JP2020088638A - Verification device and verification method - Google Patents

Abstract

To verify in a verification device the authenticity of acquisition data such as identification card data with a small data amount.SOLUTION: A verification device 20 connected to image capturing equipment 21 and data reception equipment (data receiving function) 22. In first processing, a two-dimensional code (identifier image) 304 is verified from an electronic signature included in the two-dimensional code (identifier image) 304. In second processing, an electronic signature is verified from acquisition data (identification card data) 305 received and acquired from a smart phone 30 (terminal). Then, by the comparison of first characteristic value information with second characteristic value information, verifies the authenticity of face photograph data (face image) 302 is verified.SELECTED DRAWING: Figure 1

Description

The present invention relates to a verification device and a verification method.

ID cards are generally issued by printing face information and attribute information such as a name on the face of an IC card or plastic card. However, with the recent spread of mobile devices such as smartphones, there is a demand for proof of identity not by a card-like identification card but by a mobile device that is always carried.

When the identification card is implemented on a mobile device, for example, a device that verifies the data through communication when certifying the identity by digitizing attribute information such as a facial photograph and name (hereinafter referred to as a verification device) ), and the verification device mechanically verifies the authenticity of the identification data. Alternatively, there is a method in which the identification data is displayed on a display of a mobile device and presented, and information is exchanged with the verification device by visual inspection or by photographing with the verification device to verify the authenticity of the identification card.

However, when performing such verification, the owner of the mobile device may be a citizen or the owner of the verification device may be a plurality of different organizations. Therefore, it is assumed that the functions of the mobile device and the verification device have variations, and a verification method corresponding to the functions of the mobile device and the verification device is required.

In the method of verifying the data via communication, which is one of the above-mentioned verification methods, a technique of assigning an electronic signature to data for which authenticity is desired to be protected and determining authenticity by a verification device is generally used. It is used (see RFC3029, etc., issued by IETF (Internet Engineering Task Force)).

In addition, in the method of displaying on the display of the mobile device, which is one of the above-mentioned verification methods, the image of the face photograph and the two-dimensional code in which the data of the face photograph is embedded is used as the identification card to prove the identity. In doing so, a technique has been proposed in which a face photograph is restored from a two-dimensional code and compared with the original face photograph to determine authenticity (see Patent Document 1).

JP, 2005-141626, A

In the above verification method, the amount of data to be sent becomes large when the identification card is mounted on the mobile device and is exchanged with the verification device. Therefore, depending on the functions of the mobile device and the verification device, there is a problem that a verification method for transmitting and receiving a large amount of data cannot be selected and cannot be sent.

In particular, in Patent Document 1 cited as a method of displaying by displaying on a display of a mobile device, there is a problem that the two-dimensional code becomes large because the face photograph data itself is embedded in the two-dimensional code.

Normally, even the size of face photograph data used for identification cards has a data amount of several kilobytes to several tens of kilobytes. Even if the data is compressed, if the face photograph data is embedded in the two-dimensional code and has a resolution that can be recognized by the two-dimensional code reader, the two-dimensional code is about half of A4 size depending on the amount of the face photograph data. Grows up to. As a result, the two-dimensional code cannot be displayed on the smartphone display.

Conversely, if you try to embed face photo data in a two-dimensional code that is large enough to be displayed on the smartphone display, the amount of face photo data needs to be reduced, so the face photo becomes a rough image, It is difficult to confirm the authenticity of the facial photograph from the rough image.

An object of the present invention is to verify the authenticity of acquired data such as identification data with a small amount of data in a verification device.

A verification device according to one aspect of the present invention is a verification device that is connected to an image capturing device and a data receiving device, and the verification device includes a signature verification unit and an image verification unit, and a first process or a second process. In the first processing, the signature verification unit extracts an identifier image and a face image from an acquired image acquired by capturing a screen of a terminal and uses the identifier image as the identifier image. The identifier image is verified from the included electronic signature, the image verification unit compares the first feature value information extracted from the face image with the second feature value information included in the identifier image, and The authenticity of the face image is verified, and in the second process, the signature verification unit verifies the electronic signature from the acquired data received and acquired from the terminal, and the image verification unit determines the acquired data. It is characterized in that the authenticity of the face image is verified by comparing the first feature value information extracted from the face image included in 1) with the second feature value information included in the acquired data.

