JP2010218121A - Authentication device, authentication method, and authentication system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a technology which allows authentication that a service use applicant is a principal registered as a service user and enables the user to quickly utilize the service. <P>SOLUTION: An ATM 14 is provided with a first authentication processing section for making an input section execute processing for accepting the input of first password information, and for determining whether the first password information matches with the first password information read by a service-use card reading section; a second authentication processing section for making the input section execute processing for accepting the input of second password information and for determining whether the second password information matches with the second authentication information read by an identification-card reading section; and an authentication control section, when authentication by the first authentication processing section and authentication by the second authentication processing section succeeds, for making a communication section execute processing for transmitting a validation request, indicating a request for the validation of the service use card to a host computer 13. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to an authentication device, an authentication method, and an authentication system. More specifically, the present invention relates to authentication of a card user (cash, credit, etc.).

  Conventionally, as a method for confirming the identity of the user of a service use card (cash card, etc.), information stored in an IC card license (password) at the time of service application with the recent spread of IC cards , Biometric authentication, etc.) are being studied.

JP 2007-241647 A JP 2005-242778 A

  However, this method is based on the premise that the card is surely delivered to the person by mail limited to the person or handed over at the window of the person's authentication until the card arrives at the user's hand. There was a problem that the service was not available. In particular, for services that require immediacy, both service providers and users should enjoy the convenience that they can be used immediately unless they provide a method that can be used instead of mail limited to the person or identity verification at the counter. I can't do it.

  Therefore, the present invention has been made in view of the above problems, and an object of the present invention is to authenticate that the applicant for service use is the person who is registered as the service user. It is to provide a technology capable of promptly using a service.

  In order to solve the above problem, according to an aspect of the present invention, an input unit capable of receiving input of first password information or second password information from a procedure person who performs a procedure for using a service; A communication unit capable of communicating with an enabling device that enables use of a service use card in which the first authentication information registered at the time of application by an applicant who applies for use of the service is recorded; The service use card reading unit that reads the first authentication information from the service use card, and the input unit that executes the process of accepting the input of the first password information are read by the first password information and the service use card reading unit. A first authentication processing unit for determining whether or not the first authentication information matches, and a second registered information on which the second authentication information is recorded and registered as a person who uses the service. The identification card reading unit that reads the second authentication information from the person's identification card, and the input unit executes a process of accepting the input of the second password information, and is read by the second password information and the identification card reading unit. A second authentication processing unit that determines whether or not the second authentication information matches, and the first authentication processing unit determines that the first password information and the first authentication information match, and the second authentication When the processing unit determines that the second password information and the second authentication information match, a process of transmitting an enabling request indicating that the service use card can be used to the enabling device is performed. And an authentication control unit to be executed by the authentication unit.

  The authentication apparatus further includes a third authentication processing unit, and the identification card reading unit further reads the identification information from the identification card in which identification information for verifying the identity of the registered person is further recorded. The third authentication processing unit causes the communication unit to execute processing for receiving attribute information for registering the registered person at the time of application and receiving the attribute information for proving the registered person's identity from the enabling device. And whether the attribute information matches, and the authentication control unit makes the enabling request available when the third authentication processing unit determines that the attribute information and the identification information match. It is good also as making a communication part perform the process transmitted to an apparatus.

  In addition, the authentication device includes: a storage unit that stores an upper limit value of the number of times of determination as to whether or not the second password information matches the second authentication information; and a display unit that can display the information. In addition, the authentication control unit measures the number of determinations as to whether or not the second personal identification information and the second authentication information match, and the identification card is locked when the number of determinations reaches an upper limit. When it is determined that the number of times of determination has reached one less than the upper limit value, information indicating that input of the second password information is to be stopped may be displayed on the display unit.

