WO2024084659A1

WO2024084659A1 - Information processing device, information processing system, information processing method, and non-transitory computer-readable medium having program stored therein

Info

Publication number: WO2024084659A1
Application number: PCT/JP2022/039117
Authority: WO
Inventors: 純一下村
Original assignee: 日本電気株式会社
Priority date: 2022-10-20
Filing date: 2022-10-20
Publication date: 2024-04-25

Abstract

An information processing device (1) according to an embodiment comprises an issuing unit (11), an inquiring unit (12), and an output unit (13). The issuing unit (11) issues access information in response to a request from an inquiry-requested person terminal, and transmits the access information to at least one of the inquiry-requested person terminal and an inquiry-requesting person terminal different from the inquiry-requested person terminal. Upon reception of inquiry data relating to the inquiry-requested person concurrently with reception of access based on the access information from the inquiry-requesting person terminal, the inquiring unit (12) makes an inquiry by verifying the inquiry data against member data stored in advance in a predetermined storage device, and receives an inquiry result. The output unit (13) outputs the inquiry result to the inquiry-requesting person terminal.

Description

Information processing device, information processing system, information processing method, and non-transitory computer-readable medium having a program stored thereon

The present disclosure relates to an information processing device, an information processing system, an information processing method, and a non-transitory computer-readable medium on which a program is stored.

Various technologies have been proposed to prevent misrepresentation of meeting parties, including visitors. For example, Patent Document 1 discloses an entrance/exit management system that uses both a visitor identification code assigned in advance and facial photo data of the visitor to determine the appropriateness of visitors who come to a facility. In Patent Document 1, when a visitor sends information about a visitor they plan to meet to a central processing unit when registering a visit, the management control unit of the central processing unit first determines the visit registration number for that visit and the visitor identification code (two-dimensional code) to be assigned to that visitor. The management control unit then sends an email to the visitor's mobile phone and transmits the two-dimensional code.

The management control unit also sends a request to send the visitor's own facial photograph data in the email. When the request to send facial photograph data is received from the central processing unit, the visitor takes a photograph of his or her own face using the camera function of the mobile phone and sends it to the central processing unit. When the central processing unit receives the facial photograph data, it creates a visit case data file.

When a visitor arrives, he or she presents the two-dimensional code stored in their mobile phone to the camera. If it is determined that a corresponding visit case data file exists based on the two-dimensional code, the camera takes a photograph of the visitor's face and compares it with the visitor's face photo data pre-registered in the visit case data file to determine whether the visitor matches the pre-registered visitor.

JP 2011-48817 A

In Patent Document 1, the person receiving the visit must register information about the visitor related to the visit, which is time-consuming. In addition, a central processing unit must manage the facial photo data sent by the visitor.

In view of the above-mentioned problems, the purpose of the present disclosure is to provide an information processing device, an information processing system, an information processing method, and a program that can eliminate the hassle involved in authenticating face-to-face parties, including visitors.

The information processing device according to one aspect of the present disclosure includes an issuing unit, a query unit, and an output unit. The issuing unit issues access information in response to a request from a referenced terminal, and transmits the access information to at least one of the referenced terminal and a query requester terminal different from the referenced terminal. When the query unit receives access based on the access information from the query requester terminal and query data of the referenced person, the query unit queries the query data against member data previously stored in a specified storage device, and receives the query result. The output unit outputs the query result to the query requester terminal.

An information processing system according to one aspect of the present disclosure includes an information processing device and an inquired party terminal certified by the information processing device. The information processing device includes an issuing unit, an inquiry unit, and an output unit. The issuing unit issues access information in response to a request from the inquired party terminal and transmits the access information to at least one of the inquired party terminal and an inquiry requester terminal different from the inquired party terminal. When the inquiry unit receives access based on the access information from the inquiry requester terminal and inquiry data of the inquired party, the inquiry unit queries the inquiry data against member data previously stored in a specified storage device and receives the inquiry result. The output unit outputs the inquiry result to the inquiry requester terminal.

In an information processing method according to one aspect of the present disclosure, a computer executes the following processes.
A process of issuing access information in response to a request from a referenced terminal and transmitting the access information to at least one of the referenced terminal and a reference requester terminal different from the referenced terminal.
When access is received from the inquiry requester terminal based on the access information and inquiry data of the inquired person is received, the inquiry data is compared with member data pre-stored in a specified storage device and the inquiry results are received.
A process of outputting the query result to the query requester terminal.

A program according to an embodiment of the present disclosure causes a computer to execute the following processes.
A process of issuing access information in response to a request from a referenced terminal and transmitting the access information to at least one of the referenced terminal and a reference requester terminal different from the referenced terminal.
When access is received from the inquiry requester terminal based on the access information and inquiry data of the inquired person is received, the inquiry data is compared with member data pre-stored in a specified storage device and the inquiry results are received.
A process of outputting the query result to the query requester terminal.

This disclosure can eliminate the hassle involved in authenticating face-to-face contact.

