JP2022027559A - Personal identification system - Google Patents

Abstract

To provide a personal identification system for improving the efficiency of counter business which handles various transactions.SOLUTION: In a store 100, a personal identification system includes a reception terminal for receiving a user wanting a transaction, a personal identification device for performing personal identification that the user is an object person of the transaction on the basis of at least authenticity determination of a document for personal identification, and authentication that a document owner is the user about the user received at the reception terminal, a transaction counter terminal capable of executing the transaction through operation by a counter responsible person, an automatic transaction device capable of executing the transaction by operation of the user, an identification information generation part for generating identification information for uniquely identifying the user or the transaction wanted by the user and transmitting the identification information to a mobile terminal operable by the user, and a personal identification control part for controlling the personal identification device.SELECTED DRAWING: Figure 1

Description

The present invention generally relates to an identity verification technique.

In recent years, with the decrease in the workload of counter employees due to cashless payments and business reforms, efficiency has been improved by promoting self-service counter operations. In addition, for the purpose of preventing money laundering, outflow of funds to terrorist organizations, and prevention of spoofing transactions, which have been problems for some time, a new method for identity verification by online completion has been established by the revision of the law, and it has been done at the counter so far. In addition, there is a need to improve the efficiency of operations for identity verification using identity verification documents with photographs.

As a conventional technique that can be expected to improve the efficiency of business, for example, Patent Document 1 discloses an automatic transaction system for conducting a transaction using a two-dimensional code. The automatic transaction system disclosed in Patent Document 1 simplifies the input operation that is repeatedly performed for each transaction by using a two-dimensional code generated from the data manually input by the customer, and the transaction time. It is a system aimed at shortening.

Japanese Unexamined Patent Publication No. 2005-346129

According to the conventional example, it is possible to shorten the transaction time for a transaction in which the same amount is transferred every month. However, the conventional technique has a problem that it can deal only with a specific fixed-amount transaction and cannot deal with the efficiency of the operation of the counter that handles various transactions.

An object of the present invention is to solve the above-mentioned problems, that is, to provide an identity verification system that streamlines the work of a counter that handles various transactions.

In order to solve such a problem, the present invention is an identity verification system that performs a series of transaction procedures including identity verification, and at least the reception terminal that accepts a user who desires a transaction and the user that is accepted by the reception terminal. An identity verification device that confirms the identity of the user as the target person of the transaction based on the authenticity determination of the document for identity verification and the authentication that the owner of the document is the user. A transaction counter terminal capable of executing the transaction through an operation by a counter person, an automatic transaction device capable of executing the transaction by the operation of the user, and identification information uniquely identifying the user or the transaction desired by the user. Is communicably connected to the identification information generation unit that generates and sends to a mobile terminal that can be operated by the user, the reception terminal, the identity verification device, the transaction counter terminal, the automatic transaction device, and the identification information generation unit. The identity verification control unit is provided with an identity verification control unit that controls the identity verification device, and the identity verification device is received by the reception terminal using the identification information read from the mobile terminal or input by the user. The identity verification is executed for the user, and when the identity verification is successful with the identity verification device, the identity verification control unit tells the user whether the transaction can be executed by the transaction counter terminal or the automatic transaction device. An identity verification system is provided to notify.

According to the present invention, it is possible to improve the efficiency of the work of the counter that handles various transactions.

It is a figure which shows the connection composition example of the identity verification system which concerns on one Embodiment of this invention. It is a figure which shows the internal structure example of the identity verification apparatus 200. It is a flowchart which shows the processing procedure example of the whole processing in this embodiment. It is a flowchart which shows the detailed processing procedure example of the reception process. It is a flowchart which shows the detailed processing procedure example of the information input processing. It is a flowchart which shows the detailed processing procedure example of the identity verification processing. It is a flowchart which shows the detailed processing procedure example of transaction processing. It is a figure which shows the screen display example (the 1) of the mobile terminal 180. It is a figure which shows the screen display example (the 2) of the mobile terminal 180. It is a figure which shows the screen display example (the 3) of the mobile terminal 180. It is a figure which shows the screen display example (the 4) of the mobile terminal 180. It is a figure which shows the screen display example of the reception terminal 110. It is a figure which shows the screen display example (the 1) of the identity verification apparatus 200. It is a figure which shows the screen display example (the 2) of the identity verification apparatus 200.

In the following description, the "interface device" may be one or more interface devices. The one or more interface devices may be at least one of the following.
-One or more I / O (Input / Output) interface devices. The I / O interface device is an interface device for at least one of the I / O device and the remote display computer. The I / O interface device for the display computer may be a communication interface device. The at least one I / O device is a user interface device, which may be, for example, an input device such as a keyboard and a pointing device, or an output device such as a display device.
-One or more communication interface devices. The one or more communication interface devices may be one or more communication interface devices of the same type (for example, one or more NICs (Network Interface Cards)), or two or more different types of communication interface devices (for example, NICs). And HBA (Host Bus Adapter)).

Further, in the following description, the "memory" is an example of one or more storage devices, and is one or more memory devices. The memory may be a volatile memory device or a non-volatile memory device, and is typically a main storage device.

Further, in the following description, the "permanent storage device" is an example of one or more storage devices, and is one or more permanent storage devices. The persistent storage device is typically a non-volatile storage device (for example, an auxiliary storage device), specifically, for example, HDD (Hard Disk Drive), SSD (Solid State Drive), NVME (Non-Volatile Memory Express). ) Drive, SCM (Storage Class Memory), etc.

