WO2018229927A1

WO2018229927A1 - Identification system, identification device, identification method, and program

Info

Publication number: WO2018229927A1
Application number: PCT/JP2017/022107
Authority: WO
Inventors: 秀巳黒口
Original assignee: 株式会社Ｃ－Ｇｒｉｐ
Priority date: 2017-06-15
Filing date: 2017-06-15
Publication date: 2018-12-20

Abstract

This identification system comprises: an acquisition unit which acquires, from a plurality of online services, identification completion information indicating that a user has been identified by a plurality of verification organizations for identifying users; an evaluation value generation unit which generates an evaluation value for said identification of the user on the basis of the identification completion information about the user as acquired by the acquisition unit; and an output unit which outputs the evaluation value generated by the evaluation value generation unit. Further, the acquisition unit acquires, as the identification completion information, transaction completion information relating to an online payment service or an online administrative procedure that requires user identification, and the evaluation value generation unit generates an evaluation value for the user on the basis of the number of times the user used an online payment service or an online administrative procedure, and on the basis of completion information relating to each used online payment service or online administrative procedure.

Description

Identification system, identification apparatus, identification method, and program

The present invention relates to an identity verification system, an identity verification device, an identity verification method, and a program.

For example, Patent Document 1 discloses a method in which a trader who wants to open a securities transaction account opens a securities transaction account through a bank transaction system having a bank transaction account, and the bank transaction system is connected through a network. A step of accepting a request for opening a securities trading account from a terminal device operated by the trader, and an account information storage unit in which the banking transaction system stores registration information relating to a banking transaction account possessed by a user of the banking transaction system Obtaining registration information relating to a bank transaction account possessed by the trader, determining whether or not to open a securities transaction account by comparing the registration information with a predetermined rule, and the bank transaction system includes the securities transaction If it is determined that opening is possible in the step of determining whether or not an account can be opened, the terminal device opens a securities trading account. A step of accepting confirmation of information necessary for payment and an account transfer contract, and when the bank transaction system accepts confirmation of the account transfer contract, registration information of the bank transfer account of the transaction A method for opening a securities trading account, comprising: recording a conclusion and transmitting information necessary for opening the securities trading account to a securities trading system of a securities company that opens the securities trading account. It is disclosed.

JP 2006-53693 A

The purpose is to provide an identity verification system that efficiently performs identity verification.

An identity verification system according to the present invention includes an acquisition unit that acquires identity verification information indicating that user identification has been completed by a plurality of verification organizations that perform identity verification from a plurality of online services, and the acquisition unit. The evaluation value generation unit that generates the evaluation value for the personal identification based on the user-confirmed information acquired by the above and the output unit that outputs the evaluation value generated by the evaluation value generation unit.

Preferably, the acquisition unit acquires transaction completion information in an online payment service or online administrative procedure on which identity confirmation is a prerequisite as the identity confirmation information, and the evaluation value generation unit is configured to allow the online payment by a user to be performed. The evaluation value of the user is generated based on the use frequency of the service or the online administrative procedure and the completion information thereof.

Preferably, the evaluation value generation unit generates an evaluation value of the user based on the identity confirmation information of a plurality of online services used by the user, and the evaluation value of the user generated by the evaluation value generation unit And a reference value set for another online service that the user desires to newly register, and further includes a new registration unit that determines whether or not the user can newly register.

Preferably, it further includes an evaluation element value storage unit that stores a plurality of online services and evaluation element values that are evaluation value calculation elements in association with each other. The identification value of the online service used by the user is acquired, and the evaluation value generation unit corresponds to the acquired identification information of the online service among the evaluation element values stored in the evaluation element value storage unit. An evaluation value is calculated based on the evaluation element value.

Preferably, the acquisition unit acquires transaction completion information in the electronic commerce service on which identity verification is a premise as the identity verification completed information, and from a user's trading partner in the electronic commerce service, with respect to a transaction with the user. The apparatus further includes a satisfaction receiving unit that receives an input of an evaluation element value indicating satisfaction, and the evaluation value generating unit generates an evaluation value for the user based on the evaluation element value received by the satisfaction receiving unit. .

Preferably, the acquisition unit acquires transaction completion information in the salary transfer service as the identity confirmation information, and an evaluation element indicating satisfaction with the user's labor situation from the salary payment source in the salary transfer service. A satisfaction level receiving unit that receives an input of a value is further included, and the evaluation value generating unit generates an evaluation value of the user based on the evaluation element value received by the satisfaction level receiving unit.