  According to another aspect of the present invention, an input unit capable of receiving input of first password information or second password information from a procedure person who performs a procedure for using a service, and a service are used. A communication unit capable of communicating with an enabling device that enables use of a service use card in which the first authentication information registered at the time of application is registered by an applicant who applies for the service, and service use card reading An authentication method comprising an authentication device, a first authentication processing unit, an identification card reading unit, a second authentication processing unit, and an authentication control unit, wherein a service usage card is provided by a service usage card reading unit. Reading the first authentication information from the first authentication processing unit, and causing the first authentication processing unit to execute a process of accepting the input of the first password information to the input unit. As a person who determines whether or not the first authentication information read by the code reading unit matches, and the second authentication information is recorded by the identification card reading unit and uses the service Reading the second authentication information from the registered card of the registered person to be registered, and causing the second authentication processing unit to execute a process of accepting the input of the second password information by the input authentication unit, so that the second password information and the ID The step of determining whether or not the second authentication information read by the proof card reading unit matches, and the first password information and the first authentication information match by the first authentication processing unit by the authentication control unit. When the second authentication processing unit determines that the second password information and the second authentication information match, the service use card can be used. The process of sending a request to the available apparatus, characterized by comprising the steps to be executed by the communication unit, the authentication method is provided.

  According to another aspect of the present invention, there is provided an enabling device that makes it possible to use a service use card on which first authentication information registered at the time of application by an applicant who applies for use of a service is recorded; An authentication system comprising an authentication device, wherein the authentication device is capable of receiving input of first password information or second password information from a procedure person who performs a procedure for using a service, A communication unit capable of communicating with the enabling device, a service use card reading unit that reads the first authentication information from the service use card, and a process for receiving input of the first password information in the input unit, A first authentication processing unit for determining whether or not the first password information matches the first authentication information read by the service use card reading unit, and the second authentication information is recorded. In addition, the identification card reading unit that reads the second authentication information from the identification card of the registered person registered as a person who uses the service, and the process of receiving the input of the second password information in the input unit are executed. A second authentication processing unit for determining whether or not the two password information and the second authentication information read by the identification card reading unit match; and the first authentication information and the first authentication information by the first authentication processing unit. When it is determined that the information matches, and the second authentication processing unit determines that the second password information matches the second authentication information, the service usage card can be requested to be used. And an authentication control unit that causes the communication unit to execute processing for transmitting the enabling request to the enabling device, and the enabling device communicates with the authentication device and a storage unit capable of storing information To do An authentication system, comprising: a communication unit that is capable of receiving information, and a storage unit that stores information indicating that the service use card can be used when the communication unit receives the enabling request. Is provided.

  As described above, according to the present invention, it is possible to authenticate that a service use applicant is a person who is registered as a service user, and to quickly use the service. Can be provided.

It is a figure for demonstrating the outline | summary of 1st Embodiment. It is the schematic of the authentication system which concerns on 1st Embodiment, (a) is a schematic block diagram of an authentication system, (b) is a 1st authentication screen, (c) is a 2nd authentication screen. It is. It is a figure which shows the function structure of the authentication apparatus which concerns on 1st Embodiment. It is a figure which shows the flow of a process by the authentication system which concerns on 1st Embodiment. The authentication system schematic diagram concerning 2nd Embodiment is shown. It is a figure which shows the function structure of the authentication apparatus which concerns on 2nd Embodiment.

  Exemplary embodiments of the present invention will be described below in detail with reference to the accompanying drawings. In addition, in this specification and drawing, about the component which has the substantially same function structure, duplication description is abbreviate | omitted by attaching | subjecting the same code | symbol.

<First Embodiment>
[Description of configuration]
In the present embodiment, in order to provide a method for realizing the above-described method for changing to the person-only mailing or the identity verification at the window, the confirmation method of the identity of the applicant and the card user is the identity of the applicant. It is the authentication apparatus, the authentication method, and the authentication system for performing confirmation.

  FIG. 1 is a diagram for explaining the outline of the present embodiment. As shown in FIG. 1, a procedure for performing a procedure for using a service using an applicant A who applies for use of a service, a service use card 19 and an IC card license 20 as an example of an identification card. There is a person B and a person (registered person) C who is registered as a person who uses the service. The authentication system according to the present embodiment executes a first authentication process for confirming that the applicant A and the procedure person B match (step S1), and confirms that the procedure person B and the person C match. A second authentication process is executed (step S2). Then, when the first authentication process and the second authentication process are successful, the authentication system executes an activation process for making the service use card 19 available (activated). Further, the authentication system may further execute a third authentication process for confirming that the person C and the applicant A match (step S3). In this case, the authentication system may execute the activation process when the third authentication process is further successful (step S4).

FIG. 2 shows a schematic diagram of the authentication system according to the present embodiment.
2 is a schematic diagram of the authentication system according to the present embodiment. FIG. 2 (a) is a schematic configuration diagram of the authentication system, FIG. 2 (b) is a first authentication screen, and FIG. (C) is a second authentication screen.

