WO2022024281A1

WO2022024281A1 - Authentication server, authentication system, authentication request processing method, and storage medium

Info

Publication number: WO2022024281A1
Application number: PCT/JP2020/029149
Authority: WO
Inventors: 雄司山口; 圭斎藤; 祐一矢部
Original assignee: 日本電気株式会社
Priority date: 2020-07-29
Filing date: 2020-07-29
Publication date: 2022-02-03
Also published as: JPWO2022024281A1

Abstract

Provided is an authentication server (10) that efficiently performs identity verification using an identification card. The authentication server (10) is provided with: a reception unit (101); an authentication request processing unit (102); and a transmission unit (103). The reception unit (101) receives, from a service provider, an authentication request regarding a to-be-authenticated person who presents an identification card. The authentication request processing unit (102) processes the authentication request by executing biometric authentication using biological information about the to-be-authenticated person and electronic authentication using electronic information extracted from the identification card. The transmission unit (103) transmits the authentication result based on the results of the biometric authentication and the electronic authentication.

Description

Authentication server, authentication system, authentication request processing method and storage medium

The present invention relates to an authentication server, an authentication system, an authentication request processing method, and a storage medium.

When local governments provide services to residents, strict identity verification is often required. For example, in the payment business of subsidies, etc., strict identity verification is required from the viewpoint of preventing illegal receipt.

Patent Document 1 discloses a technique for reducing the burden on local government employees and the like. In Patent Document 1, the personal authentication card such as My Number Card is not required by the applicant who visited the counter by inputting the name and date of birth, and the data input of the person in charge of the counter is not required. It is stated that it will provide a system to support the application of certificates.

Japanese Unexamined Patent Publication No. 2020-024479

As mentioned above, identity verification is performed using an ID card such as My Number Card. Here, in order to verify the identity using the identification card, the user who has been issued the certificate presents the correct certificate, and the presented identification card is genuine. Confirmation is required.

If such identity verification is performed by a local government employee, the burden on the employee will increase in situations where it is necessary to process a large amount of work in a short time. Alternatively, since a large amount of work is not processed in a short time, the convenience of the user is reduced.

The main object of the present invention is to provide an authentication server, an authentication system, an authentication request processing method, and a storage medium that contribute to efficient identity verification using an identification card.

According to the first aspect of the present invention, the receiving unit that receives the authentication request regarding the authenticated person presenting the identification certificate from the service provider, the biometric authentication using the biometric information of the authenticated person, and the above-mentioned An authentication request processing unit that processes the authentication request by executing electronic authentication using electronic information extracted from the identification certificate, and an authentication result according to the result of the biometric authentication and the electronic authentication. Is provided with an authentication server comprising a transmission unit that transmits the above to the service provider.

According to the second aspect of the present invention, the authentication server includes a business management server and an authentication server connected to the business management server, which sends an authentication request for an authenticated person presenting an identification card. Is to execute the receiving unit that receives the authentication request, the bioauthentication using the biometric information of the person to be authenticated, and the electronic authentication using the electronic information extracted from the identification certificate. Provided is an authentication system including an authentication request processing unit that processes the authentication request and a transmission unit that transmits the authentication result according to the result of the biometric authentication and the electronic authentication to the business management server. ..

According to the third viewpoint of the present invention, the authentication server receives an authentication request regarding the authenticated person presenting the identification certificate from the service provider, and the biometric authentication using the biometric information of the authenticated person is described. By executing electronic authentication using electronic information extracted from the identification certificate, the authentication request is processed, and the authentication result according to the result of the bioauthentication and the electronic authentication is given to the service provider. An authentication request processing method to be sent is provided.

According to the fourth viewpoint of the present invention, the processing of receiving the authentication request regarding the authenticated person presenting the identification card from the service provider and the biometric information of the authenticated person are transmitted to the computer mounted on the authentication server. The service provider performs a process of executing the bioauthentication used and the electronic authentication using the electronic information extracted from the identification certificate, and the authentication result according to the bioauthentication and the result of the electronic authentication. A computer-readable storage medium is provided that stores the process of sending to and the program for executing.