Preferably, the satisfaction level receiving unit receives an input of an evaluation element value indicating the level of satisfaction via the social network king service.

Preferably, there is further provided an associating unit for associating user identification information issued from each online service with each other based on user bank identification information used for settlement in each online service.

Preferably, the same online service further includes a duplicate identification information detection unit for detecting a plurality of identification information held by the same user based on the identification information of the bank of the user used for payment.

An identity verification apparatus according to the present invention includes an acquisition unit that acquires identity verification information indicating that user identification has been completed by a plurality of verification agencies that perform identity verification from a plurality of online services, and the acquisition unit. The evaluation value generation unit that generates the evaluation value for the personal identification based on the user-confirmed information acquired by the above and the output unit that outputs the evaluation value generated by the evaluation value generation unit.

The identity verification method according to the present invention includes a step of acquiring identity verification information indicating that the identity verification of the user has been completed by a plurality of verification organizations performing identity verification from a plurality of online services, and the acquisition unit. Based on the acquired user identity confirmation information, the method includes a step of generating an evaluation value for identity verification and a step of outputting the evaluation value generated by the evaluation value generation unit.

The program according to the present invention is acquired by a plurality of online services, which is obtained from a plurality of online services, to obtain identity confirmation information indicating that a user's identity has been completed by a plurality of confirmation organizations that perform identity confirmation. The computer causes the computer to execute a step of generating an evaluation value for verifying the identity and a step of outputting the evaluation value generated by the evaluation value generation unit based on the user's identity confirmation information.

It is possible to provide an identity verification system that efficiently performs identity verification.

It is a figure which illustrates the hardware constitutions of the personal identification system. It is a figure which illustrates the hardware constitutions of the user terminal. 3 is a diagram illustrating a functional configuration of a user terminal 2. FIG. It is a figure which illustrates the function structure of the electronic commerce management server. It is a figure which illustrates the service usage information stored in service usage information DB600. It is a flowchart of the personal identification process (S10) of the personal identification system 1. It is a figure which illustrates the function structure of the user terminal 2 in a modification.

Embodiments of the present invention will be described below with reference to the drawings.
First, an outline of the identity verification system 1 will be described.
The identity verification system 1 presents a certificate issued by a public institution and proves that the person who intends to receive the online service is the person himself / herself, and then, based on the transaction results of the user using the online service. The evaluation value of the user is calculated. The identity verification in the present invention means that an official document is presented to confirm that the service applicant is the identity. Examples of services for verifying identity include opening a bank account and applying for a credit card. As a specific identity verification method, the service applicant presents a driver's license or passport with information identifying the individual such as the name, address, date of birth, gender, and facial photo of the service applicant. Based on this, the provider verifies the identity. If it is confirmed that the service applicant is the principal, the service applicant can open an account or own a credit card.
The identity verification system 1 measures the user's trustworthiness based on the type and number of online services that have been verified (identification) and authorized and the number of transactions using each service.

FIG. 1 is a diagram illustrating a hardware configuration of the identification system 1.
As illustrated in FIG. 1, the identity verification system 1 includes a user terminal 2, a bank account system 3, and an electronic commerce management server 4.
The user terminal 2 is a computer terminal. For example, the user terminal 2 is a personal computer terminal or a portable computer terminal. The user terminal 2 may be a smartphone, a tablet information terminal, or the like. Furthermore, the user terminal 2 is connected to the bank account system 3 and the electronic commerce management server 4 via a network. One specific user is associated with the user terminal 2, and the user terminal 2 is based on transactions with banks and credit card companies, transactions using electronic money, and salary transfers from the workplace. Measure the user's trustworthiness. Here, the user of the user terminal 2 is a user 20. The user 20 may be a business operator.

The bank account system 3 is a computer system managed by a bank having an account opened by the user 20, and performs bank account processing. In the account of the user 20, a salary is transferred from the work place of the user 20, a shopping fee is debited with a credit card owned by the user 20, and the like. When the transfer of funds is completed in the account of the user 20, the bank account system 3 notifies the user 20 that the transfer of funds has been completed.
The bank account system 3 is connected to the electronic commerce management server 4 via a network, and executes account transfer in response to a settlement request from the electronic commerce management server 4.

