JP4247500B2 - Service provision management system - Google Patents

Description

The present invention relates to a mobile phone device, PDA (Personal Digital Assistant), IC (Integrated).
Various services (for example, electronic money function, credit card function, debit card function, electronic commuter pass function, electronic ticket function, financial institution transaction function, electronic commerce function, electronic passport function, etc.) by a portable device such as a circuit card The present invention relates to a management technique suitable for use in providing information.

  In recent years, mobile phone devices are equipped with non-contact type ICs (Integrated Circuits). By using the non-contact type ICs, electronic money function, credit card function, debit card function, electronic commuter pass function, electronic ticket function, It is possible to provide financial institution transaction functions, electronic commerce functions, electronic passport functions, and the like. As a result, using the mobile phone device, various functions and services can be provided to the user in addition to the conventional functions such as telephone, e-mail, and internet browsing.

  However, if the mobile phone device is provided with various functions as described above, in the unlikely event that the mobile phone device is lost or stolen and the various functions are used illegally, the damage caused is extremely large. Become.

  Thus, for example, in Patent Document 1 below, in order to ensure the security of a mobile phone device having a debit card function, the current position detected by a position sensor provided in the mobile phone device and the position of a pre-registered location And a technique for enabling the debit card function when these positions match is disclosed. As a result, the places where the debit card function added to the mobile phone device can be used are restricted, and even if the mobile phone device is lost or stolen, unauthorized use by others can be prevented.

  Further, in Patent Document 2 below, it is determined and authenticated whether or not the user is a valid user based on the relationship between the personal identification number of the card possessed by the user and the location information of the portable terminal possessed by the user. Technology is disclosed. For example, when a user inserts a card such as a cash card into an authentication device such as an ATM (Automatic Teller Machine) and inputs a personal identification number, authentication based on the personal identification number is performed. When the user is authenticated by the personal identification number, the user accesses a portable terminal possessed by the user and requests location information of the portable terminal.

Then, when the position information (latitude / longitude information) of the mobile terminal measured by the GPS (Global Positioning System) function or the like is transmitted from the mobile terminal to the authentication device, the distance between the authentication device and the mobile terminal is calculated, When the distance is within the authorized distance, that is, when the user who owns the mobile terminal is near the authentication device, it is possible to use services such as bank account inquiry, deposit, withdrawal, etc., while within the authorized distance. If not, a message indicating that authentication is rejected is displayed and the process is terminated. This prevents unauthorized use of the card due to theft or counterfeiting and improves security.

Also, the following Patent Documents 3 to 7 propose security techniques for various transactions using a network.
JP 2003-242428 A JP 2005-316524 A JP 2006-146914 A JP 2002-269479 A JP 2006-221440 A JP 2002-189966 A JP 2005-71225 A

  According to the technique disclosed in Patent Document 1, the place where the debit card function added to the mobile phone device can be used is limited, and according to the technique disclosed in Patent Document 2, an authentication device is used. At this time, if the user does not have a specific mobile terminal, the user cannot receive the service, and the debit card function and the unauthorized use of the card in the mobile phone device can be prevented.

  However, as described above, in recent years, functions and services provided by portable devices such as a non-contact type IC built-in mobile phone device and a non-contact type IC card are extremely diverse. Damage caused when the device is lost or stolen and illegally used is extremely large, and it is difficult to say that the technology disclosed in Patent Documents 1 and 2 alone can ensure sufficient security.

  For this reason, if a user is provided with various services using a mobile device such as a mobile phone device, a PDA, an IC card, etc., it may be malicious if the mobile device is lost or stolen. It is desired to be able to prevent unauthorized use by a third party more reliably, to ensure sufficient security and to minimize damage to the user.

  In addition, there is a defect that it is easy to guess that the password is short, and it is difficult to memorize the person, although it is difficult to guess if the password is long. Also, in order to prevent forgetting the ID or PIN, it may be entered in advance in the device or left in the history of the input screen. In this case as well, if the device is lost, the ID or PIN will be changed. It causes leaking to the three parties.

  Patent Document 3 includes a biosensor that captures a biometric characteristic from a user when performing a transaction through the Internet, and authenticates the user based on the sample biometric characteristic of the user captured by the biosensor. Bio ID cards that display temporary passwords have been proposed. In this case, in biometric authentication using fingerprints, palm prints, blood vessels, or irises, it is troublesome to read biometric information for authentication, or the scanning device becomes large and cumbersome. Is present.

  In order to solve such a problem, there is also a method for generating a one-time password called a one-time password by using a small one-time password generator. For example, Patent Document 4 describes that this type of one-time password generator is a wristwatch. Further, Patent Document 5 describes that a password transmitted from a device (server) that performs authentication using a password is received and displayed by a device possessed by the user. However, if this one-time password generator is lost, the one-time password will be used by a third party.

  Further, in Patent Document 6, when the location information of the card and the mobile phone that the user carries and uses them to access the host computer is not in a valid use range, a map near the use is transmitted to the registered FAX number. It is described that the location where the card is illegally used is specified. The transmission of this map is a kind of warning notification to the system administrator, but in the world of computer commerce where many transactions are executed at the same time, there is a problem that this kind of warning is not realistic.

  Patent Document 7 describes a device that performs authentication using biometric information and provides a user ID and a password. However, this type of ID or password is used to the extent that use of electronic devices is permitted, and there is a problem that it is not considered to be used for commercial transactions via a network.

  The present invention was devised in view of such a situation, and when receiving various services using a portable device, the portable device is malicious even if it is lost or stolen. It aims to prevent unauthorized use by the three parties more reliably, to ensure sufficient security, and to minimize damage to the user.

The present invention for solving the above problems is as follows.
(1) The invention according to claim 1 is a service providing device that provides a predetermined service to a user, a portable device that has access means for accessing the service providing device to receive the predetermined service, and A biometric data detection portable terminal device that displays a one-time password required when receiving provision of a predetermined service according to the biometric data of the user, the service provision management system A service providing means capable of providing a predetermined service to a user, a management means for managing the predetermined service provided by the service providing means, a one-time password generating means for generating a one-time password that can be used only once, The one-time password generated by the one-time password generation means and the user Authentication means for performing authentication judgment by comparing the returned one-time password, and the portable device includes access means for accessing the service providing means to receive provision of the predetermined service. The biometric data detection portable terminal device is configured to be worn by the user and detect a biometric data value of the user, and communicate with the portable device to confirm that the portable device exists within a predetermined distance. The one-time password synchronized with the one-time password generated by the one-time password generation means when the user is identified by the biometric data value of the user detected by the biometric sensor. One-time password processing means for displaying a password, wherein the management means is the portable device When the access means accesses the service providing means, the one-time password that is input and returned by the user referring to the display of the biometric data detection portable terminal device to the input means of the portable device. The service providing management system according to claim 1, wherein when the authentication unit authenticates, the predetermined service is provided by the service providing unit.
Here, said mobile ObiSo location and said biometric data detected mobile terminal device, the current position includes a means for notifying the managing unit, the distance between the mobile ObiSo location and the biometric data detecting portable terminal device Is out of the predetermined range, or when a reply of the one-time password to the management means has exceeded a predetermined time, a warning notification is sent to the system administrator or the user. To do.
The invention described in claim 9 is a service provision management program by a program for causing each computer to function as the above service provision management system.

The biological data detection portable terminal device is preferably a separate device from the portable device that is worn on a part of the user's body and carried by the user.
(2) The invention according to claim 6 is characterized in that the management means further comprises transmission means for transmitting the one-time password generated by the one-time password generation function to the biometric data detection portable terminal device. The biometric data detection portable terminal device receives the one-time password transmitted from the management unit by the one-time password processing unit, and the control unit displays the one-time password received by the one-time password processing unit. The service provision management system according to any one of claims 1 to 5, wherein the service provision management system is displayed on a means.

(3) In the invention according to claim 7 , the biometric data detection portable terminal device generates a one-time password synchronized with the one-time password generation unit of the management server by the one-time password processing unit. 6. The service provision management system according to claim 1 , wherein the control unit causes the display unit to display the one-time password generated by the password processing unit.

(4) an invention according to claim 8, when the distance between the mobile ObiSo location and the biometric data detecting portable terminal device is a predetermined range over a predetermined time or longer, or, to the management unit If the reply of the one-time password has passed a predetermined time or more, any of claims 2 to 5, further comprising, it is characterized by a warning means for warning notification to the system administrator or the user The service provision management system according to claim 1.

(5) Further , the mobile device is a mobile phone device or a card-type device .

(6) In addition, the biological data detected mobile terminal device, it is provided in a wristwatch, characterized in that.

(7) The invention according to claim 2 is a service providing device for providing a predetermined service to a user, a portable device having access means for accessing the service providing device to receive the predetermined service, and A biometric data detection portable terminal device that displays a one-time password required when receiving provision of a predetermined service according to the biometric data of the user, the service provision management system A service providing means capable of providing a predetermined service to a user, a management means for managing the predetermined service provided by the service providing means, a one-time password generating means for generating a one-time password that can be used only once, The one-time password generated by the one-time password generation means and the user Authentication means for performing authentication judgment by comparing the returned one-time password, and the portable device includes access means for accessing the service providing means to receive provision of the predetermined service. The biometric data detection portable terminal device is configured to be worn by the user and detect a biometric data value of the user, and communicate with the portable device to confirm that the portable device exists within a predetermined distance. The one-time password synchronized with the one-time password generated by the one-time password generation means when the user is identified by the biometric data value of the user detected by the biometric sensor. One-time password processing means for displaying a password, wherein the management means is the portable device When the access means accesses the service providing means, the one-time password that is input and returned by the user referring to the display of the biometric data detection portable terminal device to the input means of the portable device. The service providing management system according to claim 1, wherein when the authentication unit authenticates, the predetermined service is provided by the service providing unit.
Then, said mobile ObiSo location and said biometric data detected mobile terminal device comprises means for notifying the current position to the management means, said management means, detected by the biological sensor before the interruption of the detection operation A statistical value calculating means for calculating a statistical value of the biological data value as a statistical value before interruption and calculating a statistical value of the biological data value detected by the biological sensor after restarting the detection operation as a statistical value after restart; Statistical value for comparing the statistical value before interruption calculated by the statistical value calculating means with the statistical value after restart, and determining whether these statistical values are statistical values of biometric data values of the same user further comprising a judgment means, the mobile ObiSo even when the distance between the location and the biometric data detecting portable terminal device is within the predetermined range, and, said by the statistic determining means If the cross-sectional front statistics and resumed after statistics is judged to be statistical value of biometric data values of the same user, to allow the provision of said predetermined service by the service providing means, it is characterized.
The invention described in claim 10 is a service provision management program by a program for causing each computer to function as the above service provision management system.

(8) In the invention according to claim 3 , the management unit calculates the post-resumption statistical value by the statistical value calculation unit after the detection operation is restarted, and obtains a determination result by the statistical value determination unit. 3. The service provision management system according to claim 2 , wherein provision of the predetermined service by a service provision unit is prohibited.

(9) In the invention according to claim 4 , the management means determines that the statistical value before interruption and the statistical value after restart are not statistical values of biometric data values of the same user by the statistical value determination means. 4. The service provision management system according to claim 3 , wherein the prohibition of provision of the predetermined service by the service provision unit is continued.

(10) The invention according to claim 5 is a service providing device for providing a predetermined service to a user, a portable device having access means for accessing the service providing device to receive the predetermined service, A biometric data detection portable terminal device that displays a one-time password required when receiving provision of a predetermined service according to the biometric data of the user, the service provision management system A service providing means capable of providing a predetermined service to a user, a management means for managing the predetermined service provided by the service providing means, a one-time password generating means for generating a one-time password that can be used only once, The one-time password generated by the one-time password generation means and the user Authentication means for performing authentication judgment by comparing with the one-time password returned from the mobile phone, and the portable device includes access means for accessing the service providing means to receive provision of the predetermined service. The biometric data detection portable terminal device is mounted on the user, detects a biometric data value of the user, communicates with the portable device, and the portable device exists within a predetermined distance. The one-time password synchronized with the one-time password generated by the one-time password generation means when the user is confirmed by the biometric data value of the user detected by the biometric sensor. One-time password processing means for displaying a time password, wherein the management means is the portable device. One-time password that is input and returned to the input means of the portable device by the user referring to the display of the biometric data detecting portable terminal device when the access means accesses the service providing means When the authentication unit performs authentication, the service providing management system provides the predetermined service by the service providing unit.
The portable device further includes first position detection means for detecting the current position as the first position, and first notification means for notifying the management means of the first position detected by the first position detection means. The biological data detection portable terminal device includes a second position detection unit that detects the current position as the second position, and a second notification that notifies the management unit of the second position detected by the second position detection unit. Means for detecting whether or not the biometric sensor is performing a detection operation for detecting the biometric data value from the user in a state in which the biometric data detection portable terminal device is mounted on a part of the user's body; The management means further comprises an operation state detection means, wherein the management means is configured to access the first position and the first position when the portable device accesses the service providing means by the access means. When the distance from the position is out of the predetermined range, or when it is detected by the operation state detection means that the biosensor is not performing the detection operation, the predetermined value by the service providing means The provision of services is prohibited .

In addition, the said biometric data detection portable terminal device can use what performs the said user's physical condition management with the said biometric data value.
Further, when the portable position detection device is provided in the biological data detection portable terminal device, the biological data detection portable terminal device is provided with various means and functions such as the following items (11) to (16). Also good.

  (11) A weather sensor for detecting meteorological data in the user's location atmosphere and a biometric data threshold value for managing the physical condition of the user are set in advance for each weather condition in the biometric data detection portable terminal device. A threshold value table that is stored in the threshold value table, a threshold value reading unit that searches and reads out the biometric data threshold value set for the weather condition corresponding to the weather data detected by the weather sensor, and the threshold value reading unit. A comparison means for comparing the measured biometric data threshold value with the biometric data value detected by the biometric sensor, and a warning to the user when a physical condition abnormality of the user is detected as a result of the comparison by the comparison means It is equipped with a physical condition abnormality warning means that emits.

  (12) If the user's physical condition is detected as a result of the comparison by the comparison means in the biological data detection portable terminal device of the item (11), a physical condition notification means for notifying a predetermined contact to that effect And an inquiry means for inquiring the user as to whether or not to perform the notification operation by the physical condition abnormality notification means when an operation for stopping the warning operation by the physical condition abnormality warning means is executed by the user within a predetermined time. And an operation to stop the warning operation by the physical condition warning means is not executed by the user for a predetermined time or more, or a reply that the notification operation by the physical condition notification means is executed in response to the inquiry by the inquiry means When the user performs, the physical condition abnormality notification unit is controlled to cause the physical condition abnormality notification unit to perform a notification operation. And a control means.

  (13) In the biometric data detection portable terminal device according to item (12), when the user refuses to execute the notification operation by the physical condition abnormality notification unit for a predetermined number of times in response to the inquiry by the inquiry unit, the control The means forcibly causes the physical condition abnormality notification means to perform a notification operation.

  (14) In the biometric data detection portable terminal device according to the item (13), when the operation for stopping the warning operation by the physical condition abnormality warning unit is not executed for a predetermined time or longer and the operation for stopping the warning operation by the physical condition abnormality warning unit Is executed within a predetermined time, and when the user refuses to execute the notification operation by the physical condition abnormality notification means for a predetermined number of times in response to the inquiry by the inquiry means, the physical condition abnormality notification means , Notify the user of the physical condition abnormality of the user to different contacts.

  (15) In the biometric data detecting portable terminal device according to the items (12) to (14), the biometric data detected by the biometric sensor when the physical condition abnormality notification unit notifies the physical condition abnormality of the user. Also notify the value.

  (16) In the biological data detection portable terminal device according to the items (12) to (15), when the physical condition abnormality notification unit notifies the physical condition abnormality of the user, it is detected by the portable position detection device. The second position is also notified.

According to the present invention as described above, the following effects can be obtained.
(1) According to the service provision management system of the present invention described above, when the portable device accesses the service provision means, the portable device is referred to by the user who refers to the display means of the biological data detection portable terminal device. When the authentication means is authenticated by the one-time password input and returned to the input means of the apparatus or the service providing means, a predetermined service is provided by the service providing means, or authentication by the one-time password is performed. If it is not approved, the provision of the predetermined service is prohibited.

  In this case, the biometric data detection portable terminal device communicates with the portable device and confirms that the portable device exists within a predetermined distance, and is based on the biometric data value of the user detected by the biometric sensor. A one-time password is displayed when the identity of the user is confirmed, so a third party cannot use the one-time password. Only a user who is in possession of the portable device is prescribed. Service is permitted.

  In addition, there is an advantage that a dedicated scanning operation for biometric authentication is not required because a biometric data value acquired continuously or continuously for a certain time is used for physical condition management. Furthermore, since the biometric data value acquired continuously or continuously for a certain time is used for the physical condition management, there is an advantage that the biometric data value is hardly stolen and is resistant to impersonation.

  Accordingly, even if the portable device is lost or stolen, it is impossible to receive provision of a predetermined service by the service providing means unless the portable data detection portable terminal device is possessed. Unauthorized use by a user can be prevented more reliably, sufficient security can be ensured, and damage to the user can be minimized.

  When the mobile device is a mobile phone device or a card-type device (IC card or the like), a device that is always worn on the user's body, such as a biometric data detection mobile terminal device, has a function as a mobile position detection device. Thus, the system of the present invention functions more effectively and contributes to ensuring sufficient security.

  Accordingly, even if the portable device is lost or stolen, it is impossible to receive provision of a predetermined service by the service providing means unless the portable data detection portable terminal device is possessed. Unauthorized use by a user can be prevented more reliably, sufficient security can be ensured, and damage to the user can be minimized.

  When the mobile device is a mobile phone device or a card-type device (IC card or the like), a device that is always worn on the user's body, such as a biometric data detection mobile terminal device, has a function as a mobile position detection device. Thus, the system of the present invention functions more effectively and contributes to ensuring sufficient security.

  (2) Here, the management means transmits the one-time password generated by the one-time password generation function to the biometric data detection portable terminal device, and the biometric data detection portable terminal device receives the one-time password transmitted from the management means. Thus, it is possible to ensure secure security using a one-time password without providing dedicated software in the biometric data detection portable terminal device.

  (3) Here, a one-time password synchronized with the one-time password generated by the one-time password generation function is generated on the biometric data detection portable terminal side, so that a dedicated one-time password transmission / reception is performed. Secure security can be ensured using a one-time password without providing hardware in the biometric data detection portable terminal device.

  (4) At this time, if the distance is out of the predetermined range for a predetermined time or more, or if it takes more than a certain time to return the one-time password, a warning notification is sent to the system administrator or user. By doing so, it is possible to surely prevent the portable device from being misplaced or stolen, or to immediately cope with mishandling or theft of the portable device (such as stop providing various services).

(5) Here, by configuring the mobile device by a mobile phone device or a card-type device, it becomes easy to carry and receive services.
(6) Here, since the biometric data detection portable terminal device is provided in the wristwatch, it is easy to carry, easy to receive service, and easy to acquire biometric data.

  (7) If the function as the portable position detection device is provided in the biometric data detection portable terminal device, the biometric sensor in the biometric data detection portable terminal device can detect the biometric data value. While providing a predetermined service, if the detection operation is not performed, the provision of the predetermined service is prohibited, and if the user is not wearing the biometric data detection portable terminal device, the predetermined service is provided. Therefore, unauthorized use of a predetermined service can be prevented more reliably, and sufficient security can be ensured.

  In addition, if the biometric sensor in the biometric data detection portable terminal device is performing a biometric data value detecting operation, the predetermined service is provided. If the biometric sensor is not performing a detecting operation, the user is prohibited from providing the predetermined service. Unless the biological data detection portable terminal device is worn on the body, it is impossible to receive provision of the predetermined service, and unauthorized use of the predetermined service can be prevented more reliably, and sufficient security is ensured. It will be.