A verification method according to one aspect of the present invention is a verification method using a verification device connected to an image capturing device and a data receiving device, the verification method including a signature verification step and an image verification step. In the first process, in the signature verification step, the identifier image and the face image are extracted from the acquired image acquired by capturing the screen of the terminal. And verify the identifier image from the electronic signature included in the identifier image, the image verification step, the first feature value information extracted from the face image, and second feature value information included in the identifier image, To verify the authenticity of the face image, and in the second process, the signature verification step verifies the electronic signature from the acquired data received and acquired from the terminal, and the image verification step. Is characterized by verifying the authenticity of the face image by comparing the first feature value information extracted from the face image included in the acquired data with the second feature value information included in the acquired data. And

According to one aspect of the present invention, the authenticity of the acquired data such as identification data can be verified with a small amount of data in the verification device.

1 is a diagram showing a system configuration example of a first embodiment. It is a figure showing an example of hardware constitutions of an issuing device, a verification device, and a smart phone. It is a sequence diagram which shows the issuing process procedure of a digital identification card. FIG. 6 is a sequence diagram showing a procedure of a method of displaying on a display of a mobile device in a digital identification certificate verification process according to the first embodiment. FIG. 6 is a sequence diagram showing a procedure in a method of verifying the data transmitted and received via communication in the verification processing of the digital identification certificate according to the first embodiment. FIG. 6 is a diagram showing a verification result of the verification device according to the first exemplary embodiment. FIG. 8 is a diagram showing a system configuration example of a second embodiment (difference from FIG. 1). FIG. 9 is a sequence diagram showing a digital identification certificate verification processing procedure and a digital identification certificate holder authentication processing procedure according to the second embodiment. FIG. 9 is a diagram (a difference from FIG. 6) displaying an authentication result in the verification device according to the second exemplary embodiment.

Embodiment 1

(System configuration)
Hereinafter, Embodiment 1 will be described in detail with reference to the drawings.
FIG. 1 is a diagram showing an example of the overall configuration of a digital identification certificate system 1 according to the first embodiment. In this figure, an example of the functional configuration of each computer that constitutes the digital identification system 1 is shown along with the overall configuration.

The digital identification system 1 shown in FIG. 1 has an issuing device 10 and a verification device 20. The issuing device 10 generates digital identification data 305 and digital identification (image data) 301 for the smartphone 30. The verification device 20 acquires the image of the digital identification card 301 displayed on the display of the smartphone 30 or the identification card data 305 transmitted from the smartphone 30, and the digital identification card 301 presented from the identification card data 301. Alternatively, the authenticity of the identification certificate data 305 is determined.

As shown in FIG. 1, the issuing device 10 manages a signature key SK104 for generating an electronic signature and a common key K105 between the verification device 20 and a feature value extracting function 106 for extracting a feature value from face photograph data. From the encryption processing function 103 for data encryption and digital signature generation processing, the two-dimensional code generation function 102 for generating a two-dimensional code, the facial photograph data 302, the attribute information 303 such as a name, and the two-dimensional code 304. It has an identification card forming function 101 for forming a digital identification card (image data) 301.

The verification device 20 is also connected to the image capturing device 21. The verification device 20 manages a verification key PK204 for verifying an electronic signature and a common key K205 of the issuing device 10, and a data reading function 201 for reading an image of the digital identification card 301 displayed on the display of the smartphone 30. Alternatively, a data receiving function (for example, a data receiving device) 22 that receives the digital identification data 305 transmitted from the smartphone 30, and a two-dimensional code part 304 that extracts the two-dimensional code portion 304 from the read image and decodes the two-dimensional code. A dimension code reading function 202, a cryptographic processing function 203 for decrypting data and a digital signature verification process, and a character recognition function 206 for recognizing a character of attribute information 303 such as a name from the read image of the digital identification card 301. And a matching function 207 for comparing and verifying the feature value embedded in the two-dimensional code and the facial photograph image 302 included in the read image of the digital identification card 301, and a screen display according to the verification result. It has a verification result processing function 208 for performing or instructing opening/closing of a gate for room entry/exit management. The data receiving function 22 may not be provided depending on the verification device 20.

Also, the smartphone 30 installs and stores the corresponding digital identification card (image data) 301 and digital identification card data 305 obtained through network or media transfer, and displays the digital identification card 301 as necessary. And a function of transmitting the digital identification data 305 by wireless LAN, BlueTooth (registered trademark) communication, NFC communication, or the like. Some smartphones may not have the function of transmitting data.