1 is a block diagram showing a configuration of an information processing device according to a first embodiment. 4 is a flowchart illustrating a flow of an information processing method according to the first embodiment. FIG. 11 is a block diagram showing the overall configuration of an information processing system according to a second embodiment. FIG. 4 is a block diagram showing a configuration of the entrance and exit management device of FIG. 3. FIG. 4 is a block diagram showing the configuration of the referred party terminal of FIG. 3. FIG. 4 is a block diagram showing a configuration of the inquiry requester terminal of FIG. 3 . FIG. 11 is a sequence diagram showing the flow of a referral process for a referred person in an information processing system according to a second embodiment. FIG. 13 is a diagram showing an example of a screen displayed on a query requester terminal. FIG. 11 is a block diagram showing the overall configuration of an information processing system according to a third embodiment. FIG. 10 is a block diagram showing a configuration of a management device shown in FIG. 9 . FIG. 13 is a block diagram showing the overall configuration of an information processing system according to a fourth embodiment.

Below, an embodiment of the present disclosure will be described in detail with reference to the drawings. In each drawing, the same or corresponding elements are given the same reference numerals, and duplicate explanations will be omitted as necessary for clarity of explanation.

In delivery services, home visit services, and the like, there is a demand for technology that can verify whether the identification presented by a visitor is correct in order to prevent visitors from impersonating others. Meanwhile, organizations such as companies routinely verify the identity of members who enter their facilities by using entrance and exit management devices, etc. The embodiment relates to technology that uses authentication data of members held by the organization to verify their identity to third parties.

Embodiment 1.
1 is a block diagram showing the configuration of an information processing device 1 according to a first embodiment. The information processing device 1 is a device that, for example, identifies a member of an organization that provides home visit services, home delivery services, etc., to a customer (third party) when the member visits the customer. Members include employees of the organization as well as service personnel who undertake the services provided by the organization. Examples of services provided by members include delivery of products purchased by customers, inspection of electricity, water, and fire extinguishers, door-to-door sales, home visits by police officers, and driving a taxi.

Each organization to which members belong manages member data relating to each member. In the following explanation, it is assumed that the information processing device 1 authenticates the identity of the member through biometric authentication using the member's biometric information. The member data includes authentication data (biometric information) of the member. As biometric information, data (feature amounts) based on physical characteristics unique to an individual, such as face, fingerprint, voiceprint, veins, retina, and iris, can be used. Various technologies that utilize captured images can be applied as biometric authentication using biometric information.

The member data may also include attribute data such as the name of the organization to which the member belongs, the organization's location, telephone number, and the member's name, age, gender, etc. The information processing device 1 can identify attribute data related to the member depending on the results of the member's identity verification.

　A member of an organization is a "person being checked" whose identity is verified, while a customer is an "inquiry requester" who requests identity verification from a member. A "person being checked" is a person who meets a customer either directly or indirectly via a monitor, for example. A terminal owned by a person being checked is referred to as an checked terminal, and a terminal owned by a person requesting the inquiry is referred to as an inquiry requester terminal. In the following explanation, a person being checked before their identity is verified is referred to as a "person being checked," and a person being checked whose identity has been verified is referred to as an "member."

The information processing device 1 performs various communications with external devices via a network. The network may be wired or wireless, and any type of communication protocol may be used. Specifically, the information processing device 1 is connected via the network to a referenced party terminal and a reference requester terminal (not shown). The referenced party terminal and the reference requester terminal may be mobile terminals owned by members and customers, respectively. The referenced party terminal and the reference requester terminal may be mobile terminals such as mobile phones, portable PCs, tablet terminals, or smartphones.

As shown in FIG. 1, the information processing device 1 mainly includes an issuing unit 11, a query unit 12, and an output unit 13. The issuing unit 11 issues access information in response to a request from the inquired party terminal, and transmits the access information to at least one of the inquired party terminal and the query requester terminal.

When the access information is sent to the inquired party terminal, the person on the other end displays the access information on their own inquired party terminal and presents it to the customer. The customer uses their own inquiry requester terminal to read the access information displayed on the inquired party terminal and accesses the information processing device 1 based on the access information. Note that when the access information is sent to the inquiry requester terminal, the customer can access the information processing device 1 based on the received access information.

The customer also uses the inquiry requester terminal to photograph the biometric information of the person they are meeting with, and supplies the photographed image data to the information processing device 1 as inquiry data. For example, a facial image of the person they are meeting with can be acquired by photographing the person with a camera mounted on the inquiry requester terminal. The inquiry requester terminal can transmit this image data to the information processing device 1 via the network. The inquiry requester terminal can also supply facial feature information, which is obtained by extracting features contained in the photographed image data, to the information processing device 1 as inquiry data.

When the inquiry unit 12 receives access based on the access information from an inquiry requester terminal different from the inquired person's terminal and also receives the inquiry data of the inquired person, it queries the member data pre-stored in a specified storage device and receives the inquiry result. The output unit 13 outputs the inquiry result to the inquiry requester terminal. In this way, by outputting the inquiry result to the inquiry requester terminal, the information processing device 1 can verify the identity of the person to the customer.

For example, the inquiry unit 12 performs facial authentication on the acquired facial image using facial feature information of the member stored in the storage device. If authentication is successful, the inquiry unit 12 can also identify attribute data of the member related to the facial authentication. The identified attribute data may be included in the inquiry result sent to the inquiry requester terminal. If the inquiry result includes attribute data, an electronic business card with a facial image of the identified member may be displayed on the inquiry requester terminal.

Next, the processing performed by the information processing device 1 will be described with reference to FIG. 2. FIG. 2 is a flowchart showing an information processing method performed by the information processing device 1 according to the first embodiment. First, the information processing device 1 issues access information in response to a request from the inquired party terminal and transmits it to the inquired party terminal (S11).