  At that time, if the user removes the biometric data detection portable terminal device from the body and the detection operation by the biometric sensor is interrupted and restarted, the pre-interruption statistical value and the post-resumption statistical value of the biometric data value are calculated. If these statistical values are statistical values of biometric data values of the same user, a predetermined service is provided, while if the statistical values of the same user are not statistical values of the same user, the provision of the predetermined service is prohibited. It is possible to statistically determine whether or not the user before and after the interruption of the detection operation by the biometric sensor is the same person based on the biometric data value. This can be prohibited, and unauthorized use of a predetermined service can be prevented more reliably, and sufficient security can be ensured.

  (8) In this case, the provision of a predetermined service is prohibited until the determination based on the statistical value is confirmed after the detection operation of the biometric data value is interrupted, so that a gap between the detection operation is interrupted and the determination is confirmed. Unauthorized use is reliably prevented and sufficient security is ensured.

  (9) When the user removes the biometric data detection portable terminal device from the body and the detection operation by the biometric sensor is interrupted and resumed, it is not a statistical value of the biometric data value of the same user By continuously prohibiting the provision of the predetermined service, it is possible to statistically determine whether or not the user before and after the interruption of the detection operation by the biometric sensor is the same person based on the biometric data value. In the case of a person, provision of the predetermined service can be prohibited, and unauthorized use of the predetermined service can be prevented more reliably, and sufficient security can be ensured.

Furthermore, a biometric data threshold value for managing the physical condition of a user is set in advance in the biometric data detection portable terminal device for each weather condition in the threshold value table, and the meteorological condition corresponding to the meteorological data detected by the meteorological sensor Used when the set biometric data threshold is searched from the threshold table and read out, and when the detected biometric data threshold is compared with the biometric data value detected by the biosensor, the user's physical condition is detected. A warning is issued to a user, or a user's physical condition is notified to a predetermined contact.

  As a result, it is possible to manage and judge the physical condition of the user based on the biometric data threshold corresponding to the weather data in the user's location atmosphere. Management / judgment is possible, and according to the judgment result, the user can be appropriately warned and notified to the manager, etc., according to the physical condition of the user without relying on the user's self-judgment. Appropriate measures can be taken immediately.

  At this time, when a warning of abnormal physical condition is given to the user, if the operation for stopping the warning operation is not performed for a predetermined time or more by the user, the user is in a considerably dangerous state such as losing consciousness. Since it is determined that there is a notification of the user's physical condition, the user can immediately take action. In that case, it is possible to immediately arrange an emergency vehicle such as an ambulance by notifying the fire department etc., and at the same time notifying the biometric data value detected by the biometric sensor, according to the biometric data value Appropriate treatment can be performed more quickly. Furthermore, by simultaneously notifying the user's location (second position) detected by the portable position detection device (second position detection means), the user's location can be immediately confirmed, and the user An emergency vehicle or the like can be immediately directed to the place where the vehicle is located, and a quick initial response can be realized.

  At this time, when a warning of abnormal physical condition is given to the user, if the operation for stopping the warning operation is not performed for a predetermined time or more by the user, the user is in a considerably dangerous state such as losing consciousness. Since it is determined that there is a notification of the user's physical condition, the user can immediately take action. In that case, it is possible to immediately arrange an emergency vehicle such as an ambulance by notifying the fire department etc., and at the same time notifying the biometric data value detected by the biometric sensor, according to the biometric data value Appropriate treatment can be performed more quickly. Furthermore, by simultaneously notifying the user's location (second location) detected by the second location detection means of the biometric data detection portable terminal device, the user's location can be immediately confirmed, and the user An emergency vehicle or the like can be immediately directed to the place where the vehicle is located, and a quick initial response can be realized.

  In addition, when an operation to stop the warning operation is executed by the user within a predetermined time, the user is inquired about whether or not to execute the physical condition abnormality notification, and the physical condition abnormality notification is executed according to the user's answer. Thus, after alerting the user and notifying the user himself / herself, the physical condition abnormality is notified, so that it is possible to prevent the automatic notification from being performed unnecessarily. When the user wishes, a notification is made. At that time, by making a telephone call to the attending doctor as a notice, the user can ask the attending doctor for an appropriate treatment, and the biosensor can detect it. By simultaneously notifying the biometric data values that have been set, the attending physician can make an appropriate determination and an instruction for an appropriate treatment.

  If the user refuses to execute the physical condition abnormality notification for the above inquiries continuously, that is, if the abnormality is repeatedly detected even if the user stops and cancels the warning by self-judgment, It is judged that the person is in a considerably dangerous state, and a notice of a physical condition is forcibly performed so that a quick response can be taken. In that case, for example, in addition to notifying relatives such as friends, relatives, and spouses, the location of the user (second position) detected by the portable position detection device (second position detection means) By simultaneously notifying the user, the location of the user can be confirmed immediately, and a friend or close relative can immediately go to the location where the user is located.

  If the user refuses to execute the physical condition abnormality notification for the above inquiries continuously, that is, if the abnormality is repeatedly detected even if the user stops and cancels the warning by self-judgment, It is judged that the person is in a considerably dangerous state, and a notice of a physical condition is forcibly performed so that a quick response can be taken. In this case, for example, notification is made to relatives such as friends, relatives, and spouses, and the location of the user (second position) detected by the second position detection means of the biological data detection portable terminal device By simultaneously notifying the user, the location of the user can be confirmed immediately, and a friend or close relative can immediately go to the location where the user is located.

  (10) According to the service provision management system of the present invention described above, the first position and the portable position detection device notified by the first notification means of the portable device when the portable device accesses the service providing means. The distance from the second position notified by the second notification means is within a predetermined range, and the user inputs the portable device by referring to the display on the display means of the biological data detection portable terminal device. If the authentication means is authenticated by the one-time password input and returned to the means, the provision of a predetermined service by the service providing means is permitted, while the distance is outside the predetermined range, or When it is detected by the operation state detection means that the biosensor is not performing the detection operation, or a one-time password If authentication is not recognized by, the provision of the predetermined service is prohibited.

  That is, two types of devices to be carried by the user (for example, two types of mobile devices such as a mobile phone device and a card-type device and a biometric data detection mobile terminal device having a function as a mobile position detection device) If the distance between the current locations is within a predetermined range, in other words, it is possible to determine that the same person is possessed and carried by two types of devices, and authentication is performed using a one-time password Only the provision of predetermined services is permitted.

  That is, a third party cannot use a one-time password, and only a person who has a portable device is allowed to provide a predetermined service. Here, since a biometric data value acquired continuously or continuously for a certain time for physical condition management or the like is used, there is an advantage that a dedicated scanning operation for biometric authentication becomes unnecessary. Furthermore, since the biometric data value acquired continuously or continuously for a certain time is used for the physical condition management, there is an advantage that the biometric data value is hardly stolen and is resistant to impersonation.

  Accordingly, even if the portable device is lost or stolen, it is impossible to receive provision of a predetermined service by the service providing means unless the portable data detection portable terminal device is possessed. Unauthorized use by a user can be prevented more reliably, sufficient security can be ensured, and damage to the user can be minimized.

  When the mobile device is a mobile phone device or a card-type device (IC card or the like), a device that is always worn on the user's body, such as a biometric data detection mobile terminal device, has a function as a mobile position detection device. Thus, the system of the present invention functions more effectively and contributes to ensuring sufficient security.

Embodiments of the present invention will be described below with reference to the drawings.
[1] Configuration of the service provision management system of this embodiment:
FIG. 1 is a block diagram showing a configuration of a service provision management system as an embodiment of the present invention. The service provision management system 1 of the present embodiment shown in FIG. 1 is a portable device such as a mobile phone device, a PDA, and an IC card. Various services (for example, electronic money function, credit card function, debit card function, electronic commuter pass function, electronic ticket function, financial institution transaction function,
When providing a user with an electronic commerce function, an electronic passport function, etc.), in the present embodiment, the case where the mobile device is the mobile phone device 10 will be described below. .

In the following embodiments, a case where the biometric data detection portable terminal device 20 is also used as a biometric data detection portable terminal device will be described.
The service provision management system 1 according to the present embodiment includes a mobile phone device 10, a biometric data detection portable terminal device 20, an administrator terminal 30, a contact terminal 40, an attending doctor terminal 50, a service provision server 60, and a service provision terminal device 70. , A physical condition management server 80 and a network 90.

  The mobile phone device 10 is carried and carried by a user, and is configured to be able to communicate directly with the service providing terminal device 70 and to be able to communicate with at least the service providing server 60 via the network 90. ing. Further, as will be described later, a non-contact IC is built in and has a function of receiving a service by being brought close to the service providing terminal device 70. Further, as will be described later, the mobile phone device 20 is configured to be able to communicate with the biometric data detecting mobile phone device 20 by a communication function as a mobile phone, a non-contact IC, or other communication functions.

  Here, the service that can be received using the mobile phone device 10 is, for example, a financial institution transaction function (electronic money function, credit card function, debit) realized by bringing the mobile phone device 10 closer to the service providing terminal device. Bank function inquiry, deposit, withdrawal, etc.), electronic commuter pass function, electronic ticket function, electronic commerce function, electronic passport function, etc. As will be described later, the user who receives the service inputs the one-time password displayed on the biometric data detection portable terminal device 20 as necessary. However, it is not restricted to the use and usage method illustrated here.

  The mobile phone device 10 has a general mobile phone device function (call function, e-mail function, etc.), and at least a GPS position detection unit 11, a transmission / reception unit 12, an access unit 13, an input unit 14, and a display. It has a function as means 15.

  Here, the GPS position detection unit (first position detection means) 11 is carried in response to a first position request from the service providing server 60 (management means 62) and the service providing terminal device 70 (management means 72) as described later. A current position (location position; latitude / longitude information) of the telephone device 10 is detected as a first position by a global orientation measurement system (GPS). At that time, the altitude or depth may be detected as the current location of the mobile phone device 10. In that case, an altimeter that measures altitude based on atmospheric pressure and a depth meter that measures depth based on water pressure are provided as the first position detection means.

  The transmission / reception means (first notification means) 12 performs a general communication function as a mobile phone device, and also uses the service providing server 60 (management means 62) and the service to detect the first position detected by the GPS position detection unit 11. The notification is sent to the providing terminal device 70 (management means 72). When the notification is sent to the service providing server 60 (management means 62), transmission / reception is performed via the network 90, while the service providing terminal device 70 (management means 72). When the notification is made, transmission / reception is directly performed between the transmission / reception means 12 and the service providing terminal device 70. The transmission / reception unit 12 also functions to receive various requests and notifications (first location request, error notification, warning, etc.) from the service providing server 60 (management unit 62) and the service providing terminal device 70 (management unit 72). . The transmission / reception unit 12 has a function of performing a predetermined reaction in response to a request for position confirmation from the biometric data detection portable terminal device 20 through a unit that performs short-distance communication such as weak radio waves and magnetic fields.

  The access means 13 is for accessing service providing means 61 and 71 (to be described later) in order to receive provision of a predetermined service. When accessing the service providing server 60 (service providing means 61), For example, in addition to functioning to access a service providing site (site operated by the service providing server 60) via the network 90 by operating a keyboard (not shown) in the mobile phone device 10 and inputting various information, the service providing In the case where access is made to the terminal device 70 (service providing means 71) and the mobile phone device 10 includes, for example, a non-contact type IC, the non-contact type IC functions as the access means 13. It will be.

As communication between the mobile phone device 10 and the service providing terminal device 70 by the transmission / reception means 12, for example, infrared communication or Bluetooth (registered trademark) communication may be used, or the above-described contactless IC (access) The wireless communication executed between the means 13) and the IC card reader / writer 75 described later may be used.

  The input means 14 is used for various inputs by the user. In the present embodiment, the one-time password is input particularly during authentication. Various messages are displayed on the display means 15.

  The biological data detection portable terminal device (portable position detection device) 20 is a separate body from the cellular phone device 10, and a wristwatch is attached to a part of the body (for example, an arm) of the user of the cellular phone device 10. By being attached as such, it is always carried and carried, and is configured to be able to communicate directly with the service providing terminal device 70, and through the network 90, the administrator terminal 30, the contact terminal 40, and the attending doctor terminal 50 The service providing server 60 and the physical condition management server 80 are communicable.

  The biometric data detection portable terminal device 20 has at least functions as a GPS position detection unit 20GS, a transmission / reception unit 255, a biosensor 20BS, a one-time password processing unit 258, and a display unit 24. A detailed configuration of the biological data detection portable terminal device 20 including functions other than these functions will be described later with reference to FIG. The biometric data detection portable terminal device 20 is configured to be able to communicate with the mobile phone device 10 for position confirmation by a communication function or a non-contact IC, as will be described later.

  Here, the GPS position detection unit 20GS as the second position detection unit is similar to the GPS position detection unit 11 of the mobile phone device 10 described above, as described later, the service providing server 60 (management unit 62) and the service providing terminal device 70. In response to a second position request from (management means 72), the current position (location position; latitude / longitude information) of the biological data detection portable terminal device 20 is detected as the second position by the global orientation measurement system (GPS). It is. At that time, the altitude and the depth may be detected as the current location of the biometric data detection portable terminal device 20. In that case, an altimeter that measures altitude based on atmospheric pressure (which can be replaced by the atmospheric pressure measurement function of the meteorological sensor 20WS described later) or a depth meter that measures depth based on water pressure (which can be replaced by the water pressure measuring function of the meteorological sensor 20WS described later) Possible) is provided as the second position detecting means. The GPS position detection unit 20GS in the biological data detection portable terminal device 20 not only performs position detection in response to the second position request, but also detects the current location of the biological data detection portable terminal device 20 in a predetermined cycle, It is also configured to notify a CPU 25 described later.

The function as the second notification means by the transmission / reception means 255 is a function related to service provision management realized by the CPU 25 as will be described later, and the second position detected by the GPS position detection unit 20GS is used as the mobile phone device described above. 10, similar to the transmission / reception unit 12, the service providing server 60 (management unit 62) and the service providing terminal device 70 (management unit 72) are notified. When the service providing server 60 (management unit 62) is notified, While transmitting and receiving via the network 90 by wireless communication similar to that of the cellular phone device 10, when notifying the service providing terminal device 70 (management unit 72), between the transmitting and receiving unit 12 and the service providing terminal device 70. Send and receive directly. In addition, as communication between the biometric data detection portable terminal device 20 and the service providing terminal device 70 by the transmission / reception unit 255, for example, infrared communication or Bluetooth (registered trademark) communication may be used.

  The transmission / reception unit 255 also receives various requests and notifications (second position request, operation status request, error notification, warning, etc.) from the service providing server 60 (management unit 62) and the service providing terminal device 70 (management unit 72). Also fulfills the function of receiving.

  In addition, the transmission / reception means 255 is connected between the biological data detection portable terminal device 20 and the mobile phone device 10 via the means for performing short-distance communication such as weak radio waves and magnetic fields. The mobile phone device 10 has a function of requesting position confirmation from the mobile phone device 10 and receiving a response from the mobile phone device 10.

  The biosensor 20BS is contacted and worn on a part of the user's body (for example, an arm) and detects the user's biometric data value in order to manage the physical condition of the user. In this embodiment, at least one of blood pressure, heart rate, respiratory rate, pulse wave, electrocardiogram, blood oxygen saturation concentration, blood oxygen concentration, and muscle tissue oxygen concentration is detected in a predetermined cycle. Body temperature, blood pressure, heart rate and respiratory rate shall be detected. As will be described later, the biometric data value detected by the biometric sensor 20BS is stored in the memory 20M (see FIG. 2), and as biometric data values before and after the interruption according to a request from the service providing server 60. The information is read from the memory 20M and notified / transmitted to the service providing server 60 via the network 90 using the function as the transmission / reception means 255 described above. The biometric data value detected by the biosensor 20BS is compared with a predetermined threshold value and used to confirm the identity.

  In the biometric data detection portable terminal device 20, the function as the control means 256 (see FIG. 2) realized by the CPU 25 described later also functions as the operation state detection means. This operation state detection means is used to determine whether or not the biosensor 20BS is performing an operation of detecting a biometric data value from the user, that is, the biometric data detection portable terminal device 20 is actually attached to the user's body. Whether or not a biometric data value is being detected from an operation state is detected as an operation state. As will be described later, from the service providing server 60 (management unit 62) and the service providing terminal device 70 (management unit 72). In response to the operation state request, the operation state is detected, and the detection result is notified and transmitted to the service providing server 60 via the network 90 by using the function as the transmission / reception means 255 described above, or the service is directly provided. It is configured to be notified / transmitted to the providing terminal device 70.

  The one-time password processing means 258 receives the one-time password generated by the service providing server 60 and the service providing terminal device 70, or the one-time password generated by the service providing server 60 and the service providing terminal device 70. A one-time password is generated in synchronization with the password. The one-time password received or generated in this way is displayed on the display means 24 as will be described later. Note that the one-time password processing means 258 displays this one-time password when the identity is confirmed based on the above-described biometric data value.

The administrator terminal 30 is provided in a management center or the like, and is registered in advance in the biometric data detection portable terminal device 20 as one of contact points to be notified as described below. It is a terminal [PC (personal computer) etc.] for managers who manages a user's physical condition using.

  The contact terminal 40 is registered in advance in the biometric data detection portable terminal device 20 as one of contacts to be notified in various ways as will be described later. For example, the user's friend, relative, spouse, etc. A terminal (such as a PC) used by a close relative.

  The attending doctor terminal 50 is registered in advance in the biometric data detection portable terminal device 20 as one of the contact points to be notified as described below, and is a terminal (PC or the like) used by the attending doctor of the user.

  The service providing server 60 provides and manages various services provided to the user of the mobile phone device 10. The service providing server 61, the managing unit 62, the authentication unit 63, the warning unit 64, and the statistical value calculating unit 65 are provided. , Statistical value judging means 66, one-time password generating means 67, and one-time password transmitting means 68.

  As described above, the service providing means 61 operates a service providing site accessible by the mobile phone device 10 and provides various services to users who have accessed the site through the network 90 from the mobile phone device 10. It is. Services provided to the user of the mobile phone device 10 by the service providing means 61 of the service providing server 60 include electronic money charge service, electronic regular purchase / renewal service, electronic ticket purchase / reservation service, and financial institutions. Various transfer / transfer services, stock trading services, etc.

  The management unit 62 manages various services provided by the service providing unit 61, and includes an authentication unit 63, a warning unit 64, a statistical value calculation unit 65, a statistical value determination unit 66, a one-time password generation unit 67, which will be described later. Using the functions of the one-time password transmission means 68, the management functions shown in the following items (31) to (39) are fulfilled.

  (31) When the user accesses the service providing means 61 by the access means 13 of the mobile phone device 10, the first position and the second position are set for the mobile phone device 10 and the biometric data detection mobile terminal device 20, respectively. Requesting and calculating the distance between the first position notified by the transmission / reception means 12 of the mobile phone device 10 and the second position notified by the transmission / reception means 255 of the biometric data detection portable terminal device 20, and calculating the calculated distance Is within a predetermined range (for example, within 1 m). If it is within the predetermined range, the management unit 62 permits the service providing unit 61 to provide a service. However, in the present embodiment, in addition to the distance being within the predetermined range, the authentication unit 63 notifies the user authentication result that the user of the service is authenticated by the authentication unit 63 described later, In addition, when the operation state notified from the biometric data detection portable terminal device 20 in response to the operation state request is a detection operation (a state in which the biometric data detection portable terminal device 20 is mounted on the user's body), management means 62 permits the service providing means 61 to provide the service.

  (32) If the user does not input or transmit authentication information in response to an authentication information request from the management means 62 (authentication information 63 described later), the management means 62 determines that the mobile phone device 10 (user) In response to this, an error notification for notifying the fact is given, and the provision of service by the service providing means 61 is prohibited. In this case, only the error notification may be performed without prohibiting the provision of the service.

(33) If it is determined in the above item (31) that the user is not the identity as a result of the identity authentication by the authentication means 63, the management means 62 instructs the mobile phone device 10 (user) or system administrator to An error notification for notifying that is performed, and the provision of service by the service providing means 61 is prohibited.