The issuing device 10, the verification device 20, and the smartphone 30 having such functions can be realized by a general information processing device 40 as illustrated in FIG. For example, the feature value extraction function 106, the cryptographic processing function 103, the two-dimensional code generation function 102, the identification card molding function 101 of the issuing device 10, the data reading function 201, the two-dimensional code reading function 202, and the cryptographic processing of the verification device 20. The function 203, the character recognition function 206, the matching function 207, and the verification result processing function 208 can be realized as a computer program executed by the CPU 405 such as a CPU (CENTRAL PROCESSING UNIT). Such a computer program can be stored and held in a storage device 404 such as a hard disk in advance, or can be distributed from a network and expanded on the memory 403 for use.

Further, an instruction from a user who uses the digital identification card system 1 is input by an input device 401 such as a keyboard, a mouse, or a touch panel that receives an input, and a processing result by the instruction is a liquid crystal display device or an organic device. It is output by an output device 402 such as an EL (ELECTRO LUMINESCENCE) display.

These devices such as the issuing device 10, the verification device 20, and the smartphone 30 can be configured on the information processing device 40 connected by an internal communication line (hereinafter referred to as a bus) 406 such as a bus.

The image capturing device 21 connected to the verification device 20 is realized by devices such as a digital camera, a WEB camera, and a scanner. The data reception function 22 connected to the verification device 20 is realized by a communication function such as wireless LAN, BlueTooth (registered trademark) communication, NFC communication, or the like.

(Example of processing procedure)
Hereinafter, the procedure in the first embodiment will be described with reference to the drawings. The various operations described below are realized by programs that are read out to a memory or the like and executed by each device that constitutes the digital identification system 1.

FIG. 3 is a sequence diagram illustrating a procedure for issuing the digital identification card 301 according to the first embodiment.

The facial photograph data 302 of the person who is the holder of the digital identification card 301 is input to the issuing apparatus 10, and the issuing apparatus 10 can uniquely identify the facial photograph from the facial photograph data 302 by the feature value extraction function 106. A feature value that is a relatively small amount of data (such as "feature point position of face such as eyes, nose, mouth edge" or "image cut out of eyes") is extracted (step S101).

Next, the issuing device 10 uses the common key K105 with the verification device 20 to encrypt the characteristic value by the cryptographic processing function 103 (step S102).

Next, the attribute information 303 such as the name of the person who is the holder of the digital identification certificate 301 is input to the issuing device 10, and the issuing device 10 concatenates the attribute information 303 with the encrypted characteristic value (step S103). ).

Next, the issuing device 10 calculates an electronic signature value with the signature key SK104 of the issuing device 10 for the data obtained by concatenating the encrypted characteristic value and the attribute information 303, and concatenates the encrypted characteristic value and the attribute information 303. It is added to the data (step S104). The combination of the face photograph data 302, the encrypted feature value, the attribute information, and the electronic signature value is referred to as digital certificate data 305.

Next, the two-dimensional code generation function 102 generates a two-dimensional code 304 by inputting the concatenated encrypted feature value, the attribute information 303, and the electronic signature data. That is, the two-dimensional code encoding of the concatenated data is performed (step S105).

Next, the issuing device 10 arranges and molds the face photograph data 302, the attribute information 303, and the two-dimensional code 304 so that they can be simultaneously displayed on the display of the smartphone by the identification card molding function 101 (step S106), and the digital ID. The certificate (image data) 301 and the digital identification certificate data 305 are externally output (step S107).

The smartphone 30 acquires the digital identification card (image data) 301 through a network or a medium transfer (step S108), and stores the digital identification card (image data) 301 in the storage device 404 of the smartphone 30 (step S108). S109).

In steps S105 and S106, the issuing device generates the digital identification card (image data) 301. However, by providing the smartphone 30 with the same functions as the two-dimensional code generation function 102 and the identification certificate shaping function 101, the digital identification data (image data) 301 is used in the smartphone 30 by using the digital identification data 305. May be generated.

Next, a procedure for verifying the digital identification certificate according to the first embodiment will be described.
First, the owner of the smartphone 30 understands the functions of the verification device 20 and the functions of the smartphone 30, and both the verification device 20 and the smartphone 30 can communicate with each other by wireless LAN, BlueTooth (registered trademark) communication, NFC communication, or the like. Check if If the verification device 20 or the smartphone 30 does not have a communication function, the procedure proceeds to the procedure of displaying the verification on the display of the smartphone shown in FIG. 4 for verification. If it has a communication function, the procedure transfers to and from the communication shown in FIG. 5 to verify the data.