According to each viewpoint of the present invention, an authentication server, an authentication system, an authentication request processing method, and a storage medium that contribute to efficient identity verification using an identification card are provided. The effect of the present invention is not limited to the above. According to the present invention, other effects may be produced in place of or in combination with the effect.

It is a figure for demonstrating the outline of one Embodiment. It is a figure which shows an example of the schematic structure of the authentication system which concerns on 1st Embodiment. It is a figure for demonstrating the operation outline of the authentication system which concerns on 1st Embodiment. It is a figure for demonstrating the operation outline of the authentication system which concerns on 1st Embodiment. It is a figure for demonstrating the operation outline of the authentication system which concerns on 1st Embodiment. It is a figure which shows an example of the processing structure of the terminal which concerns on 1st Embodiment. It is a figure for demonstrating the operation of the user information acquisition part which concerns on 1st Embodiment. It is a figure for demonstrating the operation of the user information acquisition part which concerns on 1st Embodiment. It is a figure which shows an example of the processing configuration of the business management server which concerns on 1st Embodiment. It is a figure which shows an example of the authentication request which concerns on 1st Embodiment. It is a figure which shows an example of the business management database which concerns on 1st Embodiment. It is a figure which shows an example of the processing configuration of the authentication server which concerns on 1st Embodiment. It is a figure which shows an example of the authentication history database which concerns on 1st Embodiment. It is a sequence diagram which shows an example of the operation of the authentication system which concerns on 1st Embodiment. It is a figure which shows an example of the authentication policy database which concerns on 2nd Embodiment. It is a flowchart which shows an example of the operation of the authentication server which concerns on 2nd Embodiment. It is a figure which shows an example of the biological information database which concerns on 3rd Embodiment. It is a figure for demonstrating the operation of the authentication system which concerns on 3rd Embodiment. It is a figure which shows an example of the hardware configuration of an authentication server. It is a figure which shows an example of the schematic structure of the authentication system which concerns on the modification of the present disclosure. It is a flowchart which shows an example of the operation of the authentication server which concerns on the modification of the present disclosure.

First, the outline of one embodiment will be explained. It should be noted that the drawing reference reference numerals added to this outline are added to each element for convenience as an example for assisting understanding, and the description of this outline is not intended to limit anything. Further, unless otherwise specified, the blocks described in each drawing represent not the configuration of hardware units but the configuration of functional units. Connection lines between blocks in each figure include both bidirectional and unidirectional. The one-way arrow schematically shows the flow of the main signal (data), and does not exclude bidirectionality. In the present specification and the drawings, the same reference numerals may be given to elements that can be similarly described, so that duplicate description may be omitted.

The authentication server 100 according to the embodiment includes a receiving unit 101, an authentication request processing unit 102, and a transmitting unit 103 (see FIG. 1). The receiving unit 101 receives an authentication request regarding the person to be authenticated who presents the identification card from the service provider. The authentication request processing unit 102 processes the authentication request by executing biometric authentication using the biometric information of the person to be authenticated and electronic authentication using the electronic information extracted from the identification card. The transmission unit 103 transmits the authentication result according to the result of the biometric authentication and the electronic authentication to the service provider.

The authentication server 100 executes two authentications using an identification card without human intervention. In addition, since two identity verifications can be performed in parallel, efficient identity verification using an identification card can be realized.

The specific embodiments will be described in more detail below with reference to the drawings.

[First Embodiment]
The first embodiment will be described in more detail with reference to the drawings.

[System configuration]
FIG. 2 is a diagram showing an example of a schematic configuration of the authentication system according to the first embodiment. As shown in FIG. 2, the authentication system includes a plurality of service providers, an authentication center, and the like.

Service providers are individuals, groups, organizations, etc. that provide various services to users. For example, as a service provider, a retail business, a medical business, a financial business, an insurance business, and the like are exemplified. Alternatively, the service provider may be a public institution such as a city hall. The service provider disclosed in the present application should be able to provide the service to the user who presents the "identification card".

Examples of services provided by private service providers include medical services provided by hospitals and pharmacies and financial services provided by banks. Alternatively, the disclosure of the present application may be applied to insurance services provided by an insurer.

