JP2023011388A - Information processing apparatus, information processing method, and program - Google Patents

Abstract

To present an identification verification method available in a terminal held by a user.SOLUTION: In an information processing apparatus 1, an acquisition unit 131 acquires, from a user terminal 2, type information indicating a type of the user terminal 2. A determination unit 132 refers to performance information in which terminal types stored in a storage unit 12 are associated with identification verification methods available in each terminal type based on the acquired type information of the user terminal 2, for determining whether or not the user terminal 2 corresponds to a first identification verification method. A display control unit 133 causes the user terminal 2 to display the identification verification method to which the user terminal 2 corresponds, if the user terminal 2 does not correspond to the first identification verification method.SELECTED DRAWING: Figure 2

Description

The present invention relates to an information processing device, an information processing method, and a program.

A method of performing identity verification online is known (see Patent Document 1, for example).

Japanese Patent Application Laid-Open No. 2020-087438

By the way, in order to improve the convenience of the My Number card, it is being discussed to install the function of the My Number card in a smart phone or the like. A policy of storing an electronic certificate or the like in an SE (Secure Element) chip mounted on a terminal and accessing the electronic certificate or the like stored in the terminal for personal identification is under study.

However, even if this new identity verification method is realized, the availability of this identity verification method is determined by the performance of the terminal owned by the user. It is possible that both the confirmation method and the conventional identification method using a physical card coexist. Therefore, the user needs to select an appropriate method from among various personal identification methods, which may complicate the application for the service.

Accordingly, the present invention has been made in view of these points, and it is an object of the present invention to present a personal identification method that can be used in a terminal owned by a user.

In the information processing apparatus according to the first aspect of the present invention, the type information indicating the type of the terminal, and the identity verification information used for identity verification including the first identity verification method or the acquisition method of the identity verification information are A storage unit that stores performance information that associates a plurality of different personal identification methods with the personal identification method that can be used for each type of the terminal, and an acquisition unit that obtains the type information of the user terminal from the user terminal. a determination unit that refers to the storage unit and determines whether the user terminal is compatible with the first identity verification method based on the acquired type information of the user terminal; a display control unit that causes the user terminal to display the identity verification method supported by the user terminal when the device does not support the first identity verification method.

When the user terminal supports the first personal identification method, the display control unit may request the user terminal to send an electronic certificate based on the first personal identification method.

The display control unit requests the user terminal to send the electronic certificate stored in the tamper-resistant area installed in the user terminal when the user terminal is compatible with the first personal identification method. You may

When the user terminal does not support the first identity verification method, the display control unit causes the user terminal to display one or more identity verification methods supported by the user terminal in a selectable manner. good too.

The display control unit causes the user terminal to download an application for acquiring identity verification information corresponding to the identity verification method selected by the user when the identity verification method supported by the user terminal is selected. may

The display control unit may request sending of the identity verification information corresponding to the identity verification method selected by the user when the user terminal has completed downloading the application.

When the user terminal does not support the first identity verification method, the display control unit controls image data obtained by imaging an identity verification document possessed by the user and a face image that is an image obtained by imaging the face of the user. A second identity verification method for acquiring data and verifying identity, acquiring certificate data stored in a tamper-resistant area mounted on the identity verification document possessed by the user and face image data of the user for identity verification or verifying an electronic signature signed using a private key stored in a tamper-resistant area mounted on the identity verification document possessed by the user. The user terminal may display one or more of the identity verification methods supported by the user terminal in a selectable manner among the one or more identity verification methods including the above.

The storage unit further stores a selection result of the identity verification method selected by the user in the past, and the display control unit stores a selection result of the identity verification method selected by the user in the past. A display mode of the one or more personal identification methods supported by the terminal may be determined.

The storage unit further stores a result of identity verification performed in the past, and the display control unit causes the user terminal to display a screen for selecting whether to use the result of identity verification performed in the past. good too.

In the information processing method of the second aspect of the present invention, the step of acquiring type information indicating the type of the user terminal from the user terminal, executed by the processor; Based on this, among a plurality of identity verification methods that differ in identity verification information used for identity verification, including the type information and the first identity verification method, or methods of acquiring identity verification information, each type of the terminal can be supported. determining whether the user terminal is compatible with the first identity verification method by referring to performance information stored in a storage unit in association with the identity verification method; and and a step of displaying, on the user terminal, the identity verification method supported by the user terminal if the first identity verification method is not supported.

