JP2018036790A - Authentication device, identity confirmation method, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To simply confirm the identity of a user who is going to use a recording medium with high reliability.SOLUTION: An authentication device for confirming the identity of a user who is going to use a recording medium includes: reception means for receiving user information on the user read from the recording medium; and communication means for acquiring a telephone number of the user on the basis of the user information and making a phone call to the telephone number.SELECTED DRAWING: Figure 5

Description

  The present invention relates to a technique for confirming the identity of a user who uses a recording medium such as an IC card.

  Currently, IC cards such as credit cards and prepaid cards are widely used. When a user uses an IC card such as a credit card, the identity is often confirmed by a password.

  However, in general, since a password has only four digits, interpretation and analogy can be easily performed. When a password is used, reliability of identity verification is not high and security can be said to be weak. In addition, it is necessary to prepare an input device such as a keypad for inputting a password, and to prepare an environment for improving input security (an environment where it is difficult to see input), which is troublesome.

  When payment is made using a credit card in online shopping or the like, identity verification may be performed by inputting a security code written on the credit card. However, considering that other people may possess the credit card fraudulently, the identity verification based only on the information written on the credit card is not reliable, and it can be said that the security is also weak.

JP 2002-015298 A

  The present invention has been made in view of the above points, and an object of the present invention is to provide a technique that enables easy and reliable confirmation of the identity of a user who uses a recording medium.

According to the disclosed technology, an authentication device for confirming the identity of a user who uses a recording medium,
Receiving means for receiving user information of the user read from the recording medium;
An authentication apparatus is provided, comprising: communication means for acquiring a telephone number of the user based on the user information and making a telephone call to the telephone number.

Also, an authentication device for confirming the identity of a user who uses a recording medium,
Receiving means for receiving user information of the user read from the recording medium;
An authentication apparatus is provided, comprising: communication means for acquiring a telephone number of the user based on the user information and transmitting a message to the telephone number.

  According to the disclosed technology, there is provided a technology that makes it possible to easily confirm the identity of a user who uses a recording medium with high reliability.

1 is an overall configuration diagram of an authentication system in an embodiment of the present invention. 2 is a functional configuration diagram of the authentication device 100. FIG. It is a figure which shows an example of the table stored in the user information storage part 103. FIG. 2 is a hardware configuration diagram of the authentication device 100. FIG. It is a sequence diagram which shows the operation example 1 of the authentication system in embodiment of this invention. It is a sequence diagram which shows the operation example 2 of the authentication system in embodiment of this invention. It is a sequence diagram which shows the operation example 3 of the authentication system in embodiment of this invention.

  Hereinafter, an embodiment (this embodiment) of the present invention will be described with reference to the drawings. The embodiment described below is merely an example, and the embodiment to which the present invention is applied is not limited to the following embodiment.

  In the following embodiments, an IC card is taken as an example of a recording medium used by a user who is a subject of identity verification. However, using an IC card as a recording medium is merely an example. The present invention can also be applied to recording media other than IC cards. For example, the present invention can be applied to a magnetic card, a sheet on which user information is written, and the like. When the present invention is applied to a magnetic card, a sheet on which user information is written, etc., the IC card reader described below may be replaced with a device that can read them.

(Whole system configuration)
FIG. 1 shows an overall configuration diagram of an authentication system according to the present embodiment. As shown in FIG. 1, the authentication system in the present embodiment has a configuration in which an authentication apparatus 100 and an IC card reader 400 are connected to a network 500. In the present embodiment, it is assumed that the user holding the IC card 300 and the user terminal 200 uses the IC card 300 in a store or the like. FIG. It is shown.

  The user terminal 200 is a mobile phone such as a smartphone, for example. The authentication device 100 makes a call to a telephone number registered for the IC card 300 (makes a call) or confirms the identity of the user who uses the IC card 300, or sends an SMS to the telephone number. This is a device including a function of transmitting a message by (short message service).

  Note that the authentication device 100 may include any one of a function for making a call and a function for performing message transmission by SMS, or may include both. In this embodiment, both functions are provided. The authentication device 100 may be realized by a physical machine (not using a virtual machine function) or may be realized by a virtual machine.

  The IC card 300 is, for example, a credit card or a transportation card, but is not limited thereto. The IC card 300 may be an IC card dedicated to verifying identity necessary for performing certain actions such as identity verification when accessing a business server within a company or identity verification when entering a building.