Next, when the information processing device 1 receives access based on the access information from a query requester terminal different from the query requestee terminal and query data of the query requestee, it queries the query data against registered person data previously stored in a specified storage device and receives the query results (S12). Note that the biometric information of the face-to-face person may be generated automatically by the query requester terminal or may be generated in response to input by the customer. Then, the query results are output to the query requester terminal (S13).

In this way, the information processing device 1 according to the first embodiment can remotely verify the identity of the person who meets with the customer, eliminating the hassle involved in authenticating the person who visits the customer. The information processing device 1 also prevents fraud, such as impersonation of a member of the company by a person who visits a customer to provide a service, making it possible to realize a safe service provision environment.

In addition, the information processing device 1 includes a processor, a memory, and a storage device, which are not shown in the figure. The storage device stores a program that causes a computer to execute each process of the information processing method according to the first embodiment. The processor loads the program from the storage device into the memory and executes the program. In this way, the processor realizes the functions of the issuing unit 11, the query unit 12, and the output unit 13.

Each component of the information processing device 1 may be realized by dedicated hardware. In addition, some or all of the components of each device may be realized by general-purpose or wired circuits, processors, etc., or a combination of these. These may be configured by a single chip, or by multiple chips connected via a bus. Some or all of the components of each device may be realized by a combination of the above-mentioned circuits, etc., and programs. In addition, a CPU (Central Processing Unit), GPU (Graphics Processing Unit), FPGA (Field-Programmable Gate Array), quantum processor (quantum computer control chip), etc. can be used as a processor.

Furthermore, when some or all of the components of the information processing device 1 are realized by multiple information processing devices, circuits, etc., the multiple information processing devices, circuits, etc. may be centrally arranged or distributed. For example, the information processing devices, circuits, etc. may be realized as a client-server system, cloud computing system, etc., in a form in which each is connected via a communication network. Furthermore, the functions of the information processing device 1 may be provided in the form of SaaS (Software as a Service).

Embodiment 2.
The second embodiment is a specific example of the first embodiment. Fig. 3 is a block diagram showing the overall configuration of an information processing system 100 according to the second embodiment. The information processing system 100 includes an entrance/exit management device 10 and a referenced person terminal 20 certified by the entrance/exit management device 10, and performs identity verification of the referenced person based on a request from a reference requester terminal 30 under a predetermined condition. The entrance/exit management device 10, the referenced person terminal 20, and the reference requester terminal 30 are each connected via a network N. Here, the network N is a wired or wireless communication line, for example the Internet.

The information processing system 100 is accessed from the inquiry requester terminal 30 held by the inquiry requester (customer) based on access information issued in response to a request from the inquiry requester terminal 20 held by the inquiry requester (member), and is a system that performs identity verification for the inquiry requester when inquiry data of the inquiry requester is received. Here, an example of performing face authentication using a face image, which is an example of biometric information, as the inquiry data will be described.

<Entrance/Exit Management Device 10>
The entrance/exit management device 10 is a device that can manage the working status of members belonging to an organization, including coming to work, going out, returning to work, and leaving the company, by managing the entrance and exit of members to and from a facility. The entrance/exit management device 10 includes the functional configuration of the information processing device 1 described above. The entrance/exit management device 10 performs information registration processing, inquiry processing (information processing method according to embodiment 2) for verifying the identity of the person being inquired (person meeting), and processing to identify attribute data of members. The entrance/exit management device 10 performs identity authentication using a photographed image of the person meeting, and outputs the inquiry result to the inquiry requester terminal 30.

FIG. 4 is a block diagram showing the configuration of the entrance/exit management device 10 in FIG. 3. The entrance/exit management device 10 comprises a camera 110, a storage unit 120, a memory 130, a control unit 140, and a communication unit 150. Note that the entrance/exit management device 10 may be composed of multiple servers, and each functional block may be realized by multiple computers.

Camera 110 is, for example, a photographing device that is installed within the facility of an organization and photographs members entering and leaving the facility under the control of control unit 26. Memory unit 120 is an example of a storage device such as a hard disk or flash memory. Memory unit 120 stores programs and information DB 121. The programs are computer programs that implement part of the registration and inquiry processes for members' facial images and attribute data. Information DB 121 is a database that manages member data including members' authentication data and attribute data. Information DB 121 can manage authentication data and attribute data by linking them to, for example, an identification number individually assigned to each member.

The memory 130 is a volatile storage device such as a RAM (Random Access Memory), and is a storage area for temporarily storing information when the control unit 140 is operating. The communication unit 150 is a communication interface with the network N.

The control unit 140 is a processor that controls each component of the entrance and exit management device 10. The control unit 140 loads a program from the storage unit 120 into the memory 130 and executes the program. In this way, the control unit 140 realizes the functions of the registration unit 141, the issuance unit 142, the inquiry unit 143, and the output unit 144.

The registration unit 141 registers the face image of the member captured by the camera 110 as authentication data, and also links the input attribute data with the authentication data and registers it in the information DB 121. These data may be transmitted from the inquired party terminal 20 carried by the member, which will be described later. For example, in order to register the facial feature information of the member, the registration unit 141 extracts features from the face area included in the image data and registers them in the information DB 121 as authentication data.

The issuing unit 142 issues access information in response to a request from the inquired party terminal 20 and transmits it to the inquired party terminal 20. The issuing unit 142 can generate code information that can be displayed as an image, such as a barcode or two-dimensional code (QR code (registered trademark)), as the access information and transmit it to the inquired party terminal 20. The inquired party can present the received access information as an image on the inquiry requester terminal 30.