Alternatively, the service provided by the service provider may be a subsidy, payment of benefits, etc. by the local government. Alternatively, the service provider may provide a service for identifying the heir from the family register information.

The service provider disclosed in this application provides arbitrary services to users whose identities are certain.

As mentioned above, the service provider provides the service to the user who presents the identification card. Examples of the identification card include a card having an IC (Integrated Circuit) chip such as an Individual Number Card, a driver's license, and a passport. Alternatively, a smartphone or the like including the function of the identification card equipped with the IC chip may be used as the identification card.

The IC chip of the ID card stores electronic information such as an electronic certificate issued by a public certificate authority and an electronic signature signed by a public institution. For example, an electronic certificate or an electronic signature is stored in an IC chip of an identification card.

The service provider provides the service to the user who has completed the identity verification based on the ID card. Hereinafter, the case where the "electronic certificate" is stored in the IC chip mounted on the identification card will be described as an example.

The certification center is operated by an organization or organization that provides "certification services" to multiple service providers. Specifically, the authentication center provides a service related to identity verification (identification) based on the above identification card.

The authentication server 10 is installed in the authentication center. The authentication server 10 is responsible for the above-mentioned processing related to identity verification. The authentication server 10 may be a server installed on the site of the authentication center or a server installed on the cloud. A plurality of authentication servers 10 may cooperate to perform the above-mentioned identity verification.

The authentication server 10 is a certificate authority that supports two types of authentication methods (means, method).

The first authentication method is personal authentication (biometric authentication) using biometric information. By biometric authentication, it is determined whether or not the user who submitted the identification card is the user who correctly received the issuance of the identification card. For example, if the user B presents the identification card issued to the user A, the authentication fails.

The biometric information of the user exemplifies data (feature amount) calculated from physical characteristics peculiar to an individual such as a face, a fingerprint, a voice print, a vein, a retina, and an iris pattern (pattern) of the pupil. Alternatively, the biometric information of the user may be image data such as a face image and a fingerprint image. The biometric information of the user may be any information that includes the physical characteristics of the user. In the disclosure of the present application, a case where biometric information regarding a person's "face" is used will be described.

The second authentication method is personal authentication (hereinafter referred to as electronic authentication) using electronic information stored in the IC chip of the identification card. Electronic authentication determines the validity and authenticity of the ID card. For example, an ID card has a defined validity period, and authentication of a user who presents an ID card whose validity period has expired fails. In addition, the items described on the ID card (for example, name, address, etc.) are subject to change. If the information on the ID card is changed, the user must be issued an ID card with the correct contents. That is, even if an identification card that does not reflect the correct content is presented, the authentication of the user presenting the identification card fails.

Electronic authentication, which is the second authentication method, can also be regarded as "electronic verification" in which the identification card presented by the user is verified by the electronic information contained in the identification card. The service provider cannot perform business (for example, subsidy application) based on the information (for example, address) obtained from the identification card that does not reflect the correct information. In this respect, not only identity verification by biometric authentication but also electronic authentication (electronic verification) is required.

The service provider requests the authentication server 10 to authenticate by at least one of the above two authentication methods (biometric authentication and electronic authentication).

The authentication request requested by the service provider to the authentication server 10 and requesting both biometric authentication and electronic authentication is referred to as "authentication request 1".

The authentication request that the service provider requests authentication by electronic authentication is referred to as "authentication request 2".

The authentication request that the service provider requests authentication by biometric authentication is referred to as "authentication request 3".

The authentication server 10 accepts any of the authentication requests 1 to 3 and sends the result of the authentication process (authentication success, authentication failure) to the source of the authentication request (service provider). When the authentication request 1 is received, the authentication server 10 transmits "authentication success" to the service provider when the authentication of each of the biometric authentication and the electronic authentication is successful.

Each service provider has a business management server and a terminal.

For example, the service provider S1 is provided with a business management server 20 and a plurality of authentication terminals 30. The service provider S2 is provided with a business management server 21 and a plurality of authentication terminals 31.

In the following explanation, when it is necessary to distinguish each component, the code on the right side of the hyphen is used. Since the operation and the like of each device included in the service provider S1 and the service provider S2 can be the same, the following description will be centered on the service provider S1.