In a program according to a third aspect of the present invention, a processor acquires, from a user terminal, type information indicating the type of the user terminal; and based on the acquired type information of the user terminal, Among a plurality of identity verification methods that differ in identity verification information used for identity verification, including type information and the first identity verification method, or acquisition methods of identity verification information, said identity verification method that can be used for each type of said terminal. A step of determining whether the user terminal supports the first identity verification method by referring to a database that stores performance information stored in a storage unit in association with the user terminal; a step of causing the user terminal to display the identity verification method supported by the user terminal if the first identity verification method is not supported.

ADVANTAGE OF THE INVENTION According to this invention, it is effective in being able to present the user identification method which can be used with the terminal which a user has.

1 is a diagram showing an outline of an information processing device 1; FIG. 2 is a block diagram showing the device configuration of the information processing device 1; FIG. 3 is a diagram showing an example of the data structure of performance information stored in a storage unit 12; FIG. 4 is a diagram showing an example of a data structure of user information stored in a storage unit 12; FIG. 4 is a diagram showing an example of a display screen displayed on the user terminal 2 by the display control unit 133. FIG. 4 is a diagram showing an example of a display screen displayed on the user terminal 2 by the display control unit 133. FIG. 4 is a diagram showing an example of a display screen displayed on the user terminal 2 by the display control unit 133. FIG. 4 is a diagram showing an example of a display screen displayed on the user terminal 2 by the display control unit 133. FIG. 2 is a block diagram showing the configuration of a user terminal 2; FIG. 4 is a sequence diagram showing the flow of processing in the information processing apparatus 1; FIG.

[Overview of information processing system S]
FIG. 1 is a diagram showing an outline of an information processing system S. As shown in FIG. The information processing system S is a system for accepting applications for services from users online. The information processing system S accepts applications for, for example, mobile phone usage contracts, credit card issuance contracts, and the like. Since it is legally required to verify the identity of the user when accepting an application for these services, the information processing system S verifies the identity of the user who has applied for the service. Here, there are various methods for performing identity verification online, but which identity verification method can be used depends on the type of terminal used by the user. Therefore, in the information processing system S, the information processing device 1 acquires type information indicating the type of terminal from the user terminal 2 and determines the identity verification method supported by the user terminal 2 . Then, the information processing device 1 performs identity verification by a method selected by the user from the identity verification methods supported by the user terminal 2 .

An information processing system S includes an information processing device 1 and a user terminal 2 . The information processing device 1 is a device having a function of accepting a service application from a terminal, and is, for example, a server. The user terminal 2 is an information terminal used by a user, such as a smart phone, tablet, or personal computer.

The information processing device 1 acquires type information from the user terminal 2 ((1) in FIG. 1). The type information is information indicating the version of terminal hardware or OS (Operating System). The information processing apparatus 1 acquires the type information, for example, when receiving a web page display request from the user terminal 2 or when receiving a service application.

The information processing device 1 determines the identity verification method that the user terminal 2 supports based on the terminal type ((2) in FIG. 1). The information processing device 1 presents options for the identity verification method to the user terminal 2 based on the determination result ((3) in FIG. 1). Then, the user terminal 2 transmits identity verification information corresponding to the identity verification method selected by the user to the information processing device 1 ((4) in FIG. 1).

[Configuration of information processing device 1]
FIG. 2 is a block diagram showing the device configuration of the information processing device 1. As shown in FIG. The information processing device 1 has a communication section 11 , a storage section 12 and a control section 13 . The control unit 13 has an acquisition unit 131 , a determination unit 132 , a display control unit 133 and an identity verification information acquisition unit 134 .

The communication unit 11 is a communication interface for transmitting and receiving data to and from the user terminal 2 . The storage unit 12 is, for example, a storage medium such as a ROM (Read Only Memory), a RAM (Random Access Memory), an SSD (Solid State Drive), and a hard disk. The storage unit 12 stores various programs executed by the control unit 13 .