  The IC card 300 is issued to the user when the user applies to a service provider that issues the IC card. Examples of forms for applying for the IC card 300 include a form in which a document in which registration information is entered is sent to a service provider by mail or the like, and a form in which registration information is input to a card-issuing machine. The registration information is registered on the service provider side together with, for example, the issued IC card 300 number (eg, credit card number). In general, part or all of the registration information is also registered (stored) in the IC card 300.

  The registration information includes the telephone number of the contact information of the user who uses the IC card 300. In the present embodiment, the contact telephone number is the telephone number of the user terminal 200 held by the user who uses the IC card 300. Hereinafter, information stored in the IC card 300 and read by the IC card reader 400 is referred to as user information. The user information includes, for example, the IC card 300 number (eg, credit card number) and the above-described registration information (all or part).

  The IC card reader 400 includes a function of reading user information stored in the IC card 300 and transmitting the information to the authentication device 100. The IC card reader 400 may be a non-contact type or a contact type.

  Note that the authentication device 100 and the IC card reader 400 may be located geographically apart or close to each other. Further, the IC card reader 400 may be a part of the function of the authentication device 100, or the IC card reader 400 may include the function of the authentication device 100. When the IC card reader 400 is a part of the function of the authentication device 100, or when the IC card reader 400 includes the function of the authentication device 100, between the IC card reader 400 and the authentication device 100 in a sequence described later. The processing corresponds to processing inside the apparatus. The IC card 300 may be built in the user terminal 200.

  The network 500 is a network including a telephone network. The telephone network may be a mobile telephone network, a fixed telephone network, an IP telephone network, or a network in which these are mixed. The telephone network in the present embodiment supports SMS. Note that SMS is an example, and any service other than SMS may be supported as long as it can send a message to a telephone number. The SMS described below is also an example, and a service other than SMS may be used.

(Configuration of authentication apparatus 100)
FIG. 2 shows an example of a functional configuration of authentication apparatus 100 in the present embodiment. As illustrated in FIG. 2, the authentication device 100 includes a communication unit 101, an authentication unit 102, a user information storage unit 103, and an additional information providing unit 104.

  The communication unit 101 includes a function for performing communication with the IC card reader 400 and a function for performing communication with the user terminal 200. The function of performing communication with the user terminal 200 includes a function of making a telephone call and a function of performing message transmission by SMS.

  The authentication unit 102 checks the validity of the IC card 300 based on the user information received from the IC card reader 400 received from the IC card reader 400, and when the validity is confirmed, the communication unit 101 In addition, a call to the registered telephone number for the IC card 300 or a message transmission by SMS to the telephone number is instructed. Whether to make a call to a telephone number or send a message by SMS may be determined in advance or may be determined by a setting from a user.

  Confirmation of the validity of the IC card 300 is an existing technology. The confirmation process includes, for example, checking whether or not the information read from the IC card 300 exists as registered information by referring to the user information storage unit 103.

  The user information storage unit 103 stores registered user information for each user. The registered user information is information provided from the service provider to the authentication device 100 when the IC card is issued, for example. The registered user information includes, for example, an IC card number (eg, a credit card number) and registration information (including a contact phone number) registered by the user when applying for an IC card. FIG. 3 shows an example of information (table) stored in the user information storage unit 103.

  Returning to FIG. 2, the additional information providing unit 104 provides additional information to the user terminal 200 when making a call to a telephone number or transmitting a message by SMS. Additional information is privilege information, coupon information, etc., for example. Further, the additional information may be a notification, a notification, or the like. The additional information providing unit 104 may not be provided.

  The authentication apparatus 100 according to the present embodiment can be realized, for example, by causing a computer to execute a program describing the processing contents described in the present embodiment. That is, the function of the authentication device 100 can be realized by executing a program corresponding to processing executed by the device using hardware resources such as a CPU and a memory built in the computer. is there. The above-mentioned program can be recorded on a computer-readable recording medium (portable memory or the like), stored, or distributed. It is also possible to provide the program through a network such as the Internet or electronic mail.

  FIG. 4 is a diagram illustrating a hardware configuration example of the authentication device 100 according to the present embodiment. The authentication device 100 in FIG. 4 includes a drive device 150, an auxiliary storage device 152, a memory device 153, a CPU 154, an interface device 155, a display device 156, an input device 157, and the like that are mutually connected by a bus B.