  (34) If there is no response to any of the requests for the first position, the second position, and the operation state in the item (31), the management means 62 determines that the mobile phone device 10 and the biometric data detection mobile terminal device 20 is judged to be in an abnormal state, a warning operation by a warning means 64 to be described later is executed, and the mobile phone device 10 / biological data detection mobile terminal device 20 and the system administrator are notified of this. An error notification for notifying is provided, and service provision by the service providing means 61 is prohibited.

  (35) When the operation state notified from the biometric data detection portable terminal device 20 in response to the operation state request in the item (31) is not in the detection operation, that is, the biosensor 20BS performs the detection operation by the operation state detection unit. If it is detected that the biometric data detection portable terminal device 20 is not worn on the user's body, the management means 62 may manage the cellular phone device 10 / biological data detection portable terminal device 20 or system management. An error notification for notifying that effect is sent to the service provider, and the provision of service by the service providing means 61 is prohibited. Further, the management means 62 informs the user (identification information, etc.) that the biometric data detection operation of the user's biometric data detection portable terminal device 20 is suspended in the service providing server 60. Register and save in association.

  (36) When the distance calculated in the item (31) is out of the predetermined range, the management means 62 exists in a place where the mobile phone device 10 and the biometric data detection mobile terminal device 20 are different from each other. Is likely to be used by a person different from the person wearing the biometric data detection portable terminal device 20, performs a warning operation by the warning means 64 described later, and performs the cellular phone 10 / biometric data detection. An error notification for notifying the mobile terminal device 20 or the system administrator is given, and the provision of service by the service providing means 61 is prohibited.

  (37) A function of periodically checking whether or not the distance between the mobile phone device 10 and the biometric data detection mobile terminal device 20 is within a predetermined range (a function described later with reference to FIG. 7). For each predetermined period, the mobile phone device 10 and the biometric data detection mobile terminal device 20 are requested to request the first location and the second location, respectively, and the first location and the biometric data detection notified by the transmitting / receiving means 12 of the mobile phone device 10 The distance from the second position notified by the transmission / reception means 255 of the mobile terminal device 20 is calculated, and it is determined whether or not the calculated distance is within a predetermined range (for example, within 1 m). If the mobile phone device 10 is out of the predetermined range for 30 minutes or more, for example, the mobile phone device 10 and the biometric data detection mobile terminal device 20 exist in different places due to misplacement or theft of the mobile phone device 10. The service providing means 61 prohibits the provision of the service by executing a warning operation by the warning means 64 described later.

  (38) Biometric data detection A function of periodically performing a detection operation check as to whether or not a biometric data detection operation by the biometric sensor 20BS is performed in the portable terminal device 20 (a function described later with reference to FIG. 8). At every predetermined period, an operation state is requested to the biological data detection portable terminal device (target device for detection operation check) 20, and the operation state notified from the target device 20 is being detected (the target device 20 is the user's body). It is determined whether or not it is in a state of being attached to the).

    (38-1) When the detection operation is not in progress, the management means 62 notifies the mobile phone device 10 / target device 20 and the system administrator of an error to notify the same as in the above item (35). Service provision by the service providing means 61 is prohibited, and the suspended state is registered.

(38-2) When the detection operation is being performed, the management unit 62 searches the registration of the suspended state for the target device 20, and the target device 20 that has been in the detection operation from the suspended state (at this time, the target device 20 is (The service provision is prohibited), it is determined that the detection operation has been resumed, and the biometric data value over a predetermined period (for example, 1 hour) accumulated before and after the interruption to the target device 20 as described later. (Eg body temperature, blood pressure, heart rate, respiratory rate). Then, a statistical value calculation means 65 described later calculates a statistical value before interruption and a statistical value after restart (for example, an average value) for the biometric data values obtained from the target device 20 before and after interruption, and statistical value determination means 66 described later. By comparing the calculated statistical value before interruption with the statistical value after restart, whether these statistical values are within a predetermined range or not, these statistical values are statistical values of the same user's biological data values. It is determined whether or not. If the biometric data value after restart (after interruption) is not detected for the predetermined period, the post-resumption statistical value is calculated when the biometric data value for the predetermined period is detected and accumulated. Will do.

    (38-3) If it is determined that they are the same user (if the difference is within a predetermined range), the management means 62 performs the same location check as the items (31) and (37) above, and If the distance between the device 10 and the target device 20 is within a predetermined range, the prohibition of service provision is canceled and the service provision is permitted. On the other hand, when it is determined that they are not the same user (when the above difference is outside the predetermined range; that is, the user wearing the target device 20 on the body is a different person before and after the biometric data value detection operation is interrupted) When it is determined that the possibility is high), the management unit 62 executes a warning operation by the warning unit 64 described later, and informs the mobile phone device 10 / the biometric data detection portable terminal device 20 and the system administrator to that effect. An error notification for notification is performed, and the provision of service by the service providing unit 61 is maintained in a prohibited state.

  (39) The one-time password generated by the one-time password generation unit 67 in response to the authentication information request from the management unit 62 or the authentication information 63, and the one-time password input to the mobile phone device 10 or the service providing terminal device 70 If the one-time password does not match, or if the one-time password has not been replied within a certain time, the management means 62 notifies the mobile phone device 10 (user) to that effect. An error notification for notifying is provided, and service provision by the service providing means 61 is prohibited. In this case, only the error notification may be performed without prohibiting the provision of the service. Further, a warning operation by a warning unit 64 described later may be executed, and an error notification for notifying the system administrator may be performed.

In the above items (32) to (39), when the service providing unit 61 prohibits the provision of the service, naturally, the service provided by the service providing terminal device 70 (service providing unit 71) described later is also prohibited. Further, when the prohibition of service provision is canceled in the above item (38-3) and the service provision is permitted, the service provision means 61 and the service provision terminal device 70 (service provision means 71) described later together with the provision of the service. The prohibition on the provision of services will also be lifted. Further, the management means 62 described in the items (37) and (38) above.
The regular check function according to may be realized not by the service providing server 60 but by a management server (not shown) provided separately from the service providing server 60.

The authentication means 63 authenticates the user based on authentication information about the user input by the user when the user of the mobile phone device 10 is provided with various services, and authenticates the user. The result is notified to the management means 62. Here, examples of the authentication information include a password (passphrase) or biometric information such as a fingerprint, an iris, a palm vein pattern, and a face. When the mobile phone device 10 accesses the service providing server 60, the service providing server 60 side can recognize the telephone number of the mobile phone device 10, so that for each user, registration of the telephone number and the user. The authentication information is stored in association with the database. Then, the authentication means 63 reads the registered authentication information associated with the telephone number from the database, and compares the registered authentication information with the authentication information input by the user at the time of access, thereby identifying the user's identity. It is configured to perform authentication.

The authentication unit 63 performs authentication using a one-time password in addition to the above-described authentication when the user of the mobile phone device 10 receives provision of various services.
As described in the above items (34), (36) to (39), the warning means 64 is used when there is no response from the mobile phone device 10 or the biometric data detection portable terminal device 20 in response to the request from the management means 62. When the distance between the mobile phone device 10 and the biometric data detection portable terminal device 20 is outside the predetermined range, when the users are different before and after the biometric data value detection operation is interrupted, or when the one-time password matches within the predetermined time If it cannot be obtained, a warning notification is sent to the system administrator or user. In the service providing server 60, the warning notification is performed by displaying on the display of the service providing server 60. In the mobile phone device 10 or the biometric data detecting portable terminal device 20, a buzzer or the like is sounded, an LED lamp or the like. This is done by flashing or. In the case of the warning notification, the biological data detection portable terminal device 20 uses warning means 254 described later. The warning notification may also serve as the error notification described above.

  The statistical value calculation means 65 calculates the average value of the biological data values (data accumulated in the memory 20M described later) detected by the biological sensor 20BS before interruption of the detection operation of the biological data values as the statistical value before interruption. The average value of the biometric data values (data accumulated in the memory 20M described later) detected by the biosensor 20BS after the biometric data value detection operation is resumed is calculated as the post-resumption statistical value.

  The statistical value judging means 66 compares the statistical value before interruption calculated by the statistical value calculating means 65 with the statistical value after restart, and determines whether these statistical values are within a predetermined range. Is a statistical value of biometric data values of the same user.

  As described above, in the service provision management system 1 according to the present embodiment, when the service provision is prohibited due to the interruption of the biometric data value detection operation, the biometric data value is obtained by the function described in the item (38). The service provision prohibition state is canceled by the same user judgment at the time of restarting the detection operation, but if the service provision is prohibited for other reasons, the prohibition state is canceled For this purpose, the user of the mobile phone device 10 needs to perform a predetermined procedure on the service providing server 60.

  The service providing terminal device 70 is used by a user to receive various services by using the mobile phone device 10 instead of a card. For example, ATMs of various financial institutions, terminals for electronic money, credit cards / debit cards, etc. Terminal, electronic commuter pass / electronic ticket gate device, electronic ticket terminal, electronic passport terminal, and the like. The service providing terminal device 70 of this embodiment includes a service providing means 71, a management means 72, an authentication means 73, a warning means 74, an IC card reader / writer 75, a one-time password generation means 77, a one-time password transmission means 78, and A function as the input / display unit 79 is provided.

  The service providing means 71, the managing means 72, the authenticating means 73, the warning means 74, the one-time password generating means 77, and the one-time password transmitting means 78 are the service providing means 61 and the managing means 62 in the service providing server 60 described above, respectively. , The authentication unit 63, the warning unit 64, the one-time password generation unit 67, and the one-time password transmission unit 68.

The input / display unit 79 is used to input various information such as a one-time password when providing a service, and to display various messages when providing a service.
In the present embodiment, the mobile phone device 10 incorporates a non-contact type IC (not shown) that can function as the access means 13 described above, and the IC card reader / writer 75 and the mobile phone in the service providing terminal device 70. Information required for service provision can be exchanged with the non-contact type IC of the apparatus 10. The IC card reader / writer 75 is in a communication-on (ON) state when the cellular phone device 10 (non-contact type IC) comes close, performs wireless communication with the non-contact type IC, and is stored in the non-contact type IC. Identification information (ID information) and other various types of information are read out, and information such as electronic money is written.

  The service providing means 71 provides various services to a user who has accessed through the card reader / writer 75 from the mobile phone device 10 (non-contact type IC). Services provided to the user of the mobile phone device 10 by the service providing means 71 include bank account deposit / withdrawal / transfer / transfer services, electronic money charge / use services, credit / debit card use services, electronic There are various services such as regular purchase / renewal / use services, electronic ticket use services, electronic ticket purchase / reservation / use services, and electronic passport authentication services.

  The management unit 72 manages various services provided by the service providing unit 71, and uses the functions of the authentication unit 73 and the warning unit 74 described later to perform management functions shown in the following items (41) to (47). Fulfill.

  (41) Similar to the above item (31), when the user accesses the service providing means 71 by the access means 13 (non-contact type IC) of the mobile phone device 10, the mobile phone device 10 and the biological data detection portable The terminal device 20 is requested for the first position and the second position, respectively, and the first position notified by the transmission / reception means 12 of the mobile phone device 10 and the second position notified by the transmission / reception means 255 of the biometric data detection portable terminal device 20. The distance to the position is calculated, and it is determined whether or not the calculated distance is within a predetermined range (for example, within 1 m). Allow the provision of. However, in the present embodiment, in addition to the above distance being within a predetermined range, the authentication means 73 notifies the user authentication result that the user of the service is authenticated by the authentication means 73 described later, In addition, when the operation state notified from the biometric data detection portable terminal device 20 in response to the operation state request is a detection operation (a state in which the biometric data detection portable terminal device 20 is mounted on the user's body), management means 72 permits the service providing means 71 to provide the service.

  (42) Similar to the above item (32), when the user does not input authentication information in response to an authentication information request from the management means 72 (or authentication means 73 described later), the management means 72 An error display for notifying that effect is performed on the display (not shown) of the service providing terminal device 70 to notify the user, and the service providing means 71 prohibits the provision of the service. In this case, only the error notification may be performed without prohibiting the provision of the service.

  (43) Similar to the above item (33), if the user is determined not to be the identity as a result of the identity authentication by the authentication means 73 in the above item (41), the management means 72 informs the system administrator to that effect. The service providing means 71 provides the service by notifying the user of the error on the display (not shown) of the service providing terminal device 70 and notifying the user. Is prohibited.

(44) Similar to the above item (34), if there is no response to any of the requests for the first position, the second position and the operation state in the item (41), the management means 72 10 and the biometric data detection portable terminal device 20 are judged to be in a state where some abnormality has occurred, a warning operation by a warning means 74 described later is executed, and a notification to that effect is given to the system administrator. Error notification is performed on the display (not shown) of the service providing terminal device 70 to notify the user, and the service providing means 71 is prohibited from providing the service.

  (45) Similar to the item (35), when the operation state notified from the biometric data detection portable terminal device 20 in response to the operation state request in the item (41) is not being detected, that is, by the operation state detection means. When it is detected that the biosensor 20BS is not performing a detection operation (or when the biometric data detection portable terminal device 20 is not attached to the user's body), the management unit 72 notifies the system administrator to that effect. The service providing means 71 provides the service by notifying the user of the error on the display (not shown) of the service providing terminal device 70 and notifying the user. Is prohibited. In addition, the management unit 72 notifies the service providing server 60 (management unit 62) that the detection operation of the biometric data value in the biometric data detection portable terminal device 20 of the user is suspended, and the use Registered / saved in association with a person (identification information, etc.).

  (46) Similar to the item (36), when the distance calculated in the item (41) is outside the predetermined range, the management unit 72 differs between the mobile phone device 10 and the biometric data detection mobile terminal device 20. It is determined that there is a high possibility that the mobile phone device 10 present at the location is being used by a person different from the person wearing the biometric data detection mobile terminal device 20, and performs a warning operation by the warning means 74 described later, An error notification for notifying the system administrator is given, and an error display for notifying the fact is displayed on the display (not shown) of the service providing terminal device 70 to notify the user, Providing service by the providing means 71 is prohibited.

  (47) Similar to the above item (39), the one-time password generated by the one-time password generation unit 77 in response to the authentication information request from the management unit 72 or the authentication information 73, the mobile phone device 10 and the service providing terminal When the one-time password does not match, or when the one-time password is not replied within a certain time, the management means 72 compares the one-time password input to the device 70 with the mobile phone device 10. An error notification for notifying the user is given to the (user), and the provision of service by the service providing means 71 is prohibited. In this case, only the error notification may be performed without prohibiting the provision of the service.

  Further, a warning operation by a warning means 74 described later is executed, an error notification for notifying the system administrator is given, and an error display for notifying that is displayed on the display of the service providing terminal device 70. (Not shown) The above may be performed to notify the user, and the provision of service by the service providing means 71 may be prohibited.

  In the above items (42) to (47), when providing the service by the service providing unit 71 is prohibited, the service provided by the above-described service providing server 60 (service providing unit 61) is also prohibited.

  In the service providing management system 1 of the present embodiment, the mobile phone device 10 is connected to the service providing terminal device 70 when using electronic money or using an electronic commuter pass or electronic ticket (passing through the ticket gate device). Only the position check at the time of approaching the IC card reader / writer 75 is performed, and the authentication means 73 does not perform the personal authentication, the operation state check by the operation state detection means, and the one-time password authentication. Yes.

The authentication means 73 authenticates the user based on authentication information about the user input by the user when the user of the cellular phone device 10 is provided with various services, and authenticates the user. The result is notified to the management means 72. Here, examples of the authentication information include a password (passphrase) or biometric information such as a fingerprint, an iris, a palm vein pattern, and a face. On the service providing terminal device 70 side, for each user, the ID information registered in the contactless IC of the mobile phone device 10 and the registered authentication information of the user are stored in association with each other. Then, the authentication unit 73 reads the registration authentication information associated with the ID information read from the non-contact type IC of the mobile phone device 10 by the IC card reader / writer 75, and the registration authentication information and the user at the time of access The user is authenticated by comparing with the authentication information input by.

The authentication unit 73 performs authentication using a one-time password in addition to the above-described authentication when the user of the mobile phone device 10 receives provision of various services.
As described in the above items (44), (46), and (47), the warning means 74 is used when there is no response from the cellular phone device 10 or the biometric data detection portable terminal device 20 to the request from the management means 72. If the distance between the mobile phone device 10 and the biometric data detection mobile terminal device 20 is out of the predetermined range, and the one-time password cannot be matched within the predetermined time, a warning notification is sent to the system administrator or user. To do. In the service providing terminal device 70, the warning notification is performed by displaying on the display (touch panel operated by the user) of the service providing terminal device 70, and in the mobile phone device 10 or the biometric data detecting mobile terminal device 20. Is performed by sounding a buzzer or the like or blinking an LED lamp or the like. In the case of the warning notification, the biological data detection portable terminal device 20 uses warning means 254 described later. The warning notification may also serve as the error notification described above.

  The physical condition management server 80 provides a contractor (a person who has made a contract / registration in advance to receive the service of the physical condition management server 80) with a service as described later with reference to FIGS. Therefore, the physical condition management server 80 accumulates the biological data, weather data, and position data periodically received from each biological data detection portable terminal device 20, and associates the biological data, weather data, and position data with the detection time. In addition to storing graphs and maps obtained by graph processing and map generation, it also has a function to provide stored data and graph / map browsing services (public services) to contractors. The contractor who wants to provide the service is authenticated, and the above browsing service is provided to the contractor who has been authenticated. It has been made.

The contractor may be the same person as the user, or may be a person different from the user (for example, an administrator or a friend / relative / main doctor of the user).
Each of the terminals 30, 40, and 50 has a telephone call / communication function and an e-mail transmission / reception function, and notification from the biometric data detection portable terminal device 20 (notification by a transmission / reception unit 255 described later). ).

  The network 90 connects the cellular phone device 10, the biological data detection portable terminal device 20, the terminals 30, 40, 50, the service providing server 60, the service providing terminal device 70, and the physical condition management server 80 described above so that they can communicate with each other. Here, it is assumed that the network includes various communication systems such as an intranet, the Internet, a public telephone line, and a wireless local area network (LAN), and at least the mobile phone device 10, the biometric data detection mobile terminal device 20, and the terminals 30 and 40. , 50 can communicate and communicate with each other via a telephone line, and can also send and receive e-mails.

Next, the configuration of the biological data detection portable terminal device 20 used in the service provision management system 1 described above will be described with reference to FIG. FIG. 2 is a block diagram showing a configuration of the biological data detection portable terminal device 20 in the service provision management system 1 of the present embodiment. As shown in FIG. 2, the biological data detection portable terminal device 20 of the present embodiment As described above, it is always carried and carried by the user together with the mobile phone device 10, and in addition to the above-described biosensor 20BS and GPS position detection unit 20GS, the weather sensor 20WS, the threshold value table 20T, the CPU 25, and the stop operation unit 26, an answer input unit 27 and a memory 20M.

  The weather sensor 20WS predetermines at least one of air temperature, water temperature, humidity, atmospheric pressure, water pressure, sunshine situation, and ultraviolet light amount as weather data in the user's location atmosphere (where the user is located). In this embodiment, the temperature (or water temperature), humidity, and atmospheric pressure (or water pressure) are detected.

  The biosensor 20BS, the weather sensor 20WS, and the GPS position detection unit 20GS are built in or externally attached to the main body of the portable terminal device 20, and are wired or wirelessly connected via a cable or the like. As described later with reference, the result detected at a predetermined cycle is transmitted to the main body of the portable terminal device 20.

  The threshold value table 20T holds biometric data threshold values for managing the physical condition of the user in advance for each weather condition, and is created and set by a function as a threshold value setting unit 251 of the CPU 25 described later. Thus, the portable terminal device 20 is stored and stored in a storage unit such as a RAM (Random Access Memory), a ROM (Read Only Memory), and a hard disk.