The electronic commerce management server 4 is a computer that manages an electronic commerce service 40 via an electronic commerce site (EC site). The EC site in this example is a store on the network for buying and selling goods and services, and includes, for example, a website that provides a video-on-demand service and a BML site that is distributed by data broadcasting. It is.
The electronic commerce management server 4 makes a settlement request directly to the bank account system 3 based on the order confirmation operation by the user terminal 2 in the electronic commerce service 40.
The relay services 5a and 5b, the information exchange service 5c, and the information providing service 5d are online services that require registration authentication, and the user terminal 2 sends the usage results of the online services that have been verified as identity verification information. The online service 5 receives registration authentication.

FIG. 2 is a diagram illustrating a hardware configuration of the user terminal 2.
As illustrated in FIG. 2, the hardware configuration 200 of the user terminal 2 includes a CPU 202, a memory 204, an HDD 206, a network interface 208 (network IF 208), a display device 210, and an input device 212. They are connected to each other via a bus 214.
The CPU 202 is, for example, a central processing unit.
The memory 204 is, for example, a volatile memory and functions as a main storage device.
The HDD 206 is, for example, a hard disk drive device, and stores a computer program and other data files as a nonvolatile recording device.
The network IF 208 is an interface for performing wired or wireless communication, and realizes communication with the bank account system 3 and the electronic commerce management server 4 via the Internet.
The display device 210 is a liquid crystal display, for example.
The input device 212 is, for example, a keyboard and a mouse.

FIG. 3 is a diagram illustrating a functional configuration of the user terminal 2.
As illustrated in FIG. 3, the identity verification program 1 is installed in the identity verification system 1, and includes a service usage information database 600 (service usage information DB 600) and a personal information management database 602 (personal information management DB 602). .
The identity verification program 50 includes a transaction result acquisition unit 500, a transaction count unit 502, an evaluation value generation unit 504, an electronic certification unit 506, a new registration unit 508, an evaluation element value storage unit 510, a satisfaction level reception unit 512, and an association unit. 514. The identity verification program 50 includes a mutual authentication unit 516 and a read permission unit 518 as security functions.

The transaction result acquisition unit 500 acquires identity-confirmed information indicating that the identity verification of the user 20 is completed by a plurality of confirmation organizations that perform identity verification from a plurality of online services. That is, the transaction result acquisition unit 500 acquires the result of the transaction established in the online payment service or online administrative procedure that has been verified by the user 20. The result of the established transaction is the result of the transaction in the electronic commerce service 40 and the notification of the salary transfer from the employer, the result of the settlement by the credit card, the notification of the deduction of the utility bill, and the like. The transaction result acquisition unit 500 acquires these as transaction completion information. The transaction result acquisition unit 500 is an example of an acquisition unit according to the present invention.

More specifically, when the salary is transferred from the work place to the bank account of the user 20, the fact that the salary transfer transaction is completed from the bank to the user terminal 2, that is, a transfer notification is made. Transaction result acquisition unit 500 accepts this transfer notification. Similarly, in the case of credit card settlement, when a credit card withdrawal transaction is successful, a credit card company sends a withdrawal notice to the user terminal 2, and the transaction result acquisition unit 500 obtains this withdrawal notice. Further, when a product is purchased in the electronic commerce service, the electronic commerce management server 4 notifies the user terminal 2 whether or not the bank withdrawal has been successful, and the transaction result acquisition unit 500 accepts the settlement result.
Moreover, the transaction result acquisition unit 500 acquires the identification information of the online service used by the user 20. As a result, it is possible to determine which online service the identified information is associated with. The identification information indicates information that can uniquely specify an online service, such as a bank code.

The transaction count unit 502 counts the transaction completion information acquired by the transaction result acquisition unit 500 for each service. Specifically, the transaction count unit 502 updates the service usage information in the service usage information DB 600 based on the transaction completion information and identification information acquired by the transaction result acquisition unit 500.
The evaluation value generation unit 504 generates an evaluation value for the user 20 based on the number of times the user 20 uses the online payment service or online administrative procedure and the completion information thereof. In addition, the evaluation value generation unit 504 generates an evaluation value for the user 20 based on the identity confirmation information of a plurality of online services used by the user 20. Specifically, the evaluation value generation unit 504 generates an evaluation value for identity verification based on the user 20 identity confirmation information counted by the transaction count unit 502.
Also, the evaluation value generation unit 504 calculates an evaluation value based on the evaluation element value corresponding to the acquired online service identification information among the evaluation element values stored in the evaluation element value storage unit 510. Specifically, an evaluation factor value is set for each online service. The higher the number of users or the degree of recognition of the service, the higher the evaluation factor value, and the administrative procedure also has a higher evaluation factor value. The higher the socially reliable service is used, the higher the evaluation value of the user 20 increases.
Further, the evaluation value generation unit 504 generates an evaluation value for the user 20 based on the evaluation element value received by the satisfaction level reception unit 512 (described later).
The evaluation value calculated by the evaluation value generation unit 504 is stored in the service usage information DB 600 as the identity confirmation information of the user 20 of the user terminal 2. The service usage information DB 600 may be held by the user terminal 2, or may be held by a set top box or USB memory directly connected to the user terminal 2.

