JP2010198505A - Authentication system, authentication device, authentication method, and authentication program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To allow a service provider (a service provision device) not knowing personal information of a customer whether or not the customer has rightful qualification to receive a service. <P>SOLUTION: A terminal 40 reads a chip ID from a non-contact IC chip of a non-contact IC card 60 or a cellular phone 70 by using a non-contact IC card reader 41 and transmits the chip ID to a service provision device 30. The service provision device 30 receives the chip ID to transmits a qualification authentication request including the chip ID to an authentication device 20. When receiving the qualification authentication request, the authentication device 20 searches a personal information table 22A using the chip ID, as a key, included in the qualification authentication request. The authentication device 20 determines whether or not the customer has the qualification to receive the service on the basis of the retrieved personal information. The authentication device 20 returns the qualification authentication information, showing the presence or absence of the determined qualification of the customer, to the service provision device 30. The service provision device 30 receives the qualification authentication information to operate the terminal 40 according to the qualification authentication information. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to an authentication system, an authentication device, an authentication method, and an authentication program for authenticating the qualification of a customer who receives a service.

  There has been proposed a personal authentication system in which an authentication device (authentication server) connected to a network authenticates a user based on a fingerprint image of the user registered in the authentication device (see, for example, Patent Document 1). . In this personal authentication system, a cellular phone or a terminal connected to a network reads a user's fingerprint with a fingerprint reading device and transmits the fingerprint to the authentication device. The authentication device compares the registered fingerprint image with the transmitted fingerprint image and authenticates the user.

  By using this personal authentication system, the customer can be personally authenticated by the authentication device without registering the customer's fingerprint image for each terminal. That is, the terminal can perform personal authentication of the customer based on the highly reliable fingerprint image registered in the authentication device.

JP 2001-312476 A

  However, in addition to authenticating the individual customer, the service provider may need to authenticate whether the customer has a legitimate qualification for service.

  For example, when selling cigarettes and alcoholic beverages, it must be authenticated that the purchaser is over 20 years old. In addition, for movies for which R-15 is designated, it is necessary to authenticate that the movie theater visitors are 15 years of age or older.

In such a case, the service provider cannot authenticate the existence of a valid qualification without knowing personal information such as the age of the customer.
However, it may not be preferable to present the customer's personal information to the service provider. Furthermore, if the personal information presented by the service provider is individually managed, there is a possibility that the reliability of the personal information is low and the countermeasures against the leakage of the personal information are not sufficient.

  The present invention has been made in view of the above problems, and an authentication system that allows a service provider (service providing apparatus) who does not know the customer's personal information to authenticate the right qualification to receive the customer's service, An object is to provide an authentication device, an authentication method, and an authentication program.

In order to achieve the above object, an authentication system according to the present invention is an authentication system including a plurality of service providing apparatuses and authentication apparatuses,
Each of the service providing devices
Multiple devices that obtain personally identifiable information that identifies the individual receiving the service;
Qualification request sending means for sending a qualification request including personal identification information acquired by each terminal to the authentication device;
Qualification authentication information receiving means for receiving from the authentication device qualification authentication information indicating the presence or absence of the qualification of the individual receiving the service;
In accordance with the qualification authentication information received by the qualification authentication information receiving means, terminal control means for causing the terminal that acquired the personal identification information to perform a predetermined operation;
With
The authentication device
Storage means for storing personal information indicating individual attributes;
Qualification request receiving means for receiving a qualification request transmitted by each of the service providing devices;
In response to receiving the qualification request by the qualification request receiving means, an individual identified by the personal identification information included in the qualification request is based on the personal information stored in the storage means. Determining means for determining whether or not the user is eligible to receive the service;
Qualification authentication information transmitting means for transmitting the qualification authentication information indicating the presence or absence of the individual qualification determined by the determination means to the service providing apparatus that has transmitted the qualification authentication request;
Comprising
It is characterized by that.

Further, the authentication device according to the present invention includes a storage unit that stores personal information indicating an individual attribute;
Qualification authentication request receiving means for receiving a qualification authentication request including personal identification information for identifying an individual receiving a service from the service providing device;
In response to receiving the qualification request by the qualification request receiving means, an individual identified by the personal identification information included in the qualification request is based on the personal information stored in the storage means. Determining means for determining whether or not the user is eligible to receive the service;
Qualification authentication information transmitting means for transmitting qualification authentication information indicating the presence or absence of the personal qualification determined by the determination means to the service providing device;
It is characterized by providing.