  A program for realizing processing in the authentication device 100 is provided by a recording medium 151 such as a CD-ROM or a memory card, for example. When the recording medium 151 storing the program is set in the drive device 150, the program is installed from the recording medium 151 into the auxiliary storage device 152 via the drive device 150. However, the program does not necessarily have to be installed from the recording medium 151, and may be downloaded from another computer via a network. The auxiliary storage device 152 stores the installed program and also stores necessary files and data.

  The memory device 153 reads the program from the auxiliary storage device 152 and stores it when there is an instruction to start the program. The CPU 154 realizes functions related to the quality degradation estimation apparatus 100 in accordance with a program stored in the memory device 153. The interface device 155 is used as an interface for connecting to a network. The display device 156 displays a GUI (Graphical User Interface) or the like by a program. The input device 157 includes a keyboard and mouse, buttons, a touch panel, and the like, and is used to input various operation instructions.

(Operation example 1 of authentication system)
Hereinafter, an operation example 1 of the authentication system having the above-described configuration will be described with reference to FIG. In the example described below, the IC card 300 is a credit card, and it is assumed that a user holding the user terminal 200 such as a smartphone uses the IC card 300 in a store. This assumption is the same in the operation examples 2 and 3.

  When the user uses the IC card 300 at a store cash register or the like, the user information stored in the IC card 300 is read by the IC card reader 400 (step S101), and the user information is used for authentication inquiry. The data is transmitted from the reader 400 to the authentication device 100 (S102). The user information includes information necessary for confirming the validity of the IC card 300 (for example, the number of the IC card 300) and the telephone number of the user terminal 200 that is the telephone number of the contact information to the user. . Note that the telephone number may not be included.

  In the authentication device 100, the communication unit 101 receives user information from the IC card reader 400, and the communication unit 101 passes the user information to the authentication unit 102. Hereinafter, transmission to a telephone number for identity verification will be described separately for call transmission and message transmission by SMS.

<Calling>
When the authentication unit 102 confirms the validity of the IC card 300 based on the user information, the authentication unit 102 instructs the communication unit 101 to make a call to the telephone number of the user terminal 200 (call transmission). A call is sent to the destination (that is, to the user terminal 200) (step S104). A calling signal (eg, INVITE by IP phone) is transmitted to the user terminal 200, and the user terminal 200 rings.

  When the user responds at user terminal 200 (operates to take a call or perform an off-hook operation), a response signal (eg, 200 OK for IP phone) is transmitted to authentication apparatus 100 (step S106). The response signal is passed to the authentication unit 102 in the authentication device 100. Upon receiving the response signal, the authentication unit 102 determines that the identity of the user who uses the IC card 300 has been successfully confirmed (step S107), and transmits a confirmation completion signal to the IC card reader 400 via the communication unit 101. (Step S108).

  The IC card reader 400 that has received the confirmation completion signal displays, for example, information indicating that the payment has been normally completed.

  Note that the response signal in step S <b> 106 may be a simple code (e.g., a simple code such as “1” or “#”) input by the user to the user terminal 200. In this case, in response to step S105, a signal (not shown) such as 200 OK is returned to the authentication apparatus 100, whereby the call connection is completed, and the simple code is transmitted through the communication path established by the call connection. The simple code is a predetermined code, and the authentication unit 102 in the authentication apparatus 100 determines that the identity verification is successful by receiving the simple code.

  The simple code may be, for example, a code determined for each IC card reader or each store, a code determined for each user, or a code set in advance at the time of use. Good.

  Further, it may be a code determined according to a predetermined rule. For example, it may be a code determined by the rule of “1” if the time when using the IC card is morning, or “2” if the time is afternoon, or the time when using the IC card is code (Example: “11” when the time is in the 11 o'clock range).

  Further, for example, if “the store using the IC card is store A” and “the time when the IC card is used is the morning time”, “1”, “the store using the IC card is store B” and “IC card” If the time of use is “morning time”, a code determined by a rule such as “3” may be used. There is no particular limitation as to what rules determine the code, and various rules can be used.

  In addition, although the example which uses a simple code as a response signal was demonstrated, the code as a response signal does not need to be "simple", and may be a code | symbol of multiple digits like the following password. Simple codes, multi-digit codes, passwords, and the like may be collectively referred to as response codes. This also applies to the following message transmission by SMS.