  As shown in FIG. 2A, the authentication system according to the present embodiment includes a database 10 that stores attribute information provided when a user makes a service application to a business via a terminal 30, and user authentication. A database 11 in which image data and the like used for the storage are stored. The authentication system also includes an ATM (Auto Teller Machine) 14 as an example of an authentication device that holds an interface between the service use card 19 and the IC card license 20 brought by the procedure person B. The authentication system also includes a host computer 13 as an example of an enabling device that performs control related to service usage, and a processing device 12 for relaying and controlling the above-described devices. The terminal 30 and the processing device 12 are connected to the network 40, for example. The ATM 14 and the host computer 13 may be directly connected. The following description will be made using the ATM 14 as an example of the authentication device according to the present embodiment and the host computer 13 as an example of the enabling device according to the present embodiment.

  The host computer 13 includes a storage unit capable of storing information, a communication unit capable of communicating via the ATM 14 and the processing device 12, and a storage unit when the communication unit receives the enabling request. And a control unit for storing information indicating that the service use card can be used.

FIG. 3 is a diagram illustrating a functional configuration of the authentication apparatus according to the present embodiment.
As shown in FIG. 3, the ATM 14 includes a control unit 110, a storage unit 120, a service use card reader 15 as an example of a service use card reading unit, and an IC card license reader as an example of an identification card reading unit. 17, a display unit 27, a communication unit 28, and an input unit 29. The control unit 110 includes a first authentication processing unit 130, a second authentication processing unit 140, a third authentication processing unit 150, and an authentication control unit 160.

  The input unit 29 is configured by an input device such as a keyboard and a touch panel, for example, and can accept input of the first password information or the second password information from the procedure person B who performs a procedure for using the service.

  The communication unit 28 is constituted by a communication device, for example, and is a host computer that can use the service use card 19 in which the first authentication information registered at the time of application by the applicant A who applies for use of the service is recorded. 13 can be communicated.

  The service use card reader 15 is constituted by a reader such as a card reader, for example, and reads the first authentication information from the service use card 19.

The first authentication processing unit 130 causes the input unit 29 to execute a process of receiving input of the first password information, and the first authentication information read by the service use card reader 15 and the first password information received by the input unit 29. It is determined whether or not the usage information matches. The first authentication processing unit 130 is configured by, for example, a CPU (Central Processing Unit) and the like, and the function is realized by executing a program stored in the storage unit 120.
Although the input unit 29 determines whether or not the first password information received by the input matches the first authentication information read by the service use card reader 15, the authentication method is not limited to the host. Online authentication may be used.

  The IC card license reader 17 is constituted by a reading device such as a card reader, for example. The IC card license reader 17 records the second authentication information and uses the IC card license 20 as an example of an identification card of the registered person C registered as a person who uses the service. It reads information.

  The second authentication processing unit 140 causes the input unit 29 to execute a process of accepting the input of the second password information, and whether the second password information and the second authentication information read by the IC card license reader 17 match. Judge whether or not. The second authentication processing unit 140 is configured by, for example, a CPU, and the function is realized by executing a program stored in the storage unit 120.

  The authentication control unit 160 determines that the first password information and the first authentication information match with each other by the first authentication processing unit 130 and the second password information and the second authentication information by the second authentication processing unit 140. Are determined to match, the communication unit 28 is caused to execute processing for transmitting an enabling request indicating that the service usage card 19 can be used to the host computer 13. For example, the authentication control unit 160 is configured by a CPU or the like, and the function is realized by executing a program stored in the storage unit 120.

  The IC card license reader 17 may further read the license information from the IC card license 20 in which the license information as an example of the identification information for verifying the identity of the registered person C is recorded. . In this case, the third authentication processing unit 150 executes processing for receiving from the host computer 13 attribute information for the applicant A to register at the time of application and to prove the identity of the registered person C. To determine whether the license information matches the attribute information. The authentication control unit 160 further causes the communication unit 28 to execute a process of transmitting an enabling request to the host computer 13 when the third authentication processing unit 150 determines that the attribute information and the license information match. It is good as well.

  The storage unit 120 includes, for example, a storage device such as a RAM (Random Access Memory) and a HDD (Hard Disk Drive). The storage unit 120 can also store an upper limit value of the number of times of determination as to whether or not the second password information matches the second authentication information.