The electronic certification unit 506 outputs the evaluation value generated by the evaluation value generation unit 504. Specifically, the electronic certification unit 506 notifies the evaluation value as the personal identification information when applying for the electronic service applied by the user terminal 2. The electronic certification unit 506 is an example of an output unit according to the present invention. Thereby, when using an electronic service, a highly reliable identity verification is easily performed.
The electronic certification unit 506 encrypts the evaluation value and notifies the electronic service 5 of it. In addition, the electronic certification unit 506 may notify the identity verification information when the mutual authentication unit 516 (described later) or the read permission unit 518 (described later) permits, or the mutual authentication unit 516 (described later) and read. When the permission is permitted by the permission unit 518 (described later), identification information may be notified.
In addition, the electronic certification unit 506 may send personal information and identification information when applying for the electronic service 5. As a result, when the user 20 newly registers with the electronic service 5, it is possible to save the trouble of filling in the personal information on the form and to send the electronic certificate together, so that the identity can be confirmed. The personal information management DB 602 holds the ID of the electronic commerce service 40 of the user 20, a mobile phone number, personal information (name, postal code and address, my number), and mail address. The personal information management DB 602 may be held by the user terminal 2, or may be held by a set top box or USB memory directly connected to the user terminal 2.

The new registration unit 508 compares the evaluation value of the user 20 generated by the evaluation value generation unit 504 with the reference value set for the other online service that the user 20 desires to newly register, so that the new registration of the user 20 Judge whether registration is possible.
The evaluation element value storage unit 510 stores a plurality of online services and evaluation element values serving as evaluation value calculation elements in association with each other.

The satisfaction level reception unit 512 receives an input of an evaluation element value indicating a level of satisfaction with a transaction with the user 20 from a transaction partner of the user 20 in the electronic commerce service. Specifically, in the electronic commerce service, the evaluation of the user 20 such that the withdrawal has not been completed due to a shortage of balance has been accepted as an evaluation element value.
In addition, the satisfaction level reception unit 512 receives an input of an evaluation element value indicating the satisfaction level with respect to the labor situation of the user 20 from a salary payment source in the salary transfer service. Specifically, the satisfaction level reception unit 512 receives the satisfaction level via a social networking service (SNS). For example, if the work place and the user 20 have a Facebook account, and there is a comment from the work place on the user 20 page, this means that the user 20 is working at the work place. As a result, it leads to the social trust of the user 20. That is, the satisfaction level reception unit 512 receives an access from another account as an evaluation factor value in the SNS used by the user 20 and updates the service usage information.

Furthermore, accepting the evaluation element value via the SNS leads to the relationship between the user 20 and the transmission partner (transaction partner) of the evaluation element value. For example, when the user terminal 2 receives a comment via SNS, it is presumed that there is some connection between the user 20 and the partner who transmitted the comment to the user 20, and the SNS ID has been exchanged. That is, it can be considered that the user 20 and the transmission partner (transaction partner) of the comment were acquainted. Therefore, accepting the evaluation element value via the SNS can be a criterion for determining whether or not the user 20 is in contact with the communication partner in the SNS. Thereby, when the user 20 gives a remittance instruction via the electronic commerce management server 4, whether or not the remittance is valid based on whether or not the remittance is known with the remittance partner, for example, there is a possibility of fraud. It becomes possible to determine whether or not.

The associating unit 514 associates the identification information of the user 20 issued from each online service based on the identification information of the bank of the user 20 used for payment in each online service. Specifically, the user terminal 2 holds an in-system ID associated with a bank account, and the in-system ID is used for settlement in the A online service and is shared with the bank account system 3. Further, the same bank account is used for the payment in the B online service, and the payment is performed using the same in-system ID. That is, the ID of the A online service and the ID of the B online service are associated with each other via the in-system ID of the user 20. In addition, in the online service using My Number, when payment is made at the bank using the same in-system ID, based on the in-system ID, the bank ID of the user 20, the My Number, and the A Online Service An ID can be associated. In other words, the certainty that the owner of the online service ID is the principal increases, and the evaluation value increases.