Information other than the simple code may be transmitted. For example, the user may input a password (for example, a four-digit number) to the user terminal 200 and transmit the password from the user terminal 200 to the authentication device 100 in step S106. The user information storage unit 103 in the authentication apparatus 100 stores the password as registered user information of the user, and the authentication unit 102 stores the password received from the user terminal 200 and the user information storage unit 103. By verifying the password, the success or failure of identity verification is determined. <Message transmission by SMS>
In step S103 of FIG. 5, when the authentication unit 102 confirms the validity of the IC card 300 based on the user information, the authentication unit 102 instructs the communication unit 101 to send an SMS message to the telephone number of the user terminal 200. Transmits a message to the telephone number (that is, to the user terminal 200). The message reaches the user terminal 200 via the telephone network (step S104). Note that the content of the message may be predetermined.

  In the user terminal 200, when the user opens the message (sees the message by activating the SMS application) (step S105), a response signal (eg, Delivery report, opening confirmation message) is transmitted to the authentication device 100 ( Step S106). The response signal is passed to the authentication unit 102 in the authentication device 100. Upon receipt of the response signal, the authentication unit 102 determines that the identity verification for the user of the IC card 300 has succeeded (step S107), and transmits a confirmation completion signal to the IC card reader 400 via the communication unit 101 ( Step S108). The IC card reader 400 that has received the confirmation completion signal displays, for example, information indicating that the payment has been normally completed.

  Note that the response signal in step S <b> 106 may be a reply message to the message input by the user to the user terminal 200. The content of the reply message may be arbitrary, and the authentication unit 102 in the authentication apparatus 100 determines that the identity verification has been successful by receiving some reply message from the user terminal 200 by SMS.

  The reply message may be a simple code as described above, a multi-digit code, or a password. In these cases, as described above, the authentication unit 102 in the authentication apparatus 100 determines that the identity verification has been successful by confirming the simple code, confirming the multi-digit code, and confirming the password.

  Further, the telephone number of the authentication device 100 may be included in the message transmitted in step S104, and the user may make a call to the telephone number described in the message opened in step S105. In this case, the transmission signal to the telephone number corresponds to the response signal in step S106. Further, in this case, the authentication unit 102 of the authentication apparatus 100 determines that the identity verification for the user of the IC card 300 has been successful when the incoming call from the user terminal 200 is confirmed. In both cases of call origination and SMS message transmission, the authentication unit 102 may acquire the user's telephone number from the user information received in step S102 or from the user information storage unit 103. May be. This is the same in the following operation examples 2 and 3.

(Operation example 2 of authentication system)
Next, an operation example 2 will be described with reference to FIG. In FIG. 6, steps S201 and S202 are the same as steps S101 and S102 in the operation example 1 (FIG. 5).

  After step S202, the communication unit 101 of the authentication apparatus 100 passes the user information received from the IC card reader 400 to the authentication unit 102. Hereinafter, transmission to a telephone number for identity verification will be described separately for call transmission and message transmission by SMS.

<Calling>
Upon confirming the validity of the IC card 300 based on the user information, the authentication unit 102 instructs the communication unit 101 to make a call to the telephone number of the user terminal 200, and the communication unit 101 is addressed to the telephone number (that is, the user A call is transmitted to the terminal 200 (step S204).

  A calling signal (eg, INVITE via IP phone) is transmitted to the user terminal 200, the user terminal 200 rings, and the display unit (eg, touch panel) of the user terminal 200 has a sender (authentication device 100). The calling ID is displayed (step S205). The caller ID may be the telephone number of the caller, the name of the caller, or other information that can identify the caller.

  When the store clerk of the store where the IC card 300 is used knows the correct caller ID of the caller, and confirms that the caller ID displayed on the user terminal 200 is the correct caller ID, for example, The IC card reader 400 is operated (step S206). Accordingly, the IC card reader 400 transmits a signal indicating that the identity confirmation is OK to the authentication device 100 (step S207). The authentication device 100 that has received the signal determines that the identity verification is OK.

<Message transmission by SMS>
When the authentication unit 102 confirms the validity of the IC card 300 based on the user information, the authentication unit 102 instructs the communication unit 101 to send an SMS message to the telephone number of the user terminal 200, and the communication unit 101 is addressed to the telephone number (that is, When the message is transmitted to the user terminal 200, the message reaches the user terminal 200 via the telephone network (step S204). The content of the message is predetermined.