FIG. 4 is a sequence diagram showing the verification processing procedure by displaying the digital ID card on the display according to the first embodiment.

The smartphone 30 displays the digital identification card (image data) 301 stored in step S109 on the display of the smartphone 30 and presents it to the image capturing device 21 (step S200).

Next, the image capturing device 21 captures the image displayed on the display of the smartphone 30 (step S201), and the verification device 20 acquires the screen image captured by the image capturing device 21 from the image capturing device 21 (step S202). ).

Next, the verification device 20 uses the two-dimensional code reading function 202 to read the two-dimensional code from the screen image acquired in step S202 and decode the two-dimensional code (step S203).

Next, the decoded data is composed of an encrypted characteristic value, attribute information, and an electronic signature value, and the electronic signature is verified from these data by using the encryption processing function 203 (step S204).

If the signature verification fails, the error verification process fails, as shown in FIG. 6A, for example, as shown in FIG. 6A, there is an error in the two-dimensional code 304 portion of the digital identification card 301 on the display of the verification device 20, and the signature verification fails. A message is displayed (step S205).

If the signature verification is successful, the character relating to the attribute information 303 is recognized from the screen image acquired in step S202 using the character recognition function 206, and the character is compared and verified with the attribute information decoded in step S203 (step S206).

If the two pieces of information do not match, as error processing, for example, as shown in FIG. 6B, the attribute information 303 portion of the digital identification card 301 is incorrect on the display of the verification device 20, and the attribute information is misrepresented. And the correct attribute information is displayed (step S207).

If the attribute information matches, the encryption processing function 203 decrypts the encrypted feature value decoded in step S203 with the common key K205 (step S208), and the decrypted feature value and the face image of the screen image acquired in step S202. The part and the part are compared and verified by using the matching function 207, and it is verified whether or not the feature value is the data extracted from the face photograph (step S209).

The matching function 207 represents the correlation between the face photograph and the feature value as a numerical value, and when the matching rate between the face photograph and the feature value is less than or equal to the threshold value, as the error processing, for example, as illustrated in FIG. The display shows that the face photograph 302 of the digital identification card 301 is illegal and the face photograph is forged (step S210).

When the matching rate between the facial photograph and the feature value is equal to or more than the threshold value, as the authenticity result process, as shown in FIG. 5D, the display of the verification device 20 displays that the digital identification card 301 is correct. Yes (step S211).

The matching between the face photograph and the feature value is performed by using the first feature value information extracted from the face photograph data (face image) 302 and the second feature value information included in the two-dimensional code 304 (identifier image). It is done by comparison. Here, the first feature value and the second feature value are, for example, information regarding the position of the feature points of the face.

FIG. 5 is a sequence diagram showing a procedure for exchanging the digital identification certificate in the first embodiment via communication and verifying the identification certificate data.

The smartphone 30 transmits the digital ID data 305 stored in step S109 (step S400).

Next, the data reception function 22 receives the identification certificate data 305 transmitted from the smartphone 30 (step S401), and the verification device 20 acquires the identification certificate data 305 received by the data reception function 22 (step S402). ).

The received data consists of face photograph data 302, encrypted characteristic values, attribute information, and electronic signature value. Verification of the electronic signature from the encrypted characteristic value, attribute information, and electronic signature value using the cryptographic processing function 203. Is performed (step S404).

If the signature verification fails, the error processing indicates that the signature verification has failed (step S405).

When the attribute information matches, the encryption processing function 203 decrypts the encrypted feature value acquired in step S402 with the common key K205 (step S406), and the decrypted feature value and the face photograph data 305 acquired in step S402. Are compared and verified by using the matching function 207, and it is verified whether or not the feature value is data extracted from the facial photograph (step S407).

The matching function 207 represents the correlation between the face photograph and the feature value as a numerical value, and when the matching rate between the face photograph and the feature value is less than or equal to the threshold value, as the error processing, for example, as illustrated in FIG. The display shows that the face photograph 302 of the digital identification card 301 is illegal and the face photograph is forged (step S409).

When the matching rate between the face photograph and the feature value is equal to or more than the threshold value, as the authenticity result processing, for example, as shown in FIG. 5D, it is indicated that the digital identification card 301 is correct on the display of the verification device 20. It is displayed (step S409).

The matching between the face photograph and the feature value is performed by the first feature value information extracted from the face photograph data (face image) 302 included in the ID card data 305 and the second feature value information included in the ID card data 305. It is performed by comparing with the characteristic value information. Here, the first feature value and the second feature value are, for example, information regarding the position of the feature points of the face.