The inquiry requester terminal 30 can access the entrance/exit management device 10 by reading the access information displayed on the inquired person terminal 20. The issuing unit 11 may also transmit the access information to the inquiry requester terminal 30. In this case, the inquiry requester terminal 30 can access the entrance/exit management device 10 using the received access information. The inquiry requester terminal 30 also photographs the face of the person it is meeting and supplies the photographed image data (or features extracted from the image data) to the entrance/exit management device 10 as inquiry data.

It is preferable that the access information has predetermined conditions set in advance. These predetermined conditions include conditions related to access restrictions based on the access information from the inquiry requester terminal 30. Examples of conditions related to access restrictions include the validity period and number of times the access information is valid.

The specified condition may also be that the location information of the inquired person terminal 20 approximately matches the location information of the inquiry requester terminal 30, or is within a specified range. Alternatively, the specified condition may be that the inquiry requester terminal 30 accesses the entrance/exit management device 10 while the entrance/exit management device 10 is being accessed by the inquired person terminal 20. The entrance/exit management device 10 can be accessed based on the access information from the inquiry requester terminal 30 when the specified condition is met.

When the inquiry unit 143 receives access based on the access information from an inquiry requester terminal 30 different from the inquired person terminal 20 and also receives the inquiry data of the inquired person, it queries the member data stored in advance in a specified storage device and receives the inquiry result. The output unit 144 returns the inquiry result to the inquiry requester terminal 30 that originated the request.

Specifically, when the query unit 143 receives an authentication request for the person being referenced from the query requester terminal 30, it extracts facial feature information from the facial image included in the authentication request. The query unit 143 then compares the facial feature information extracted from the facial image included in the facial authentication request with the authentication data in the information DB 121 to calculate the degree of match. If the degree of match of the facial feature information is equal to or greater than a threshold, the query unit 143 outputs a query result indicating that facial authentication was successful. Note that in this case, the query unit 143 may identify attribute data of the person being referenced and further transmit the identified attribute data to the query requester terminal 30. The query unit 143 can output at least one of the query result and the attribute data.

If the degree of match of the facial feature information is less than the threshold, the query unit 143 generates a query result indicating that facial authentication has failed. The output unit 144 returns the query result to the query requester terminal 30 via the network N.

When sending the inquiry result to the inquiry requester terminal 30, the entrance and exit management device 10 may create a meeting record indicating that the member met with the customer. This allows the member to carry out business activities fairly and impartially without violating social norms.

The control unit 140 may also receive an identification number of the person being inquired from the inquired person terminal 20, and change the order of priority when inquiring against the member data depending on the received identification number. For example, the member data corresponding to the received identification number may be stored in a cache, and when an inquiry request is received from the inquiry requester terminal 30, the member data stored in the cache may be given priority for matching with the inquired data. This can shorten the time it takes to authenticate the person being inquired. The member data stored in the cache may be deleted after a predetermined time has elapsed.

<Inquired Person Terminal 20>
The inquired person terminal 20 is an information terminal that is possessed and operated by an affiliate who is the inquired person (facing person) and transmits and receives data to and from the entrance and exit management device 10 via the network N by wireless communication. The inquired person terminal 20 is a portable terminal such as a mobile phone, smartphone, tablet terminal, etc. Fig. 5 is a block diagram showing the configuration of the inquired person terminal 20 in Fig. 3.

The inquired person terminal 20 comprises a camera 21, a storage unit 22, a memory 23, a communication unit 24, an input/output unit 25, and a control unit 26. The camera 21 is an image capturing device that captures images under the control of the control unit 26. The storage unit 22 is an example of a storage device that includes a non-volatile memory such as a flash memory or SSD (Solid State Drive). The storage unit 22 stores a program that implements processes including a process for requesting access information from the entrance/exit management device 10 and a process for displaying the obtained access information.

The memory 23 is a volatile storage device such as a RAM (Random Access Memory), and is a storage area for temporarily holding information when the control unit 26 is operating. The communication unit 24 is a communication interface with the network N. The communication unit 24 may also establish a short-range wireless communication connection with the inquiry requester terminal 30 and perform communication. Here, various standards such as Bluetooth (registered trademark), BLE (Bluetooth Low Energy), and UWB (Ultra Wide Band) can be applied to the short-range wireless communication.

The input/output unit 25 includes a display device and an input device, for example a touch panel. The control unit 26 is a processor that controls the hardware of the inquired person terminal 20. The control unit 26 loads a program from the storage unit 22 into the memory 23 and executes it. In this way, the control unit 26 realizes the functions of an access information request unit 261 and a display control unit 262.

The request unit 261 requests the entrance/exit management device 10 to issue access information via the network N in response to the information input by the person being inquired. The issuing unit 11 can generate access information in response to the request and send it to the person being inquired terminal 20. The display control unit 262 causes the input/output unit 25 to display the received access information. As will be described in more detail later, the inquiry requester terminal 30 can read the access information displayed on the input/output unit 25 and access the entrance/exit management device 10 based on the access information.

