID acquisition unit that captures the QR code displayed on the client terminal and acquires the conference ID,
the IC data acquisition unit of the mobile terminal acquires personal information including face photograph data of the user from an IC card owned by the user;
the data transmission unit of the mobile terminal transmits the meeting ID to the web server together with the personal information;
The authentication unit of the web server receives the meeting ID in addition to the personal information transmitted from the mobile terminal, thereby authenticating the user as a user of the client terminal and confirming the identity of the user. The authentication system according to claim 1, wherein: The web server has a data distribution unit that distributes the data of the user's facial photograph to a predetermined terminal used by the conference participant so that the conference participant can confirm the user's facial photograph on the screen. 4. The authentication system according to any one of claims 1 to 3, comprising: The authentication unit of the web server uses an AI function to perform image processing on the face photo data of the user and the face image data of the user in a video image transmitted from a predetermined terminal used by the user, and authenticates the identity of the user. 5. The authentication system according to any one of claims 1 to 4, further comprising a face recognition section for confirmation, and performing authentication processing based on a result of personal identification by said face recognition section. 6. The IC card according to any one of claims 1 to 5, wherein the IC card is a My Number card or an IC card that records an electronic certificate including face photograph data of the person, issued by a public personal authentication service. Authentication system as described in section.

Images