The mutual authentication unit 516 determines whether the combination of the user terminal 2 and the USB connected to the user terminal 2 is correct as a condition for reading the personal identification information. Specifically, it is determined whether or not the correspondence between the source code in the application program of the user terminal 2 and the source code in the program in the USB connected to the user terminal 2 is correct. More specifically, an authentication key is incorporated as a parent program in an HTML file acquired when an application program in the user terminal 2 or a site providing the electronic service 5 is accessed via the user terminal 2. Then, an authentication key is incorporated in the USB as a child program. When the USB in which the authentication key is embedded is connected to the user terminal 2, the mutual authentication unit 516 determines whether or not the correspondence between the two is correct. Allow access to information. As a result, even if the USB storing the service usage information is lost, it becomes impossible to read the personal identification information or the personal information only with the USB.

The read permission unit 518 confirms the identity from the USB memory based on the MAC address of the user terminal 2, the device ID of the USB memory, and the IP address of the device that relays the user terminal 2 or the user terminal 2 to the Internet. Allows reading of information. Specifically, the read permission unit 518 collects the MAC address of the user terminal 2, the device ID of the USB memory, and the IP address of the user terminal 2 or a device that relays the user terminal 2 to the Internet. The read permission unit 518 determines whether the combination of these pieces of device information permitted to be read, which is held as a default value, matches the collected device information. It is assumed that the IP address is IPv6.
Part or all of the identity verification program 50 may be realized by hardware such as ASIC. The identity verification program 50 is stored in a recording medium such as a CD-ROM, for example, and is installed via this recording medium.

FIG. 4 is a diagram illustrating a functional configuration of the electronic commerce management server 4.
As illustrated in FIG. 4, an electronic commerce management program 70 is installed in the electronic commerce management server 4 and includes a management information database 604 (management information DB 604).
The electronic commerce management program 70 includes an order confirmation detection unit 700, a balance request unit 702, a success / failure determination unit 704, a settlement request unit 706, an execution unit 708, and a notification unit 710. Part or all of this program may be realized by hardware such as ASIC (Application Specific Integrated Circuit), or may be realized by borrowing a part of OS (Operating System) functions.
In the management information DB 604, in addition to the member ID of the electronic commerce service 40, the mobile phone number of the member, and the confirmed transaction information, an in-system ID associated with the bank account of the member who uses the electronic commerce service 40 is held. The in-system ID is information for identifying a bank account in the electronic commerce management server 4 and is associated with the member ID of the electronic commerce service 40. The in-system ID is also held in the bank account system 3a, and an account can be specified based on the in-system ID.

When the order confirmation detection unit 700 detects that the order has been confirmed, the balance request unit 702 checks the balance of the bank account based on the in-system ID corresponding to the orderer's member ID. Request to 3a.
The success / failure determination unit 704 determines the success / failure of the transaction based on the balance notified from the bank account system 3a and the planned transaction amount.
The settlement request unit 706 notifies the bank account (bank account system 3a) associated with the orderer's member ID of the orderer's in-system ID, the orderer's in-system ID, and the transaction price. Request the transfer of funds required for settlement.
The execution unit 708 executes the transfer of funds to the bank account associated with the member ID of the orderer in response to a request from the settlement request unit 706.
The notification unit 710 receives from the bank account system 3a a notification (successful completion) of the transfer of funds by the execution unit 708, and notifies the user terminal 2 accordingly.
As described above, in the identity verification system 1 including the bank account system 3a, the electronic commerce management server 4 is directly connected to the bank account system 3a, thereby realizing bank settlement by immediate account transfer of the established transaction. Therefore, the service usage information can be updated immediately.

FIG. 5 is a diagram illustrating service usage information.
As illustrated in FIG. 5, in the service usage information, an online service provided by the user 20, the number of successful transactions in each service, and an evaluation factor value are associated. The online service here refers to an online service that is allowed to be used after the user 20 has been verified. The number of successful transactions is the number of transactions for which settlement, withdrawal, transfer, etc. using each online service has been completed. The evaluation factor value is a value indicating the degree of importance according to the degree of recognition of each online service, the number of users, and the like, and also includes the degree of satisfaction from an electronic commerce partner or a workplace. The evaluation value generation unit 504 calculates an evaluation value based on the number of established transactions and the evaluation element value. Further, when calculating the evaluation value, the evaluation value generation unit 504 may consider the success factor of the transaction and the evaluation element value indicating the transaction frequency in consideration of the fact that the balance could not be withdrawn. Furthermore, in the salary transfer service in the service usage information, the labor situation may be recorded, and the evaluation value generation unit 504 may calculate the evaluation value in consideration of the labor situation.