As described above, the facial feature information of the person being inquired is pre-registered as authentication data in the information DB 121 of the entrance/exit management device 10. In addition, the attribute data of the person being inquired is also pre-registered in the information DB 121. The authentication data and attribute data are included in the member data. Note that an authentication device for performing facial authentication may be provided separately from the entrance/exit management device 10. In this case, the authentication data may be registered in the DB of the authentication device, and the authentication data and attribute data may be linked by an ID issued at the time of registration. The display control unit 262 can display the access information received from the entrance/exit management device 10 via the network N.

<Inquiry requester terminal 30>
The inquiry requester terminal 30 is an information terminal that is carried and operated by a customer who is a person making an inquiry request, and transmits and receives data to and from the entrance and exit management device 10 via the network N by wireless communication. The inquiry requester terminal 30 is a mobile terminal such as a mobile phone, smartphone, or tablet terminal. The inquiry requester terminal 30 may also be an intercom or a security camera installed in the home of the person making the inquiry request. The inquiry requester terminal 30 reads the access information displayed on the inquired person terminal 20, and attempts to access the entrance and exit management device 10 based on the access information. The inquiry requester terminal 30 also photographs the face of the person being inquired, and transmits an authentication request including the face image to the entrance and exit management device 10. The inquiry requester terminal 30 receives and displays the inquiry result of the person being inquired.

FIG. 6 is a block diagram showing the configuration of the inquiry requester terminal 30 of FIG. 3. As shown in FIG. 6, the inquiry requester terminal 30 includes a camera 31, a storage unit 32, a memory 33, a communication unit 34, an input/output unit 35, and a control unit 36. This is an example in which the imaging device and the display terminal are integrated.

The camera 31 is a photographing device that takes pictures according to the control of the control unit 36. The memory unit 32 is an example of a memory device that includes a non-volatile memory such as a flash memory or SSD (Solid State Drive). The memory unit 32 stores a program that implements each process, including the authentication request process for the person being inquired, which will be described later.

The memory 33 is a volatile storage device such as a RAM (Random Access Memory), and is a storage area for temporarily holding information when the control unit 36 is operating. The communication unit 34 is a communication interface with the network N. The input/output unit 35 includes a display device (display terminal) such as a screen and an input device, for example a touch panel.

The control unit 36 is a processor that controls the hardware of the inquiry requester terminal 30. The control unit 36 loads a program from the storage unit 32 into the memory 33 and executes it. In this way, the control unit 36 realizes the functions of the display control unit 361 and the authentication request unit 362.

The display control unit 361 causes the input/output unit 35 to display the query results generated by the execution of the program. The display control unit 361 may also cause the input/output unit 35 to display a message encouraging the user to photograph the face of the person being inquired for facial authentication.

The authentication request unit 362 extracts the human facial area as a facial image from the image of the person being inquired about taken by the camera 31, and sends an authentication request including the facial image to the entrance/exit management device 10. The authentication request unit 362 may also send facial feature information extracted from the facial image to the entrance/exit management device 10. The entrance/exit management device 10 sends the inquiry result of the person being inquired to the inquiry requester terminal 30. If the authentication is successful, the display control unit 361 causes the input/output unit 35 to display the inquiry result that proves the identity of the person being inquired. The person requesting the inquiry can confirm the legitimacy of the identity of the person being inquired by checking the display on the screen.

In this way, the information processing system 100 can use the entrance and exit management device 10 installed in the organization to which the member belongs to to verify the identity of the person being inquired upon request from the person making the inquiry, eliminating the hassle involved in authenticating the person in person.

FIG. 7 is a sequence diagram showing the flow of the inquiry process for the inquired person. First, the inquired person terminal 20, which is permitted to access the entrance/exit management device 10, requests the entrance/exit management device 10 to issue access information (S20). The entrance/exit management device 10 issues access information (S21) and sends it to the inquired person terminal 20. The inquired person can display the access information on the inquired person terminal 20 (S22) and present it to the person requesting the inquiry. Note that the entrance/exit management device 10 may also send the access information directly to the inquiry requester terminal.

Then, the inquiry requester terminal 30 reads the access information displayed on the screen of the inquired party terminal 20 (S23). The inquiry requester terminal 30 may read the access information presented by the person facing the person in person, or may read the access information presented through a monitor such as an intercom. In addition, if the inquiry requester terminal 30 is an intercom, it is also possible to read the access information presented by the person facing the person using the intercom's camera.

The entrance/exit management device 10 can also verify the identity of the caller who is face-to-face through a monitor when holding a video conference or the like. In this case, the inquiry requester terminal 30 can read the caller's access information presented through the monitor. In addition, the terminal itself, on which an application program for holding a video conference is running, can also access the entrance/exit management device 10 based on the access information and obtain a facial image of the caller.

Once reading of the access information is complete, the inquiry requester terminal 30 accesses the entrance/exit management device 10 based on the access information (S24). At this time, a message encouraging the inquiry requester terminal 30 to take a photograph of the person being inquired may be displayed on the screen of the inquiry requester terminal 30. The inquiry requester terminal 30 then takes a photograph of the face of the person being inquired using the camera 31 (S25). The inquiry requester terminal 30 then transmits a face recognition request including the face image to the entrance/exit management device 10 (S26). Upon receiving the face recognition request, the inquiry unit 143 of the entrance/exit management device 10 performs an inquiry process (S27).