An authentication method according to the present invention is an authentication method in an authentication system including a plurality of service providing devices and an authentication device,
A storage step in which the authentication device stores personal information indicating an individual attribute in a storage unit;
A specific information acquisition step in which the terminal of each service providing device acquires personal identification information identifying an individual who receives the service;
A qualification request transmission step in which each service providing device transmits a qualification request including personal identification information acquired by the terminal to the authentication device;
A qualification request receiving step in which the authentication device receives a qualification request transmitted by each of the service providing devices;
In response to the authentication device receiving the qualification request, the individual specified by the personal identification information included in the qualification request is based on the personal information stored in the storage means. A determination step of determining whether or not the person is eligible for service;
A qualification authentication information transmission step in which the authentication device transmits qualification authentication information indicating the presence or absence of the qualification to receive the determined service to the service providing device that has transmitted the qualification authentication request;
A service providing apparatus that has transmitted the qualification authentication request receives a qualification authentication information from the authentication apparatus,
A terminal control step in which the service providing apparatus that has transmitted the qualification authentication request causes the terminal that has acquired the personal identification information to perform a predetermined operation according to the received qualification authentication information;
It is characterized by providing.

An authentication program according to the present invention includes a computer,
Storage means for storing personal information indicating individual attributes;
Qualification authentication request receiving means for receiving a qualification authentication request including personal identification information for identifying an individual receiving a service from the service providing device;
In response to receiving the qualification request by the qualification request receiving means, an individual identified by the personal identification information included in the qualification request is based on the personal information stored in the storage means. Determining means for determining whether or not the user is eligible to receive the service;
Qualification authentication information transmitting means for transmitting qualification authentication information indicating the presence or absence of the personal qualification determined by the determination means to the service providing device;
And make it work.

  ADVANTAGE OF THE INVENTION According to this invention, the service provider (service provision apparatus) which does not know a customer's personal information can be made to authenticate the presence or absence of the valid qualification which receives a customer's service.

It is a figure which shows an example of the authentication system which concerns on the 1st Embodiment of this invention. It is a figure which shows an example of the content of a personal information table. It is an example of the front view of the terminal corresponding to a some service. It is a flowchart which shows each process which a terminal, a service provision apparatus, and an authentication apparatus perform. It is a figure which shows an example of the authentication system which concerns on the 2nd Embodiment of this invention. It is a figure which shows the other example of the content of a personal information table.

  Hereinafter, an authentication system according to a first embodiment of the present invention will be described with reference to the drawings.

  As shown in FIG. 1, an authentication system 1A according to the first embodiment of the present invention includes an authentication device (authentication server) 20, a service provision device (service provision server) 30-1, and a service provision connected to a network 10. And a device (service providing server) 30-2.

  The authentication device 20 has a storage device 21. The storage device 21 is rewritable and stores a personal information table 22A in which personal information is registered as will be described later.

  The service providing apparatus 30-1 and the service providing apparatus 30-2 can communicate with a plurality of terminals. Each terminal includes a non-contact IC card reader that can acquire information in a non-contact manner from a non-contact IC card. The terminal may be a vending machine equipped with a non-contact IC card reader.

  For example, the service providing apparatus 30-1 is connected to the terminal 40-1, the terminal 40-2, and the vending machine 50-1 by a dedicated line. A non-contact IC card reader 41-1 and a non-contact IC card reader 41-2 are connected to the terminal 40-1 and the terminal 40-2, respectively. FIG. 1 shows a state where the non-contact IC card reader 41-2 acquires information from the non-contact IC card 60-1 having a built-in non-contact IC chip.

  In addition, the service providing apparatus 30-2 communicates with the terminal 40-3, the terminal 40-4, the vending machine 50-2, and the network 11. A non-contact IC card reader 41-3 and a non-contact IC card reader 41-4 are connected to the terminal 40-3 and the terminal 40-4, respectively. In FIG. 1, the non-contact IC card reader 41-3 acquires information from the non-contact IC card 60-2 incorporating a non-contact IC chip, and the vending machine 50-2 has a mobile phone 70 equipped with the non-contact IC chip. The information is being acquired from. Although FIG. 1 shows the network 10 and the network 11 separately, the network 11 may be a VPN (Virtual Private Network) built on the network 10.