Further, in the following description, the "storage device" may be at least one of the above-mentioned memory or permanent storage device.

Further, in the following description, the "processor" may be one or more processor devices. The at least one processor device may typically be a microprocessor device such as a CPU (Central Processing Unit), but may be another type of processor device such as a GPU (Graphics Processing Unit). At least one processor device may be single-core or multi-core. At least one processor device may be a processor core. At least one processor device is a circuit (for example, FPGA (Field-Programmable Gate Array), CPLD (Complex Programmable Logic Device) or ASIC (Application) which is a collection of gate arrays by a hardware description language that performs a part or all of processing. It may be a processor device in a broad sense such as Specific Integrated Circuit)).

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

An example of the outline of the embodiment is as follows, for example. That is, the identity verification system is an identity verification system that performs a series of transaction procedures including identity verification, and is at least for identity verification of a reception terminal that accepts a user who desires a transaction and the user accepted by the reception terminal. The identity verification device for verifying the identity of the user as the target person of the transaction based on the authenticity determination of the document and the authentication that the owner of the document is the user, and the person in charge of the counter. A transaction window terminal capable of executing the transaction through an operation, an automatic transaction device capable of executing the transaction by the operation of the user, and identification information uniquely identifying the user or the transaction desired by the user are generated. The identification information generation unit transmitted to a mobile terminal that can be operated by the user is communicably connected to the reception terminal, the identity verification device, the transaction counter terminal, the automatic transaction device, and the identification information generation unit, and the person is connected. The identity verification control unit for controlling the verification device is provided, and the identity verification device includes the identity verification device for the user received by the reception terminal using the identification information read from the mobile terminal or input by the user. The confirmation is executed, and when the identity verification is successful with the identity verification device, the identity verification control unit notifies the user whether the transaction can be executed by the transaction counter terminal or the automatic transaction device. Further, in the identity verification system, in addition to the unique identification number, a two-dimensional code indicating information including the identification number may be used for the identification information. Further, in the identity verification system, the identity verification control unit delivers the information required for the identity verification together with the result of the identity verification in the identity verification device to a configuration other than the identity verification device in the identity verification system. , May be. Further, in the identity verification system, the identity verification device includes an object photographing unit that photographs the identity verification document and the mobile terminal as an object, a face photographing unit that captures a face image of the user, and the target. The authenticity of the document for identity verification is determined by comparing the photographed image of the document photographed by the object photographing unit with the identification information acquired from the photographed image of the mobile terminal photographed by the object photographing unit. It may also have a control unit that compares the captured image of the document with the face image captured by the face photographing unit and authenticates that the owner of the document is the user. Further, in the identity verification system, the identity verification device may further include a display operation unit capable of performing the identity verification operation by the user. Further, in the identity verification system, the identity verification device determines the authenticity of the document for identity verification and authenticates that the owner of the document is the user, as well as a plurality of patterns taken by the face photographing unit. Biometric authentication may be performed by authenticating the face image with a biometric authentication algorithm. Further, in the identity verification system, the mobile terminal may be a mobile terminal owned by the user or a mobile terminal rented at a counter, and may be a smartphone, a tablet terminal, or a mobile phone. Further, in the identity verification system, the identity verification control unit may be built in the identity verification device. Further, in the identity verification system, the identity verification device may be built in the automated teller machine. According to the identity verification system configured as described above, most of the counter operations are self-contained by taking over the identity verification results between each device using a two-dimensional code or identification number that can identify the customer. Because it is possible, it is possible to streamline the work of the counter that handles various transactions.

FIG. 1 is a diagram showing a connection configuration example of an identity verification system according to an embodiment of the present invention.

In FIG. 1, a reception terminal 110, a transaction counter terminal 120, an automated teller machine 130, a router 140, an identity verification control unit 190, and an identity verification device 200 are provided in the store 100. Each of the reception terminal 110, the transaction counter terminal 120, the automatic teller machine 130, the identity verification control unit 190, and the identity verification device 200 is realized by, for example, an interface device, a storage device, and a device including a processor connected to them. .. Further, at least one of the reception terminal 110, the transaction window terminal 120, the automatic transaction device 130, the identity verification control unit 190, and the identity verification device 200 has an input device that accepts input from the customer and a display device that outputs information. The input device and the display device may be integrated. Further, the input device and the display device may be user interface devices.

The identity verification device 200 and the reception terminal 110 are installed in a store 100 (for example, a head office or a branch office of a financial institution) and are controlled by an identity verification control unit 190. The identity verification control unit 190 is connected to the server 160 via a router 140 connected by a wired LAN (Local Area Network) of the premises network or WiFi (registered trademark). The transaction counter terminal 120 and the automatic teller machine 130 are also installed in the store 100, and are connected to the server 160 via the router 140 connected by the wired LAN of the premises network.