The devices shown in FIG. 2 are connected to each other. For example, the authentication server 10 and the business management server 20 are connected by a wired or wireless communication means, and are configured to be able to communicate with each other.

The business management server 20 is a server that controls and manages the entire business of the service provider. For example, when the service provider is a local government such as a city hall, the business management server 20 manages the history of services provided to residents. For example, the business management server 20 stores whether or not the subsidy payment has been completed to the resident. When the service provider is a medical institution such as a hospital, the business management server stores the patient's clinical department, consultation date, and the like.

The business management server 20 provides services to users who have completed identity verification using an ID card. The business management server 20 selects one of the above authentication requests 1 to 3 according to the business content, business form, business scale, etc. of the service provider, and requests the authentication server 10 to authenticate the user.

For example, if the industry of the service provider is an industry that requires strict identity verification, the user who enjoys the service needs to succeed in both biometric authentication and electronic authentication. In this case, the business management server 20 requests both the biometric authentication and the electronic authentication to the authentication server 10 (transmits the authentication request 1).

Even if the industry of the service provider is an industry that requires strict identity verification, when the staff or the like confirms the identity by the user's face or the like, the business management server 20 requests the authentication server 10 for electronic authentication. (Send authentication request 2). Alternatively, when the business management server 20 performs biometric authentication by itself, it is sufficient for the business management server 20 to request the authentication server 10 for electronic authentication.

Further, for example, when the service provider is a retail store selling alcohol or cigarettes and it is sufficient to confirm the age of the user, the business management server 20 requests the authentication server 10 for biometric authentication. (Send authentication request 3). The service provider does not use the information on the ID card, such as the name and address, which may change, to provide the service, so electronic authentication is not required to confirm the validity of the ID card. ..

The terminal 30 is a device that is connected to the business management server 20 and serves as an interface for users who visit the service provider. The user receives various services via the terminal 30. For example, when the service provider is a medical institution such as a hospital, the user applies for a medical examination using the terminal 30. Alternatively, when the service provider is a retail store, the user purchases the product using the terminal 30. Alternatively, if the service provider is a local government such as a city hall, the user applies for a subsidy or the like using the terminal 30.

When receiving the service, the user presents his / her identification card to the service provider. For example, the user inserts an identification card into a card reader connected to the terminal 30.

The terminal 30 acquires the user's biometric information (for example, a face image) and the information stored in the IC chip of the identification card (hereinafter referred to as IC chip information) and transmits the information to the business management server 20.

The business management server 20 generates an authentication request using this information and sends it to the authentication server 10. Upon acquiring "authentication success" from the authentication server 10, the business management server 20 provides the service to the user via the terminal 30 or directly.

FIG. 2 is an example, and does not mean to limit the configuration of the authentication system disclosed in the present application. For example, the authentication center may include two or more authentication servers 10. Alternatively, the service provider may include at least one terminal 30. Alternatively, the functions of the business management server 20 and the terminal 30 may be integrated, and the service may be provided by the integrated device. Alternatively, in each service provider, as shown in FIG. 2, a plurality of terminals 30 may be connected to one business management server 20, or one terminal 30 may be connected to one business management server 20. It may have been done.

Subsequently, the schematic operation of the authentication system according to the first embodiment will be described with reference to the drawings.

<Authentication request 1 (biometric authentication and electronic authentication)>
FIG. 3 is a diagram for explaining an outline of the operation of the authentication system when the service provider sends the “authentication request 1” to the authentication server 10.

The terminal 30 takes a picture of the user presenting the identification card and acquires a face image. In the following description, the face image obtained by the terminal 30 taking a picture of the user is referred to as a "photographed face image".

The terminal 30 acquires IC chip information from the identification card inserted in the card reader. At that time, the terminal 30 acquires a password for reading the digital certificate stored in the IC chip, if necessary.

The terminal 30 transmits the acquired photographed face image and IC chip information (IC chip information including an electronic certificate) to the business management server 20.