  The terminal 40-1, the terminal 40-2, the terminal 40-3, the terminal 40-4, the vending machine 50-1, and the vending machine 50-2 are installed in the store, and the service providing apparatus 30-1 and the service are provided. The providing device 30-2 may be installed at a remote center. The service providing device 30-1, the terminal 40-1, the terminal 40-2, and the vending machine 50-1 are installed in one store, and the service providing device 30-2, the terminal 40-3, and the terminal 40 are provided. -4 and vending machine 50-2 may be installed in another store.

  Hereinafter, the service providing apparatus 30-1 and the service providing apparatus 30-2 will be referred to as the service providing apparatus 30 when it is not necessary to distinguish them individually. Similarly, when it is not necessary to individually distinguish the terminal, the non-contact IC card reader, the vending machine, and the non-contact IC card, the terminal 40, the non-contact IC card reader 41, the vending machine 50, and the non-contact IC card 60, respectively. .

  In addition to the storage device 21, the authentication device 20 includes a CPU (Central Processing Unit), a memory, an interface to the network 10, an input device such as a keyboard and a non-contact IC card reader, and the like. The authentication device 20 executes the program stored in the memory to authenticate the customer's qualification in response to the qualification request from the service providing device 30.

In the personal information table 22A, as shown in FIG. 2, for example, the name, address, and age are registered corresponding to the chip ID (Identifier) of the non-contact IC card or the non-contact IC chip built in the mobile phone. Yes. The chip ID is an example of personal identification information that identifies an individual who receives a service, and the chip ID, name, address, and age are examples of personal information indicating customer attributes.
The personal information registered in the personal information table 22A is registered after receiving a presentation of an identification card such as a driver's license from a customer and strict examination. The examined customer's personal information is input to the authentication device 20 using an input device provided in the authentication device 20 or a personal computer (not shown) connected to the network 10 and written in the personal information table 22A of the storage device 21.

  When receiving the qualification request transmitted by the service providing device 30, the authentication device 20 searches the personal information table 22A using the chip ID included in the qualification request as a key. The authentication device 20 determines whether or not the customer is eligible for service based on the retrieved personal information of the customer. For example, for the service of selling tobacco, it is determined whether or not the customer is over 20 years old based on the age of the customer registered in the personal information table 22A. The authentication device 20 sends back to the service providing device 30 qualification authentication information indicating the presence or absence of the determined customer qualification.

The terminal 40 acquires a chip ID and a service code that identifies the service.
A chip ID is recorded in the non-contact IC chip built in the non-contact IC card 60 and the mobile phone 70. The terminal 40 reads the customer's chip ID from the non-contact IC card 60 or the non-contact IC chip of the mobile phone 70 using the non-contact IC card reader 41.

  As shown in FIG. 3, the terminal 40 corresponding to a plurality of services has an input unit 42 such as a numeric keypad and a display unit 43 for displaying a message. Further, a non-contact IC card reader 41 is connected to the terminal 40. When the customer or the store clerk inputs the service code from the input unit 42, the terminal 40 acquires the service code. Alternatively, the number specifying the service input from the input unit 42 by the customer or the store clerk is converted into a service code. The terminal 40 transmits the acquired chip ID and service code to the service providing apparatus 30.

For example, when the non-contact IC card reader 41 is installed in a convenience store, the terminal 40 may be a cash register (cash register). In this case, the non-contact IC card reader 41 is connected to the cash register, and the cash register communicates with the service providing device 30.
Further, the terminal 40 and the non-contact IC card reader 41 may be combined as one device.

  The authentication device 20 transmits qualification authentication information indicating the presence or absence of the qualification to receive the customer's service to the service providing device 30, and the service providing device 30 transmits the qualification authentication information to the terminal 40. If the qualification authentication information indicates that the customer is eligible for service, the terminal 40 displays a message on the display unit 43 indicating that the customer is eligible for service. For example, as shown in FIG. 3, a message “The customer has confirmed that he / she is eligible to purchase goods” is displayed on the display unit 43. If the qualification authentication information indicates that the customer is not eligible for service, the terminal 40 displays a message on the display unit 43 indicating that the customer is not eligible for service.