When the customer (person) makes a reservation and inputs information in advance, the customer connects the customer's mobile terminal 180 to the server 160 using the network 170 (for example, WiFi or mobile phone network), and the transaction matter, the individual. By inputting the information permission and personal information to the server 160 via the mobile terminal 180, the reservation of the transaction date and time at the store 100 is made to the server 160 via the mobile terminal 180. After the reservation is completed, the server 160 generates a personal identification number (No.) that identifies the reserved person and a two-dimensional code that encodes the personal identification number, and the generated personal identification number and the two-dimensional code are described. The sent e-mail is sent to the e-mail address included in the personal information entered by the customer. In this way, in the server 160, transaction matters, personal information permission, and personal information are registered, reservation information (for example, including information representing a reservation of a transaction date and time) is registered, and such information is, for example. , It is linked to the generated personal identification number and managed by the server 160. The "personal identification number (No.)" referred to in this paragraph may be an identification number that identifies the customer himself or herself, or may be an identification number that identifies a reservation made by the customer. In any case, it suffices if at least the customer (person) can be identified from the person identification number. "Personal information" includes, for example, an email address (email address), but may include other types of information (eg, name, address, date of birth) in place of or in addition to the email address. Further, in this example, the person identification number and the two-dimensional code in which the person identification number is encoded are notified to the customer by e-mail, but the notification method thereof may be in place of or in addition to the e-mail. A notification method (for example, notification by e-mail according to SMS (Short Message Service)) may be adopted.

After entering the store, if there is an advance reservation, the customer displays the two-dimensional code written in the e-mail on the screen of the mobile terminal 180, and causes the bar code reader of the reception terminal 110 to read the two-dimensional code. .. If there is no advance reservation, the customer moves to the reception terminal 110 installed in the store 100 and uses the bar code reader (for example, an application for reading the two-dimensional code) of the customer's mobile terminal 180 to the reception terminal 110. Have the user read the two-dimensional code displayed on. When the customer does not use his / her own mobile terminal 180, the customer borrows the mobile terminal 180 at the store 100 and uses the borrowed mobile terminal 180 to perform the above processing.

If there is an advance reservation, the reception terminal that reads the two-dimensional code as the predetermined reception information that triggers the start of identity verification for the transaction reserved by the advance reservation based on the reading of the two-dimensional code on the reception terminal 110. The information is transferred from 110 to the server 160 and the transaction counter terminal 120 via the identity verification control unit 190. If there is no advance reservation, the mobile terminal 180 is connected to the identity verification control unit 190 using any of WiFi, USB (Universal Serial Bus), or Bluetooth (registered trademark), and the mobile terminal 180 reads the information. Transaction items, personal information permission, and personal information are input to the access destination according to the URL (Uniform Resource Locator) represented by the two-dimensional code, and the reception information including the information is transferred to the server 160. When the access destination is the server 160, transaction matters, personal information permission, and personal information are input from the mobile terminal 180 to the server 160. The "reception information" referred to in this paragraph may include, for example, personal identification information (No.), transaction matters, personal information permission, and personal information, and at least a part of such information is read from a two-dimensional code. It may be information.

When transaction matters, personal information permission, and personal information are input to the server 160, if identity verification is required from the server 160, the server 160 tells the mobile terminal 180 to call the customer (for example, identity verification is required). Along with the call and guidance of being a customer, a two-dimensional code that identifies the customer (for example, a two-dimensional code that includes information including a personal identification number obtained based on reception information) and a personal identification number (for example, reception information). (Personal identification number obtained based on) and is transmitted. The customer causes the identity verification device 200 to read the two-dimensional code displayed on the mobile terminal 180, and the customer himself performs a self-operation on the identity verification device 200. In response to the operation, the identity verification device 200 photographs the identity verification document (for example, the front and back of the document) and the face of the customer. In this way, it is possible to obtain an image such as a photographed image of an identity verification document (for example, the front and back of the document) or a photographed image of a customer's face, which is a part of information necessary for identity verification. If the identity verification device 200 cannot read the two-dimensional code, the identity verification device 200 accepts the manual input of the identity identification number displayed on the mobile terminal 180 from the customer.

When the identity verification device 200 completes the acquisition of the information necessary for identity verification (for example, the identity verification document and the photographed image of the face), the identity verification device 200 transfers the information to the mobile terminal 180. By displaying the information received by the mobile terminal 180, the person can confirm the information (information necessary for identity verification) acquired by the identity verification device 200. As a result of the confirmation of the above information by the person, if there is no problem, the person notifies the identity verification device 200 via (or not via) the mobile terminal 180 of the completion. Upon receiving the completion notification, the identity verification device 200 checks that the verification has been completed and the information necessary for the identity verification (information confirmed by the person that there is no problem (for example, including a photographed image)) at the transaction window. Transfer to terminal 120. Then, the person in charge of the counter makes a comprehensive judgment based on the information received and displayed by the transaction counter terminal 120 (for example, the confirmation is completed and the information necessary for the identity verification). If the result of the comprehensive judgment is normal (for example, when the transaction counter terminal 120 receives an input from the person in charge of the counter that the result of the comprehensive judgment is "normal"), the transaction counter terminal 120 goes to the mobile terminal 180. , Along with a call guide for calling the person to the transaction counter terminal 120 or the automatic teller machine 130, a two-dimensional code for identifying the customer and the person identification number are transmitted. For example, the information required for identity verification may include at least a portion of personal identification number, transaction information, personal information permission, and personal information, and thus may include, for example, an email address. In this case, the transaction counter terminal 120 may send an e-mail containing a call guide, a two-dimensional code, and a personal identification number to the e-mail address.

When a transaction is required at the counter, the customer conducts the transaction via the transaction counter terminal 120 operated by the counter person in charge. When the automatic teller machine 130 can make a transaction, the customer can have the automatic teller machine 130 read the two-dimensional code displayed on the mobile terminal 180 and perform the transaction by self-operation. If the two-dimensional code cannot be read by the automated teller machine 130, the customer manually inputs the personal identification number displayed on the mobile terminal 180 into the automated teller machine 130.