  The display unit 27 is configured by, for example, a display device or the like, and can display information.

The authentication control unit 160 measures the number of determinations as to whether or not the second password information and the second authentication information match, and determines when the identification card is locked when the number of determinations reaches the upper limit. When it is determined that the number of times has reached one less than the upper limit, information indicating that the input of the second password information is to be stopped may be displayed on the display unit 27.
Note that the number of times of determination varies depending on the type of card, and even when the number of times of determination is held inside the card, the host may hold the number of times of determination when performing online authentication to the host.

[Description of operation]
First, a user applies for a service provided by a service provider. Submit to the service company a copy of the attribute information related to the user required for the application and the IC card license required to verify the identity. These pieces of information are stored in the application information databases 10 and 11 together with the service application examination results. The user obtains the service use card 19 (unusable state) as a proof of passing the application examination from the service provider.

  In order to start using the service, the user prepares the service use card 19 and the IC card license 20 used as the identification document at the time of application, and goes to the service business company. Then, the service use card 19 to be used is inserted into the service use card reader 15 of the ATM 14 in which the reader is mounted.

  When the service use card 19 is inserted into the service use card reader 15, the password of the service use card 19 designated by the user himself / herself in the service application is input (first authentication screen 16). After confirming the match of the password, the process proceeds to the authentication process using the personal identification document. The IC card license 20 used at the time of application for service is held over the IC card license reader 17 of the ATM 14. When the IC card license 20 is held over the IC card license reader 17, the password of the IC card license 20 set by the user is input (second authentication screen 18). In addition, the input of a password has a function of stopping the input prompting at the upper limit number of times of password lock minus one.

  The personal information read from the IC card license 20 is extracted with the coincidence of the personal identification number, and the personal information applied at the time of application for service is compared and confirmed to confirm the identity of the service applicant. When the above-described authentication is successful, the service use card 19 is activated and made available to the host computer 13 under the control of the processing device 12 and the ATM 14.

FIG. 4 is a diagram showing a flow of processing by the authentication system according to the present embodiment.
As shown in FIG. 4, the procedure person B inserts the service use card 19 (step S10). The ATM 14 reads the first authentication information of the service use card 19 (step S11). The ATM 14 instructs the procedure person B to input a personal identification number (step S12). The procedure person B inputs the first personal identification number (step S13), and the ATM 14 compares the first authentication information with the first personal identification number to confirm the first personal identification number (step S14). Steps S10 to S14 correspond to step S1 shown in FIG.

  The ATM 14 instructs the host computer 13 to transmit attribute information (step S20). The host computer 13 returns attribute information (for example, the name, date of birth, driver's license number, etc. of the registered person C) (step S21). Step S20 to step S21 are referred to as step S3-1.

  The ATM 14 instructs the presentation of the IC card license 20 (step S30). The procedure person B sets the IC card license 20 (step S31). The ATM 14 reads the IC information (second authentication information) from the IC card license 20 (step S40), and instructs the procedure person B to input the second password (step S41). The procedure person B inputs the second personal identification number (step S42), and the ATM 14 compares the IC information (second authentication information) with the second personal identification number to confirm the second personal identification number (step S43). . Steps S30 to S43 correspond to step S2 shown in FIG.

  The ATM 14 acquires the license information from the IC card license 20 (step S44). The ATM 14 compares the contents of the attribute information and the license information (step S50). Steps S44 to S50 are defined as step S3-2. Step S3-1 and step S3-2 shown in FIG. 4 correspond to step S3 shown in FIG.

  If the comparison result is OK, the ATM 14 instructs the host computer 13 to activate the service use card 19 (step S60). The host computer 13 returns the card activation processing result to the ATM 14 (step S61). The ATM 14 returns (discharges) the service use card 19 to the procedure person B (step S70). Steps S60 to S70 correspond to step S4 shown in FIG.

[Description of effects]
As described above, unlike the conventional method, when the card at the time of distribution is made unusable, it is possible to omit the card distribution in consideration of the identity verification procedure, and there is a simpler distribution method. Can be adopted. This is because, when it reaches the user's hand, it is not necessary to reliably deliver it to the person because it cannot be used. Even if the personal identification number is leaked if it is obtained by a third party, the service use card 19 is not used, so that it can be prevented from being misused.