  At this time, the biometric data threshold value differs depending on the user and also varies depending on the living environment, and is set for each user according to the weather conditions corresponding to the environment. For example, when the user is in a hot and humid environment based on the normal body temperature T0, blood pressure P0, and heart rate N0 of the user, the weather conditions are air temperature 25-30 ° C. and humidity 80% or more. The body temperature T1, blood pressure P1, and heart rate N1 are set as biological data threshold values for the time (weather condition 1), and the biological data threshold values when the weather condition is 30 to 35 ° C. and the humidity is 60% or more (the weather condition 2) Body temperature T2, blood pressure P2, and heart rate N2 are set, and body temperature T3, blood pressure P3, and heart rate N3 are set as biometric data threshold values when the weather conditions are 35 ° C. or higher and humidity is 50% or higher. And when it is the weather condition 1 (weather condition 3), when any one or all of a user's actual body temperature T, blood pressure P, and heart rate N exceeds threshold value T1, P1, N1, When the weather condition is 2, any one or all of the user's actual body temperature T, blood pressure P, and heart rate N exceed the thresholds T2, P2, and N2, and when the weather condition is 3, the user's When any one or all of the actual body temperature T, blood pressure P, and heart rate N exceed the thresholds T3, P3, and N3, it is determined that the user's physical condition is abnormal (heat stroke etc.).

  When the user is in a low temperature environment, body temperature T4 is set as a biometric data threshold when the weather condition is air temperature 0 to 10 ° C. (weather condition 4), and the weather condition is air temperature −10 to 0 ° C. The body temperature T5 is set as the biological data threshold value when the weather condition is (weather condition 5), and the body temperature T6 is set as the biological data threshold value when the weather condition is air temperature −10 ° C. or less (the weather condition 6). If the actual body temperature T of the user falls below the threshold value T4 when the weather condition is 4, and if the actual body temperature T of the user falls below the threshold value T5 when the weather condition is 5, the weather condition If the actual body temperature T of the user falls below the threshold value T6 when it is 6, it is determined that the user's physical condition is abnormal (such as hypothermia).

Furthermore, when the user is in a high altitude (low atmospheric pressure) environment, the heart rate N7 and the respiratory rate K7 are set as biometric data thresholds when the weather conditions are atmospheric pressures A2 to A1 (weather conditions 7), When the weather condition is atmospheric pressure A3 to A2 (meteorological condition 8), the heart rate N8 and the respiration rate K8 are set as biometric data thresholds, and the weather condition is a temperature of 35 ° C. or higher and a humidity of 50% or higher (weather condition 9 )
Heart rate N9 and respiration rate N9 are set as the biometric data threshold values. When the weather condition 7 is met, when one or both of the user's actual heart rate N and respiration rate K exceed the thresholds N7 and K7, and when the weather condition 8 is met, the user's actual heart rate When one or both of the number N and the respiratory rate K exceed the thresholds N8 and K8, and when the weather condition is 9, either or both of the user's actual heart rate N and respiratory rate K are the thresholds When N9 and K9 are exceeded, it is determined that the user's physical condition is abnormal (such as altitude sickness).

  In addition, when the user is bathing in the sea, bathing, etc., the body temperature T10, heart rate as the biometric data threshold when the weather conditions are water pressure W1-W2 and the water temperature is L2-L1 (meteorological condition 10) N10 is set, body temperature T11 and heart rate N11 are set as biometric data thresholds when the weather conditions are water pressure W2 to W3 and the water temperature is L3 to L2 (meteorological condition 11), the weather condition is water pressure W3 or higher and the water temperature is Body temperature T12 and heart rate N12 are set as biological data threshold values when L3 or less (weather condition 12). When the weather condition 10 is met, either or both of the user's actual body temperature T and heart rate N falls below the thresholds T10 and N10. When the weather condition 11 is met, the user's actual body temperature T , When one or both of the heart rate N falls below the threshold value T11, N11, and when the weather condition is 12, the user's actual body temperature T, either one or both of the heart rate N is set to the threshold value T12, N12. If it falls below, it is determined that the user's physical condition is abnormal.

In addition, as shown in the following (a) to (i), whether or not the user is the user himself / herself is determined by the presence / absence of attachment / detachment of the biometric data detection portable terminal device 20 and the above-described biometric data threshold value. Is possible.
(a) No change in biometric data value with device attached (within same threshold range):
(b) Slow changes in biometric data values with the device attached:
(c) With the device attached, the biometric data value changes slowly and returns to the original:
(d) Abrupt changes in biometric data values with the device attached:
(e) Rapid change of biometric data value with device attached: Principal (recovery after abnormal physical condition),
(f) Reattached after device removal, no change in biometric data value:
(g) Reattaching after removing the device, changing the biometric data value, then returning slowly:
(h) Re-install after removing the device, change the biometric data value, then return to a different value: third party,
(i) Re-install after removing the device and the biometric data value remains unchanged: Third party,
Note that (a) to (i) shown here are examples of basic identification processing for identifying whether or not the user is the user, and various modifications can be added.

  This makes it possible to distinguish between the user himself / herself and a third party. In addition, even in the case of the user himself / herself, it is possible to distinguish changes in physical condition, changes when removed during exercise, bathing, etc., and how to return, etc., from those worn by a third party.

  Also, with conventional biometric authentication using fingerprints, palm prints, blood vessels, or irises, it is troublesome to read biometric information for authentication, or the scanning device becomes large and cumbersome. There was a problem. For this reason, in the biometric data detection portable terminal device 20 of the present embodiment, a device that is worn in the form of a wristwatch or a bracelet, or a device that is affixed to any part of the body is used to attach or affix it. It is also possible to provide a device that reads a vein pattern of a place to be touched or reads a fingerprint when the finger is worn on the finger.

  Moreover, the apparatus which authenticates using the above-mentioned heart rate, respiration rate, etc. may be sufficient, reading a vein pattern in the mounted | wearing state. In this case, it is possible to perform identity verification using a vein pattern and to detect a physical condition abnormality from a heart rate, a respiratory rate, or the like.

In addition, as described above, in this embodiment, since the biometric data value is continuously acquired for a certain period of time while being worn by the user, the problem of the dedicated scanning operation as in the related art is also solved.
A CPU (Central Processing Unit) 25 executes a predetermined application program, whereby threshold setting means 251, threshold reading means 252, comparison means 253, warning means 254, transmission / reception means 255, control means 256, and inquiry means 257 are described later. It functions as.

  The stop operation unit 26 is used to stop a warning operation (sounding operation, blinking operation, etc.) executed by a warning unit 254 described later by a user's conscious operation. 20, an operation switch, a touch panel on a display screen (display), and the like.

  The answer input unit 27 is for a user to answer whether or not a notification by a transmission / reception means 255 (to be described later) is executed in response to an inquiry by the inquiry means 257 (to be described later). 20 and the touch panel on the display screen (display).

  The memory 20M is a storage unit such as a non-volatile RAM, and accumulates and stores biometric data values detected by the biometric sensor 20BS at a predetermined cycle. The transmission / reception means 255 described later includes the item (38-2). In response to the request from the management means 62 of the service providing server 60 described above, the biometric data value over a predetermined period (for example, 1 hour) before and after the detection operation interruption of the biosensor 20BS is read from the memory 20M. It is configured to transmit / notify to 60 management means 62.

  The threshold value setting means 251 creates and sets the above-described threshold value table 20T for each user and for each weather condition according to the living environment. The normal temperature T0, blood pressure P0, and heart rate N0 of the user. Is used for inputting and setting a pair of weather conditions and a predetermined biological data threshold as described above, and may be configured to be input manually by a user, administrator, supervisor, or the like. Then, it may be configured to automatically input the user's normal body temperature T0, blood pressure P0, heart rate N0, and competition / working environment.

  The threshold value reading means 252 searches and reads out the biometric data threshold value set for the weather conditions corresponding to the weather data (temperature / water temperature, humidity, pressure / water pressure) detected by the weather sensor 20WS from the threshold value table 20T. .

  The comparison means 253 compares the biometric data threshold value read by the threshold value reading means 252 with the biometric data values (body temperature, blood pressure, heart rate, respiration rate) detected by the biometric sensor 20BS, and uses them according to the above-described criteria. This is to judge and detect the physical condition of the person. Further, in addition to the physical condition of the user, it is determined whether or not the user himself / herself, as described in (a) to (i) above.

  The operation of the warning means (physical condition warning means) 254 is controlled by a control means 256 described later, and when the user's physical condition is detected as a result of comparison by the comparison means 253, or when the warning means 64, 74 described above gives a warning. When the notification is received by the transmission / reception means 255, a warning is issued to the user. In this embodiment, for example, a buzzer or the like in the portable terminal device 20 is sounded or an LED lamp or the like is blinked. . Such a warning operation (ringing operation or blinking operation) is stopped via the control unit 256 described later when the user operates the stop operation unit 26 as described above. In the case where a cellular phone device is used as the main body of the biometric data detection portable terminal device 20 as described later, the alert unit 254 may cause the cellular phone device to perform a calling operation as a ringing operation.

  As described above, the transmission / reception unit 255 functions as a second notification unit (a function of notifying the service providing server 60 and the service providing terminal device 70 of the second position) and the operation state of the service providing server 60 and the service providing terminal device. 70, and the function of notifying the service providing server 60 of the biometric data value of the memory 20M. In addition, the operation is controlled by the control unit 256 described later. When detecting a health condition abnormality notifying means for notifying a predetermined contact to that effect, the biometric data value detected by the biometric sensor 20BS is used to notify the user of the physical condition abnormality. , Weather data detected by the weather sensor 20WS, and use detected by the GPS position detector 20GS It is also notified along the location. At that time, the transmission / reception means 255 may notify the user of the physical condition abnormality by automatically calling a pre-registered telephone number, or automatically transmit an e-mail to a pre-registered mail address. By doing so, the user's physical condition abnormality may be notified.

  The predetermined contact information is switched by the control means 256, and details will be described later. Further, the transmission / reception means 255 determines the physical condition described above based on the biological data value detected by the biological sensor 20BS, the weather data detected by the weather sensor 20WS, and the user's location detected by the GPS position detection unit 20GS. A function of transmitting to the management server 80 at a predetermined cycle is assumed. The transmission / reception means 255 transmits / receives data to / from the outside (the network 90 or the service providing terminal device 70), and not only a notification function (transmission function) as described later but also notification from the outside, etc. (For example, requests from the service providing server 60 and the service providing terminal device 70, error notifications, warning notifications, etc.).

  The control unit 256 functions as the above-described operation state detection unit, and controls the notification operation of the transmission / reception unit 255 and the warning operation of the warning unit 254 as in the following items (51) to (54). Here, the inquiry means 257 is also controlled by the control means 256, and when the operation of stopping the warning operation of the warning means 254 is executed within a predetermined time, the inquiry means 257 performs the notification operation of the physical condition abnormality by the transmission / reception means 255. Whether or not the answer is actually displayed on the display of the portable terminal device 20 and operated by the user by operating the touch panel or the operation switch (answer input unit 27). It is configured to receive by the control means 256.

(51) If the user's physical condition is detected as a result of the comparison by the comparison unit 253, a warning operation for the user is executed via the warning unit 254.
(52) When the operation for stopping the warning operation of the warning means 254 (the operation of the stop operation unit 26) is not executed even after a predetermined time has elapsed since the start of the warning action, the physical condition abnormality notification by the transmission / reception means 255 is executed. Let In this case, for example, an emergency vehicle such as an ambulance is immediately arranged by notifying a fire department or the like.

  (53) In response to the inquiry from the inquiry unit 257, when the user makes a reply to execute the notification operation of the physical condition abnormality by the transmission / reception unit 255, the notification operation of the physical condition abnormality by the transmission / reception unit 255 is executed. In this case, for example, by making an automatic call to a pre-registered doctor's telephone (for example, the attending doctor's terminal 50), the user can ask the attending doctor for an appropriate treatment.

  (54) When the user refuses to execute the physical condition abnormality notification operation by the transmission / reception means 255 for a predetermined number of times in response to the inquiry by the inquiry means 257, the physical condition abnormality notification operation by the transmission / reception means 255 is forcibly executed. In this case, for example, notification is made to a friend or a close relative (for example, the contact terminal 40).

  The one-time password processing means 258 receives the one-time password generated by the service providing server 60 and the service providing terminal device 70, or the one-time password generated by the service providing server 60 and the service providing terminal device 70 A one-time password is generated in synchronization. The one-time password received or generated in this way is a case where it is confirmed that the mobile phone device 10 exists within a predetermined distance by communicating with the mobile phone device 10 and, as described above, the biometric data When it is confirmed that the user is the user by the value, it is displayed on the display means 24 as described later. When the mobile phone device 10 and the biometric data detection mobile terminal device 20 exist within a predetermined distance, the user wearing the biometric data detection mobile terminal device 20 has the mobile phone device 10. It means the distance of the state.

[2] Operation of the service provision management system of this embodiment:
Next, the operation of the present embodiment will be described with reference to the flowcharts shown in FIGS.

[2-1] Service providing operation of service providing terminal device:
The service providing operation of the service providing terminal device (ATM, various terminals, etc.) 70 in the service providing management system 1 of the present embodiment will be described according to the flowchart (steps S10 to S35) shown in FIG.

  When a user receives various services from the service providing terminal device 70 using the mobile phone device 10 with a non-contact IC, the user uses the IC card in the service providing terminal device 70. The reader / writer 75 is brought close to the reading unit. Thus, when the non-contact type IC of the mobile phone device 10 enters the magnetic field generated from the IC card reader / writer 75, the non-contact type IC and the IC card reader / writer 75 are in a communication on (ON) state. (YES route of step S10).

  When the communication is turned on, the ID information stored in the non-contact type IC is read by the IC card reader / writer 75 and notified to the authentication means 73 (step S11), and the authentication means 73 is notified. The registered authentication information associated with the ID information is read from the database or the like (step S12).

  On the display (operation screen, touch panel) of the service providing terminal device 70, the user is requested to input authentication information (step S13), and the authentication information is not input even after a predetermined time has elapsed (step S14). NO route), the function of the item (42) of the management unit 72 notifies the user of an error that authentication information has not been entered by displaying an error on the display (step S15). Service provision is prohibited and service provision by the service provision means 61 of the service provision server 60 is also prohibited (step S16), and the process returns to step S10. When authentication information is not input, only error notification may be performed until the service provision is prohibited.

When authentication information is input by the user (YES route in step S14), the authentication information 73 compares the registered authentication information read in step S12 with the authentication information input by the user, and the user Is authenticated (step S17). If these pieces of authentication information do not match, it is determined that the user is not the user (NO route of step S18), and the function of the item (43) of the management means 72 causes the error of user authentication NG to the system administrator. In addition to the notification, the error display on the display notifies the user of the error of the personal authentication NG (step S19), and the provision of the service by the service providing means 71 is prohibited and the service providing server 60 Service provision by the service providing means 61 is also prohibited (step S20), and the process returns to step S10.

  As authentication here, in addition to normal identity authentication using an ID or password, authentication using a one-time password is performed. This one-time password authentication will be described with reference to FIG.

  First, when the management means 72 of the service providing terminal device 70 generates an authentication request (step S461 in FIG. 4) with the access of the mobile phone device 10 as a trigger, the one-time password generation means 77 generates a one-time password. (Step S462 in FIG. 4). And the one-time password transmission means 78 transmits this one-time password with respect to the portable terminal device 20 (step S463 in FIG. 4).

  Then, the biometric data detection portable terminal device 20 performs identity verification based on the biometric data value (step S421 in FIG. 4). Further, in parallel with this identity verification, the portable terminal device 20 confirms the position of the cellular phone device 10. (Step S422 in FIG. 4), and the mobile terminal device 20 that has received the one-time password from the service providing terminal device 70 (step S423 in FIG. 4) can confirm the identity by the biometric data value. If the mobile phone device 10 is within a predetermined distance, the one-time password is displayed on the display means 24 (step S424 in FIG. 4).

As described in (a) to (i), it is possible to distinguish between the user and a third party, and it is possible to issue a one-time password only to the user. .
In addition, since the one-time password is displayed when the identity is confirmed by biometric authentication and the biometric data detection portable terminal device 20 and the mobile phone device 10 are within a predetermined distance, the one-time password is generated. Even if the device is lost, the one-time password is not used by a third party.

  The biometric data detection portable terminal device 20 obtains a response of the cellular phone device 10 using a communication means that can react only at a short distance such as a weak radio wave or a magnetic field for an IC tag. The position of the mobile phone device 10 can be confirmed. In this case, in the state where the user wearing the biometric data detection portable terminal device 20 is carrying the mobile phone device 10 (see FIG. 2B), the user's body acts as a communication transmission path. Communication between the data detection portable terminal device 20 and the cellular phone device 10 may be performed using a weak signal. As a result, when a person other than the user wearing the biometric data detection portable terminal device 20 has the mobile phone device 10, the one-time password is not displayed and the one-time password is used by a third party. It can effectively prevent unauthorized use.

  In addition, the position confirmation between the biometric data detecting portable terminal device 20 and the cellular phone device 10 that are located at a predetermined short distance is not limited to communication using weak radio waves or reading by an IC tag. It is also possible to use a means that can reliably communicate with each other.

  In this case, if the biometric data detection portable terminal device 20 is set so that the position of the cellular phone device 10 is confirmed by a weak signal that acts as a communication transmission path, a general GPS is used. Even in a situation where only the same position can be determined by the position data confirmation, there is an effect that it is possible to prevent others sitting next to the user from illegally using the mobile phone device 10. In addition, when highly accurate GPS position data is obtained, the biometric data detection portable terminal device 20 may confirm the position of the mobile phone device 10 using the GPS position data.

On the other hand, the cellular phone device 10 that has received the notification of the authentication request from the service providing terminal device 70 displays a request for authentication information on the display means 15 (step S411 in FIG. 4). Alternatively, a request for authentication information is displayed on the input / display unit 79 (step S411 in FIG. 4).

  Here, the cellular phone device 10 responds to the position inquiry from the biometric data detection portable terminal device 20 (step S412 in FIG. 4). In this case, in order to perform communication between the biometric data detection portable terminal device 20 and the mobile phone device 10 with a weak signal capable of communication using the user's body as a communication transmission path, the biometric data detection portable terminal device 20 is If a user other than the user who wears the mobile phone device 10, the response of the mobile phone device 10 to the position inquiry from the biometric data detection mobile terminal device 20 does not reach the biometric data detection mobile terminal device 20. In this way, the biometric data detection portable terminal device 20 that has received the position response from the cellular phone device 10 displays the one-time password together with the biometric authentication.

  The user who sees this display uses the one-time password displayed on the display means 24 of the biometric data detection portable terminal device 20 on the input means 14 of the mobile phone device 10 or the input display means 79 of the service providing terminal device 70. Input (step S413 in FIG. 4). The one-time password input to the mobile phone device 10 in this way is transmitted to the service providing terminal device 70 via the transmission / reception means 12 (step S414 in FIG. 4).

  On the service providing terminal device 70 side, the one-time password input from the mobile phone device 10 to the reply or input display means 79 (step S464 in FIG. 4), the one-time password generated by the one-time password generation means 77, Are authenticated by the authentication means 73 (step S465 in FIG. 4).

  Here, if the one-time password is not returned from the mobile phone device 10 or input to the input display means 79 even after a predetermined time has elapsed, or if the generated one-time password does not match the returned one-time password, an error occurs. And the mobile phone device 10 is notified of an error and a notification that the service cannot be provided, and the service providing means 71 is prohibited from providing the service (steps S466 and S415 in FIG. 4).

  That is, if the one-time password does not match, or if the one-time password is not authenticated at a predetermined time, an authentication NG error notification is performed using the one-time password (step S19 in FIG. 4), and the service is provided. Service provision by means 71 is prohibited and service provision by service provision means 61 of service provision server 60 is also prohibited (step S20 in FIG. 4), and the process returns to step S10.

Further, for authentication using a one-time password, a technique as shown in FIG. 5 can be used.
First, when the management means 72 of the service providing terminal device 70 generates an authentication request (step S461 in FIG. 5), the one-time password generation means 77 generates a one-time password (step S462 in FIG. 5).

  In the mobile phone device 10 that has received the authentication request notification from the service providing terminal device 70, the mobile phone device 10 notifies the biometric data detection mobile terminal device 20 to generate a one-time password.

  Then, the biometric data detection portable terminal device 20 performs identity verification based on the biometric data value (step S421 in FIG. 5). Further, in parallel with this identity verification, the portable terminal device 20 confirms the position of the cellular phone device 10. (Step S422 in FIG. 4).