After the transaction is completed, the customer leaves the store 100. When the customer borrows the mobile terminal 180 at the store 100, the customer returns the mobile terminal 180 and confirms that the personal information has been completely deleted at this time.

FIG. 2 is a diagram showing an example of the internal configuration of the identity verification device 200. The identity verification device 200 has functions related to operation and display, and is a device in which a user (typically a customer) operates himself / herself to verify his / her identity. As shown in FIG. 2, the identity verification device 200 includes a control unit 201, an IO control unit 202, a power supply unit 203, a display operation unit 210, an operator display operation unit 211, a front surface photographing unit 212, a back surface photographing unit 213, and a face photographing unit. It includes 214, a front surface illumination unit 215, a back surface illumination unit 216, a non-contact IC reading unit 217, an audio output unit 218, and an audio input unit 219.

The control unit 201 has a wired connection terminal such as USB or HDMI (High-Definition Multimedia Interface) (registered trademark) and a wireless connection terminal such as Bluetooth, and is connected to the identity verification control unit 190 by USB or Bluetooth. The display operation unit 210 is connected to the control unit 201 and includes a display unit for displaying guidance and an operation unit having a touch panel function for operation. The display operation unit 210 causes the user (customer himself / herself) to perform a touch operation on the operation unit by instructing the operation unit to display a guidance screen or a voice output from the voice output unit 218. By mounting a privacy film on the display operation unit 210, security can be ensured by making it difficult for anyone other than the operator to see. Further, when the display operation unit 210 is an aerial touch operation display, operation buttons are displayed in the air in addition to the displayed guidance screen, and it is possible to operate cleanly without directly touching the screen or the like. be. In addition, in the operation, by inputting the voice related to the operation to the microphone of the voice input unit 219, the operation by voice recognition is also possible, and in this case, it is possible to operate cleanly without directly touching the screen or the like. It becomes.

In the identity verification device 200 shown in FIG. 2, the authenticity determination process of the identity verification document, which will be described later, is performed, for example, as follows. That is, the guidance (see FIG. 13) is displayed on the display unit (for example, the screen) of the display operation unit 210. The customer follows the guidance and places the identity verification document with the front side of the identity verification document facing the shooting department side. The identity verification document is assumed to be a document such as a driver's license, and may be a document with a photograph of the person. The surface photographing unit 212 connected to the control unit 201 is controlled by the illumination of the surface illumination unit 215 controlled by the IO control unit 202 capable of irradiating a plurality of light sources and the IO control unit 202 capable of irradiating a plurality of light sources. The front surface of the identity verification document is photographed with the illumination of the light source for transmission of the back surface lighting unit 216. The front surface illumination unit 215 and the back surface illumination unit 216 are equipped with visible light and special light (for example, ultraviolet rays for emitting special paint and transmitted light for capturing a transparent image) as a plurality of light sources, respectively. be able to. Then, in the case of photographing the surface of the identity verification document, the surface photographing unit 212 photographs a plurality of types of images using the above-mentioned visible light and special light, and in the authenticity determination, these multiple types of captured images are compared with each other. , It is possible to perform highly accurate authenticity judgment. Further, for example, in the case of photographing the front surface of the identity verification document, the front surface photographing unit 212 photographs the watermark photographed image using the transmissive light source of the back surface lighting unit 216, and analyzes the watermark photographed image in the authenticity determination. , The authenticity determination with high accuracy may be performed. For backside photography, the backside photography unit 213 connected to the control unit 201 can illuminate multiple light sources without the customer having to turn over the identity verification document, leaving the identity verification document in place. It is possible to take a picture with the illumination of the part 216. By photographing the identity verification document as described above, the front surface photographing unit 212 and the back surface photographing unit 213 do not require the work of having the customer replace the front and back of the identity verification document at the predetermined placement location in the identity verification device 200. , You can shoot both sides of the identity verification document. Further, in addition to the light source for photographing, the back surface lighting unit 216 is equipped with an ultraviolet light source (UV-C) for the purpose of sterilization, and the upper surface of the front surface photographing unit 212 is mounted during the identity verification process. Can be sterilized. The non-contact IC information mounted on the identity verification document can also be read by the non-contact IC reading unit 217 controlled from the IO control unit 202 with the identity verification document placed on the surface of the photograph. For reading the non-contact IC information, it may be necessary to input the personal identification number according to the identity verification document, but the personal identification number can be input by the software key displayed on the display operation unit 210. As described above, the control unit 201, for example, is required for authenticity determination and determination of the identity verification document based on the images of the front and back surfaces of the identity verification document and the character information and non-contact IC information recognized from those images. It is possible to acquire information (information necessary for identity verification (for example, including a photographed image)).

Further, in the identity verification process, in addition to the authenticity determination of the identity verification document, the face authentication technology is used to confirm that the customer is the owner of the identity verification document. For face authentication, the image of the document taken in the authenticity determination of the identity verification document and the image taken by the face photographing unit 214 connected to the control unit 201 are transferred to the identity verification control unit 190 (or the identity verification device 200). By authenticating with the installed face recognition algorithm, it is possible to confirm that the person is the owner of the identity verification document.

Furthermore, in the present embodiment, biometric authentication may be performed in the identity verification process. Regarding biometric authentication, for example, spoofing is prevented by taking a plurality of patterns of face images with the face photographing unit 214 and authenticating with the biometric authentication algorithm mounted on the identity verification control unit 190 (or the identity verification device 200). be able to.