The storage unit 12 stores the type information indicating the type of the terminal, and the identity verification information used for identity verification, including the first identity verification method, or among a plurality of identity verification methods with different acquisition methods for the identity verification information. Personal identification methods compatible with each type of terminal are associated with each other and stored. FIG. 3 is a diagram showing an example of the data structure of performance information stored in the storage unit 12. As shown in FIG. The performance information includes type information and information indicating whether or not each type of terminal is compatible with an identity verification method. In the example of FIG. 3, the "type A" terminal supports only the "method 2" personal identification method, and the "type D" terminal supports four types of personal identification methods. The type information includes hardware version, OS version, or a combination thereof.

Here, each of the methods in FIG. 3 is a method of acquiring the personal identification information or the personal identification information, respectively, as follows. "Method 1" is a method of acquiring an electronic certificate stored in a tamper-resistant area installed in the user terminal 2 and performing identity verification (hereinafter also referred to as a first identity verification method). "Method 2" is a method of acquiring image data of an identity verification document possessed by a user (hereinafter referred to as document image data) and face image data of an image of the user's face to perform identity verification (hereinafter referred to as "document image data"). , also referred to as a second identity verification method). “Method 3” is a method of acquiring certificate data and face image data stored in a tamper-resistant area mounted on an identity verification document possessed by a user and performing identity verification. (hereinafter also referred to as a third identity verification method). "Method 4" is a method of verifying an identity by verifying an electronic signature signed using a private key stored in a tamper-resistant area mounted on an identity verification document possessed by a user (hereinafter referred to as the fourth It is also called an identity verification method).

Note that the personal identification method supported by the information processing apparatus 1 is not limited to this. The storage unit 12 may further store, for example, information indicating whether or not a personal identification method such as biometric authentication using a fingerprint, face image, or the like is supported.

The storage unit 12 may store the result of selection of the identity verification method selected by the user in the past. FIG. 4 is a diagram showing an example of the data structure of user information stored in the storage unit 12. As shown in FIG. The storage unit 12 associates, as user information, a user ID (identifier) for identifying the user, past selection information indicating the identity verification method selected in the past, and the past confirmation date on which the identity verification method was selected in the past. memorize.

The storage unit 12 may further store the results of identity verification performed in the past. The storage unit 12 further stores the result of identity verification in association with the user as user information. The result of identity verification is information indicating that identity verification has been completed, the date and time when identity verification was completed, and identity verification information acquired in the past.

Returning to FIG. 2, the control unit 13 is, for example, a CPU (Central Processing Unit). The control unit 13 functions as an acquisition unit 131 , a determination unit 132 , a display control unit 133 and an identity verification information acquisition unit 134 by executing control programs stored in the storage unit 12 .

The acquisition unit 131 acquires the type information of the user terminal 2 from the user terminal 2 . For example, the acquisition unit 131 acquires the user agent included in the web page display request from the user terminal 2 as the type information. The user agent includes information indicating the OS, hardware, browser version, etc. of the user terminal 2 .

The determination unit 132 refers to the storage unit 12 based on the acquired type information of the user terminal 2 and determines whether or not the user terminal 2 is compatible with the first personal identification method. The determination unit 132 refers to the performance information stored in the storage unit 12 and determines the identity verification method that the user terminal 2 supports.

The determination unit 132 may be considered to support a specific personal identification method in a predetermined case. The predetermined case is, for example, a case where the type information cannot be acquired or a case where the terminal type corresponding to the acquired type information does not exist in the performance information stored in the storage unit 12 . The specific identity verification method is the identity verification method that is most likely supported by terminals with low performance. By configuring the determination unit 132 in this manner, the information processing apparatus 1 can accept a service application from a terminal of a type that has not been registered in advance.

When the user terminal 2 does not support the first identity verification method, the display control unit 133 may cause the user terminal 2 to display one or more identity verification methods supported by the user terminal 2 in a selectable manner. . FIG. 5 is a diagram showing an example of a display screen (hereinafter referred to as a selection screen) for selecting an identity verification method to be displayed on the user terminal 2 by the display control unit 133. As shown in FIG. The selection screen in FIG. 5 is displayed when the user terminal 2 does not support the first method.