  When the terminal 40 supports only one service, the terminal 40 and the service code correspond one-to-one. In this case, the terminal 40 has a unique service code. For this reason, the terminal 40 corresponding to only one service does not have the input unit 42 but has only the display unit 43.

  Similarly, for example, the vending machine 50 for cigarettes provides only the service of selling cigarettes. There is a one-to-one correspondence between vending machines 50 and services for specific products. In this case, the vending machine 50 has a unique service code. For this reason, the vending machine 50 for a specific product does not have the service code input unit, but only the display unit.

  The service providing apparatus 30 includes a CPU, a memory, an interface for the network 10, and the like. The service providing apparatus 30 performs various processes by executing programs stored in the memory.

The service providing apparatus 30 receives the chip ID and the service code from the terminal 40 or the vending machine 50 and transmits a qualification authentication request including the chip ID and the service code to the authentication apparatus 20. The service code is an example of service specifying information for specifying a service.
And the service provision apparatus 30 receives the qualification authentication information which shows the presence or absence of a customer's qualification from the authentication apparatus 20, and operates the terminal 40 and the vending machine 50 according to qualification authentication information. For example, when the qualification authentication information indicates that the customer is eligible for service, the service providing apparatus 30 causes the display unit 43 of the terminal 40 to display a message indicating that the customer is eligible for service. Further, when the qualification authentication information indicates that the customer is eligible to receive service, the service providing apparatus 30 causes the vending machine 50 to sell commodities such as alcoholic beverages and tobacco.

When the service providing apparatus 30 supports a plurality of services, the service providing apparatus 30 receives a chip ID and a service code from the terminal 40. However, as described above, when the terminal 40 supports only one service, the terminal 40 and the service code correspond one-to-one. In this case, the terminal 40 does not need to transmit the chip ID. The service providing apparatus 30 acquires the service code by specifying the terminal 40 that has transmitted the service code.
The service providing apparatus 30 transmits a qualification authentication request including the acquired chip ID and service code to the authentication apparatus 20. The authentication device 20 identifies the service and the customer by the service code and the chip ID included in the received qualification authentication request, and determines whether or not the customer is qualified to receive the service.

  When the service providing apparatus 30 supports only one service, the service providing apparatus 30 receives only the chip ID from the terminal 40. In this case, the terminal 40 also supports only one service. The service providing apparatus 30 transmits a qualification authentication request including the chip ID acquired by the terminal 40 to the authentication apparatus 20. The authentication device 20 specifies the service by specifying the service providing device 20 that has transmitted the qualification authentication request, and determines whether or not the customer specified by the chip ID is eligible to receive the service.

  Next, each process performed by the terminal 40, the service providing apparatus 30, and the authentication apparatus 20 will be described in order of time. In this description, the terminal 40 will be described, but the vending machine 50 is also a kind of the terminal 40 and can perform the same processing as the terminal 40. Although the non-contact IC card 60 will be described, the non-contact IC chip of the mobile phone 70 can be used similarly to the non-contact IC card 60.

  As shown in FIG. 4, the authentication device 20 registers personal information indicating personal attributes in the personal information table 22A of the storage device 21 in advance (step S101).

  When a customer who uses the service brings the non-contact IC card 60 owned by the customer closer to the non-contact IC card reader 41, the non-contact IC card reader 41 reads the chip ID from the non-contact IC card 60 and transmits it to the terminal 40. Thereby, the terminal 40 acquires the chip ID (step S102). When the terminal 40 supports a plurality of services, the terminal 40 displays a message prompting the customer to specify a service that the customer wants to use on the display unit 43. The terminal 40 acquires a service code corresponding to the service input by the customer or the store clerk (step S103).

The terminal 40 transmits the chip ID and service code to the service providing apparatus 30 (step S104). Further, when the terminal 40 supports only one service, the terminal 40 has a unique service code. In this case, the terminal 40 transmits the chip ID to the service providing apparatus 30 (step S104).
The service providing apparatus 30 receives the chip ID and service code transmitted from the terminal 40 (step S105). Or when the terminal 40 respond | corresponds only to one service, the service provision apparatus 30 receives chip ID (step S105). The service providing apparatus 30 specifies the service code by specifying the terminal 40 that has transmitted the chip ID.