The identity verification device 200 may be equipped with a direct touch operation display or an aerial touch operation display. When the identity verification device 200 includes an aerial touch operation display, the operation buttons are projected in the air by using the folography technique, and the operation buttons can be operated without touching the screen. In the identity verification device 200, the user (customer himself / herself) is a mobile terminal for the front surface photographing unit 212 or the back surface photographing unit 213 in accordance with instructions such as a guidance screen displayed on the display operation unit 210 and a voice output from the voice output unit 218. The identity verification process is started by turning the screen of 180 and reading the two-dimensional code. If you want to read the identity verification document, place the surface facing down and take an image. Further, by following instructions such as a guidance screen displayed on the display operation unit 210 and a voice output from the voice output unit 218, the face photographing unit 214 captures an image of the user's face to impersonate the owner. Make sure it is not. Further, in the identity verification device 200, the operator display operation unit 211 may be mounted on the back surface, so that the operator can confirm the captured image and the received information.

In the overall system (identity verification system) including the identity verification device according to the present embodiment, the connection modes of each configuration are not limited to the examples shown in FIGS. 1 and 2, and are listed below. As such, various connection configurations can be adopted. Each of the connection configurations listed below can be combined as appropriate.

For example, in the overall system according to the present embodiment, the reception terminal 110 and the router 140 may be directly connected so as to be able to communicate with each other.

Further, in the overall system according to the present embodiment, the function corresponding to the identity verification control unit 190 is not limited to being implemented by an independent device as shown in FIG. 1, and the identity verification control unit 190 is, for example,. The corresponding function may be built in the identity verification device 200.

When the function corresponding to the identity verification control unit 190 is built in the identity verification device 200, for example, the identity verification device 200 and the router 140 may be directly connected so as to be able to communicate with each other. At this time, the connection between the identity verification device 200 and the router 140 may be any of wired LAN, WiFi, USB, Bluetooth, and the like.

Further, the overall system according to the present embodiment is not limited to the identity verification device 200 being mounted as an independent device, and has a configuration in which a function corresponding to the identity verification device 200 is built in the automatic teller machine 130. You may.

When the function corresponding to the identity verification device 200 is built in the automated teller machine 130, for example, the mobile terminal 180 and the automated teller machine 130 may be directly connected to each other so as to be able to communicate with each other. At this time, the connection between the mobile terminal 180 and the automatic teller machine 130 may be any of wired LAN, WiFi, USB, Bluetooth, and the like.

FIG. 3 is a flowchart showing an example of a processing procedure for a series of processes in which a predetermined transaction is performed based on the identity verification of the customer as an example of the processing procedure for the entire processing in the present embodiment. It is a flowchart for demonstrating the detail about the partial processing of the processing shown in FIGS. 4 to 7 and FIG. 8 to 11 are diagrams showing screen display examples (No. 1 to No. 4) of the mobile terminal 180. Although the individual contents will be described later, the mobile terminal 180 displaying the screen display examples of FIGS. 8 to 11 may be any of a smartphone, a tablet terminal, and a mobile phone. FIG. 12 is a diagram showing a screen display example of the reception terminal 110. 13 to 14 are views showing an example of screen display of the identity verification device 200. A series of processes for performing a predetermined transaction will be described with reference to this flow chart and a screen display example.

According to FIG. 3, first, the customer enters the store 100 (S101), and the reception process is mainly performed by the reception terminal 110 (S102).

FIG. 4 is a flowchart showing a detailed processing procedure example of the reception processing. According to FIG. 4, first, the process branches depending on whether or not the reception terminal 110 is installed in the store 100 (S201). If the store 100 does not have a reception terminal 110 (NO in S201), the mobile terminal 180 with a unique reception number is lent to the customer from the store 100 (S202), and the reception process ends. On the other hand, when the store 100 has the reception terminal 110, the process branches depending on whether or not the information is input and the reservation is made in advance in the server 160 (S203). As a specific process in S203, for example, the reception terminal 110 displays a display asking the customer whether or not information input and reservation have been made in advance, and determines according to the content of the customer's response operation to the display. Is assumed. If the information has not been input and reserved in advance (NO in S203), the reception terminal 110 includes a two-dimensional code (personal identification number (No.) assigned to the customer) as illustrated in FIG. Dimension code) is displayed (S204). FIG. 12 is a diagram showing an example of screen display on the reception terminal 110. FIG. 12 shows an example of a screen display displayed on the display operation unit 111 (for example, a touch operation display) of the reception terminal 110 when the person identification number is issued, and displays information including the person identification number assigned to the customer. The included two-dimensional code is displayed and its reading is instructed. When the customer operates the mobile terminal 180 with respect to the display of S204 and reads the two-dimensional code displayed on the reception terminal 110 (S205), the reception process ends. If the information is input and reserved in advance in S203 (YES in S203), the customer operates the mobile terminal 180 to input the information in advance and input the two-dimensional code (see FIG. 8) received at the time of reservation. Displayed on the mobile terminal 180 (S206). FIG. 8 is a diagram showing a screen display example (No. 1) of the mobile terminal 180. FIG. 8 shows an example of screen display of the mobile terminal 180 when the information input in advance and the reservation are completed, the two-dimensional code received at the time of reservation is displayed, and the reception terminal at the start of reception. Is instructed to read the two-dimensional code. After S206, when the bar code reader of the reception terminal 110 reads the two-dimensional code (S207), the reception process ends.

As shown in FIG. 3, after the reception process (S102), the information input process is performed between the mobile terminal 180 and the server 160 (S103). The information input process is a process mainly executed by the reception terminal 110 and the mobile terminal 180.