The one-time password processing unit 258 generates a one-time password that is synchronized (matched) with the one-time password generated by the one-time password generation unit 77 with reference to the timing and predetermined information given to the device. (Step S423 ′ in FIG. 5).

  In the mobile terminal device 20 that has generated the one-time password in this way (step S423 ′ in FIG. 5), the identity can be confirmed by the biometric data value, and the mobile phone device 10 exists within a predetermined distance. Then, the one-time password is displayed on the display means 24 (step S424 in FIG. 5).

  This one-time password may be displayed while the position of the mobile phone device 10 and the identity of the mobile phone device 10 can be confirmed, or the display is triggered by a signal when receiving a service. Alternatively, display may be performed in response to an operation of a switch or the like (not shown).

  In addition, as explained in (a) to (i), it is possible to distinguish between the user and a third party, and it is possible to issue a one-time password only to the user. . In addition, since the one-time password is displayed when the identity is confirmed by biometric authentication and the biometric data detection portable terminal device 20 and the mobile phone device 10 are within a predetermined distance, the one-time password is generated. Even if the device is lost, the one-time password is not used by a third party.

  The biometric data detection portable terminal device 20 obtains a response of the cellular phone device 10 using a communication means that can react only at a short distance such as a weak radio wave or a magnetic field for an IC tag. The position of the mobile phone device 10 can be confirmed. In this case, in a state where the user wearing the biometric data detection portable terminal device 20 is carrying the mobile phone device 10, the user's body acts as a communication transmission path. Communication with the telephone device 10 may be performed using a weak signal. As a result, when a person other than the user wearing the biometric data detection portable terminal device 20 has the mobile phone device 10, the one-time password is not displayed and the one-time password is used by a third party. It can effectively prevent unauthorized use.

  In addition, the position confirmation between the biometric data detecting portable terminal device 20 and the cellular phone device 10 that are located at a predetermined short distance is not limited to communication using weak radio waves or reading by an IC tag. It is also possible to use a means that can reliably communicate with each other.

  In this case, if the biometric data detection portable terminal device 20 is set so that the position of the cellular phone device 10 is confirmed by a weak signal that acts as a communication transmission path, a general GPS is used. Even in a situation where only the same position can be determined by the position data confirmation, there is an effect that it is possible to prevent others sitting next to the user from illegally using the mobile phone device 10. In addition, when highly accurate GPS position data is obtained, the biometric data detection portable terminal device 20 may confirm the position of the mobile phone device 10 using the GPS position data.

  In response to the notification of the authentication request from the service providing terminal device 70, the cellular phone device 10 displays a request for authentication information on the display means 15 (step S411 in FIG. 5). Alternatively, a request for authentication information is displayed on the input / display unit 79 (step S411 in FIG. 4).

Here, the cellular phone device 10 responds to the position inquiry from the biometric data detection portable terminal device 20 (step S412 in FIG. 4). In this case, in order to perform communication between the biometric data detection portable terminal device 20 and the mobile phone device 10 with a weak signal capable of communication using the user's body as a communication transmission path, the biometric data detection portable terminal device 20 is If a user other than the user who wears the mobile phone device 10, the response of the mobile phone device 10 to the position inquiry from the biometric data detection mobile terminal device 20 does not reach the biometric data detection mobile terminal device 20. In this way, the biometric data detection portable terminal device 20 that has received the position response from the cellular phone device 10 displays the one-time password together with the biometric authentication.

  The user who sees this display uses the one-time password displayed on the display means 24 of the biometric data detection portable terminal device 20 on the input means 14 of the mobile phone device 10 or the input display means 79 of the service providing terminal device 70. Input (step S413 in FIG. 5). The one-time password input to the mobile phone device 10 in this way is transmitted to the service providing terminal device 70 via the transmission / reception means 12 (step S414 in FIG. 5).

  On the service providing terminal device 70 side, the one-time password input from the mobile phone device 10 to the reply or input display means 79 (step S464 in FIG. 5), the one-time password generated by the one-time password generation means 77, Are authenticated by the authentication means 73 (step S465 in FIG. 5).

  Here, if the one-time password is not returned from the mobile phone device 10 or input to the input display means 79 even after a predetermined time has elapsed, or if the generated one-time password does not match the returned one-time password, an error occurs. In step S466 and S415 in FIG. 5, the mobile phone device 10 is notified of an error and a notification that the service cannot be provided.

  That is, if the one-time password does not match, or if the one-time password is not authenticated at a predetermined time, an authentication NG error notification is performed using the one-time password (step S19 in FIG. 5), and the service is provided. Service provision by means 71 is prohibited and service provision by service provision means 61 of service provision server 60 is also prohibited (step S20 in FIG. 5), and the process returns to step S10.

  If the authentication of the user and the authentication using the one-time password match, the user is authenticated (YES route in step S18), and the function of the item (41) of the management unit 72 A first position and a second position are required for two devices that should be possessed and carried by the same user, that is, the cellular phone device 10 and the biological data detection portable terminal device 20, respectively. The operating state of the biosensor 20BS is requested to the data detection portable terminal device 20 (step S21).

  At this time, the information regarding the combination of the mobile phone device 10 and the biometric data detection mobile terminal device 20 that should be possessed and carried by the same user is the ID information (stored in the non-contact type IC). The management unit 72 searches for the database or the like using the ID information read in step S11 as a key, and corresponds to the ID information. Information (request destination information) related to two devices (the mobile phone device 10 and the biometric data detection mobile terminal device 20) can be acquired.

  As shown in the example of FIG. 3, when a user uses the mobile phone device 10 to receive service from the service providing terminal device 70, at least the mobile phone device 10 with a built-in non-contact IC is connected to the service providing terminal device 70. Since it is clear that it exists in the location, the location of the service providing terminal device 70 is used as the first location, the first location is not requested to the cellular phone device 10, and the second to the biometric data detecting portable terminal device 20 is requested. Only a request for a position and an operating state may be made.

  If there is no response to any of the requests for the first position, the second position, and the operation state (NO route in step S22), the function of the item (44) of the management means 72 allows the mobile phone device 10 and the biological It is determined that there is some abnormality in at least one of the data detection portable terminal devices 20, and the warning means 74 warns the system administrator or user (the mobile phone device 10 and the biometric data detection portable terminal device 20). Notification is made (step S23), error notification without response is made to the system administrator, and error notification without response is made to the user by displaying the error on the display (step S24). Service provision by the service provision unit 71 is prohibited and the service of the service provision server 60 is prohibited. Service provision by the service providing means 61 is also prohibited (step S25), and the process returns to step S10.

  When there is an answer / notification of the first position, the second position, and the operation state in response to the request in step S21 (YES route in step S22), first, the operation state notified from the biometric data detection portable terminal device 20 is detected. Determine whether it is in operation.

  When it is detected that the operation state is not in operation, that is, when the biosensor 20BS is not performing the detection operation (or when the biometric data detection portable terminal device 20 is not worn on the user's body; NO in step S26) Route), the function of the item (45) of the management means 72 notifies the system administrator of an error that the biosensor 20BS is not operating, and notifies the user by displaying the error on the display. On the other hand, notification that the biosensor 20BS is not operating is performed (step S27), and the provision of service by the service providing means 71 is prohibited and the provision of service by the service providing means 61 of the service providing server 60 is also prohibited. (Step S28) and the user's biometric data detection portable terminal device 2 After the biometric data value detection operation at 0 is interrupted, the service providing server 60 (management means 62) is notified and registered and stored in association with the user (identification information, etc.) ( Step S29) and the process returns to step S10.

  When the operation state notified from the biometric data detection portable terminal device 20 is the detection operation (YES route in step S26), the transmission / reception unit 12 of the cellular phone device 10 uses the function of the item (41) of the management unit 72. A distance between the notified first position and the second position notified by the transmission / reception means 255 of the biological data detection portable terminal device 20 is calculated (step S30), and whether or not the calculated distance is within a predetermined range. Is determined (step S31).

  If the distance is outside the predetermined range (NO route in step S31), the mobile phone device 10 and the biometric data detection mobile terminal device 20 exist in different places and are carried by the function of the item (46) of the management means 72. It is determined that there is a high possibility that the telephone device 10 is used by a person different from the person wearing the biometric data detection portable terminal device 20, and the warning means 74 causes the system administrator or user (the mobile phone device 10 and the A warning notification to the data detection portable terminal device 20) is performed (step S32), an error notification is performed to the system administrator, and an error notification is performed to the user by displaying an error on the display ( Step S33), service provision by the service provision means 71 is prohibited and the service provision server 6 Service provision by the zero service providing means 61 is also prohibited (step S34), and the process returns to step S10.

  When the distance calculated in step S30 is within the predetermined range (YES route in step S31), the provision of service by the service providing unit 71 is permitted by the function of the item (41) of the management unit 72 (step S35). After the predetermined service desired by the user is provided to the user (mobile phone device 10), the process returns to step S10.

  In the service provision management system 1 of the present embodiment, when using electronic money that requires authentication in a relatively short time, or when using an electronic commuter pass or electronic ticket (passing through the ticket gate device), etc. Only the position check when the mobile phone device 10 is brought close to the IC card reader / writer 75 of the service providing terminal device 70 is performed. That is, in such a case, the processing of steps S12 to S20 and steps S26 to S29 in FIG. 3 is omitted, and the first position and the second position are requested in step S21 in FIG. The service provision is permitted only when the distance between the first position and the second position is within a predetermined range.

[2-2] Service providing operation of service providing server:
The service providing operation of the service providing server 60 in the service providing management system 1 of the present embodiment will be described according to the flowchart (steps S41 to S65) shown in FIG.

  When a user accesses the service providing site operated by the service providing server 60 from the mobile phone device 10 through the network 90 and receives various services, the user first operates the mobile phone device 10. Access (log in) the site for service provision. When accessed from the cellular phone device 10 (YES route in step S41), the service providing server 60 recognizes the telephone number of the accessed cellular phone device 10, and the authentication means 63 associates it with the telephone number. The registered authentication information is read from the database or the like (step S42).

  In addition, when the service providing server 60 requests the mobile phone device 10 (user) to input and transmit authentication information (step S43), the authentication information is not transmitted even after a predetermined time (step S44). NO route), the function of the above item (32) of the management means 62 notifies the mobile phone device 10 of an error that authentication information has not been entered (step S45), and the provision of service by the service providing means 61 is prohibited. At the same time, the service providing means 71 of the service providing terminal device 70 is also prohibited from providing the service (step S46), and the process returns to step S41. When authentication information is not input, only error notification may be performed until the service provision is prohibited.

  When authentication information is transmitted from the mobile phone device 10 (YES route in step S44), the authentication means 63 generates the registration authentication information read in step S42 and the authentication information transmitted from the mobile phone device 10 by the authentication means 63. The user is authenticated and the user is authenticated (step S47). If the authentication information does not match, it is determined that the user is not the user (NO route in step S48), and the function of the above item (33) of the management means 62 causes the error of user authentication NG to the system administrator. In addition to the notification, an error notification of personal authentication NG is given to the mobile phone device 10 (step S49), and the service providing means 61 of the service providing terminal apparatus 70 is prohibited while the service providing means 61 is prohibited from providing the service. Service provision is also prohibited (step S50), and the process returns to step S41.

  Further, as the authentication here, in addition to normal personal authentication using an ID or password, authentication using a one-time password is performed. This one-time password authentication will be described with reference to FIG.

  First, when the management unit 62 of the service providing server 60 generates an authentication request using the access of the mobile phone device 10 as a trigger (step S461 in FIG. 4), the one-time password generation unit 67 generates a one-time password ( Step S462 in FIG. 4). Then, the one-time password transmission means 68 transmits this one-time password to the mobile terminal device 20 (step S463 in FIG. 4).

  Then, the biometric data detection portable terminal device 20 performs identity verification based on the biometric data value (step S421 in FIG. 4), and receives the one-time password from the service providing server 60 (step S423 in FIG. 4). The mobile terminal device 20 displays the one-time password on the display means 24 if the identity is confirmed by the biometric data value and the mobile phone device 10 is within a predetermined distance (see FIG. 4). Step S424).

  As described in (a) to (i), it is possible to distinguish between the user and a third party, and it is possible to issue a one-time password only to the user. . In addition, since the one-time password is displayed when the identity is confirmed by biometric authentication and the biometric data detection portable terminal device 20 and the mobile phone device 10 are within a predetermined distance, the one-time password is generated. Even if the device is lost, the one-time password is not used by a third party.

  On the other hand, the cellular phone device 10 that has received the authentication request notification from the service providing server 60 displays the authentication information request on the display means 15 (step S411 in FIG. 4). Alternatively, a request for authentication information is displayed on the input / display unit 79 (step S411 in FIG. 4).

  Here, the cellular phone device 10 responds to the position inquiry from the biometric data detection portable terminal device 20 (step S412 in FIG. 4). In this case, in order to perform communication between the biometric data detection portable terminal device 20 and the mobile phone device 10 with a weak signal capable of communication using the user's body as a communication transmission path, the biometric data detection portable terminal device 20 is If a user other than the user who wears the mobile phone device 10, the response of the mobile phone device 10 to the position inquiry from the biometric data detection mobile terminal device 20 does not reach the biometric data detection mobile terminal device 20. In this way, the biometric data detection portable terminal device 20 that has received the position response from the cellular phone device 10 displays the one-time password together with the biometric authentication.

  The user who sees this display uses the one-time password displayed on the display means 24 of the biometric data detection portable terminal device 20 on the input means 14 of the mobile phone device 10 or the input display means 79 of the service providing terminal device 70. Input (step S413 in FIG. 4). The one-time password input to the mobile phone device 10 in this way is transmitted to the service providing server 60 via the transmission / reception means 12 (step S414 in FIG. 4). Also, the one-time password input to the input / display unit 79 of the service providing terminal device 70 as described above is also transmitted to the service providing server 60 (step S414 in FIG. 4).

  On the service providing server 60 side, the one-time password input from the mobile phone device 10 to the reply or input display means 79 (step S464 in FIG. 4) and the one-time password generated by the one-time password generation means 67 are received. The authentication unit 63 compares and authenticates (step S465 in FIG. 4).

  Here, if the one-time password is not returned from the mobile phone device 10 or input to the input display means 79 even after a predetermined time has elapsed, or if the generated one-time password does not match the returned one-time password, an error occurs. And the mobile phone device 10 is notified of an error and a notification that the service cannot be provided, and the service providing means 71 is prohibited from providing the service (steps S466 and S415 in FIG. 4).

That is, if the one-time password does not match, or if the one-time password is not authenticated at a predetermined time, an authentication NG error notification is performed using the one-time password (step S19 in FIG. 4), and the service is provided. Service provision by means 71 is prohibited and service provision by service provision means 61 of service provision server 60 is also prohibited (step S20 in FIG. 4), and the process returns to step S10.

Further, for authentication using a one-time password, a technique as shown in FIG. 5 can be used.
First, when the management means 62 of the service providing server 60 generates an authentication request (step S461 in FIG. 5), the one-time password generation means 67 generates a one-time password (step S462 in FIG. 5).

  In the mobile phone device 10 that has received the authentication request notification from the service providing server 60, the mobile phone device 10 notifies the biometric data detection mobile terminal device 20 to generate a one-time password.

  Here, the one-time password processing means 258 generates a one-time password that is synchronized (matched) with the one-time password generated by the one-time password generation means 67 by referring to the timing and predetermined information given to the device. (Step S423 ′ in FIG. 5).

  Then, the biometric data detection portable terminal device 20 performs identity verification based on the biometric data value (step S421 in FIG. 5), and thus the mobile phone that has generated the one-time password (step S423 ′ in FIG. 5). The terminal device 20 displays the one-time password on the display means 24 if the identity is confirmed by the biometric data value and the mobile phone device 10 is within a predetermined distance (step S424 in FIG. 5). ).

  This one-time password may be displayed while the position of the mobile phone device 10 and the identity of the mobile phone device 10 can be confirmed, or the display is triggered by a signal when receiving a service. Alternatively, display may be performed in response to an operation of a switch or the like (not shown).

  In addition, as explained in (a) to (i), it is possible to distinguish between the user and a third party, and it is possible to issue a one-time password only to the user. . In addition, since the one-time password is displayed when the identity is confirmed by biometric authentication and the biometric data detection portable terminal device 20 and the mobile phone device 10 are within a predetermined distance, the one-time password is generated. Even if the device is lost, the one-time password is not used by a third party.

  In addition, the cellular phone device 10 that has received the authentication request notification from the service providing server 60 displays a request for authentication information on the display means 15 (step S411 in FIG. 5). Alternatively, a request for authentication information is displayed on the input / display unit 79 (step S411 in FIG. 5).

  Here, the cellular phone device 10 responds to the position inquiry from the biometric data detection portable terminal device 20 (step S412 in FIG. 4). In this case, in order to perform communication between the biometric data detection portable terminal device 20 and the mobile phone device 10 with a weak signal capable of communication using the user's body as a communication transmission path, the biometric data detection portable terminal device 20 is If a user other than the user who wears the mobile phone device 10, the response of the mobile phone device 10 to the position inquiry from the biometric data detection mobile terminal device 20 does not reach the biometric data detection mobile terminal device 20. In this way, the biometric data detection portable terminal device 20 that has received the position response from the cellular phone device 10 displays the one-time password together with the biometric authentication.

The user who sees this display uses the one-time password displayed on the display means 24 of the biometric data detection portable terminal device 20 on the input means 14 of the mobile phone device 10 or the input display means 79 of the service providing terminal device 70. Input (step S413 in FIG. 5). The one-time password input to the mobile phone device 10 in this way is transmitted to the service providing server 60 via the transmission / reception means 12 (step S414 in FIG. 5). Also, the one-time password input to the input / display unit 79 of the service providing terminal device 70 as described above is also transmitted to the service providing server 60 (step S414 in FIG. 5).

  On the service providing server 60 side, the one-time password input from the mobile phone device 10 to the reply or input display means 79 (step S464 in FIG. 5) and the one-time password generated by the one-time password generation means 67 are received. The authentication unit 63 compares and authenticates (step S465 in FIG. 5).

  Here, if the one-time password is not returned from the mobile phone device 10 or input to the input display means 79 even after a predetermined time has elapsed, or if the generated one-time password does not match the returned one-time password, an error occurs. In step S466 and S415 in FIG. 5, the mobile phone device 10 is notified of an error and a notification that the service cannot be provided.

  That is, if the one-time password does not match, or if the one-time password is not authenticated at a predetermined time, an authentication NG error notification is performed using the one-time password (step S19 in FIG. 5), and the service is provided. Service provision by means 71 is prohibited and service provision by service provision means 61 of service provision server 60 is also prohibited (step S20 in FIG. 5), and the process returns to step S10.

  If the authentication of the user and the authentication using the one-time password match, it is authenticated that the user is the user (YES route of step S48), and the function of the item (31) of the management unit 62 A first position and a second position are required for two devices that should be possessed and carried by the same user, that is, the cellular phone device 10 and the biological data detection portable terminal device 20, respectively. The operating state of the biosensor 20BS is requested to the data detection portable terminal device 20 (step S51). At this time, information regarding the combination of the mobile phone device 10 and the biometric data detection mobile terminal device 20 that should be possessed and carried by the same user is associated with the telephone number of the mobile phone device 10 and stored in a database in advance. The management means 62 searches the database or the like using the telephone number of the mobile phone device 10 as a key, thereby obtaining two devices corresponding to the ID information (the mobile phone device 10). In addition, information (requestee information) related to the biometric data detection portable terminal device 20) can be acquired.

  If there is no response to any of the requests for the first position, the second position, and the operation state (NO route of step S52), the function of the item (34) of the management means 62 allows the mobile phone device 10 and the biological It is determined that some abnormality has occurred in at least one of the data detection portable terminal devices 20, and the warning means 64 warns the system administrator or user (the mobile phone device 10 and the biometric data detection portable terminal device 20). Notification is made (step S53), and further, error notification without response is made to the system administrator, and error notification without response is made to the mobile phone device 10 / biological data detection portable terminal device 20 (step S53). S54), the provision of service by the service providing means 61 is prohibited and the service providing terminal device 70 Service provision by the service provision means 71 is also prohibited (step S55), and the process returns to step S41.