  Next, the service providing apparatus 30 performs personal authentication using the chip ID as necessary (step S106). For example, when the service providing apparatus 30 is compatible with the membership service, the use other than the member is excluded by performing personal authentication. On the other hand, when the service providing apparatus 30 targets an unspecified person, step S106 is unnecessary.

  Then, the service providing apparatus 30 transmits a qualification authentication request including the chip ID and the service code to the authentication apparatus 20 (step S107), and the authentication apparatus 20 receives the qualification authentication request transmitted by the service providing apparatus 30 (step S108). ). When the service providing apparatus 30 supports only one service, the qualification authentication request only needs to include the chip ID and does not need to include the service code (step S107).

  In response to receiving the qualification request, the authentication device 20 searches the personal information table 22A using the chip ID as a key, and acquires personal information corresponding to the chip ID from the personal information table 22A. The authentication device 20 determines whether or not it has a qualification to receive a service based on the acquired personal information (step S109). For example, it is determined whether or not the service for showing a movie designated by R-15 is 15 years old or older based on the age included in the personal information.

Next, the authentication device 20 transmits qualification authentication information indicating whether or not there is a qualification to receive service to the service providing device 30 that has transmitted the qualification authentication request (step S110). When the service providing apparatus 30 receives the qualification authentication information from the authentication apparatus 20 (step S111), the service providing apparatus 30 causes the terminal 40 to perform an operation according to the service if the qualification authentication information indicates that the customer has the qualification to receive the service ( Steps S112, S113, S114).
Specifically, the service providing device 30 transmits the qualification authentication information to the terminal 40 (step S112), and the terminal 40 receives the qualification authentication information (step S113). For example, if the age included in the personal information is less than 15 years for a service that shows a movie designated by R-15, the terminal 40 displays “This movie is not for customers over 15 years old” A message “Cannot be watched” is displayed (step S114).

  Next, an authentication system according to the second embodiment of the present invention will be described.

As shown in FIG. 5, an authentication system 1B according to the second embodiment of the present invention includes an authentication device (authentication server) 20, a service provision device (service provision server) 30-1, and a service provision connected to the network 10. And a device (service providing server) 30-2. 1 and 5 are denoted by the same reference numerals.
FIG. 5 shows a state in which the vending machine 50-1, the vending machine 50-2, and the terminal 40-3 acquire information from the mobile phone 70-1, the mobile phone 70-2, and the mobile phone 70-3, respectively. Show.
The second embodiment is different from the first embodiment in that the terminal 40 and the vending machine 50 acquire information only from the mobile phone 70 equipped with the non-contact IC chip.

  Hereinafter, the mobile phone 70-1, the mobile phone 70-2, and the mobile phone 70-3 will be referred to as the mobile phone 70 when it is not necessary to individually distinguish them.

  In the personal information table 22B registered in the storage device 21, as shown in FIG. 6, for example, a chip ID, a name, an address, an age, a telephone number, and a mobile mail address are registered. The chip ID, name, address, age, phone number, and mobile mail address are examples of personal information indicating customer attributes. The personal information table 22B in FIG. 6 is obtained by adding telephone number and mobile mail address fields to the personal information table 22A in FIG.

  Each process executed by the terminal 40 and the service providing apparatus 30 is the same as the process in the first embodiment shown in FIG.

  However, in addition to the same processing as the processing shown in FIG. 4, the authentication device 20 transmits the qualification authentication information by a short message service (SMS: Short Message Service) or mobile mail through the mobile phone network. In other words, the authentication device 20 transmits qualification authentication information indicating the qualification of receiving service to the mobile phone 70 as well as the terminal 40 and the vending machine 50, and the contents of the qualification authentication information are displayed on the display of the mobile phone 70. Display.

  The terminal 40 and the vending machine 50 may include a non-contact IC card reader / writer instead of the non-contact IC card reader. When the terminal 40 and the vending machine 50 are provided with a non-contact IC card reader / writer, the non-contact IC chip of the mobile phone 70 can acquire information from the terminal 40 or the vending machine 50.