FIG. 5 is a flowchart showing a detailed processing procedure example of the information input processing. According to FIG. 5, first, it is confirmed whether or not advance information input (pre-input) and reservation have been made (S301).

If there is no prior information input and reservation in S301 (NO in S301), the transaction item will be sent to the access destination according to the URL represented by the two-dimensional code read by the mobile terminal 180 lent at the reception desk or the mobile terminal 180 brought by the customer. (See FIG. 9), information such as personal information permission and personal information is input from the customer (S302). FIG. 9 is a diagram showing a screen display example (No. 2) of the mobile terminal 180. FIG. 9 shows an example of the screen display of the mobile terminal 180 when the two-dimensional code is read and connected to the access destination when there is no advance reservation, and it is required to select the purpose of visiting the store (transaction item). Has been done. After the information is input in S302, it is confirmed whether or not the server 160 exists separately from the access destination (S303). If there is a server 160 separate from the access destination (YES in S303), the information input in S302 is transferred to the server 160 (S304), and the information input process ends. If the server 160 does not exist separately from the access destination (for example, the access destination is the server 160) (NO in S303), the information input process is terminated.

Further, when the information is input and reserved in advance in S301 (YES in S301), since the information has already been transferred to the server 160, it is not necessary to additionally execute the information input, and the information input process is performed. Is finished.

As shown in FIG. 3, after the information input process (S103), the identity verification process is performed (S104). The identity verification process is a process executed mainly by the identity verification device 200.

FIG. 6 is a flowchart showing a detailed processing procedure example of the identity verification process. According to FIG. 6, first, the necessity of identity verification is confirmed (S401). When identity verification is not required (NO in S401), the identity verification device 200 (control unit 201) transfers the confirmation completion notification and information (for example, reception information) to the transaction counter terminal 120 (S410). If identity verification is required (YES in S401), the call is waited for (S402), and the presence or absence of the call is periodically determined (S403). When there is a call after waiting (YES in S403), the customer causes the mobile terminal 180 to display the two-dimensional code and the personal identification number (see FIG. 10) (S404). FIG. 10 is a diagram showing a screen display example (No. 3) of the mobile terminal 180. FIG. 10 shows an example of a screen display at the time of identity verification, and information necessary for identity verification (reading a two-dimensional code, may be read as the identity verification device 200) for the reception terminal 110 (may be read as the identity verification device 200). Alternatively, it is instructed to input the personal identification number (No.). When the customer reads the two-dimensional code or manually inputs the personal identification number according to the display of S404, the personal identification device 200 confirms the personality. Start (S405).

When the identity verification is started, the customer arranges the identity verification document used for the verification in the identity verification device 200 according to the screen of the identity verification device 200 (see FIG. 13). FIG. 13 is a diagram showing a screen display example (No. 1) of the identity verification device 200. At the start of identity verification, the display operation unit 210 of the identity verification device 200 performs a guidance display as shown in FIG. 13 to arrange the identity verification document at a predetermined location of the identity verification device 200 for the customer. You can encourage execution. When the identity verification document is placed at a predetermined location of the identity verification device 200, the identity verification device 200 acquires information from the IC (Integrated Circuit) of the identity verification document (for example, a passport or a driver's license). At least one of the reading of the front and back images of the identity verification document and the taking of the customer's face image are performed to determine the authenticity, the authenticity auxiliary information, the information indicating the owner's identity, and spoofing. Obtain information that can be confirmed not to be done (S406). Here, when the mobile terminal 180 is a rented mobile terminal, the information input to the mobile terminal 180 (for example, the manually input personal identification number) is transferred to the personal identification device 200 (S407). In S407, the identity verification device 200 displays the acquired information each time a predetermined type of information is acquired (for example, when the front and back images of the identity verification document are read), so that the customer can check the accuracy and visibility of the information. You may ask (the person) to check (see FIG. 14), and if OK is answered by the customer, proceed to the next process, S408. FIG. 14 is a diagram showing a screen display example (No. 2) of the identity verification device 200. At the start of identity verification, the display operation unit 210 of the identity verification device 200 displays the guidance as shown in FIG. 14, so that the contents of the transaction desired by the customer, the image of the identity verification document, etc. are displayed, and the customer can display these. By checking the displayed contents and touching "Next" if there is no problem, the process of S408 can be proceeded. The screen display as shown in FIG. 14 may also be displayed on the operator display operation unit 211 side of the identity verification device 200.

If the identity verification device 200 can acquire all the information necessary for identity verification through the processes of S405 to S407, the identity verification device 200 will use the information (for example, the information read from the IC of the identity verification document and the identity). It can be confirmed that the front and back images of the confirmation document, the face image taken by the person, the information showing the result of the authenticity judgment, the auxiliary information of the authenticity, and the information indicating the owner himself are not spoofed. At least a part of the information) is transferred to the mobile terminal 180 (S408). Next, the customer himself / herself confirms the information received by the mobile terminal 180 (S409). The confirmation result (determination result) in S409 is notified to the identity verification device 200 (control unit 201) when the customer inputs an input corresponding to the determination result to the mobile terminal 180. If it is determined in S409 that there is a problem (NG in S409), the identity verification device 200 returns to S404 and repeats the process. On the other hand, if it is determined in S409 that there is no problem (OK in S409), the mobile terminal 180 notifies the identity verification device 200 of the completion, that the verification is completed, and the information necessary for identity verification (for example, an image). Is transferred from the mobile terminal 180 or the identity verification device 200 to the transaction counter terminal 120 (S410). At this time, the fact that the identity verification has been completed and the information necessary for the identity verification may be transferred to a device other than the transaction counter terminal 120 (for example, an automated teller machine 130, a server 160, etc.). Then, the person in charge of the counter makes a comprehensive judgment (S411) to determine the final judgment result in the identity verification process based on the information and the image received by the transaction counter terminal 120, and ends the identity verification process.