On the selection screen shown in FIG. 5, a message prompting the user to select an identity verification method is displayed along with options for selectable identity verification methods. Choices of personal identification methods are displayed as buttons realized by a GUI (Graphical User Interface). When the user presses the button, the user terminal 2 transmits to the information processing apparatus 1 information indicating that the identity verification method corresponding to the button has been selected. On the selection screen in FIG. 5, as the identity verification method, the method of "use the image data of the identity verification document and the person's face photo data" (Method 2), "use the electronic certificate of the identity verification document and the person's face photo data". A method (Method 3) and a method (Method 4) of "confirm identity by electronic signature" are displayed. These are examples of personal identification methods supported by the information processing apparatus 1, and options displayed on the selection screen are not limited to these.

It would be very convenient for the user if the function necessary for acquiring the identity verification information corresponding to the identity verification method selected by the user could be added to the terminal at the required timing. Therefore, when an identity verification method supported by the user terminal 2 is selected, the display control unit 133 causes the user terminal 2 to download an application for acquiring identity verification information corresponding to the identity verification method selected by the user. may In this case, the buttons indicating the options of the personal identification method on the selection screen are configured to download the corresponding application when the selection operation is received.

When an identity verification method is selected, the display control unit 133 causes the user terminal 2 to download an application corresponding to the selected identity verification method. For example, when the third identity verification method is selected, the application acquires an electronic certificate from the identity verification document by controlling an NFC (Near Field Communication) communication module, and sends the acquired information to the information processing apparatus 1. Has the ability to send. The display control unit 133 may download the application in the background without making the user aware of the download. Note that the application may be configured to be downloaded from a server other than the information processing apparatus 1 .

If the user terminal 2 is compatible with the first identity verification method, the display control unit 133 may request the user terminal 2 to send an electronic certificate based on the first identity verification method. The display control unit 133 may display a screen requesting delivery of the electronic certificate on the user terminal 2 or may transmit a message requesting delivery of the electronic certificate to the user terminal 2 .

Furthermore, if the user terminal 2 is compatible with the first personal identification method, the display control unit 133 may request sending of the electronic certificate stored in the tamper-resistant area installed in the user terminal 2. . FIG. 6 is a diagram showing an example of a display screen for requesting delivery of an electronic certificate displayed on the user terminal 2 by the display control unit 133. As shown in FIG. On the screen shown in FIG. 6, a select button and a send button are arranged along with a message requesting the sending of the electronic certificate. The selection button is a button for selecting a certificate to be used for identity verification from a plurality of electronic certificates stored in the tamper-resistant area of the user terminal 2 . The send button is a button for sending the selected certificate to the information processing apparatus 1 . Note that the display control unit 133 may display a screen requesting the input of a password or personal identification number when selecting or transmitting an electronic certificate.

When the user terminal 2 completes downloading the application, the display control unit 133 may request sending of identity verification information corresponding to the identity verification method selected by the user. FIG. 7 is a diagram showing an example of a display screen for transmitting personal identification data (hereinafter referred to as an acquisition screen) displayed on the user terminal 2 by the display control unit 133. As shown in FIG. FIG. 7 is an acquisition screen corresponding to the second personal identification method. On the acquisition screen shown in FIG. 7, a message requesting transmission of personal identification data is displayed along with buttons for selecting document image data and facial photograph data. The user selects image data to be uploaded and presses the send button. When the send button is pressed, the user terminal 2 sends the selected data to the information processing device 1 as personal identification information.

When the user terminal 2 does not support the first identity verification method, the display control unit 133 performs one or more identity verification methods including the second identity verification method, the third identity verification method, or the fourth identity verification method. Among the methods, one or more personal identification methods supported by the user terminal 2 may be displayed on the user terminal 2 in a selectable manner.

Companies belonging to the same group may provide services using a common user ID. In such a case, displaying the personal identification methods that the user has selected in the past so that the user can easily select them is highly convenient for the user. Therefore, the display control unit 133 may determine the display mode of one or more identity verification methods supported by the user terminal 2 based on the selection result of the identity verification method performed by the user in the past. Acquisition unit 131 acquires a user ID. The display control unit 133 compares the user information stored in the storage unit 12 with the acquired user ID. If the user information contains a user ID that matches the acquired user ID, the display control unit 133 highlights and displays the identity verification method that the user has selected in the past on the selection screen.

FIG. 8 is a diagram showing an example of a display screen that the display control unit 133 causes the user terminal 2 to display. On the selection screen shown in FIG. 8, the personal identification method selected by the user in the past is displayed in a different color from the other options. In addition, methods other than the method selected in the past are displayed by pressing the button "Use other identity verification methods".