Thereby, the mobile phone 70 can collate the qualification authentication information transmitted to the terminal 40 or the vending machine 50 with the qualification authentication information transmitted to the mobile phone 70 as described below.
The authentication device 20 transmits the qualification authentication information to the terminal 40 and the vending machine 50 and at the same time to the mobile phone 70. The terminal 40 and the vending machine 50 write the transmitted qualification authentication information to the non-contact IC chip of the mobile phone 70 using a non-contact IC card reader / writer. The mobile phone 70 collates the qualification authentication information written from the terminal 40 or the vending machine 50 with the qualification authentication information transmitted by SMS or mobile mail. If the two match, the mobile phone 70 recognizes the success of the authentication and ends the authentication process. On the other hand, if the two do not match, the mobile phone 70 recognizes the failure of the authentication and ends the authentication process, or performs the authentication process again.

  It is also conceivable to record a telephone number or a mobile mail address on the non-contact IC chip of the mobile phone 70. In this case, the terminal 40 can read the customer's telephone number or mobile mail address from the non-contact IC chip of the mobile phone 70 using the non-contact IC card reader 41. By transmitting a telephone number or a mobile mail address from the terminal 40 to the authentication apparatus 20 via the service providing apparatus 30, the authentication apparatus 20 searches the personal information table 22B using the telephone number or the mobile mail address as a key, and Information can be acquired. That is, a telephone number or a mobile mail address can be used as personal identification information.

In each of the above embodiments, the chip ID, the mobile phone number, and the mobile mail address are shown as examples of the personal identification information. However, a fingerprint image, an iris image, or the like may be used as the personal identification information. .
Further, in each of the above embodiments, the example in which the personal identification information is read from the non-contact IC card 60 or the non-contact IC chip of the mobile phone 70 by the non-contact IC card reader is shown, but the image provided in the terminal or the vending machine is shown. A fingerprint image or the like may be acquired by a reading device.

In each of the above embodiments, the sale of cigarettes and alcoholic beverages and the sale of a movie theater admission ticket have been shown as examples of services. However, as a service, sales of game software that is harmful to adolescents may be targeted.
Furthermore, it is also possible to target a service for inquiring and making reservations for public facilities. In this service, the authentication device 20 determines, for example, whether the user is qualified to use a public facility based on age and address.

ADVANTAGE OF THE INVENTION According to this invention, the service provider (service provision apparatus) which does not know a customer's personal information can be made to authenticate the presence or absence of the valid qualification which receives a customer's service.
For this reason, the service provider (service providing apparatus) does not need to manage the customer's personal information. Since the authentication device collectively manages personal information, the reliability of the personal information can be kept high. Furthermore, it is possible to easily strengthen measures for preventing leakage of personal information.

  Although the embodiments of the present invention have been described above, various modifications and combinations necessary for design reasons and other factors are described in the inventions and embodiments of the invention described in the claims. It should be understood that the invention falls within the scope of the invention corresponding to the specific example.

1A, 1B ... authentication system 10, 11 ... network 20 ... authentication device (authentication server)
21 ... Storage devices 22A, 22B ... Personal information tables 30-1, 30-2 ... Service providing device (service providing server)
40-1, 40-2, 40-3, 40-4 ... Terminals 41-1, 41-2, 41-3, 41-4 ... Non-contact IC card reader 42 ... Input unit 43 ... Display unit 50-1, 50-2 ... Vending machines 60-1, 60-2 ... Non-contact IC cards 70, 70-1, 70-2, 70-3 ... Mobile phones

Claims (9)