  The user causes the SMS application to display a message on the display unit of the user terminal 200 (step S205).

  The store clerk using the IC card 300 knows the correct message, and when the store clerk confirms that the message displayed on the user terminal 200 is the correct message, the store clerk operates the IC card reader 400, for example. (Step S206). Accordingly, the IC card reader 400 transmits a signal indicating that the identity confirmation is OK to the authentication device 100 (step S207). The authentication device 100 that has received the signal determines that the identity verification is OK.

(Operation example 3 of authentication system)
Next, an operation example 3 will be described with reference to FIG. Hereinafter, the case of call transmission and the case of message transmission by SMS will be described separately.

<Calling>
In FIG. 7, steps S301 to S306, S308, and S309 are the same as steps S101 to S108 in the operation example 1 (FIG. 5).

  In the authentication device 100 that has received the response signal (for example, 200 OK) in step S306, the additional information providing unit 104 adds the information using the communication path between the user terminal 200 and the authentication device 100 via the communication unit 101. Information is provided to the user terminal 200 (step S307). The additional information is not limited to specific information, but is, for example, privilege information at an event, coupon information that can be used in a store, an advertisement, or the like. Further, the additional information providing unit 104 may check the attribute information of the corresponding user stored in the user information storage unit 103 and transmit information suitable for the attribute information to the user terminal 200. The information to be provided may be any of voice, text, image, and video.

<Message transmission by SMS>
In FIG. 7, steps S301 to S306, S308, and S309 are the same as steps S101 to S108 in the operation example 1 (FIG. 5).

  In the authentication apparatus 100 that has received the response signal in step S306, the additional information providing unit 104 provides information to the user terminal 200 via the communication unit 101 as a message by SMS (step S307). The types of information are as described above.

  In the case of message transmission by SMS, step S204 shown in FIG. 6, that is, the first message to be transmitted for identity verification may be the additional information.

(Effect of embodiment)
As described above, the identity of a user who uses a recording medium such as an IC card can be easily confirmed with high reliability by the technology described above. More details are as follows.

  In the present embodiment, the identity of the user of the IC card 300 is confirmed by receiving an incoming call / SMS message to the user terminal 200 that is unlikely to be possessed by another person other than the user of the IC card 300. It is possible to confirm the identity with high reliability. That is, when a telephone call / SMS message is received to the user terminal 200, the telephone number that is the registration information of the IC card 300 held by the user matches the telephone number of the user terminal 200 held by the user. This means that the user can confirm that the user is the correct user of the IC card 300. In addition, unlike ordinary e-mail and the like, the use of incoming call / SMS message reception, which is difficult to receive / receive by impersonation, is also a factor that enables highly reliable identity verification.

  In addition, the service provider (store, etc.) does not need to prepare an environment for inputting a password, etc., and the user does not need to input a password or the like, and uses the user terminal 200 that is always carried, etc. The identity verification can be realized.

(Summary of embodiment)
According to the present embodiment, an authentication apparatus for confirming the identity of a user who uses a recording medium, the receiving device receiving user information of the user read from the recording medium, and based on the user information An authentication device is provided, comprising: a communication unit that obtains a telephone number of the user and makes a telephone call to the telephone number.

  Further, according to the present embodiment, an authentication device for confirming the identity of a user who uses a recording medium, the receiving unit receiving the user information of the user read from the recording medium, and the user information And a communication means for obtaining a telephone number of the user and transmitting a message to the telephone number.

  For example, the communication unit acquires the telephone number from the user information, or acquires the telephone number from a user information storage unit included in the authentication device.

  Each of the authentication devices may include an authentication unit that determines that the identity of the user has been confirmed when the communication unit receives a predetermined response signal from the user terminal having the telephone number. .

  The communication unit 101 described in the embodiment is an example of the reception unit described above. The communication unit 101 and the authentication unit 102 are examples of the above communication means. The authentication unit 102 is an example of the above authentication means.

  Although the present embodiment has been described above, the present invention is not limited to the specific embodiment, and various modifications and changes can be made within the scope of the gist of the present invention described in the claims. Is possible.