  Thereby, the identity verification method currently performed at the time of distribution can be switched to the user authentication at the time of card use, and the degree of freedom by reducing the distribution means of the service use card 19 can be increased.

  In this system, the following authentication is possible as a means for authenticating the user at the start of the service using the card, and it is possible to replace the identity verification at the time of mailing. First, it is possible to authenticate whether the person who is proceeding with the ATM 14 is the service user. The password used on the first authentication screen 16 is realized by performing authentication using the password specified at the time of service application. Further, it is possible to authenticate whether the license information recorded in the IC card license 20 used for identity verification is the owner of the IC card license 20. The personal identification number used on the second authentication screen 18 is realized by performing authentication using the personal identification number notified by the person at the time of creation of the IC card license 20. In addition, on the second authentication screen 18, it can be secured as a trail that a person who is currently proceeding with the ATM 14 agrees to acquire personal information stored in the IC card license 20.

  In addition, when the PIN code is entered due to an incorrect input, the IC card license 20 is unlocked by the public security committee or police station of each prefecture, unlike the service company. It has become. There is also an effect of reducing the number of complaints related to the security code lock by avoiding the unlocking according to the present embodiment by stopping the prompting of the security code input by erroneous input one less than the upper limit number of locks.

  Finally, by matching the personal information inquired from the IC card license 20 with the personal information obtained at the time of service application from the user, it is verified that the person who is proceeding with the ATM 14 is the person who applied for the service use. it can.

  In addition, when an equivalent to an IC card license 20 comes out in the future, not only the use of personal identification documents will be expanded, but the personal attribute information installed in the IC will be incorporated into the personal authentication. It can be strengthened and can be expanded to meet customer needs.

<Second Embodiment>
[Description of configuration]
FIG. 5 shows a schematic diagram of an authentication system according to the present embodiment.
FIG. 5 shows an application example of the schematic diagram of the authentication system shown in FIG. 1, in which the service use card 19 and the IC card license 20 shown in FIG. 1 are not physical cards currently provided, but mobile phones. And the like (service use card application 23, IC card license application 24) installed in a mobile terminal. Further, the interface implemented in the ATM 14 is also changed to a reader (service utilization card application reader 21 and IC card license application reader 22) for communicating with the service utilization card application 23 and the IC card license application 24.

FIG. 6 is a diagram illustrating a functional configuration of the authentication apparatus according to the present embodiment.
As shown in FIG. 6, the readers provided in the ATM 14 are a service use card application reader 21 and an IC card license application reader 22.

[Description of operation]
In the second embodiment, since the cards according to the first embodiment are applications (service use card application 23, IC card license application 24), the service business company provides the service use card 19 provided to the user. Is no longer mailed.

[Description of effects]
According to the second embodiment, a physical card can be excluded, and a case in which an operation means such as mail cannot be obtained, for example, can be used as an identification method when providing a card application mounted on a mobile phone.

In addition, when an equivalent to an IC card license comes out in the future, not only will it be used as a personal identification document, but it will be more authentic by incorporating the personal attribute information installed in the IC into the personal authentication. It can be strengthened and can be expanded to meet customer needs.
[Modification]
In the above, preferred embodiments of the present invention have been described with reference to the accompanying drawings. However, it goes without saying that the present invention is not limited to such examples. It will be apparent to those skilled in the art that various changes and modifications can be made within the scope of the claims, and these are naturally within the technical scope of the present invention. Understood.

12 processing device 13 host computer (usable device)
14 ATM (authentication device)
15 Service Use Card Reader 16 First Authentication Screen 17 IC Card License Reader 18 Second Authentication Screen 19 Service Use Card 20 IC Card License 21 Service Use Card Application Reader 22 IC Card License Application Reader 23 Service Use Card Application 24 IC Card license application 27 Display unit 28 Communication unit 29 Input unit 30 Terminal 40 Network 110 Control unit 120 Storage unit 130 First authentication processing unit 140 Second authentication processing unit 150 Third authentication processing unit 160 Authentication control unit

Claims (5)