As shown in FIG. 3, after the identity verification process (S104) is completed, the transaction process is performed (S105). The transaction processing is a processing that proceeds by executing the corresponding processing by the mobile terminal 180, the identity verification device 200, the transaction counter terminal 120, the automatic transaction device 130, and the like in response to various operations by the customer.

FIG. 7 is a flowchart showing a detailed processing procedure example of transaction processing. According to FIG. 7, first, the customer waits until there is a call (S501). If the result of the above-mentioned comprehensive judgment (S411 in FIG. 6) by the person in charge of the counter is normal, a call guidance is given to the customer (YES in S502), and the mobile terminal 180 is given a two-dimensional code and a personal identification number (No.). It is displayed (see FIG. 11) (S503). FIG. 11 is a diagram showing a screen display example (No. 4) of the mobile terminal 180. FIG. 11 shows an example of customer call guidance when a transaction is possible with the automatic teller machine 130. In the display of the call guidance, for example, it is notified whether the transaction is possible at the automatic teller machine 130 or the counter where the transaction counter terminal 120 is installed. In addition, even if it is determined that the transaction cannot be made, a call guidance may be given to come to the counter. That is, as shown in S3804 and S3805, the progress regarding the subsequent transactions branches according to the display content of the call guidance of S503. The branch destination of S3804 and S3805 is determined by the identity verification control unit 190, but the control unit 201 of the identity verification device 200 or the like may act as a proxy. Specifically, when a branch is made regarding whether or not a transaction is possible in S504 and the transaction is impossible (NO in S504), the person in charge at the transaction counter explains the reason why the transaction is impossible (NO). S505), the transaction processing is terminated. If a transaction is possible (YES in S504), a branch is made in S506 as to whether the transaction is performed at the counter (transaction counter terminal 120) or the automatic teller machine 130. When the transaction window terminal 120 is used in a transaction (“window” in S506), the transaction is executed via the operation of the transaction window terminal 120 by the person in charge of the transaction (S507). When the automated teller machine 130 is used in the transaction (“automatic teller machine” in S506), the automated teller machine 130 reads the two-dimensional code displayed on the mobile terminal 180 (or the personal identification number (No.)). (S508), the transaction is executed using the automated teller machine 130 (S509). After the transaction is completed in S507 or S509, the customer will leave the store, but before leaving the store, it is confirmed whether or not the customer has borrowed the mobile terminal 180 at the store 100 (S510). If the mobile terminal 180 has been borrowed (YES in S510), the customer returns the mobile terminal 180 (S511) and confirms that the personal information has been completely deleted from the mobile terminal 180 (S512). The store will be closed (S106 in FIG. 3). On the other hand, if the customer does not borrow the mobile terminal 180 (NO in S510), the customer leaves the store as it is (S106 in FIG. 3).

According to the above-described embodiment, the identity verification system of the present invention can be summarized as follows.

A part (for example, most of) of the store business (typically the counter business) is the self-operation performed by the customer himself and the information using the two-dimensional code, instead of the conventional work by the store staff. Instead of interaction, as a result, store operations are reduced and store operations are streamlined. In other words, in identity verification using identity verification documents, information acquisition from non-contact ICs, authenticity judgment using face images, identity verification by customers themselves using face authentication technology using facial images, etc., as well as in each store By taking over the processing including the transaction by the two-dimensional code or the specific number displayed on the mobile terminal, it is possible to improve the efficiency of the business of the counter handling various transactions.

For example, when there is a reception terminal 110 and there is an advance reservation, at least a part of transaction matters, personal information permission, and personal information is registered in the server 160 by the customer in advance. A two-dimensional code including a customer's personal identification number (No.) and information representing the number is sent from the server 160 to the customer's mobile terminal 180. The reception terminal 110 reads the two-dimensional code displayed on the mobile terminal 180 (or accepts the manual input of No. from the customer). As a result, on the store side, No. The visit of the customer specified from is recognized, and then the process X is performed. Process X includes, for example, the following.
-The mobile terminal 180 displays a two-dimensional code and a personal identification number (No.). Specifically, for example, the customer waits for a call for identity verification as needed, and is called through the customer's mobile terminal 180 (or by another method such as an in-store announcement). In response to the call, the mobile terminal 180 has a two-dimensional code and No. Is displayed.
-The identity verification device 200 reads the two-dimensional code displayed on the mobile terminal 180 (or accepts the manual input of the identity identification number (No.) from the customer) and acquires the photographed image (identity verification document and the customer's). Acquiring a photographed image by photographing at least one of the faces). The identity verification device 200 may acquire IC information (read information from the IC of the identity verification document).
-Information necessary for identity verification is transferred to the transaction counter terminal 120. The "information necessary for identity verification" may include a personal identification number (No.), acquisition information, and reception information. The "acquired information" is, for example, the photographed image itself of the identity verification document or the customer's face and the photographed image of the identity verification document by the OCR (Optical Character Recognition / Reader) function of the identity verification device 200 or the identity verification control unit 190. It is information including textual information). The "reception information" is, for example, information including at least a part of transaction matters, personal information permission, and personal information registered in the server 160.
-Information necessary for identity verification is displayed on the transaction counter terminal 120, and the counter person in charge makes a comprehensive determination (for example, determination of whether or not the acquired information conforms to the reception information).