DESCRIPTION OF SYMBOLS 100 Authentication apparatus 200 User terminal 300 IC card 400 IC card reader 500 Network 101 Communication part 102 Authentication part 103 User information storage part 104 Additional information provision part 150 Drive apparatus 151 Recording medium 152 Auxiliary storage apparatus 153 Memory apparatus 154 CPU
155 Interface device 156 Display device 157 Input device

According to the disclosed technology, an authentication device for confirming the identity of a user who is an owner of a recording medium,
Receiving means for receiving user information of the user read from the recording medium;
Communication means for acquiring the user's telephone number based on the user information and making a call to the telephone number ;
An authentication unit that determines that the identity of the user has been confirmed when the communication unit receives a predetermined response signal from a user terminal having the telephone number ;
An authentication apparatus is provided in which the predetermined response signal is a code determined according to a predetermined rule .

Further , according to the disclosed technology, an authentication device for confirming the identity of the user who is the owner of the recording medium,
Receiving means for receiving user information of the user read from the recording medium;
Communication means for acquiring the user's telephone number based on the user information and transmitting a message to the telephone number;
An authentication unit that determines that the identity of the user has been confirmed when the communication unit receives a predetermined response signal from a user terminal having the telephone number ;
An authentication apparatus is provided in which the predetermined response signal is a code determined according to a predetermined rule .

(Section 1)
An authentication device for confirming the identity of a user who uses a recording medium,
Receiving means for receiving user information of the user read from the recording medium;
Communication means for acquiring a telephone number of the user based on the user information and making a call to the telephone number;
An authentication device comprising:
(Section 2)
An authentication device for confirming the identity of a user who uses a recording medium,
Receiving means for receiving user information of the user read from the recording medium;
Communication means for acquiring a telephone number of the user based on the user information and transmitting a message to the telephone number;
An authentication device comprising:
(Section 3)
The communication means acquires the telephone number from the user information, or acquires the telephone number from a user information storage unit included in the authentication device.
The authentication apparatus according to item 1 or 2, characterized in that:
(Section 4)
Authentication means for determining that the identity of the user has been confirmed when the communication means receives a predetermined response signal from a user terminal having the telephone number
The authentication apparatus according to any one of claims 1 to 3, wherein the authentication apparatus includes:
(Section 5)
An identity verification method executed by an authentication device for confirming the identity of a user who uses a recording medium,
Receiving the user information of the user read from the recording medium;
A communication step of acquiring a telephone number of the user based on the user information and making a telephone call to the telephone number;
A personality confirmation method characterized by comprising:
(Section 6)
An identity verification method executed by an authentication device for confirming the identity of a user who uses a recording medium,
Receiving the user information of the user read from the recording medium;
A communication step of acquiring a telephone number of the user based on the user information and transmitting a message to the telephone number;
A personality confirmation method characterized by comprising:
(Section 7)
The program for functioning a computer as each means in the authentication apparatus of any one of Claim 1 thru | or 4 .
Although the present embodiment has been described above, the present invention is not limited to the specific embodiment, and various modifications and changes can be made within the scope of the gist of the present invention described in the claims. Is possible.

Claims (7)

An authentication device for confirming the identity of a user who uses a recording medium,
Receiving means for receiving user information of the user read from the recording medium;
An authentication apparatus comprising: communication means for acquiring a telephone number of the user based on the user information and making a telephone call to the telephone number. An authentication device for confirming the identity of a user who uses a recording medium,
Receiving means for receiving user information of the user read from the recording medium;
An authentication apparatus comprising: communication means for acquiring a telephone number of the user based on the user information and transmitting a message to the telephone number. The authentication device according to claim 1, wherein the communication unit acquires the telephone number from the user information, or acquires the telephone number from a user information storage unit included in the authentication device. . 4. The authentication unit according to claim 1, further comprising: an authentication unit that determines that the identity of the user has been confirmed when the communication unit receives a predetermined response signal from a user terminal having the telephone number. The authentication device according to claim 1. An identity verification method executed by an authentication device for confirming the identity of a user who uses a recording medium,
Receiving the user information of the user read from the recording medium;
And a communication step of obtaining a telephone number of the user based on the user information and making a telephone call to the telephone number. An identity verification method executed by an authentication device for confirming the identity of a user who uses a recording medium,
Receiving the user information of the user read from the recording medium;
And a communication step of acquiring a telephone number of the user based on the user information and transmitting a message to the telephone number.   The program for functioning a computer as each means in the authentication apparatus of any one of Claims 1 thru | or 4.

Images