When there is an answer / notification of the first position, the second position, and the operation state in response to the request in step S51 (YES route in step S52), first, the operation state notified from the biometric data detection portable terminal device 20 is detected. Determine whether it is in operation.

  When the operation state is not in operation, that is, when it is detected that the biosensor 20BS is not performing the detection operation (or when the biometric data detection portable terminal device 20 is not attached to the user's body; NO in step S56) Route), by the function of the above item (35) of the management means 62, the system administrator is notified of an error that the biosensor 20BS is not operating, and the mobile phone device 10 / biological data detection mobile terminal device. 20 is notified that the biosensor 20BS is not operating (step S57), and the provision of service by the service provision unit 61 is prohibited and the provision of service by the service provision unit 71 of the service provision terminal device 70 is prohibited. Is also prohibited (step S58), and the biometric data detection portable terminal device of the user is further deleted. After the biometric data value detection operation in the device 20 is suspended, it is registered and stored in association with the user (telephone number, identification information, etc.) (step S59), and then the process of step S41 is performed. Return.

  When the operation state notified from the biometric data detection portable terminal device 20 is in the detection operation (YES route in step S56), the transmission / reception unit 12 of the cellular phone device 10 uses the function of the item (31) of the management unit 62. A distance between the notified first position and the second position notified by the transmission / reception means 255 of the biological data detection portable terminal device 20 is calculated (step S60), and whether or not the calculated distance is within a predetermined range. Is determined (step S61).

  If the distance is outside the predetermined range (NO route in step S61), the mobile phone device 10 and the biometric data detection mobile terminal device 20 exist in different places and are carried by the function of the item (36) of the management means 62. It is determined that there is a high possibility that the telephone device 10 is used by a person different from the person wearing the biometric data detection portable terminal device 20, and the warning means 64 causes the system administrator or user (the mobile phone device 10 and the biometric device) to be used. A warning notification to the data detection portable terminal device 20) is performed (step S62), an error notification is performed to the system administrator, and an error notification is performed to the mobile phone device 10 / biological data detection portable terminal device 20. (Step S63), the provision of service by the service providing means 61 is prohibited and the service providing terminal device Service provision by the service provision means 71 of the device 70 is also prohibited (step S64), and the processing returns to step S41.

  When the distance calculated in step S60 is within a predetermined range (YES route in step S61), the service providing unit 61 is permitted to provide the service by the function of the item (31) of the management unit 62 (step S65). After the predetermined service desired by the user is provided to the user (mobile phone device 10), the process returns to step S41.

[2-3] Service providing server location check function:
The position check function of the service providing server 60 in the service providing management system 1 of the present embodiment (the function of the item (37) of the management means 62) will be described with reference to the flowchart (steps S71 to S80) shown in FIG. As described above, the position check function described with reference to FIG. 7 is not performed by the service providing server 60, but by a management server (not shown) provided separately from the service providing server 60 or a server dedicated to position check. It may be realized.

When the position check timing of a predetermined cycle comes (YES route of step S71), two devices that should be possessed and carried by the same user, that is, the cellular phone device 10 and the biometric data detection portable terminal device 20, respectively. A first position and a second position are requested (step S72). At this time, the information regarding the combination of the mobile phone device 10 and the biometric data detection mobile terminal device 20 that should be carried and carried by the same user is associated with the telephone number of the mobile phone device 10 as described above, for example. The management means 62 searches the database or the like using the telephone number of the mobile phone device 10 as a key to search for two devices corresponding to the ID information (mobile phone). Information on the telephone device 10 and the biometric data detection portable terminal device 20) (request destination information) is acquired.

  If there is no response to any of the requests for the first position and the second position (NO route in step S73), some abnormality has occurred in at least one of the mobile phone device 10 and the biometric data detection mobile terminal device 20. It is determined that the current state is present, and the warning means 64 notifies the system administrator and the user (the mobile phone device 10 and the biometric data detection portable terminal device 20) of the warning (step S74), and the service providing server 60 provides the service. Service provision by means 61 and service provision means 71 of service provision terminal device 70 is prohibited (step S75), and the process returns to step S71.

  When there is an answer / notification of the first position and the second position in response to the request in step S72 (YES route in step S73), the first position and the biometric data detected portable notified by the transmission / reception means 12 of the cellular phone device 10 are used. The distance to the second position notified by the transmission / reception means 255 of the terminal device 20 is calculated (step S76), and it is determined whether or not the calculated distance is within a predetermined range (step S77). If the distance is within the predetermined range (YES route of step S77), it is determined that the mobile phone device 10 and the biometric data detection mobile terminal device 20 are possessed and carried by the same user, and in step S71. Return to processing.

  When the distance calculated in step S76 is outside the predetermined range (NO route of step S77), when the state outside the predetermined range does not exceed a predetermined time (for example, 30 minutes) (NO route of step S78) Then, it is determined that the cellular phone device 10 and the biometric data detecting portable terminal device 20 are temporarily separated from each other, and the process returns to step S71. On the other hand, when it is out of the predetermined range for a predetermined time or longer (for example, 30 minutes or longer) (YES route in step S78), the mobile phone device 10 and the biometric data detecting mobile terminal due to misplacement, theft, etc. It is determined that the device 20 exists in a different place, and a warning notification is given to the system administrator and the user (the mobile phone device 10 and the biometric data detection portable terminal device 20) by the warning means 64 (step S79). Service provision by the service provision unit 61 of the service provision server 60 and the service provision unit 71 of the service provision terminal device 70 is prohibited (step S80), and the process returns to step S71.

[2-4] Biosensor detection operation check function of service providing server:
The biosensor detection operation check function of the service providing server 60 in the service providing management system 1 according to the present embodiment [the function of the item (38) of the management unit 62] will be described with reference to the flowchart (steps S81 to S109) shown in FIG. . As described above, the biosensor detection operation check function described with reference to FIG. 8 is not the service providing server 60, but a management server (not shown) or biosensor detection provided separately from the service providing server 60. It may be realized by a server dedicated to operation check.

When the biometric sensor detection operation check timing of a predetermined cycle is reached (YES route in step S81), an operation state is requested to the biometric data detection portable terminal device 20 (step S82), and there is no response of the operation state (NO in step S83). Route), it is determined that there is some abnormality in the biometric data detection portable terminal device 20, and the warning means 64 gives the system administrator or user (the mobile phone device 10 and the biometric data detection portable terminal device 20) to A warning notification is made (step S84), and further, an error notification without response is sent to the system administrator, and an error response without response is sent to the mobile phone device 10 / biological data detection mobile terminal device 20 ( Step S85), service providing server 60
The service providing unit 61 and the service providing unit 71 of the service providing terminal device 70 are prohibited from providing the service (step S86), and the process returns to step S81.

  When there is a reply / notification of the operation state in response to the request in step S82 (YES route in step S83), it is determined whether or not the operation state notified from the biometric data detection portable terminal device 20 is a detection operation.

  If the operating state is not in operation, that is, if it is detected that the biosensor 20BS is not performing a detection operation (or if the biometric data detection portable terminal device 20 is not attached to the user's body; NO in step S87) Route), the system administrator is notified of the error that the biosensor 20BS is not operating, and the biosensor 20BS is not operating for the mobile phone device 10 / the biometric data detecting mobile terminal device 20. (Step S88), the service providing means 61 of the service providing server 60 and the service providing means 71 of the service providing terminal device 70 are prohibited from providing the service (step S89). The detection operation of the biometric data value in the detection portable terminal device 20 is suspended. That are Tsu is, the user (phone number, identification information, etc.) associated with the registered and stored (step S90), the process returns to step S81. However, when interruption registration has already been performed for the biometric data detection portable terminal device 20, the processes of steps S88 to S90 are omitted.

  When the operation state notified from the biometric data detection portable terminal device 20 is in the detection operation (YES route of step S87), it is determined whether or not the biometric data detection portable terminal device 20 is registered to be interrupted. However, if the registration is not interrupted, the biometric data detection portable terminal device 20 does not resume the operation of the biosensor 20BS from the interrupted state, and the biosensor 20BS is continuously operating (NO in step S91). Route), the process returns to step S81.

  When the biometric data detection portable terminal device 20 is registered to be interrupted, it is determined that the operation of the biosensor 20BS is resumed from the suspended state (YES route in step S91), and the biometric data detection portable terminal device 20 is detected. On the other hand, biometric data values (for example, body temperature, blood pressure, heart rate, respiration rate) over a predetermined period (for example, 1 hour) accumulated before and after interruption of the detection operation by the biosensor 20BS are requested (step S92).

  When the biometric data value is notified from the biometric data detection portable terminal device 20 in response to this request, the statistical value calculation means 65 causes the pre-interruption statistical value and post-resumption statistical value (for example, average value) for the biometric data value before and after the interruption. Is calculated (step S93), and the calculated statistical value before interruption is compared with the calculated statistical value after restart (step S94), and whether or not the difference between these statistical values is within a predetermined range. Whether or not these statistical values are statistical values of biometric data values of the same user is determined (step S95).

  When the difference between these statistical values is outside the predetermined range and these statistical values are determined not to be the statistical values of the biometric data values of the same user (NO route in step S95), the biometric data detection portable terminal device 20 is set to the body. It is determined that there is a high possibility that the user attached to the user is a different person before and after the biometric data value detection operation is interrupted, and the warning means 64 causes the system administrator or user (the mobile phone device 10 and the biometric data detection portable terminal to The device 20) is notified of a warning (step S96), the system administrator is notified of the error, and the mobile phone device 10 / biological data detection portable terminal device 20 is notified of the error (step S97). ) By the service providing means 61 of the service providing server 60 and the service providing means 71 of the service providing terminal device 70 Inhibition state of-bis provided is maintained (step S98), the process returns to step S81.

  If it is determined that the difference between the statistical values calculated in step S93 is within a predetermined range and these statistical values are the statistical values of the biometric data values of the same user (YES route in step S95), the operation state is checked. The biometric data detecting portable terminal device 20 and the cellular phone device 10 to be carried and carried by the user using the biometric data detecting portable terminal device 20 are respectively in the first position and the first position. Two positions are required (step S99). At this time, the information related to the combination of the mobile phone device 10 and the biometric data detection mobile terminal device 20 that should be possessed and carried by the same user is associated with the identification information of the biometric data detection mobile terminal device 20, for example. Is stored in advance in a database or the like, and the management means 62 is subjected to a current operation state check by searching the database and the like using the identification information of the biometric data detection portable terminal device 20 as a key. Information (request destination information) related to the mobile phone device 10 paired with the biometric data detection mobile terminal device 20 is acquired.

  If there is no response to any of the requests for the first position and the second position (NO route in step S100), some abnormality has occurred in at least one of the mobile phone device 10 and the biometric data detection mobile terminal device 20. It is determined that the current state is present, and the warning means 64 notifies the system administrator and the user (the mobile phone device 10 and the biometric data detection portable terminal device 20) of the warning (step S101), and further to the system administrator. An error notification without a response is performed, and an error notification without a response is performed with respect to the mobile phone device 10 / biometric data detection mobile terminal device 20 (step S102), and the service providing means 61 and the service providing terminal of the service providing server 60 The service provision prohibition state by the service provision means 71 of the device 70 is maintained. Is (step S103), the process returns to step S81.

  When there is an answer / notification of the first position and the second position in response to the request in step S99 (YES route in step S100), the first position and the biometric data detected portable notified by the transmission / reception means 12 of the cellular phone device 10 A distance from the second position notified by the transmission / reception means 255 of the terminal device 20 is calculated (step S104), and it is determined whether or not the calculated distance is within a predetermined range (step S105).

  If the distance is out of the predetermined range (NO route in step S105), the mobile phone device 10 and the biometric data detection mobile terminal device 20 exist in different places, and the mobile phone device 10 wears the biometric data detection mobile terminal device 20 It is determined that there is a high possibility that it is being used by a person different from the person who performed the warning, and the warning means 64 notifies the system administrator and the user (the mobile phone device 10 and the biometric data detection mobile terminal device 20) of a warning. (Step S106) Further, an error notification is made to the system administrator, and an error notification is made to the mobile phone device 10 / biological data detection portable terminal device 20 (Step S107), and the service providing server 60 provides the service. Service by means 61 and service providing means 71 of service providing terminal device 70 Disabled state of the test is maintained (step S108), the process returns to step S81.

  If the distance calculated in step S104 is within the predetermined range (YES route in step S105), it is determined that the mobile phone device 10 and the biometric data detection mobile terminal device 20 are carried and carried by the same user. Then, the service provision prohibition state by the service provision unit 61 of the service provision server 60 and the service provision unit 71 of the service provision terminal device 70 is released, and the service provision is permitted (step S109).

[2-5] Operation of cellular phone device:
The operation of the mobile phone device 10 in the service provision management system 1 of the present embodiment will be described according to the flowchart (steps S111 to S117) shown in FIG. In the mobile phone device 10, a normal call function and e-mail function are used by a user. Separately from these functions, the mobile phone device 10 is used by the service providing server 60 and the service providing terminal device 70. When receiving a service provision, the cellular phone device 10 performs a function as shown in FIG. 9 in response to a location request, error notification, or warning notification from the service providing server 60 or the service providing terminal device 70.

  When a request for the first position is received from the service providing server 60 or the service providing terminal device 70 by the transmission / reception means 12 of the mobile phone device 10 (YES route in step S111), the current position (mobile phone device) is sent to the GPS position detection unit 11. 10 is detected (step S112), and the current position detected by the GPS position detector 11 is notified to the service providing server 60 or the service providing terminal device 70 as the first position by the transmitting / receiving means 12. (Step S113), the process returns to Step S111.

  Further, when an error notification is received from the service providing server 60 or the service providing terminal device 70 by the transmission / reception means 12 of the mobile phone device 10 (from the NO route in step S111 to the YES route in step S114), the content of the error notification is determined. The information is displayed as image information on a display (not shown) of the mobile phone device 10 to notify the user, or is notified to the user as voice information (step S115), and the process returns to step S111.

  Furthermore, when a warning notification is received from the service providing server 60 or the service providing terminal device 70 by the transmission / reception means 12 of the mobile phone device 10 (from the NO route in step S114 to the YES route in step S116), it corresponds to the content of the warning notification. The information is displayed as image information on a display (not shown) of the mobile phone device 10 to notify the user, or is notified to the user as voice information and a warning operation is performed (step S117), and then step S111. Return to the process. It is assumed that the warning operation performed in step S117 is performed as an operation more emphasized than the error display performed in step S115. For example, as the warning operation, not only the warning content is notified by the display, but also the user is notified more strongly by using the vibration function and the calling function of the mobile phone device 10.

[2-6] Operation of biometric data detection portable terminal device:
10, FIG. 11 and FIG. 12 are flowcharts for explaining the operations of the biosensor 20BS, the weather sensor 20WS and the GPS position detector 20GS in the biometric data detection portable terminal device 20 of this embodiment, respectively. As shown in FIG. 5, the biosensor 20BS detects a user's biometric data values (body temperature, blood pressure, heart rate, respiration rate) in a predetermined cycle (step S121), and transmits the detected biometric data values to the CPU 25 ( Step S122).

  Similarly, as shown in FIG. 11, the weather sensor 20WS detects meteorological data (temperature / water temperature, humidity, pressure / water pressure) in the atmosphere where the user is located at a predetermined period (step S131). The meteorological data is transmitted to the CPU 25 (step S132).

  Further, as shown in FIG. 12, the GPS position detection unit 20GS detects the current location (longitude / latitude information) of the user at a predetermined cycle by the global orientation measurement system (step S141), and the detected location The position is transmitted to the CPU 25 (step S142).

  Here, it is assumed that the transmission operation to the CPU 25 by the biosensor 20BS, the weather sensor 20WS, and the GPS position detection unit 20GS is controlled to be simultaneously executed in synchronization with the predetermined period.

  FIG. 13 is a flowchart (steps S201 to S229) for explaining the operation of the CPU 25 in the biological data detection portable terminal device 20 of this embodiment. As shown in FIG. 13, the biological sensor 20BS, the weather sensor 20WS, and the GPS When the biometric data value, the meteorological data, and the location are received from the position detection unit 20GS (YES route in step S201), the received biometric data value, the meteorological data, and the location are measured by the transmission / reception means 255 via the network 90. The biometric data value transmitted to the management server 80 is stored in the memory 20M (step S202), and the weather conditions corresponding to the weather data (temperature / water temperature, humidity, pressure / water pressure) detected by the weather sensor 20WS are described above. Biological data threshold set as But the threshold reading means 252, is read is retrieved from the threshold table 20T (step S203).

  Then, the comparison means 253 compares the biometric data threshold value read by the threshold value reading means 252 with the biometric data values (body temperature, blood pressure, heart rate, respiration rate) detected by the biometric sensor 20BS (step S204). The user's physical condition abnormality is determined and detected in accordance with the criteria as described above (step S205). If the biometric data value does not exceed or falls below the biometric data threshold, it is determined that there is no abnormality (NO route in step S205), and the process returns to step S201.

  On the other hand, if the biometric data value exceeds or falls below the biometric data threshold value, it is determined that there is an abnormality (YES route in step S205), and the warning unit 254 performs a warning operation for the user. (Step S206). Specifically, a buzzer or the like in the mobile terminal device 20 is sounded, or an LED lamp or the like is blinked.

  After the warning operation is started, the control unit 256 detects whether or not the stop operation unit 26 is operated by the user (step S207), and the warning operation of the warning unit 254 is performed even after a predetermined time has elapsed after the warning operation is started. When the operation to stop the operation (operation of the stop operation unit 26) is not executed (NO route from step S207 to YES route from step S208), the transmission / reception unit 255 executes notification to the first contact via the network 90. (Step S209).

  At this time, as described above, the situation in which the operation of the stop operation unit 26 is not executed even after a predetermined time has elapsed is considered to be a considerably dangerous state such as the user losing consciousness. In addition to the fire fighting etc., the manager terminal 30, the contact terminal 40, and the attending physician terminal 50 are notified of the abnormal condition of the user together with the biometric data value, the weather data, and the location at the occurrence of the abnormality. In addition, in the state as described above, it is considered that the user himself / herself is not in a state that can be handled by telephone or e-mail. By attaching the value, weather data, and location, automatic call by voice or automatic transmission of e-mail is performed to notify the physical condition abnormality.

  When the operation of the stop operation unit 26 is executed by the user within a predetermined time and the warning operation of the warning unit 254 is stopped (YES route in step S207), whether the notification by the transmission / reception unit 255 is executed by the inquiry unit 257 The user is inquired of whether or not (step S210). In response to this inquiry, when the user makes a reply to execute notification by the transmission / reception means 255 (YES route in step S211), the transmission / reception means 255 performs notification to the second contact address via the network 90. (Step S212).

At this time, a call to the attending physician's telephone (for example, attending physician terminal 50) as the second contact is automatically made, and if there is a response from the attending physician (YES route in step S213), the user (mobile terminal device 20) And the attending physician (the attending physician terminal 50) are in a call state (step S).
214) The user himself / herself can ask the attending physician for an instruction for an appropriate treatment. At this time, the biometric data value, the weather data, and the location at the time of occurrence of the abnormality are also notified to the attending doctor terminal 50 simultaneously by e-mail, for example (step S212).

  If there is no response from the attending physician (NO route in step S213), it is determined whether or not a contact other than the attending physician is registered (step S215). If there is no contact other than the attending physician (NO route in step S215), Returning to step S212, a call to the second contact (primary physician) is executed again. On the other hand, when a contact other than the attending physician (for example, an administrator, an organizer / operator, etc.) is registered (YES route in step S215), an automatic call or email is automatically sent to the contact ( Step S216).