Specifically, the query unit 143 extracts facial feature information from the facial image included in the facial recognition request, compares it with the authentication data in the information DB 121, and calculates the degree of match. When the feature amount (facial feature information) extracted from the facial image is sent from the query requester terminal 30, the query unit 143 compares the facial feature information with the authentication data. When the facial feature information matches, that is, when the degree of match of the facial feature information is equal to or greater than the threshold, a query result indicating that the facial recognition was successful is returned to the query requester terminal 30 via the network N (S28). In this case, the query unit 143 may identify attribute data associated with the facial feature information, and include the identified attribute data in the query result. The query requester terminal 30 then displays the received query result (S29).

If the facial authentication fails, the entrance/exit management device 10 can transmit an inquiry result indicating the failure of the authentication to the inquiry requester terminal 30. The inquiry requester terminal 30 displays on the screen that the facial authentication has failed. The inquiry requester terminal 30 may also notify the inquired person terminal 20 that the facial authentication has failed by short-range wireless communication or the like.

In this way, according to the first embodiment, it is possible to provide proof of identity to customers, providing a sense of security when receiving services. It is also possible to prevent crimes such as fraud caused by a face-to-face person impersonating a member. Furthermore, face-to-face proof can ensure transparency in corporate activities and strengthen compliance.

In addition, the entrance and exit management device 10 can be used to centrally manage the biometric information (authentication data) of members, eliminating the need for complicated procedures and operations. Furthermore, when verifying the identity of a member, access information is issued by the referenced terminal 20 held by the member, and an authentication request is made by the reference requester terminal 30 held by the customer, preventing fraud.

The inquiry requester terminal 30 may display an electronic business card using attribute data output in response to successful biometric authentication. FIG. 8 is a diagram showing an example of a screen displayed on the inquiry requester terminal 30. The screen includes an image 2 related to facial authentication of the inquired person, a display 3 of the results of the facial authentication, and an information display 4.

The screen shown in Figure 8 is obtained when the holder of the inquiry requester terminal 30 makes an inquiry request for the inquired person based on the access information presented by the inquired person who has visited their home, and facial recognition of the inquired person is successful. Information display 4 shows attribute data including the inquired person's name, etc. Note that the attribute data shown in Figure 8 is an example, and other information may be displayed in addition to or instead of the information shown here. The inquiry requester can refer to this information displayed on the inquiry requester terminal 30 and welcome the inquired person into their home with peace of mind.

Embodiment 3.
The third embodiment is a modified example of the second embodiment. Fig. 9 is a block diagram showing the overall configuration of an information processing system 100A according to the third embodiment. The information processing system 100A includes an entrance/exit management device 10 and a referenced person terminal 20 certified by the entrance/exit management device 10, and performs identity verification of the referenced person based on a request from a reference requester terminal 30 under a predetermined condition.

Furthermore, as a difference from embodiment 2, in embodiment 3, the management device 40 provides a cloud service that certifies the validity of the access information issued by the entrance/exit management device 10, and functions as an authentication infrastructure. In other words, the management device 40 is a trusted third party (TTP). The entrance/exit management device 10, the inquired person terminal 20, the inquiry requester terminal 30, and the management device 40 are each connected via a network N. The following will mainly explain the differences from embodiment 2.

The management device 40 is, for example, a cloud server, and is an authentication infrastructure equipped with an authentication function that proves the validity of access information. In other words, the management device 40 proves that the access information presented by the member has been issued by a reliable entrance/exit management device 10.

FIG. 10 is a block diagram showing the functional configuration of the management device 40. As shown in FIG. 10, the entrance/exit management device 10 includes a reception unit 41, a response unit 42, and a memory unit 43. Information related to the entrance/exit management device 10 is registered in the memory unit 43 as certification information. The information related to the entrance/exit management device 10 may include the corporate ID of the organization in which the entrance/exit management device 10 is installed, access information issued to the reference terminal 20 that can access the entrance/exit management device 10, credit information obtained by the organization in which the entrance/exit management device 10 is installed undergoing a prior screening, and the like.

The reception unit 41 receives access information issued by the entrance/exit management device 10 when the entrance/exit management device 10 receives a request to issue access information from the inquired person terminal 20. Instead of or in addition to receiving the access information from the entrance/exit management device 10, the reception unit 41 may also receive a request to inquire about the access information when the inquiry requester terminal 30 accesses the entrance/exit management device 10 based on the access information. The access information and inquiry request may include location information, time information, etc. of the inquired person terminal 20 and the inquiry requester terminal 30.

The response unit 42 queries the storage unit 43 for the received access information, determines whether the access information is valid, and returns the determination result to the inquiry requester terminal 30. For example, the access information may include a company ID indicating the organization that has introduced the entrance/exit management device 10. The response unit 42 can determine whether the company ID included in the access information matches the company ID stored in the storage unit 43. Alternatively, the response unit 42 may audit the URL represented by the two-dimensional code serving as the access information.

The response unit 42 can also determine the validity of access information in response to a request for access information from the inquiry requester terminal 30 and return the result of the determination to the inquiry requester terminal 30. This allows customers to safely access the entrance and exit management device 10 based on reliable access information.

The response unit 42 may determine that the access information is valid if, in addition to the access information, the location information and time information of the inquired person's terminal 20 and the inquiry requester's terminal 30 match. This makes it possible to prevent the identity of the inquired person from being verified based on fraudulent access information.