As described above, the verification device according to the first embodiment is the verification device 20 connected to the image capturing device 21 and the data receiving device 22. The verification device 20 has a signature verification unit and an image verification unit (see FIGS. 1, 4, and 5) and performs the first process (see FIG. 4) or the second process (see FIG. 5).

In the first process (see FIG. 4 ), the signature verification unit acquires the two-dimensional code (identifier image) 304 and the face from the acquired image (digital identification card) 301 acquired by photographing the screen of the smartphone 30 (terminal). The photograph data (face image) 302 is extracted and the two-dimensional code (identifier image) 304 is verified from the electronic signature included in the two-dimensional code (identifier image) 304. Then, the image verification unit compares the first feature value information extracted from the face photograph data (face image) 302 with the second feature value information included in the two-dimensional code (identifier image) 304, and the face photograph. The authenticity of the data (face image) 302 is verified.

Further, in the second process (see FIG. 5), the signature verification unit verifies the electronic signature from the acquired data (identification certificate data) 305 received and acquired from the smartphone 30 (terminal). Then, the image verification unit compares the first feature value information extracted from the face photograph data (face image) 302 included in the acquired data 305 with the second feature value information included in the acquired data 305 to compare the face. The authenticity of the photographic data (face image) 302 is verified.

In the first embodiment, when the owner of the terminal grasps the function of the terminal and the terminal has the communication function (data transmission function), the verification device receives and acquires from the terminal using the data receiving device. The electronic signature is verified from the acquired data (the second process). On the other hand, when the terminal does not have the communication function, the verification device extracts the identifier image and the face image from the acquired image acquired by photographing the screen of the terminal using the image capturing device, and the electronic device included in the identifier image. The identifier image is verified from the signature (the first process). According to the first embodiment, the owner of the terminal can select the verification method according to the function (communication function or the like) of the terminal in the verification device connected to the image capturing device and the data receiving device. In other words, since the function of the terminal differs depending on the model, the terminal may not have the communication function depending on the model. According to the first embodiment described above, even when the function is different depending on the model of the terminal, it is possible to select the verification method according to the function of the terminal.

Further, in the above-described first embodiment, the technology used in biometrics authentication is applied, and the feature value (“feature point position of face such as eyes, nose, mouth edge, etc.” or “face” that can uniquely identify the face photograph from the face photograph data is applied. (The image that is obtained by cutting out only the eye portion that characterizes the image) is added, and an electronic signature is added to the information, thereby reducing the amount of data to be sent. Since the amount of data is reduced by making the information to be sent, it becomes possible to select the verification method according to the functions of the mobile device and the verification device. That is, by setting the feature amount of the face photograph data as the verification target, it becomes possible to verify the validity of the data of the identification card with a small data amount.

Embodiment 2

The second embodiment will be described in detail below with reference to the drawings. The second embodiment is implemented in addition to the first embodiment.

FIG. 7 is a diagram (difference from FIG. 1) showing an example of the overall configuration of the digital identification system 2 according to the second embodiment. In the second embodiment, the verification device 20 is also connected to the person photographing device 23, and from the face photograph 302 and the video/image photographed by the person photographing device 23, via the face recognition function 209 used in biometrics authentication, The system also verifies whether the person who presents the digital identification card 301 is the correct holder. The person photographing device 23 connected to the verification device is realized by a device such as a digital camera or a WEB camera. In the second embodiment, the digital identification card 301 is issued as in the first embodiment.

FIG. 8 is a sequence diagram showing a digital identification certificate verification processing procedure and a digital identification certificate holder authentication processing procedure according to the second embodiment. The process up to step S210 is the same as that of the first embodiment.

The person photographing device 23 photographs the person who presented the digital identification card 301 (step S301), and the verification device 20 acquires the person image photographed in step S301 from the person photographing device 23 (step S302).

Next, the verification device 20 compares and verifies the face photograph data determined to be authentic in step S209 and the person image data acquired in step S301 using the face authentication function 209, and presents the digital identification card 301. Is verified to be the correct holder (step S303).

Next, the face authentication function 209 expresses the correlation between the face photograph and the person image as a numerical value. When the matching rate between the face photograph and the person image is less than or equal to a threshold value, error processing is performed as shown in FIG. 9A, for example. Then, the fact that the face photograph 302 of the digital identification card 301 and the face of the person who presented the digital identification card 301 do not match is displayed on the display of the verification device 20 (step S304).