  When the user makes a reply to the inquiry by the inquiry means 257 that the notification by the transmission / reception means 255 is not executed (NO route in step S211), whether or not the user has continuously refused the notification a predetermined number of times. Is determined (step S217). If the notification refusal is not continuously performed a predetermined number of times (NO route of step S217), the process returns to the process of step S201, while the execution of the notification by the transmission / reception unit 255 is continuously rejected a predetermined number of times (step S201). The YES route of S217), the notification to the third contact is forcibly executed via the network 90 by the transmission / reception means 255 (step S218). In other words, if abnormalities are repeatedly detected even if the user stops and cancels the warning by self-judgment, it is determined that the user is in a considerably dangerous state, and a friend or close relative as the third contact person Notification of physical condition abnormality is forcibly performed to (contact terminal 40). At this time, the manager terminal 30 and the attending doctor terminal 50 are also notified of the physical condition abnormality.

  On the other hand, when a request for the second position is received from the service providing server 60 or the service providing terminal device 70 by the transmission / reception means 255 (NO route in step S201 to YES route in step S219), the current position (mobile) The current position detected by the GPS position detection unit 20GS is sent to the service providing server 60 or the service providing terminal apparatus 70 as the second position by the transmission / reception means 255 (step S220). Notification is made (step S221), and the process returns to step S201.

  When a request for the detection operation state of the biosensor 20BS is received from the transmission / reception unit 255 from the service providing server 60 or the service providing terminal device 70 (from the NO route in step S219 to the YES route in step S222), as the operation state detection unit of the control unit 256 Whether or not the biosensor 20BS is currently performing an operation of detecting a biometric data value from the user (that is, the biometric data detection portable terminal device 20 is actually attached to the user's body and is Whether or not the data value is being detected is detected as an operating state (step S223), and the detection result is notified to the service providing server 60 or the service providing terminal device 70 by the transmission / reception means 255 ( Step S224), the process returns to step S201.

  When a request for biometric data values before and after the interruption of the detection operation of the biosensor 20BS is received from the service providing server 60 by the transmission / reception means 255 (NO route in step S222 to YES route in step S225), the detection operation by the biosensor 20BS The biometric data value over a predetermined period (for example, 1 hour) accumulated in the memory 20M before and after the interruption is read (step S226), and the read biometric data value is serviced via the network 90 by the transmission / reception means 255. The providing server 60 is notified (step S227), and the process returns to step S201.

Further, when a warning operation request including an error notification or warning notification is received from the transmission / reception means 255 (from the NO route in step S225 to the YES route in step S228), the warning means 254 is controlled by the control means 256 according to the content of the notification. The warning unit 254 executes a warning operation for the user (step S229), and the process returns to step S201. Specifically, a buzzer or the like in the mobile terminal device 20 is sounded, or an LED lamp or the like is blinked. If the mobile terminal device 20 has a display function such as a display, the content of the error notification or warning notification is displayed on the display as in the case of the mobile phone device 10. If it is determined in step S228 that a warning operation request has not been received (NO route), the process returns to step S201.

  As described above, in the biological data detection portable terminal device 20, the control unit 256 causes the display unit 24 to generate a physical condition abnormality in parallel with the process of contacting a predetermined contact at the time of the user's physical condition abnormality. The emergency contact information is displayed by flashing or flashing, or a buzzer is sounded from a notifying means (not shown), and the service providing terminal device 70 and nearby store employees and store guards are abnormal. It is desirable to communicate the occurrence. Similarly, communication indicating that a physical condition abnormality has occurred is sent to the service providing terminal device 70 and various devices capable of communication in the store via the transmission / reception means 255 inside the biological data detection portable terminal device 20. It is also desirable to do so. As a result, even if the above-described physical condition notification (steps S209, S216, and S218 in FIG. 13) cannot be made in time, the store employees and the security guards give the user It becomes possible to cope. Furthermore, in this case, in the service providing terminal device 70 that has received the notification of the user's physical condition from the biometric data detecting portable terminal device 20, a warning light or the like placed at any position of the service providing terminal device 70 It is also preferable to turn on or ring the awakening means. In addition to a general warning light, a dedicated alerting means that indicates a user physical condition abnormality may be turned on or sounded. As a result, even if the user falls down to an inconspicuous place such as the side or shade of the service providing terminal device 70 due to a physical condition abnormality, store employees and security guards should deal with the user. Is possible. Similarly, even when the user is using the service providing terminal device 70 in a state where the user is threatened, the store employees and guards can be aware of the threat. Therefore, it is possible to avoid a situation in which the user himself / herself is forced to use the service providing terminal device 70 due to a threat or the like.

  In addition, although it is not the level of giving a warning (step S206 in FIG. 13) or notification (steps S209, S216, and S218 in FIG. 13) due to abnormal physical condition, the control means 256 is also used when the physical condition deteriorates between normal and abnormal. If the store side can respond by communicating to the service providing terminal device 70 or various communicable devices in the store via the transmission / reception means 255 that the physical condition has deteriorated, It is also possible to receive service provision in a different way than usual. That is, the biometric data detection portable terminal device 20 of the present embodiment is different from a simple one-time password generation device or a simple physical condition management terminal. According to this system, the store side provides detailed services to customers. Can be executed. For example, when a customer whose physical condition begins to deteriorate receives service provision, the service provision terminal device 70 can take measures such as bringing the order ahead of other customers or guiding the customer to another room. Thereby, while providing services using machines, it is possible to provide services with careful consideration according to the customer's situation. Also in this case, when the store side having the service providing terminal device 70 uses the service providing terminal device 70 in a state where the user is threatened by taking measures such as guiding the user to another room. In addition, store employees and guards can be aware of the threat and deal with it. Therefore, it is possible to avoid a situation in which the user himself / herself is forced to use the service providing terminal device 70 due to a threat or the like.

In the above case, the biometric data detection portable terminal device 20 may perform identity verification and physical condition detection by detecting biometric data by combining heart rate, pulse rate, blood pressure, etc. It is also possible to detect the physical condition based on the heart rate and the pulse rate after confirming the identity.

[2-7] Physical management server operation:
14 and 15 are flowcharts (steps S151 to S153, S161 to S165) for explaining the operation (browsing service) of the physical condition management server 80 of the present embodiment. First, as shown in FIG. In the physical condition management server 80, when the biological data value, the weather data, and the location are periodically received from the biological data detection portable terminal device 20 (YES route in step S151), the biological data, the weather data, and the position data are stored. While being accumulated (step S152), the biological data, weather data, and position data are processed into a graph while being associated with the detection time, reflected on the map, and stored together with the original data (step S153).

  Then, as shown in FIG. 15, in the physical condition management server 80, when there is a data browsing request from the terminal of the contractor (a person who has contracted and registered in advance to receive the service of the physical condition management server 80) ( YES route of step S161), requesting the authentication information (ID number and password) set / issued at the time of contract / registration to the contractor's terminal, and receiving the authentication information, the authentication information and the physical condition management server The user is authenticated by comparing and collating with the contract / registration authentication information stored in advance on the 80 side (step S162). If the user is authenticated (YES route in step S163), the service is desired. A service for browsing stored data, processed graphs and maps (public service) is provided to the contractor (step S164). On the other hand, when the personal authentication is not performed (NO route of step S163), an error notification is made to the contractor's terminal (step S165).

  By providing such a physical condition management server 80 and using a service provided by the physical condition management server 80, when notifying the user's physical condition abnormality, the biometric data value, the weather data, and the location at the time of occurrence of the abnormality are obtained. Even if not notified at the same time, if the administrator, the attending physician, and the contact who have received the notification of the physical condition abnormality have contracted with the physical condition management server 80 in advance, the biometric data value and the weather data for the user who has experienced the physical condition abnormality And the location can be grasped by accessing the physical condition management server 80.

  Since the biological data value, the weather data, and the location are transmitted from the biological data detection portable terminal device 20 to the physical condition management server 80 in a predetermined cycle (see step S202 in FIG. 13), the biological data value is stored in the physical condition management server 80. By using this function, the physical condition management server 80 can realize the function as the operation state detection means (the function provided in the control means 256 of the biological data detection portable terminal device 20 in the above-described embodiment). Therefore, in the physical condition management server 80, based on the biometric data value from the biometric data detection portable terminal device 20, is the biosensor 20BS of the biometric data detection portable terminal device 20 performing an operation of detecting the biometric data value from the user? No, that is, whether or not the biometric data detection portable terminal device 20 is actually attached to the user's body and is detecting a biometric data value from the user, is detected as an operating state, and the detection You may comprise so that the physical condition management server 80 may fulfill | perform the said biosensor detection operation check function according to the flowchart shown in FIG. 8 using a result.

[3] Effects of the service provision management system of this embodiment:
As described above, according to the service provision management system 1 as an embodiment of the present invention, when the cellular phone device 10 accesses the service providing units 61 and 71, the transmission / reception unit (first unit) of the cellular phone device 10 is provided. The distance between the first position notified by the notification means) 12 and the second position notified by the transmission / reception means (second notification means) 255 of the biological data detection portable terminal device (portable position detection device) 20 is predetermined. It is within the range and the user is authenticated by the authentication of the authentication means 63 and 73, and the biometric data detecting portable terminal device 2
When the biometric sensor 20BS at 0 performs a biometric data value detection operation, provision of a predetermined service by the service providing units 61 and 71 is permitted, while the distance is outside the predetermined range, or use If it is determined that the person is not the person, or if the biometric sensor 20BS in the biometric data detection portable terminal device 20 is not performing a biometric data value detection operation, the provision of the predetermined service is prohibited.

  That is, in the system 1 of the present embodiment, when the distance between the current positions of the two types of devices 10 and 20 that should always be carried and carried by the user is within a predetermined range, in other words, the two types of devices 10 and 20. In the situation where it can be determined that the same person is possessed / carried, and when the user is authenticated by the authentication information as being pre-registered, and Unless the user is wearing the biometric data detection portable terminal device 20 on the body, provision of a predetermined service is not permitted.

  Therefore, even if the cellular phone device 10 is lost or stolen, it is impossible to receive provision of a predetermined service by the service providing units 61 and 71 unless the portable data device 20 is detected. Therefore, unauthorized use by a malicious third party can be prevented more reliably, sufficient security can be ensured, and damage to the user can be minimized. By providing a function as a portable position detection device to a device that is always worn on the user's body, such as the biological data detection portable terminal device 20, the system 1 of the present embodiment functions more effectively and has sufficient security. It will contribute to securing.

  At this time, if the distance is out of the predetermined range for a predetermined time or more, by notifying a system administrator or a user, the misplacement or theft of the mobile phone device 10 can be reliably prevented, It becomes possible to immediately execute countermeasures against misplacement or theft of the mobile phone device 10 (such as suspension of provision of various services).

  In addition, the biometric data detection portable terminal device communicates with the cellular phone device 10 to confirm that the cellular phone device 10 exists within a predetermined distance, and based on the biometric data value of the user detected by the biometric sensor. Since the one-time password is displayed when it is confirmed that the user is the user himself / herself, the third-party cannot use the one-time password. Only the user who is in possession of the service is allowed to provide the predetermined service. Therefore, the system 1 of the present embodiment functions more effectively and contributes to ensuring sufficient security.

  In this embodiment, since the function as a portable position detection device is provided in the biological data detection portable terminal device 20, the biological sensor 20BS in the biological data detection portable terminal device 20 performs the detection operation of the biological data value. If the user does not wear the biometric data detection portable terminal device 20, the predetermined service is provided. Service provision cannot be received, unauthorized use of a predetermined service can be prevented more reliably, and sufficient security can be ensured.

At that time, if the user removes the biometric data detection portable terminal device 20 from the body and the detection operation by the biosensor 20BS is interrupted and resumed, the statistical value calculation means 66 uses the pre-interrupt statistics of the biometric data value. Values and post-resumption statistical values are calculated, and if these statistical values are statistical values of biometric data values of the same user, a predetermined service is provided. By prohibiting the provision of, it is possible to statistically determine whether the users before and after the interruption of the detection operation by the biosensor 20BS are the same person based on the biometric data value. In some cases, provision of a predetermined service can be prohibited, and unauthorized use of a predetermined service can be prevented more reliably, and sufficient security can be ensured. In this case, the provision of the predetermined service is prohibited until the judgment based on the statistical value is confirmed after the detection operation of the biometric data value is interrupted. Use is reliably prevented and sufficient security is ensured.

  Further, in the system 1 of the present embodiment, when authentication information is not input / transmitted in response to an authentication information request from the service providing server 60 or the service providing terminal device 70, or when the authentication means 63 or 73 fails in the personal authentication. When there is no response to the request for the first position, the second position and the operation state from the service providing server 60 or the service providing terminal device 70, or when the biosensor 20BS is not performing the detection operation, When it is determined that the users before and after the interruption of the biosensor 20BS are not the same person, or when the distance between the mobile phone device 10 and the biometric data detection mobile terminal device 20 is outside the predetermined range, the user (mobile phone Since an error notification is made to the telephone device 10 / physical condition management portable terminal 20) and the system administrator, the cellular phone device 1 is sent to the user and the system administrator In and biometric data detected mobile terminal device 20 can notify the situation where the possibility of some abnormal or illegal use has occurred.

  Furthermore, when there is no response to the request for the first position, the second position, and the operation state from the service providing server 60 or the service providing terminal device 70, or the users before and after the interruption of the biosensor 20BS are not the same person. If the determination is made, or if the distance between the mobile phone device 10 and the biometric data detection mobile terminal device 20 is out of the predetermined range, the warning means 64 and 74 warn the user or system administrator. The mobile phone device 10 and the biometric data detection mobile terminal device 20 can surely cope with a situation in which any abnormality or possibility of unauthorized use occurs, and unauthorized use is reliably prevented, and sufficient security is ensured. The

  In the present embodiment, since the biometric data detection portable terminal device 20 having the biosensor 20BS is used, the management means 62, 72 uses the biometric data value detected by the biosensor 20BS as a service provision permission / It can also be used as an element for determining prohibition. For example, when the cellular phone device 10 accesses the service providing units 61 and 71, the management units 62 and 72 use the biometric data detection portable terminal device 20 detected by the biometric sensor 20BS at that time. The user's biometric data values (blood pressure, heart rate, respiratory rate) are requested and transmitted, and the transmitted biometric data values are set to general reference values or user-specific presets for the user. If the reference value is exceeded and the reference value is exceeded, it is determined that the user may be accessing in a tense state due to intimidation, etc., and the service providing means 61, 71 provides the service. Is prohibited. As a result, when the user is accessing in an extremely tense state (in a state where the blood pressure, heart rate, and respiratory rate are high) in response to intimidation or wire fraud, the service providing means 61, 71 Can be prohibited from providing services and prevent financial damage from threats and wire fraud.

  On the other hand, in the biometric data detection portable terminal device 20, a biometric data threshold value for managing the physical condition of the user is set in advance in the threshold value table 20T for each weather condition, and meteorological data (for example, detected by the weather sensor 20WS). The biometric data threshold set for the weather conditions corresponding to the temperature, water temperature, humidity, atmospheric pressure, and water pressure) is retrieved from the threshold table 20T and read out, and the read biometric data threshold and the biometric data value detected by the biosensor 20BS are read. (For example, body temperature, blood pressure, heart rate, respiration rate) As a result of comparing the user's physical condition abnormalities, the user's physical condition warning (for example, a buzzer sounding operation, an LED lamp, etc.) Flashing operation, warning by calling operation of mobile phone device), and notification of abnormal physical condition of the user to a predetermined contact (example) Or is automatic notification) by the field telephone and e-mail.

As a result, it is possible to manage and judge the physical condition of the user based on the biometric data threshold corresponding to the weather data in the user's location atmosphere. Management / judgment is possible, and according to the judgment result, the user can be appropriately warned and notified of physical condition abnormalities to the administrator, etc., without relying on the user's self-judgment. Appropriate measures and responses according to the physical condition can be immediately executed.

  At this time, when a warning of abnormal physical condition is given to the user, if the operation for stopping the warning operation is not performed for a predetermined time or more by the user, the user is in a considerably dangerous state such as losing consciousness. Since it is determined that there is a notification of the user's physical condition, the user can immediately take action. At that time, by notifying the fire department or the like as the first contact point, it is possible to immediately arrange an emergency vehicle such as an ambulance, and simultaneously notify the biometric data value detected by the biosensor 20BS. Thus, an appropriate treatment according to the biometric data value can be performed more quickly. Further, by simultaneously notifying the user's location by the GPS position detector 20GS, the user's location can be immediately confirmed, and an emergency vehicle or the like can be immediately directed to the location where the user is located. It is possible to realize a quick initial response.

  In addition, when an operation to stop the warning operation is executed by the user within a predetermined time, the user is inquired about whether or not to execute the physical condition abnormality notification, and the physical condition abnormality notification is executed according to the user's answer. Thus, after alerting the user and notifying the user himself / herself, the physical condition abnormality is notified, so that it is possible to prevent the automatic notification from being performed unnecessarily. Then, a notification is made if the user desires, and at that time, by making a telephone call to the attending doctor as the notice, the user can ask the attending doctor for an appropriate treatment, and the biosensor 20BS By notifying the detected biometric data value at the same time, the attending physician can make an appropriate determination and an instruction for an appropriate treatment.

  If the user refuses to execute the physical condition abnormality notification for the above inquiries continuously, that is, if the abnormality is repeatedly detected even if the user stops and cancels the warning by self-judgment, It is judged that the person is in a considerably dangerous state, and a notice of a physical condition is forcibly performed so that a quick response can be taken. In that case, for example, in addition to notifying relatives such as friends, relatives, and spouses, the location of the user is immediately confirmed by the GPS location detection unit 20GS at the same time. A friend or close relative can immediately go to the place where the user is located.

[4] Other:
The present invention is not limited to the above-described embodiment, and various modifications can be made without departing from the spirit of the present invention.

  For example, in the above-described embodiment, the case where the mobile device is the mobile phone device 10 and the portable position detection device is provided in the biometric data detection mobile terminal device 20 has been described, but the present invention is limited to this. Instead, the portable device may be, for example, a PDA, an IC card, or the like, or a portable device having functions as a GPS position detection unit 20GS as a second position detection unit and a transmission / reception unit (second notification unit) 255. The position detection device may be provided in a device such as a wristwatch that can be always worn and carried on a part of the user's body. In either case, the same effect as that of the above-described embodiment can be obtained.

By the way, functions as threshold setting means 251, threshold reading means 252, comparison means 253, warning means 254, transmission / reception means 255, control means 256, and inquiry means 257 in the above-described biological data detection portable terminal device 20 (all or Some functions are realized by a computer (including a CPU, an information processing apparatus, and various terminals) executing a predetermined application program. Also, functions as service providing means 61, management means 62, authentication means 63, warning means 64, statistical value calculating means 65, and statistical value determining means 66 in the service providing server 60 described above (all or a part of the functions of each means). ), Functions as service providing means 71, management means 72, authentication means 73 and warning means 74 in the service providing terminal device 70 (all or a part of the functions of each means) are also used in computers (CPU, information processing devices, various types). (Including a terminal) is executed by executing a predetermined application program.

  These application programs include, for example, flexible disks, CDs (CD-ROM, CD-R, CD-RW, etc.), DVDs (DVD-ROM, DVD-RAM, DVD-R, DVD-RW, DVD + R, DVD + RW, etc.), etc. Provided in the form recorded on a computer-readable recording medium. In this case, the computer reads the application program from the recording medium, transfers it to an internal storage device or an external storage device, and uses it. Further, the program may be recorded in a storage device (recording medium) such as a magnetic disk, an optical disk, or a magneto-optical disk, and provided from the storage device to a computer via a communication line.

  Here, the computer is a concept including hardware and an OS (operating system), and means hardware operating under the control of the OS. Further, when the OS is unnecessary and the hardware is operated by the application program alone, the hardware itself corresponds to the computer. The hardware includes at least a microprocessor such as a CPU and means for reading a computer program recorded on a recording medium. The application program includes program code for causing the above-described computer to realize the functions as the various means 251 to 257, 61 to 66, and 71 to 74 described above. Also, some of the functions may be realized by the OS instead of the application program.

  Furthermore, as a recording medium in the present embodiment, in addition to the flexible disk, CD, DVD, magnetic disk, optical disk, and magneto-optical disk described above, an IC card, ROM cartridge, magnetic tape, punch card, computer internal storage device (RAM) In addition, various computer-readable media such as an external storage device or a printed matter on which a code such as a barcode is printed can be used.