Then, after the completion of the identity verification, the identity verification control unit 190 not only confirms the identity, but also includes information necessary for the identity verification (for example, information for face authentication) in the identity verification system. By taking over to the device of, it is possible to confirm that the person who came to the takeover destination (for example, the automatic trading device 130, etc.) is the person himself / herself, and it is possible to prevent spoofing. In addition, in places where multiple transactions and procedures are carried out, such as government offices, once identity verification is completed, the results and information necessary for identity verification are shared, so-called "horizontal". Since "cooperation" can be taken, it is possible to provide the transactions and procedures desired by the customer without having to re-verify the identity each time in each transaction or procedure, which has the effect of reducing the burden on the customer and the counter. You can expect it.

Further, for example, when there is a reception terminal 110 and there is no advance reservation, the personal identification number (No.) represented by the two-dimensional code displayed by the reception terminal 110 and read by the mobile terminal 180 (or displayed on the reception terminal 110). The No. 1) manually input to the mobile terminal 180 is transmitted to the server 160, and at least a part of transaction matters, personal information permission, and personal information is input to the server 160 through the mobile terminal 180, and as a result. , No. Is linked to the reception information (transaction matters, personal information permission, and at least a part of personal information) and registered in the server 160. After that, the above-mentioned process X is performed.

Further, for example, when there is no reception terminal 110, the mobile terminal 180 is rented out to the customer at the store 100. In this case, the No. 1 assigned to the mobile terminal 180. However, the customer-identifying No. Corresponds to. The mobile terminal 180 receives input of transaction matters, personal information permission, and personal information from a customer, and the reception information including them and the No. 1 of the mobile terminal 180. To the server 160. As a result, No. Is linked to the reception information and registered in the server 160. After that, the above-mentioned process X is performed. After the process X, when the customer leaves the store, the personal information and the like input to the mobile terminal 180 are deleted.

Although one embodiment of the present invention has been described above, this is an example for the purpose of explaining the present invention, and the scope of the present invention is not limited to this embodiment. The present invention can also be practiced in various other forms. For example, USB, Bluetooth and WiFi are examples of communication methods, respectively, and other types of communication methods may be used in place of at least one of these.

100 ・ ・ ・ Store 110 ・ ・ ・ Reception terminal 120 ・ ・ ・ Transaction counter terminal 130 ・ ・ ・ Automatic teller machine 140 ・ ・ ・ Router 160 ・ ・ ・ Server 170 ・ ・ ・ Network 180 ・ ・ ・ Mobile terminal 190 ・ ・ ・Identity verification control unit 200 ・ ・ ・ Identity verification device

Claims (9)

It is an identity verification system that performs a series of transaction procedures including identity verification.
A reception terminal that accepts users who wish to make transactions,
For the user received by the reception terminal, the user is the target person of the transaction, at least based on the authenticity determination of the document for identity verification and the authentication that the owner of the document is the user. An identity verification device that confirms the identity of a person,
A transaction counter terminal that can execute the transaction through operations by the counter person in charge,
An automated teller machine capable of executing the transaction by the operation of the user,
An identification information generator that uniquely identifies a user or a transaction desired by the user and sends the identification information to a mobile terminal that can be operated by the user.
An identity verification control unit that is communicably connected to the reception terminal, the identity verification device, the transaction counter terminal, the automated teller machine, and the identification information generation unit to control the identity verification device.
Equipped with
The identity verification device executes the identity verification for the user received by the reception terminal by using the identification information read from the mobile terminal or input by the user.
The identity verification control unit is characterized in that, when the identity verification is successful with the identity verification device, the identity verification unit notifies the user whether the transaction can be executed by the transaction counter terminal or the automatic teller machine. system. The identity verification system according to claim 1, wherein a two-dimensional code indicating information including the identification number can be used for the identification information in addition to the unique identification number. The claim is characterized in that the identity verification control unit delivers, together with the result of the identity verification in the identity verification device, the information required for the identity verification to a configuration other than the identity verification device in the identity verification system. The identity verification system described in 1. The identity verification device is
The document for identity verification and the object shooting unit that shoots the mobile terminal as the object,
A face photographing unit that captures the user's face image, and
The authenticity of the document for identity verification is determined by comparing the photographed image of the document photographed by the object photographing unit with the identification information acquired from the photographed image of the mobile terminal photographed by the object photographing unit. A control unit that authenticates that the owner of the document is the user by comparing the captured image of the document with the face image captured by the face photographing unit.
The identity verification system according to claim 1, wherein the system is characterized by having. The identity verification system according to claim 4, wherein the identity verification device further includes a display operation unit capable of performing the identity verification operation by the user. In addition to determining the authenticity of the document for identity verification and authenticating that the owner of the document is the user, the identity verification device uses a biometric authentication algorithm for a plurality of patterns of the face image taken by the face photographing unit. The identity verification system according to claim 4, wherein biometric authentication is performed by authenticating with. The identity verification system according to claim 1, wherein the mobile terminal is a mobile terminal owned by the user or a mobile terminal rented at a counter, and is a smartphone, a tablet terminal, or a mobile phone. The identity verification system according to claim 1, wherein the identity verification control unit is built in the identity verification device. The identity verification system according to claim 1, wherein the identity verification device is built in the automated teller machine.

Images