In addition, it is highly convenient for the user if the result of personal identification performed by the information processing apparatus 1 in the past can be reused. Therefore, the display control unit 133 may cause the user terminal 2 to display a screen for selecting whether to use the result of identity verification performed in the past.

Acquisition unit 131 acquires a user ID. The display control unit 133 compares the user information stored in the storage unit 12 with the obtained user ID. If the user information contains a user ID that matches the acquired user ID, the display control unit 133 displays a button indicating "Use past identity verification results" on the selection screen. When the user presses the button, the display control unit 133 associates the service for which the user has applied and the user's past identity verification result, and stores them in the storage unit 12 . By configuring the display control unit 133 in this way, it is possible to reduce the number of operations performed by the user and improve convenience for the user by using the past personal identification results.

In addition, the display control unit 133 displays a screen for selecting whether to use the result of the user's past identity verification when the information processing apparatus 1 has performed the identity verification in the past within a predetermined period of time. You can let me. The display control unit 133 determines whether or not the difference between the past date and time of personal identification stored in the storage unit 12 and the date and time of processing is within a predetermined period. The predetermined period is a period during which the identity verification information is updated or a period determined in consideration of user's convenience, and is set by the administrator. The predetermined period is set as, for example, 3 months, 6 months, 1 year, 2 years, or the like.

For example, the display control unit 133 may display the method selected by the user in a larger size than the other methods so that the method selected in the past can be easily recognized. In this manner, the display control unit 133 is configured to display the same method as the method selected in the past so that the user can easily select the same method, thereby improving the operability for the user.

If the user terminal 2 does not support the first personal identification method, the display control unit 133 causes the user terminal 2 to display the personal identification method supported by the user terminal 2 . The display control unit 133 displays a screen including an identity verification method supported by the user terminal 2 and a button for the user to accept the identity verification method. When the user performs an operation of pressing a button for accepting the identity verification method, the display control unit 133 causes the terminal 2 to download an application corresponding to the identity verification method selected as described above.

Priorities may be set in advance for the identity verification methods, and the identity verification methods presented to the user by the information processing apparatus 1 may be selected according to the priorities. the display control unit 133. When the user terminal 2 supports multiple identity verification methods, the display control unit 133 may display the identity verification method with the highest set priority among the identity verification methods supported by the user terminal 2 . The priority is determined based on the operability of each identity verification method or the reliability of the identity verification method, and is set by the administrator. By configuring the display control unit 133 so that the user selects the identity verification method, the user's selection operation can be reduced, and the user's operability can be improved.

Returning to FIG. 2 , the identity verification information acquisition unit 134 acquires identity verification information corresponding to the identity verification information selected by the user from the user terminal 2 . The personal identification information to be acquired is, for example, document image data, face image data, and electronic certificate.

The personal identification information obtaining unit 134 verifies the obtained personal identification information. For example, when the acquired identity verification information is document image data and face image data, the identity verification information acquisition unit 134 performs image recognition on the acquired image data to determine whether the identity verification document and the face image data are the same person. judge. The identity verification information acquiring unit 134 may verify the authenticity of the identity verification document by performing image recognition on the acquired identity verification document.

When the acquired identity verification information is the user's electronic certificate or electronic signature, the identity verification information acquisition unit 134 may verify the identity by verifying the electronic certificate or electronic signature acquired from the user terminal 2. . The personal identification information acquisition unit 134 may be configured to cause an external server having a verification function to verify the personal identification information as described above.

[Configuration of user terminal 2]
FIG. 9 is a block diagram showing the configuration of the user terminal 2. As shown in FIG. The user terminal 2 has a communication section 21 , a display section 22 , an input section 23 , an imaging section 24 , a reading section 25 , a tamper-resistant area 26 , a storage section 27 and a control section 28 . The control unit 28 has a display control unit 281 , an operation reception unit 282 and an identity verification information transmission unit 283 .

The communication unit 21 is a communication interface for transmitting and receiving data to and from the information processing device 1 . The display unit 22 includes a liquid crystal display capable of displaying information, an organic EL (Electro-Luminescence) display, or the like. The input unit 23 includes a touch panel, keyboard, and the like. The imaging unit 24 is a camera. The reading unit 25 is an NFC reader for reading information from an IC chip mounted on an identification document. The tamper-resistant area 26 is a secure element that stores an electronic certificate, private key, and public key.