An authentication system including a plurality of service providing devices and an authentication device,
Each of the service providing devices
Multiple devices that obtain personally identifiable information that identifies the individual receiving the service;
Qualification request sending means for sending a qualification request including personal identification information acquired by each terminal to the authentication device;
Qualification authentication information receiving means for receiving from the authentication device qualification authentication information indicating the presence or absence of the qualification of the individual receiving the service;
In accordance with the qualification authentication information received by the qualification authentication information receiving means, terminal control means for causing the terminal that acquired the personal identification information to perform a predetermined operation;
With
The authentication device
Storage means for storing personal information indicating individual attributes;
Qualification request receiving means for receiving a qualification request transmitted by each of the service providing devices;
In response to receiving the qualification request by the qualification request receiving means, an individual identified by the personal identification information included in the qualification request is based on the personal information stored in the storage means. Determining means for determining whether or not the user is eligible to receive the service;
Qualification authentication information transmitting means for transmitting the qualification authentication information indicating the presence or absence of the individual qualification determined by the determination means to the service providing apparatus that has transmitted the qualification authentication request;
Comprising
An authentication system characterized by that. In each of the service providing devices corresponding to a plurality of services,
Each of the terminals includes means for acquiring service specifying information for specifying a service,
The qualification authentication request transmitting means transmits a qualification authentication request including service specifying information acquired by the terminal to the authentication device;
In the authentication device,
The determination unit specifies a service by the service specifying information included in the qualification authentication request received by the qualification authentication request receiving unit for the service providing apparatus corresponding to the plurality of services, and is specified by the individual specifying information. Determine whether the individual is eligible to receive the identified service,
The authentication system according to claim 1, wherein: In the authentication device, the determination unit specifies a service by specifying the service providing device that has transmitted the qualification authentication request for the service providing device corresponding to only one service, and is specified by the individual specifying information. Determine whether the individual is eligible to receive the identified service,
The authentication system according to claim 1, wherein: Each of the terminals includes a contactless IC card reader, and acquires the personal identification information from the contactless IC card or the contactless IC chip mounted on the mobile phone by the contactless IC card reader.
The authentication system according to any one of claims 1 to 3, wherein: The personal information includes a mobile phone number or email address,
In the authentication apparatus, the qualification authentication information transmission means indicates whether the personal qualification determined by the determination means is present in the mobile phone that has acquired the personal identification information by a short message service or email through a mobile phone network. Sending the credential information;
The authentication system according to any one of claims 1 to 4, wherein: The storage means is rewritable,
Accepting means for accepting registration of the personal information;
Writing means for writing the personal information received by the receiving means into the storage means;
The authentication system according to any one of claims 1 to 5, further comprising: Storage means for storing personal information indicating individual attributes;
Qualification authentication request receiving means for receiving a qualification authentication request including personal identification information for identifying an individual receiving a service from the service providing device;
In response to receiving the qualification request by the qualification request receiving means, an individual identified by the personal identification information included in the qualification request is based on the personal information stored in the storage means. Determining means for determining whether or not the user is eligible to receive the service;
Qualification authentication information transmitting means for transmitting qualification authentication information indicating the presence or absence of the personal qualification determined by the determination means to the service providing device;
An authentication device comprising: An authentication method in an authentication system including a plurality of service providing devices and an authentication device,
A storage step in which the authentication device stores personal information indicating an individual attribute in a storage unit;
A specific information acquisition step in which the terminal of each service providing device acquires personal identification information identifying an individual who receives the service;
A qualification request transmission step in which each service providing device transmits a qualification request including personal identification information acquired by the terminal to the authentication device;
A qualification request receiving step in which the authentication device receives a qualification request transmitted by each of the service providing devices;
In response to the authentication device receiving the qualification request, the individual specified by the personal identification information included in the qualification request is based on the personal information stored in the storage means. A determination step of determining whether or not the person is eligible for service;
A qualification authentication information transmission step in which the authentication device transmits qualification authentication information indicating the presence or absence of the qualification to receive the determined service to the service providing device that has transmitted the qualification authentication request;
A service providing apparatus that has transmitted the qualification authentication request receives a qualification authentication information from the authentication apparatus,
A terminal control step in which the service providing apparatus that has transmitted the qualification authentication request causes the terminal that has acquired the personal identification information to perform a predetermined operation according to the received qualification authentication information;
An authentication method comprising: Computer
Storage means for storing personal information indicating individual attributes;
Qualification authentication request receiving means for receiving a qualification authentication request including personal identification information for identifying an individual receiving a service from the service providing device;
In response to receiving the qualification request by the qualification request receiving means, an individual identified by the personal identification information included in the qualification request is based on the personal information stored in the storage means. Determining means for determining whether or not the user is eligible to receive the service;
Qualification authentication information transmitting means for transmitting qualification authentication information indicating the presence or absence of the personal qualification determined by the determination means to the service providing device;
Authentication program to make it function.

Images