FIG. 6 is a flowchart of the identity verification process (S10) of the identity verification system 1.
In the identity verification process (S10), a case where a product is purchased in the electronic commerce service will be described.
As illustrated in FIG. 6, in step 100 (S <b> 100), the transaction result acquisition unit 500 receives a notification of success or failure of transaction settlement from the electronic commerce management server 4.
In step 105 (S105), the transaction count unit 502 updates the success / failure of the settlement accepted by the transaction result acquisition unit 500 in the service usage information DB 600 based on the online service identification information.
In step 110 (S110), the evaluation value generation unit 504 calculates the evaluation value of the user 20 based on the number of transactions and the evaluation element value based on the information in the service usage information DB 600 updated by the transaction number counting unit 502. And stored in the service usage information DB 600.
In step 115 (S115), when the user 20 applies for the electronic service 5 and the identity confirmation is requested, the identity confirmation processing (S10) proceeds to S120. Otherwise, the identity confirmation processing (S10 ) Ends.
In step 120 (S120), the new registration unit 508 compares the reference value of the evaluation value permitted to be registered with the evaluation value of the user 20 in the electronic service 5 to be newly registered. If the evaluation value of the user 20 is equal to or higher than the reference value of the evaluation value of the online service desired to be newly registered, the new registration unit 508 proceeds to S125, and if the evaluation value of the user 20 is below the reference value, The confirmation process (S10) ends.
In step 125 (S125), the electronic certification unit 506 encrypts the calculated evaluation value to the electronic service 5 and transmits it as an electronic certification.
In this way, identity verification is performed based on the usage status of a service for which identity verification has been performed, so that identity verification can be performed without presenting an official document, and the time until the application procedure for the relay service 5 is completed is shortened. The

As described above, the identity verification system 1 proves the authenticity of the identity based on the service that has been identified. Thereby, the user can use the evaluation value which shows the creditworthiness by the principal confirmation system 1 as an electronic certificate, without performing a principal confirmation procedure, when performing a new registration procedure at the time of application for an electronic pay service. Further, as the number of used services and the number of transactions with which the identity has been confirmed increases, the reliability of the identity verification system 1 increases. Therefore, the user can increase the reliability by actively increasing these. That is, the identity verification system 1 has the pleasure of increasing the reliability by further accumulating results for the user, and can be expected to increase the user's motivation.
In addition, the credit rating of the evaluation value is high because it is based on a transaction record with a bank or a credit card company that provides services by presenting an official document. Conventionally, identity verification for one service is performed by presenting an official document by the user himself. However, electronic verification of the verification system 1 proves that a plurality of service providing organizations have been verified. This reduces the possibility of impersonation.
And since the identity verification system 1 does not send an official document as an electronic certificate but is an evaluation value indicating the trustworthiness, it is possible for the user to prove the trustworthiness while keeping the personal information confidential. There is no risk of information leakage.

Modified example

Next, a modification of the above embodiment will be described.
FIG. 7 is a diagram illustrating a functional configuration of the user terminal 2 in the modified example.
It should be noted that among the components shown in the figure, the same reference numerals are given to the components that are substantially the same as those shown in FIG.
The identity verification program 55 of the first modified example is similar to the identity verification program 50 shown in FIG. 3 in that the authenticity generation unit 520, the credit generation unit 522, the duplicate ID detection unit 524, the electronic certification unit 526, the credit transfer unit 528, The structure which added the sex determination part 530 and service utilization information DB606 is taken.
In the above embodiment, the evaluation value is used as the creditworthiness of the person and the creditworthiness of the user 20, but the present invention is not limited to this, and these may be managed as individual indexes.
Specifically, the service usage information DB 606 manages the authenticity for ensuring the authenticity of the person and the trustworthiness for determining whether or not the user 20 is a reliable person as a trading partner. As illustrated in FIG. 7, the authenticity generation unit 520 calculates an evaluation value as the authenticity indicating the certainty of the person himself / herself based on the transaction record and the social credibility of the counterparty.
The credit generation unit 522 is at least the labor status of the user 20 (year of service, number of late absenteeism, working attitude, etc.), transaction status (number of transactions, payment ability, period required to complete the transaction, etc.), or , Received a record of communication via SNS (for example, communication with a company with high social credibility that participates in a group that requires an invitation) as a point by the satisfaction reception unit 512 Credit rating is calculated based on points.