The storage unit 27 is, for example, a storage medium such as ROM, RAM, SSD, or the like. The storage unit 27 stores type information of the user terminal 2 . The storage unit 27 stores various programs executed by the control unit 28 . The control unit 28 is, for example, a CPU (Central Processing Unit). The control unit 28 functions as a display control unit 281 , an operation reception unit 282 and an identity verification information transmission unit 283 by executing control programs stored in the storage unit 27 .

The display control unit 281 is, for example, a browser. The display control unit 281 displays the screen transmitted from the display control unit 133 of the information processing device 1 on the display unit 22 . Also, the display control unit 281 transmits a response corresponding to the content of the user's operation to the information processing device 1 . The display control unit 281 transmits the type information of the user terminal 2 to the information processing device 1 .

The operation accepting portion 282 accepts input from the input portion 23 . The identity verification information transmission section 283 acquires identity verification information corresponding to the identity verification method selected by the user from the imaging section 24 , the reading section 25 and the tamper resistant area 26 , and transmits the acquired identity verification information to the information processing apparatus 1 .

[Flow of processing in information processing device 1]
FIG. 10 is a sequence diagram showing the flow of processing in the information processing apparatus 1. As shown in FIG. The sequence diagram in FIG. 10 starts when the user terminal 2 requests the information processing apparatus 1 to display a web page. The user terminal 2 transmits type information (S01). The determination unit 132 compares the acquired type information with the performance information stored in the storage unit 12, and determines whether method 1 (first identity verification method) is supported (S02). If the user terminal 2 supports the first identity verification information (YES in S02), the information processing apparatus 1 proceeds to S06, and if the user terminal 2 does not support the first identity verification information (S02 NO in ), go to S03.

When the user terminal 2 does not support the first identity verification information (NO in S02), the display control unit 133 displays a selection screen including identity verification methods supported by the user terminal 2, and prompts the user to select the identity verification method. (S03). The user selects the personal identification method to be used from the screen displayed on the user terminal 2, and approves the download of the application (S04). The user terminal 2 downloads an application corresponding to the selected personal identification method (S05). When the download is completed, the information processing device 1 displays an acquisition screen and requests acquisition of the identity verification information (S06).

The user terminal 2 acquires identity verification information corresponding to the selected identity verification method (S07). The user terminal 2 transmits the acquired personal identification data to the information processing device 1 (S08). The data transmitted by the user terminal 2 may include personal data such as the user's name.

The information processing device 1 verifies the acquired personal identification data (S09). When verification of the personal identification data is completed, the information processing device 1 causes the user terminal 2 to display a personal information registration screen (S10). Information related to the user acquired in S08 may be entered in advance in the registration screen. The user inputs registration information on the registration screen and performs a registration operation (S11). The user terminal 2 transmits a registration request including the input personal information to the information processing device 1 (S12). The information processing device 1 registers personal information included in the received registration request (S13).
[Effect of information processing device 1]

As described above, in the information processing apparatus 1, the type information indicating the type of the terminal, the personal identification information used for personal identification including the first personal identification method, or the acquisition method of the personal identification information are different. It has a storage unit 12 that stores performance information that associates personal identification methods that can be used for each type of terminal among a plurality of personal identification methods. The acquisition unit 131 acquires the type information of the user terminal 2 from the user terminal 2 . The determination unit 132 refers to the storage unit 12 based on the acquired type information of the user terminal 2 and determines whether the user terminal 2 is compatible with the first personal identification method. If the user terminal 2 does not support the first personal identification method, the display control unit 133 causes the user terminal 2 to display the personal identification method supported by the user terminal 2 .

By configuring the information processing apparatus 1 in this manner, it is possible to present an identity verification method that can be used in a terminal owned by the user.

The present invention makes it possible to contribute to Goal 9 of the Sustainable Development Goals (SDGs) led by the United Nations, "Industry and technological innovation."

Although the present invention has been described above using the embodiments, the technical scope of the present invention is not limited to the scope described in the above embodiments, and various modifications and changes are possible within the scope of the gist thereof. be. For example, all or part of the device can be functionally or physically distributed and integrated in arbitrary units. In addition, new embodiments resulting from arbitrary combinations of multiple embodiments are also included in the embodiments of the present invention. The effect of the new embodiment caused by the combination has the effect of the original embodiment.