Embodiment 4.
The fourth embodiment is a further modified example of the second embodiment. Fig. 11 is a block diagram showing the overall configuration of an information processing system 100B according to the fourth embodiment. The information processing system 100B includes an entrance/exit management device 10 and a referenced person terminal 20 certified by the entrance/exit management device 10, and performs identity verification of a referenced person based on a request from an entrance/exit management device 50 different from the entrance/exit management device 10 under a predetermined condition. The entrance/exit management device 10, the referenced person terminal 20, and the entrance/exit management device 50 are each connected via a network N.

Here, the entrance/exit management device 10 is a system that manages the entrance/exit of members belonging to company A to the facilities of said company A. The entrance/exit management device 50 is a system that manages the entrance/exit of members belonging to a different company B to the facilities of said company B. The entrance/exit management device 50 may include a configuration similar to the inquiry requester terminal 30 shown in FIG. 6. For example, the entrance/exit management device 50 may include a camera or monitor installed at the entrance of company B, a control unit that sends an authentication request for the person being inquired to the entrance/exit management device 10, etc.

The entrance/exit management device 50 can access the entrance/exit management device 10 based on the access information by reading the access information presented by an employee of company A (inquired person) who is visiting company B using a camera installed at the entrance of company B. The entrance/exit management device 50 can also take a picture of the inquired person using a camera installed at the entrance of company B to generate a facial image, and send an authentication request together with the facial image to the entrance/exit management device 10.

The result of the inquiry for the employee of company A is sent from entrance/exit management device 10 to entrance/exit management device 50. If the authentication is successful, the inquiry result verifying the identity of the person being inquired can be displayed, for example, on a monitor installed at the entrance of company B. This allows the entrance/exit management device 50 of company B to allow the visiting employee of company A to enter company B.

The entrance/exit management device 50 may have substantially the same functional configuration as the entrance/exit management device 10 described above. That is, the entrance/exit management device 10 and the entrance/exit management device 50 may both have the mechanical configuration of the information processing device 1. As a result, when a member of company B visits company A, the member data managed by the entrance/exit management device 50 of company B can be used to verify the identity of the member of company B. That is, in this case, the member data of companies A and B can be mutually used to verify the identity of the visitor.

In addition, the information processing system 100B according to the third embodiment may be used as a system for verifying the employment status of the company to which the person being referred belongs when company B is a financial institution and the person being referred to undergoes loan screening at the financial institution. Furthermore, the information processing system 100B may also be used when verifying the identity of a bidder in a public bidding by a government agency or other government institution. In other words, the inquiry result issued by the entrance and exit management device 10 may be used as an official certificate of employment.

Note that the program for executing the above-mentioned processes includes a set of instructions (or software code) for causing the computer to perform one or more functions described in the embodiments when the program is loaded into the computer. The program may be stored on a non-transitory computer-readable medium or a tangible storage medium. By way of example and not limitation, computer-readable medium or tangible storage medium may include random-access memory (RAM), read-only memory (ROM), flash memory, solid-state drive (SSD) or other memory technology, CD-ROM, digital versatile disc (DVD), Blu-ray (registered trademark) disc or other optical disk storage, magnetic cassette, magnetic tape, magnetic disk storage or other magnetic storage device. The program may be transmitted on a transitory computer-readable medium or a communication medium. By way of example and not limitation, the transitory computer-readable medium or communication medium may include electrical, optical, acoustic, or other forms of propagated signals.

Note that this disclosure is not limited to the above-described embodiments, and can be modified as appropriate without departing from the spirit of the disclosure. In addition, this disclosure can be implemented by combining the respective embodiments as appropriate.

In the above explanation, the identification of the affiliation is performed by performing biometric authentication, but this is not limited to this example. For example, when registering the attribute data of the affiliation, the server that manages the attribute data may issue an authentication ID and password linked to the attribute data. In this case, the customer can identify themselves by inputting the ID and password of the affiliation. The information processing device of the embodiment can also be incorporated into an intercom or surveillance camera installed in a home.

A part or all of the above-described embodiments can be described as, but is not limited to, the following supplementary notes.
(Appendix A1)
an issuing unit that issues access information in response to a request from a referred person terminal and transmits the access information to the referred person terminal;
a query unit which, when receiving access based on the access information from a query requester terminal different from the query requester terminal, and also receiving query data of the query requester, queries the query data against member data stored in advance in a predetermined storage device, and receives a query result;
an output unit for outputting the query result to the query requester terminal;
An information processing device comprising:
(Appendix A2)
The access information has a predetermined condition set in advance,
the inquiry unit receives access based on the access information from the inquiry requester terminal when the predetermined condition is satisfied;
2. The information processing device according to claim 1 .
(Appendix A3)
the predetermined conditions include conditions regarding restrictions on access based on the access information from the inquiry requester terminal;
The information processing device according to claim A2.
(Appendix A4)
Member data is linked to attribute data about members,
The output unit outputs at least one of the query result and attribute data of the inquired person when the query of the query data is successful.
2. The information processing device according to claim 1 .
(Appendix A5)
The storage device manages the member data by linking it to an identification number,
A change unit is further provided which receives an identification number of the person to be referred from the person to be referred to and changes the order of priority when the referred data is referred to the member data according to the received identification number.
2. The information processing device according to claim 1 .
(Appendix A6)
the issuing unit provides the access information to the referenced person terminal so that the referenced person can present the access information to the reference requester terminal as image data;
2. The information processing device according to claim 1 .
(Appendix A7)
the inquiry data includes biometric information acquired from the inquired person by the inquiry requester terminal,
2. The information processing device according to claim 1 .