Other than that, for example, when the user 20 is married, the credit generation unit 522 may be responsible for protecting the home, and thus credit points may be added. Further, when the electronic commerce management server 4 transfers the property tax or withdraws the account based on the ID of the electronic commerce service 40, the credit generation unit 522 adds credit points according to the tax payment amount. May be. The credit generation unit 522 may add credit points even when paying public charges (electricity charges, gas charges, or water charges) based on the ID of the electronic commerce service 40.

The electronic certifying unit 526 notifies the authenticity generated by the authenticity generating unit 520 and the credit generated by the credit generating unit 522 to the online service applied by the user terminal 2. That is, when the user 20 newly registers with the online service, the authenticity and the trustworthiness can be attached together with his / her personal information as a certificate, and it can be proved that the user 20 is suitable as a trading partner. Also, the online service provider can easily determine whether or not the user 20 can register based on authenticity and trustworthiness.

The duplicate ID detection unit 524 detects a plurality of identification information owned by the same user based on the identification information of the bank of the user used for payment within the same online service. Specifically, the duplicate ID detection unit 524 detects a member ID associated with the in-system ID used for settlement in the electronic commerce service 40. That is, the duplicate ID detection unit 524 detects that a plurality of member IDs of the electronic commerce service 40 are associated with a specific in-system ID. Thereby, it becomes clear that the user 20 possesses a plurality of member IDs for the electronic commerce service 40. The duplicate ID detection unit 524 is an example of a duplicate identification information detection unit according to the present invention.

The credit quality giving / receiving unit 528 sends / receives points indicating the credit quality of the user 20 to / from other users. Specifically, the credit exchange unit 528 exchanges points with other users based on the member ID managed by the electronic commerce management server 4. The greater the number of people who have received points, the higher the reliability of the user who has received the points. Further, the credit quality giving / receiving unit 528 associates the member IDs of the users to whom credit ratings have been exchanged, and lowers the credit quality of the granting source when the credit quality of the user to whom the credit quality is given decreases. That is, since it affects not only the user but also the trustworthiness of other users, the consciousness of maintaining their own trustworthiness works.

The relationship determination unit 530 determines the relationship between member IDs. Specifically, the relationship determination unit 530 determines the parent-child relationship or the kinship relationship of the member ID of the electronic commerce service based on information managed in the personal information management DB 602. For example, in the information managed by the personal information management DB 602, when a member ID such as a plurality of member IDs having the same address but a different name or my number is detected, the relationship determination unit 530 determines the membership ID. ID is considered to be a parent or child or a relative. If it is determined that there is a parent-child relationship, the relationship determination unit 530 determines which member ID is the parent from the date of birth or the like. Instead of the determination by the relationship determination unit 530, the personal information management DB 602 may hold the relationship between the member IDs in advance.

When the relationship determination unit 530 determines that the credit rating unit 528 is a parent and child, the credit rating unit 528 may lend the parent's credit rating to the child. Specifically, the credit rating associated with the parent member ID may be shared with the child member ID based on the member ID of the electronic commerce service 40. When a child newly registers with the online service, when the electronic certification unit 526 sends the parent's credit rating to the online service, the electronic certification unit 526 applies the child to the online service for new registration to the parent who has lent the credit rating. Notify that. Specifically, the electronic certification unit 526 notifies the child online service new registration based on the parent mail address held in the personal information management DB 602 or the member ID of the electronic commerce service 40. This allows the parent to monitor the use of the child's online service.

In addition, when the relationship determination unit 530 determines that there is a marital relationship, the reliability may be shared. Specifically, the credit rating unit 528 shares the husband's credit with the wife based on the member ID of the electronic commerce service 40. Similar to the borrowing of credit between parents and children, when a wife newly applies for an online service based on the trust of the husband, the electronic certification unit 526 may notify the husband to that effect. Further, whether or not this notification can be made can be changed by setting.

In the above embodiment and modification, the identity verification program 50 and the identity program 55 are installed in the user terminal 2, but the present invention is not limited to this, and may be installed in the electronic commerce management server 4.