1 information processing device 2 user terminal 11 communication unit 12 storage unit 13 control unit 21 communication unit 22 display unit 23 input unit 24 imaging unit 25 reading unit 26 tamper-resistant area 27 storage unit 28 control unit 131 acquisition unit 132 determination unit 133 display control Unit 134 Identity verification information acquisition unit 281 Display control unit 282 Operation reception unit 283 Identity verification information transmission unit

Claims (11)

Type information that indicates the type of terminal, and identity verification information used for identity verification, including the first identity verification method, or among a plurality of identity verification methods that differ in acquisition method of identity verification information, each type of said terminal a storage unit that stores performance information associated with the identity verification method that can be handled in
an acquisition unit that acquires type information of the user terminal from the user terminal;
a determination unit that refers to the storage unit based on the acquired type information of the user terminal and determines whether or not the user terminal is compatible with the first identity verification method;
a display control unit that causes the user terminal to display the identity verification method supported by the user terminal when the user terminal does not support the first identity verification method;
Information processing device. When the user terminal supports the first identity verification method, the display control unit requests the user terminal to send an electronic certificate based on the first identity verification method.
The information processing device according to claim 1 . The display control unit requests the user terminal to send the electronic certificate stored in the tamper-resistant area installed in the user terminal when the user terminal is compatible with the first personal identification method. do,
The information processing apparatus according to claim 2. When the user terminal does not support the first identity verification method, the display control unit causes the user terminal to display one or more identity verification methods supported by the user terminal in a selectable manner.
The information processing apparatus according to any one of claims 1 to 3. The display control unit causes the user terminal to download an application for acquiring identity verification information corresponding to the identity verification method selected by the user when the identity verification method supported by the user terminal is selected. ,
The information processing apparatus according to any one of claims 1 to 4. When the user terminal completes downloading the application, the display control unit requests transmission of the identity verification information corresponding to the identity verification method selected by the user.
The information processing apparatus according to any one of claims 1 to 5. When the user terminal does not support the first identity verification method, the display control unit controls image data obtained by imaging an identity verification document possessed by the user and a face image that is an image obtained by imaging the face of the user. A second identity verification method for acquiring data and verifying identity, acquiring certificate data stored in a tamper-resistant area mounted on the identity verification document possessed by the user and face image data of the user for identity verification or verifying an electronic signature signed using a private key stored in a tamper-resistant area mounted on the identity verification document possessed by the user. Displaying on the user terminal in a selectable manner one or more of the identity verification methods supported by the user terminal among the one or more identity verification methods including the identity verification method of
The information processing apparatus according to any one of claims 1 to 6. The storage unit further stores a selection result of the identity verification method selected by the user in the past,
The display control unit determines a display mode of the one or more identity verification methods supported by the user terminal based on the selection results of the identity verification methods performed by the user in the past.
The information processing apparatus according to any one of claims 1 to 7. The storage unit further stores the results of identity verification performed in the past,
The display control unit causes the user terminal to display a screen for selecting whether to use the result of identity verification performed in the past.
The information processing apparatus according to any one of claims 1 to 8. the processor executes
a step of acquiring type information, which is information indicating the type of the user terminal, from the user terminal;
Based on the acquired type information of the user terminal, a plurality of identity verification methods differing in identity verification information used for identity verification, including the type information and the first identity verification method, or acquisition methods of identity verification information. By referring to the performance information stored in the storage unit in association with the personal identification method compatible with each type of the terminal, it is determined whether the user terminal is compatible with the first personal identification method. a step of determining;
if the user terminal does not support the first identity verification method, causing the user terminal to display the identity verification method supported by the user terminal;
An information processing method comprising: to the processor,
a step of acquiring type information, which is information indicating the type of the user terminal, from the user terminal;
Based on the acquired type information of the user terminal, a plurality of identity verification methods differing in identity verification information used for identity verification, including the type information and the first identity verification method, or acquisition methods of identity verification information. By referring to a database that stores performance information stored in a storage unit in association with the personal identification method compatible with each type of the terminal, the user terminal is compatible with the first personal identification method. a step of determining whether there is
if the user terminal does not support the first identity verification method, causing the user terminal to display the identity verification method supported by the user terminal;
program to run.

Images