When the matching rate between the face photograph and the person image is equal to or more than the threshold value, as the authenticity result processing, for example, as shown in FIG. 9B, the digital identification card 301 is authentic on the display of the verification device 20, and the digital identification card is The fact that the face of the person who presented 301 is matched is displayed (step S305).

In the above-described second embodiment, the procedure of displaying on the display of the smartphone for verification is taken as an example, but the procedure of verifying the data transmitted and received via communication can be added in the same manner.

As described above, in the second embodiment, the subject of the camera is authenticated based on the face image taken by the external camera or the like and the face photograph that is verified to be valid. According to the second embodiment, the feature amount of the face photograph data is set as the verification target, so that the legitimacy of the data of the identification card can be verified with a small data amount. As a result, it is possible to select a verification method according to the functions of the mobile device and the verification device while ensuring high security.

In the above embodiment, the identification certificate image and the identification certificate data have been described as an example, but the present invention is not limited to this and can be applied to other images and data.

1 Digital Identification System 2 Digital Identification System 10 Issuing Device 20 Verification Device 21 Image Shooting Device 22 Data Receiving Function 23 Person Shooting Device 30 Smartphone 40 Information Processing Device 101 Identification Card Forming Function 102 Two-dimensional Code Generation Function 103 Cryptography Processing function 104 Signature key SK
105 common key K
106 Feature value extraction function 201 Data reading function 202 Two-dimensional code reading function 203 Cryptographic processing function 204 Verification key PK
205 common key K
206 Character recognition function 207 Matching function 208 Verification result processing function 209 Face authentication function 301 Digital ID (image data)
302 face photograph 303 attribute information 304 two-dimensional code 305 digital identification data 401 input device 402 output device 403 memory 404 storage device 405 CPU
406 bus

Claims (10)

A verification device that is connected to an image capturing device and a data receiving device, wherein the verification device is a verification device that has a signature verification unit and an image verification unit, and that performs a first process or a second process.
In the first processing,
The signature verification unit,
The identifier image and the face image are extracted from the acquired image obtained by photographing the screen of the terminal, and the identifier image is verified from the electronic signature included in the identifier image,
The image verification unit,
Verifying the authenticity of the face image by comparing the first feature value information extracted from the face image and the second feature value information included in the identifier image,
In the second processing,
The signature verification unit,
Verify the electronic signature from the acquired data received from the terminal,
The image verification unit,
It is characterized by verifying the authenticity of the face image by comparing the first characteristic value information extracted from the face image included in the acquired data with the second characteristic value information included in the acquired data. Verification device. The verification device according to claim 1,
In the first processing,
The image verification unit,
A verification apparatus, which verifies the authenticity of the attribute information image by comparing the attribute information image regarding the face image extracted from the acquired image with the attribute information included in the identifier image. The verification device according to claim 1,
The verification device, wherein the first feature value and the second feature value are information relating to the feature point position of the face. The verification device according to claim 1,
Further, the verification device is provided with a display unit for displaying the verification result. An authentication system comprising the verification device according to claim 1 and an imaging device,
The verification system further includes an authentication unit that compares a captured image captured by the image capturing apparatus with the face image to authenticate an object captured by the image capturing apparatus. In the authentication system according to claim 5,
The authentication system, wherein the authentication unit compares the captured image with the face image using a feature value. In the authentication system according to claim 5,
The authentication system further includes a gate that performs a process according to a result of the authentication of the target. In the authentication system according to claim 5,
The authentication system further comprises an issuing device that creates the identifier image by encrypting the second feature value with a common key. A verification method using a verification device connected to an image capturing device and a data receiving device, wherein the verification method includes a signature verification step and an image verification step, and performs the first process or the second process. Method,
In the first processing,
The signature verification step includes
The identifier image and the face image are extracted from the acquired image obtained by photographing the screen of the terminal, and the identifier image is verified from the electronic signature included in the identifier image,
The image verification step,
Verifying the authenticity of the face image by comparing the first feature value information extracted from the face image and the second feature value information included in the identifier image,
In the second processing,
The signature verification step includes
Verify the electronic signature from the acquired data received from the terminal,
The image verification step,
It is characterized in that the authenticity of the face image is verified by comparing the first characteristic value information extracted from the face image included in the acquired data with the second characteristic value information included in the acquired data. Method of verification. In the verification method according to claim 9,
The authentication method further comprising an authentication step of comparing a captured image captured by an image capturing device with the face image and authenticating an object captured by the image capturing device.

Images