DESCRIPTION OF SYMBOLS 1 ... Identity confirmation system 2 ... User terminal 3 ... Bank account system 4 ... Electronic commerce management server 5 ... Electronic service 20 ... User 40 ... Electronic commerce service 50 ... Identity confirmation program 70 ... Electronic commerce management program 500 ... Transaction result acquisition part 502 ... Number of transactions counting unit 504 ... Evaluation value generating unit 506 ... Electronic certification unit 508 ... New registration unit 510 ... Evaluation element value storage unit 512 ... Satisfaction receiving unit 514 ... Association unit 516 ... Mutual authentication unit 518 ... Read permission unit 520 ... Authenticity generation unit 522 ... Reliability level generation unit 524 ... Duplicate ID detection unit 526 ... Electronic certification unit 528 ... Credit rating unit 530 ... Relationship determination unit 600 ... Service usage information database 602 ... Personal information management database 604 ... Management information database 606 ... Service usage information database 70 ... final order detection unit 702 ... balance request unit 704 ... success determining unit 706 ... settlement request unit 708 ... execution unit 710 ... notification unit

Claims

An acquisition unit that acquires identity verification information indicating that the identity verification of the user has been completed by a plurality of verification agencies that perform identity verification from a plurality of online services;
Based on the user identity confirmation information obtained by the obtaining unit, an evaluation value generation unit that generates an evaluation value for identity confirmation;
An identity verification system comprising: an output unit that outputs the evaluation value generated by the evaluation value generation unit.
The acquisition unit acquires transaction completion information in an online payment service or online administrative procedure on which identity verification is a prerequisite, as the identity verified information,
The identity verification system according to claim 1, wherein the evaluation value generation unit generates the evaluation value of the user based on the number of times the user uses the online payment service or the online administrative procedure and completion information thereof.
The evaluation value generation unit generates an evaluation value of the user based on the identity confirmation information of a plurality of online services used by the user,
A new registration unit that compares the user's evaluation value generated by the evaluation value generation unit with a reference value set in another online service that the user desires to newly register to determine whether or not the user can register a new one The identity verification system according to claim 2, further comprising:
An evaluation element value storage unit that stores a plurality of online services and evaluation element values that are evaluation value calculation elements in association with each other;
The acquisition unit acquires the user's identity confirmed information and identification information of the online service used by the user,
The evaluation value generation unit calculates an evaluation value based on an evaluation element value corresponding to the acquired identification information of the online service among evaluation element values stored in the evaluation element value storage unit. The identity verification system described in.
The acquisition unit acquires transaction completion information in the electronic commerce service on which the identity verification is a premise as the identity verified information,
A satisfaction receiving unit that receives an input of an evaluation element value indicating satisfaction with a transaction with the user from a user counterpart in the electronic commerce service;
The identity verification system according to claim 1, wherein the evaluation value generation unit generates an evaluation value of the user based on the evaluation element value received by the satisfaction level reception unit.
The acquisition unit acquires transaction completion information in the salary transfer service as the identity confirmation information,
A satisfaction receiving unit that receives an input of an evaluation element value indicating satisfaction with respect to the user's labor situation from a payer of the salary in the salary transfer service;
The identity verification system according to claim 1, wherein the evaluation value generation unit generates an evaluation value of the user based on the evaluation element value received by the satisfaction level reception unit.
The identity verification system according to claim 5, wherein the satisfaction level reception unit receives an input of an evaluation element value indicating satisfaction level via a social network king service.
The identity verification system according to claim 3, further comprising: an associating unit that associates user identification information issued from each online service with each other based on identification information of a user's bank used for payment in each online service.
The identity verification system according to claim 1, further comprising: a duplicate identification information detection unit that detects a plurality of identification information held by the same user based on the identification information of the user's bank used for payment in the same online service.
An acquisition unit that acquires identity verification information indicating that the identity verification of the user has been completed by a plurality of verification agencies that perform identity verification from a plurality of online services;
Based on the user identity confirmation information obtained by the obtaining unit, an evaluation value generation unit that generates an evaluation value for identity confirmation;
An identity verification apparatus comprising: an output unit that outputs the evaluation value generated by the evaluation value generation unit.
Obtaining identity-verified information from a plurality of online services indicating that the identity of the user has been completed by a plurality of verification agencies performing identity verification;
Generating an evaluation value of identity verification based on the identity verification information of the user acquired by the acquisition unit;
Outputting the evaluation value generated by the evaluation value generation unit.
Obtaining identity-verified information from a plurality of online services indicating that the identity of the user has been completed by a plurality of verification agencies performing identity verification;
Generating an evaluation value of identity verification based on the identity verification information of the user acquired by the acquisition unit;
A program for causing a computer to execute the step of outputting the evaluation value generated by the evaluation value generation unit.