(Appendix B1)
An information processing device and a referee terminal certified by the information processing device,
The information processing device includes:
an issuing unit that issues access information in response to a request from the referred person terminal and transmits the access information to the referred person terminal;
a query unit which, when receiving access based on the access information from a query requester terminal different from the query requester terminal and query data of the query requester, queries the query data against member data stored in advance in a predetermined storage device and receives a query result;
an output unit for outputting the query result to the query requester terminal;
Equipped with
Information processing system.

(Appendix C1)
The computer
A process of issuing access information in response to a request from a referred person terminal and transmitting the access information to the referred person terminal;
a process of receiving access based on the access information from a query requester terminal different from the query requester terminal and query data of the query requester, querying the query data against member data stored in advance in a predetermined storage device, and receiving a query result;
outputting the query result to the query requester terminal;
An information processing method.

(Appendix D1)
A process of issuing access information in response to a request from a referred person terminal and transmitting the access information to the referred person terminal;
a process of receiving access based on the access information from a query requester terminal different from the query requester terminal and query data of the query requester, querying the query data against member data stored in advance in a predetermined storage device, and receiving a query result;
outputting the query result to the query requester terminal;
to cause a computer to execute
A non-transitory computer-readable medium on which a program is stored.

(Appendix E1)
The system includes an information processing device, a referenced party terminal certified by the information processing device, and a reference requester terminal different from the referenced party terminal,
The information processing device includes:
an issuing unit that issues access information in response to a request from the referred person terminal and transmits the access information to the referred person terminal;
a query unit which, when receiving access based on the access information from the query requester terminal and query data of the person being referenced, queries the query data against member data stored in advance in a predetermined storage device, and receives a query result;
an output unit for outputting the query result to the query requester terminal;
Equipped with
Information processing system.

REFERENCE SIGNS LIST 1 Information processing device 10 Entrance/exit management device 11 Issuance unit 12 Inquiry unit 13 Output unit 14 Storage device 20 Inquired person terminal 21 Camera 22 Storage unit 23 Memory 24 Communication unit 25 Input/output unit 26 Control unit 261 Request unit 262 Display control unit 30 Inquiry requester terminal 31 Camera 32 Storage unit 33 Memory 34 Communication unit 35 Input/output unit 36 Control unit 361 Display control unit 362 Authentication request unit 40 Management device 41 Reception unit 42 Response unit 43 Storage unit 50 Entrance/exit management device 100 Information processing system 110 Camera 120 Storage unit 121 Information DB
130 Memory 140 Control unit 141 Registration unit 142 Issuance unit 143 Inquiry unit 144 Output unit 150 Communication unit N Network

Claims

an issuing unit that issues access information in response to a request from a referenced terminal and transmits the access information to at least one of the referenced terminal and a reference requester terminal different from the referenced terminal;
a query unit, when receiving access based on the access information from the query requester terminal and query data of the person being referenced, querying the query data against member data stored in advance in a predetermined storage device and receiving a query result;
an output unit for outputting the query result to the query requester terminal;
An information processing device comprising:
The access information has a predetermined condition set in advance,
the inquiry unit receives access based on the access information from the inquiry requester terminal when the predetermined condition is satisfied;
The information processing device according to claim 1 .
the predetermined conditions include conditions regarding restrictions on access based on the access information from the inquiry requester terminal;
The information processing device according to claim 2 .
Member data is linked to attribute data about members,
The output unit outputs at least one of the query result and attribute data of the inquired person when the query of the query data is successful.
The information processing device according to claim 1 .
The storage device manages the member data by linking it to an identification number,
A change unit is further provided which receives an identification number of the person to be referred from the person to be referred to and changes the order of priority when the referred data is referred to the member data according to the received identification number.
The information processing device according to claim 1 .
the issuing unit provides the access information to the referenced person terminal so that the referenced person can present the access information to the reference requester terminal as image data;
The information processing device according to claim 1 .
the inquiry data includes biometric information acquired from the inquiry recipient by the inquiry requester terminal,
The information processing device according to claim 1 .
An information processing device and a referee terminal certified by the information processing device,
The information processing device includes:
an issuing unit that issues access information in response to a request from the inquired person terminal and transmits the access information to at least one of the inquired person terminal and an inquiry requester terminal different from the inquired person terminal;
a query unit which, when receiving access based on the access information from the query requester terminal and query data of the person being referenced, queries the query data against member data stored in advance in a predetermined storage device, and receives a query result;
an output unit for outputting the query result to the query requester terminal;
Equipped with
Information processing system.
The computer
a process of issuing access information in response to a request from a referenced terminal and transmitting the access information to at least one of the referenced terminal and a reference requester terminal different from the referenced terminal;
a process of receiving access based on the access information from the inquiry requester terminal and inquiry data of the inquired person, comparing the inquiry data with member data stored in advance in a predetermined storage device, and receiving the inquiry result;
outputting the query result to the query requester terminal;
An information processing method.
a process of issuing access information in response to a request from a referenced terminal and transmitting the access information to at least one of the referenced terminal and a reference requester terminal different from the referenced terminal;
a process of, when receiving access based on the access information from the inquiry requester terminal and inquiry data of the inquired person, comparing the inquiry data with member data stored in advance in a predetermined storage device and receiving the inquiry result;
outputting the query result to the query requester terminal;
to cause a computer to execute
A non-transitory computer-readable medium on which a program is stored.