An input unit capable of receiving input of the first password information or the second password information from a procedure person who performs a procedure for using the service;
A communication unit capable of communicating with an enabling device that enables use of a service use card in which first authentication information registered by an applicant who applies for the use of the service is registered; ,
A service use card reading unit for reading the first authentication information from the service use card;
A process of allowing the input unit to accept input of first password information is executed to determine whether the first password information matches the first authentication information read by the service use card reading unit. 1 authentication processing unit;
An identification card reader for reading the second authentication information from an identification card of a registered person who is registered as a person who uses the service, the second authentication information being recorded;
A process of allowing the input unit to receive input of second password information, and determining whether the second password information and the second authentication information read by the identification card reading unit match; Two authentication processing units;
The first authentication processing unit determines that the first password information and the first authentication information match, and the second authentication processing unit matches the second password information and the second authentication information. If it is determined, an authentication control unit that causes the communication unit to execute a process of transmitting an enabling request indicating that the service usage card can be used to the enabling device;
An authentication device comprising: A third authentication processing unit;
The identification card reading unit
Further reading the identification information from the identification card in which identification information for verifying the identity of the registered person is further recorded;
The third authentication processing unit
The applicant registers at the time of the application, and causes the communication unit to execute processing for receiving attribute information for certifying the registered person's identity from the enabling device, and the identification information and the Determine whether the attribute information matches,
The authentication control unit
Further, when the third authentication processing unit determines that the attribute information and the identification information match, the communication unit is caused to execute processing for transmitting the enabling request to the enabling device.
The authentication apparatus according to claim 1, wherein: A storage unit for storing an upper limit value of the number of times of determination as to whether or not the second password information and the second authentication information match;
A display unit capable of displaying information;
Further comprising
The authentication control unit
The number of determinations as to whether or not the second password information matches the second authentication information is measured, and the determination card is locked if the identification card is locked when the number of determinations reaches the upper limit. When it is determined that the number of times has reached one less than the upper limit, information indicating that the input of the second password information is to be stopped is displayed on the display unit.
The authentication apparatus according to claim 1, wherein: An input unit that can accept input of the first password information or the second password information from a procedure person who performs a procedure for using the service, and an applicant who applies for use of the service is registered at the time of application A communication unit capable of communicating with the enabling device that can use the service use card in which the first authentication information is recorded, a service use card reading unit, a first authentication processing unit, and an identity An authentication method by an authentication device, comprising a certification card reading unit, a second authentication processing unit, and an authentication control unit,
Reading the first authentication information from the service usage card by the service usage card reader;
The first authentication processing unit causes the input unit to execute a process of accepting input of first password information, and the first password information matches the first authentication information read by the service use card reading unit. Determining whether or not to do;
Reading the second authentication information from an identification card of a registered person registered as a person who uses the service, the second authentication information being recorded by the identification card reading unit;
The second authentication processing unit causes the input unit to execute a process of accepting input of second password information, and the second password information matches the second authentication information read by the identification card reading unit. Determining whether or not to do;
The authentication control unit determines that the first authentication information matches the first authentication information by the first authentication processing unit, and the second authentication information and the second authentication information by the second authentication processing unit. A step of causing the communication unit to execute a process of transmitting an enabling request indicating that the service use card can be used to the enabling device when it is determined that the authentication information matches;
The authentication method characterized by including. An authentication system comprising an enabling device and an authentication device that enable use of a service use card in which first authentication information registered at the time of application by an applicant who applies for use of a service is recorded,
The authentication device
An input unit capable of receiving input of the first password information or the second password information from a procedure person who performs a procedure for using the service;
A communication unit capable of communicating with the enabling device;
A service use card reading unit for reading the first authentication information from the service use card;
A process of causing the input unit to accept input of first password information is executed to determine whether or not the first password information matches the first authentication information read by the service use card reading unit. 1 authentication processing unit;
An identification card reader for reading the second authentication information from an identification card of a registered person registered as a person who uses the service, the second authentication information being recorded;
A process of allowing the input unit to accept input of second password information and determining whether or not the second password information and the second authentication information read by the identification card reading unit match; Two authentication processing units;
The first authentication processing unit determines that the first password information and the first authentication information match, and the second authentication processing unit matches the second password information and the second authentication information. And an authentication control unit that causes the communication unit to execute a process of transmitting an enabling request for requesting the use of the service use card to the enabling device when it is determined to be usable,
Have
The enabling device is:
A storage unit capable of storing information;
A communication unit capable of communicating with the authentication device;
When the communication unit receives the enabling request, a control unit that stores information indicating that the service use card can be used in the storage unit;
An authentication system comprising:

Images