[5] Note:
The additional notes described below are also one aspect of the embodiment of the present invention.
[Appendix 1]
A service providing means capable of providing a predetermined service to the user;
Management means for managing the predetermined service provided by the service providing means;
One-time password generation means for generating a one-time password that can be used only once,
Authentication means for performing authentication determination by comparing the one-time password generated by the one-time password generation means and the one-time password returned from the user;
A portable device having access means for accessing the service providing means to receive provision of the predetermined service;
A biosensor attached to the user for detecting the biometric data value of the user; and the one-time password generating means for confirming the identity of the user based on the biometric data value of the user detected by the biometric sensor A biometric data detection portable terminal device having a one-time password processing means for displaying a one-time password synchronized with the one-time password generated in
The management means inputs to the input means of the portable device by the user referring to the display of the biological data detection portable terminal device when the portable device accesses the service providing means by the access means When the authentication means is authenticated by the returned one-time password, the predetermined service by the service providing means is provided.
A service provision management system characterized by this.
[Appendix 2]
The management means further comprises transmission means for transmitting the one-time password generated by the one-time password generation function to the biometric data detection portable terminal device,
The biometric data detection portable terminal device is
The one-time password transmitted from the management means is received by the one-time password processing means, and the control means causes the display means to display the one-time password received by the one-time password processing means.
The service provision management system according to Supplementary Note 1, wherein
[Appendix 3]
The biometric data detection portable terminal device is
A one-time password synchronized with the one-time password generating means of the management server is generated by the one-time password processing means;
The control means causes the display means to display the one-time password generated by the one-time password processing means.
The service provision management system according to Supplementary Note 1, wherein
[Appendix 4]
The portable terminal device and the biometric data detection portable terminal device include means for notifying the management means of the current position,
When the distance between the mobile terminal device and the biometric data detection mobile terminal device is out of the predetermined range for a predetermined time or more, or the reply of the one-time password to the management means has passed a predetermined time or more A warning means for notifying the system administrator or the user of a warning,
The service provision management system according to Supplementary Note 1, wherein
[Appendix 5]
The mobile device is a mobile phone device or a card-type device;
The service provision management system according to any one of Supplementary Note 1 to Supplementary Note 3, wherein:
[Appendix 6]
The biometric data detection portable terminal device is provided with a wristwatch,
The service provision management system according to any one of Supplementary Note 1 to Supplementary Note 5, characterized in that:
[Appendix 7]
The portable terminal device and the biometric data detection portable terminal device include means for notifying the management means of the current position,
The management means includes
A statistical value of the biometric data value detected by the biometric sensor before the interruption of the detection operation is calculated as a statistical value before interruption, and a statistical value of the biometric data value detected by the biometric sensor after the detection operation is resumed A statistical value calculating means for calculating as a statistical value after restarting,
Statistical value for comparing the statistical value before interruption calculated by the statistical value calculating means with the statistical value after restart, and determining whether these statistical values are statistical values of biometric data values of the same user With more judgment means,
The distance between the mobile terminal device and the biometric data detection mobile terminal device is within the predetermined range, and the statistical value determination means has the same statistical value before restart and statistical value after restart. When it is determined that the statistical value of the user's biometric data value, the provision of the predetermined service by the service providing unit is permitted.
The service provision management system according to any one of Supplementary Note 1 to Supplementary Note 6, wherein:
[Appendix 8]
The management means is
Prohibiting the provision of the predetermined service by the service providing unit until the post-resumption statistical value is calculated by the statistical value calculating unit after the detection operation is resumed and a determination result by the statistical value determining unit is obtained;
The service provision management system according to appendix 7, wherein
[Appendix 9]
The management means is
When the statistical value determination means determines that the statistical value before interruption and the statistical value after restart are not statistical values of biometric data values of the same user, the service providing means continues to prohibit the provision of the predetermined service. To
The service provision management system according to claim 8, wherein
[Appendix 10]
The portable device is:
A first position detecting means for detecting the current position as the first position; a first notifying means for notifying the managing means of the first position detected by the first position detecting means;
The biological data detection portable terminal device is:
A second position detecting means for detecting a current position as a second position; a second notifying means for notifying the managing means of the second position detected by the second position detecting means; An operating state detecting means for detecting whether or not the biosensor is performing a detecting operation for detecting the biometric data value from the user in a state of being worn on a part of the user's body;
The management means includes
When the portable device accesses the service providing means by the access means, the distance between the first position and the second position is outside the predetermined range, or the operation state detecting means When it is detected that the biometric sensor is not performing the detection operation, the provision of the predetermined service by the service providing unit is prohibited.
The service provision management system according to any one of Supplementary Note 1 to Supplementary Note 9, wherein

[Appendix 11]
A service providing means capable of providing a predetermined service to the user;
Management means for managing the predetermined service provided by the service providing means;
One-time password generation means for generating a one-time password that can be used only once,
Authentication means for performing authentication determination by comparing the one-time password generated by the one-time password generation means and the one-time password returned from the user;
A first position detecting means that is carried by the user and detects a current position as a first position; a first notifying means for notifying the managing means of the first position detected by the first position detecting means; Input means for inputting a password by a person, transmission means for transmitting the password input to the input means to the management means, and access means for accessing the service providing means to receive provision of the predetermined service A portable device;
Second position detection means for detecting the current position as the second position, second notification means for notifying the management means of the second position detected by the second position detection means, and managing the physical condition of the user A biometric sensor for detecting the biometric data value of the user; the biometric data value of the user detected by the biometric sensor confirms the identity of the user and synchronizes with the one-time password generating means. One-time password processing means for displaying a time password, and a biometric sensor for detecting a biometric data value of the user so as to perform physical condition management of the user, and mounted on a part of the user's body A biological data detection portable terminal device separate from the portable device, which is always carried by a user;
An operation state for detecting whether or not the biometric sensor is performing a detection operation for detecting the biometric data value from the user in a state where the biometric data detection portable terminal device is mounted on a part of the user's body. With detection means,
The management means includes
When the portable device accesses the service providing means by the access means, the first location notified by the first notification means of the portable device and the second notification of the biometric data detection portable terminal device The distance from the second position notified by the means is within a predetermined range, and the user who has referred to the display means of the biometric data detection portable terminal device may use the portable device or the service providing means. When the authentication means is authenticated by the one-time password inputted and returned to the input means, while providing the predetermined service by the service providing means, while the distance is outside the predetermined range, or When it is detected by the operation state detection means that the biosensor is not performing the detection operation Alternatively, if the authentication by the one-time password is not recognized, it prohibits the provision of the predetermined service by the service providing means,
A service provision management system characterized by this.

[Appendix 12]
The biological data detection portable terminal device is:
A biometric sensor that is worn by the user and detects a biometric data value of the user, and is detected by the biosensor when it is confirmed that the portable device exists within a predetermined distance by communicating with the portable device. One-time password processing means for displaying a one-time password synchronized with the one-time password generated by the one-time password generation means when the user is confirmed by the biometric data value of the user. The service provision management system according to appendix 1 to appendix 11, wherein the service provision management system is configured.

It is a block diagram which shows the structure of the service provision management system as one Embodiment of this invention. It is a block diagram which shows the structure of the biometric data detection portable terminal device in the service provision management system of this embodiment. It is a flowchart for demonstrating the operation | movement (service provision operation | movement of a service provision terminal device) of this embodiment. It is a flowchart for demonstrating the operation | movement (service provision operation | movement of a service provision terminal device) of this embodiment. It is a flowchart for demonstrating the operation | movement (service provision operation | movement of a service provision terminal device) of this embodiment. It is a flowchart for demonstrating operation | movement (service provision operation | movement of a service provision server) of this embodiment. It is a flowchart for demonstrating the operation | movement (location check function of a service provision server) of this embodiment. It is a flowchart for demonstrating the operation | movement (the biosensor detection operation check function of a service provision server) of this embodiment. It is a flowchart for demonstrating the operation | movement (operation | movement of a mobile telephone apparatus) of this embodiment. It is a flowchart for demonstrating operation | movement (operation | movement of the biosensor in a biometric data detection portable terminal device) of this embodiment. It is a flowchart for demonstrating the operation | movement (operation | movement of the weather sensor in a biometric data detection portable terminal device) of this embodiment. It is a flowchart for demonstrating the operation | movement (operation | movement of the GPS position detection part in a biometric data detection portable terminal device) of this embodiment. It is a flowchart for demonstrating operation | movement (Operation | movement of CPU in a biometric data detection portable terminal device) of this embodiment. It is a flowchart for demonstrating the operation | movement (operation | movement / browsing service of a physical condition management server) of this embodiment. It is a flowchart for demonstrating the operation | movement (operation | movement / browsing service of a physical condition management server) of this embodiment.

Explanation of symbols

1 Service provision management system 10 Mobile phone device (mobile device)
11 GPS position detector (first position detector)
12 Transmission / reception means (first notification means)
13 Access means 14 Input means 15 Display means 20 Biometric data detection portable terminal device (portable position detection device, biometric data detection portable terminal device)
20BS biological sensor 20WS weather sensor 20GS GPS position detection unit (second position detection means)
20T threshold value table 20M memory 24 display means 25 CPU
251 Threshold value setting means 252 Threshold value reading means 253 Comparison means 254 Warning means (physical condition abnormality warning means)
255 Transmission / reception means (second notification means, physical condition notification means)
256 Control means (operation state detection means)
257 inquiry means 258 one-time password processing means 26 stop operation part 27 answer input part 30 administrator terminal 40 contact terminal 50 doctor terminal 60 service providing server 61 service providing means 62 management means 63 authentication means 64 warning means 65 statistical value calculating means 66 Statistical value judgment means 67 One-time password generation means 68 One-time password transmission means 70 Service providing terminal device (ATM, various terminals, etc.)
71 Service Providing Unit 72 Management Unit 73 Authentication Unit 74 Warning Unit 75 IC Card Reader / Writer 77 One Time Password Generation Unit 78 One Time Password Transmission Unit 79 Input / Display Unit 80 Physical Condition Management Server 90 Network

Claims (10)

Required when receiving the provision of the predetermined service, a service providing apparatus for providing a predetermined service to a user, a portable device having an access means for accessing the service providing apparatus to receive the provision of the predetermined service, and A biometric data detection portable terminal device that displays a one-time password according to the biometric data of the user,
The service providing apparatus includes a service providing unit that can provide a predetermined service to a user, a management unit that manages the predetermined service provided by the service providing unit, and a one-time password that can be used only once. Password generating means, authentication means for performing authentication determination by comparing the one-time password generated by the one-time password generating means and the one-time password returned from the user,
The portable device comprises access means for accessing the service providing means to receive provision of the predetermined service, means for notifying the management means of the current position,
The biometric data detection portable terminal device is worn by the user, detects a biometric data value of the user, communicates with the portable device, and confirms that the portable device exists within a predetermined distance The one-time password synchronized with the one-time password generated by the one-time password generation means is displayed when the user is identified based on the user's biometric data value detected by the biometric sensor. One-time password processing means, and means for notifying the management means of the current position,
The management means includes
When the portable device made an access to the service providing means by the access means, it was inputted and returned to the input means of the portable device by the user referring to the display of the biometric data detection portable terminal device When the authentication means is authenticated by a one-time password, the predetermined service is provided by the service providing means,
If the distance between the mobile ObiSo location and the biometric data detecting mobile terminal device is outside the predetermined range, or if the reply of the one-time password to the management unit has passed a predetermined time or more, A warning is sent to the system administrator or the user.
A service provision management system characterized by this. Required when receiving the provision of the predetermined service, a service providing apparatus for providing a predetermined service to a user, a portable device having an access means for accessing the service providing apparatus to receive the provision of the predetermined service, and A biometric data detection portable terminal device that displays a one-time password according to the biometric data of the user,
The service providing apparatus includes a service providing unit that can provide a predetermined service to a user, a management unit that manages the predetermined service provided by the service providing unit, and a one-time password that can be used only once. Password generating means, authentication means for performing authentication determination by comparing the one-time password generated by the one-time password generating means and the one-time password returned from the user,
The portable device comprises access means for accessing the service providing means to receive provision of the predetermined service, means for notifying the management means of the current position,
The biometric data detection portable terminal device is worn by the user, detects a biometric data value of the user, communicates with the portable device, and confirms that the portable device exists within a predetermined distance The one-time password synchronized with the one-time password generated by the one-time password generation means is displayed when the user is identified based on the user's biometric data value detected by the biometric sensor. One-time password processing means, and means for notifying the management means of the current position,
The management means includes
A statistical value of the biometric data value detected by the biometric sensor before the interruption of the detection operation is calculated as a statistical value before interruption, and a statistical value of the biometric data value detected by the biometric sensor after the detection operation is resumed A statistical value calculating means for calculating as a statistical value after restarting,
Statistical value for comparing the statistical value before interruption calculated by the statistical value calculating means with the statistical value after restart, and determining whether these statistical values are statistical values of biometric data values of the same user With more judgment means,
Wherein when the portable device has performed access to said service providing means by said access means, the distance between the mobile ObiSo location and the biometric data detecting portable terminal device is within the predetermined range, and, the statistical When the value determination means determines that the statistical value before interruption and the statistical value after restart are the statistical values of the biological data value of the same user, and refers to the display of the biological data detection portable terminal device Providing the predetermined service by the service providing means when the authentication means is authenticated by the one-time password inputted and returned by the user to the input means of the portable device;
A service provision management system characterized by this. The management means is
Prohibiting the provision of the predetermined service by the service providing unit until the post-resumption statistical value is calculated by the statistical value calculating unit after the detection operation is resumed and a determination result by the statistical value determining unit is obtained;
The service provision management system according to claim 2. The management means is
When the statistical value determination means determines that the statistical value before interruption and the statistical value after restart are not statistical values of biometric data values of the same user, the service providing means continues to prohibit the provision of the predetermined service. To
The service provision management system according to claim 3. Required when receiving the provision of the predetermined service, a service providing apparatus for providing a predetermined service to a user, a portable device having an access means for accessing the service providing apparatus to receive the provision of the predetermined service, and A biometric data detection portable terminal device that displays a one-time password according to the biometric data of the user,
The service providing apparatus includes a service providing unit that can provide a predetermined service to a user, a management unit that manages the predetermined service provided by the service providing unit, and a one-time password that can be used only once. Password generating means, authentication means for performing authentication determination by comparing the one-time password generated by the one-time password generating means and the one-time password returned from the user,
The portable device includes access means for accessing the service providing means to receive provision of the predetermined service, means for notifying the management means as a current position as a first position,
The biometric data detection portable terminal device is worn by the user, detects a biometric data value of the user, communicates with the portable device, and confirms that the portable device exists within a predetermined distance The one-time password synchronized with the one-time password generated by the one-time password generation means is displayed when the user is identified based on the user's biometric data value detected by the biometric sensor. A one-time password processing means, a means for notifying the management means of the current position as a second position, and the biometric sensor is used when the biometric data detection portable terminal device is worn on a part of the user's body. An operation state detection means for detecting whether or not a detection operation for detecting the biometric data value from a person is performed,
The management means includes
When the portable device made an access to the service providing means by the access means, it was inputted and returned to the input means of the portable device by the user referring to the display of the biometric data detection portable terminal device When the authentication means is authenticated by the one-time password, the predetermined service is provided by the service providing means, and the distance between the first position and the second position is outside the predetermined range or Providing the predetermined service by the service providing means is prohibited when it is detected by the operation state detecting means that the biosensor is not performing the detection operation;
A service provision management system characterized by this. The management means further comprises transmission means for transmitting the one-time password generated by the one-time password generation function to the biometric data detection portable terminal device,
The biometric data detection portable terminal device is
The one-time password transmitted from the management means is received by the one-time password processing means, and the control means causes the display means to display the one-time password received by the one-time password processing means.
The service provision management system according to any one of claims 1 to 5, wherein The biometric data detection portable terminal device is
A one-time password synchronized with the one-time password generating means of the management server is generated by the one-time password processing means;
The control means causes the display means to display the one-time password generated by the one-time password processing means.
The service provision management system according to any one of claims 1 to 5, wherein Before Ki携when the distance between the ObiSo location and said biometric data detected mobile terminal device is in the predetermined range over a predetermined time or, the one-time password reply predetermined time to said management means If the above has passed, the system further comprises warning means for notifying the system administrator or the user of the warning,
The service provision management system according to any one of claims 2 to 5 , wherein Required when receiving the provision of the predetermined service, a service providing apparatus for providing a predetermined service to a user, a portable device having an access means for accessing the service providing apparatus to receive the provision of the predetermined service, and A service provision management program by a program that causes each computer to function as a service provision management system comprising a biometric data detection portable terminal device that displays a one-time password according to the biometric data of the user,
A computer of the service providing device;
Service providing means capable of providing a predetermined service to a user, management means for managing the predetermined service provided by the service providing means, one-time password generating means for generating a one-time password that can be used only once, the one authentication means for performing authentication judgment by comparing the one-time password generated by time password generation unit and a one-time password sent back from the user, and then allowed to function,
A computer of the portable device;
Said access means for accessing said service providing means to receive the provision of a predetermined service, it means for notifying the current position in the management unit, and then allowed to function,
A computer of the biometric data detection portable terminal device;
A biometric sensor that is worn by the user and detects a biometric data value of the user, and is detected by the biosensor when it is confirmed that the portable device exists within a predetermined distance by communicating with the portable device. One-time password processing means for displaying a one-time password synchronized with the one-time password generated by the one-time password generation means when the identity of the user is confirmed by the user's biometric data value, current position Function as means for notifying the management means,
As the management means of the service providing device,
When the portable device made an access to the service providing means by the access means, it was inputted and returned to the input means of the portable device by the user referring to the display of the biometric data detection portable terminal device If the authentication by the authentication means has been made by the one-time password, and providing the predetermined service by the service providing means, the distance is the predetermined range between the mobile ObiSo location and the biometric data detecting portable terminal device In some cases, or when a reply of the one-time password to the management means has passed a predetermined time or more, a warning is sent to the system administrator or the user.
A service provision management program characterized by that. Required when receiving the provision of the predetermined service, a service providing apparatus for providing a predetermined service to a user, a portable device having an access means for accessing the service providing apparatus to receive the provision of the predetermined service, and A service provision management program by a program that causes each computer to function as a service provision management system comprising a biometric data detection portable terminal device that displays a one-time password according to the biometric data of the user,
A computer of the service providing device;
Service providing means capable of providing a predetermined service to a user, management means for managing the predetermined service provided by the service providing means, one-time password generating means for generating a one-time password that can be used only once, the one Function as authentication means for performing authentication determination by comparing the one-time password generated by the time password generation means and the one-time password returned from the user,
A computer of the portable device;
Functioning as access means for accessing the service providing means to receive provision of the predetermined service, means for notifying the management means of the current position,
A computer of the biometric data detection portable terminal device;
A biometric sensor that is worn by the user and detects a biometric data value of the user, and is detected by the biosensor when it is confirmed that the portable device exists within a predetermined distance by communicating with the portable device. One-time password processing means for displaying a one-time password synchronized with the one-time password generated by the one-time password generation means when the identity of the user is confirmed by the user's biometric data value, current position Function as means for notifying the management means,
As the management means of the service providing device,
A statistical value of the biometric data value detected by the biometric sensor before the interruption of the detection operation is calculated as a statistical value before interruption, and a statistical value of the biometric data value detected by the biometric sensor after the detection operation is resumed A statistical value calculating means for calculating as a statistical value after restarting,
Statistical value for comparing the statistical value before interruption calculated by the statistical value calculating means with the statistical value after restart, and determining whether these statistical values are statistical values of biometric data values of the same user With more judgment means,
Wherein when the portable device has performed access to said service providing means by said access means, the distance between the mobile ObiSo location and the biometric data detecting portable terminal device is within the predetermined range, and, the statistical When the value determination means determines that the statistical value before interruption and the statistical value after restart are the statistical values of the biological data value of the same user, and refers to the display of the biological data detection portable terminal device When the user is authenticated by the authentication unit with a one-time password that is input and returned by the user to the input unit of the portable device, the service providing unit provides the predetermined service.
A service provision management program characterized by that.

Images