In addition to the above electronic certificate, the IC chip information includes a face image of the person to whom the identification card is issued and personal information of the user (for example, name, gender, address, basic 4 information of date of birth). There is. The business management server 20 extracts the face image from the IC chip information. In the following description, the face image (or information about the face image; for example, the feature amount that characterizes the face image) stored in the IC chip of the identification card is referred to as “chip face image”. The personal information included in the IC chip information is not limited to the name and the like, and the passport number and the like are also included in the personal information.

The business management server 20 transmits "authentication request 1" including a service provider ID, two face images (photographed face image, chip face image), and an electronic certificate to the authentication server 10. The business management server 20 may also transmit personal information included in the IC chip information to the authentication server 10.

The service provider ID is identification information for uniquely identifying the service provider included in the authentication system. In the example of FIG. 2, different service provider IDs are assigned to each of the service providers S1 and S2.

The service provider ID is an ID assigned to each service provider, not an ID assigned to each service. For example, in FIG. 2, even if service providers S1 and S2 provide the same type of service (for example, medical service), different IDs are assigned to these service providers if the management entity is different. ..

The authentication server 10 and the business management server 20 share the service provider ID by any method. For example, when the service provider participates in the authentication system, the authentication server 10 may generate a service provider ID and distribute (notify) the generated service provider ID to the service provider.

The authentication server 10 that has received the authentication request 1 performs biometric authentication using the two facial images (biological information) included in the request. The authentication server 10 executes one-to-one matching using two face images, and determines that "biometric authentication is successful" when the two face images are the face images of the same person.

Before and after biometric authentication, or in parallel with biometric authentication, the authentication server 10 performs electronic authentication using an electronic certificate. Specifically, the authentication server 10 transmits the digital certificate taken out from the authentication request 1 to the external verification server 40. The authentication server 10 requests the verification server 40 to verify the digital certificate.

The verification server 40 is the issuing entity of the digital certificate stored in the IC chip, and is also called PKI (Public Key Infrastructure).

The verification server 40 confirms the expiration date and the like of the acquired digital certificate, and sends the verification result to the authentication server 10.

The authentication server 10 determines that "electronic authentication is successful" when the verification result of the verification server 40 is "verification successful".

In the case of "successful biometric authentication" and "successful electronic authentication", the authentication server 10 sets the authentication result for the authentication request 1 acquired from the business management server 20 to "authentication successful". In other words, if at least one of the above two authentications fails, the authentication server 10 sets the authentication result for the authentication request 1 to "authentication failure".

The authentication server 10 transmits the authentication result (authentication success, authentication failure) to the business management server 20. When the authentication of the authenticated person is successful, the authentication server 10 generates a user ID (Identifier) for identifying the authenticated person, and sends a response (authentication success) including the user ID to the business management server. Send to 20.

When the authentication success is received, the business management server 20 provides a service to the user via the terminal 30. For example, the business management server 20 notifies the resident of the application result of the subsidy and guides the patient to the clinical department.

In this way, the authentication server 10 receives an authentication request regarding the person to be authenticated who presents the identification card from the service provider. The authentication server 10 processes an authentication request by executing biometric authentication using the biometric information of the person to be authenticated and electronic authentication using electronic information extracted from the identification card. The authentication server 10 transmits an authentication result according to the result of biometric authentication and electronic authentication to the service provider.

<Authentication request 2 (electronic authentication)>
FIG. 4 is a diagram for explaining an outline of the operation of the authentication system when the service provider sends the “authentication request 2” to the authentication server 10.

The terminal 30 transmits the user's face image and IC chip information to the business management server 20.

The business management server 20 performs biometric authentication (one-to-one collation) using two face images (photographed face image and chip face image). When the business management server 20 succeeds in biometric authentication, the business management server 20 transmits an authentication request 2 including a service provider ID and an electronic certificate to the authentication server 10. The business management server 20 may transmit the personal information extracted from the IC chip information to the authentication server 10.

The authentication server 10 takes out the digital certificate from the authentication request 2 and requests the verification server 40 to verify the certificate. The authentication server 10 transmits the authentication result according to the verification result to the business management server 20. If the authentication is successful, the authentication server 10 sends a response including the user ID to the business management server 20.

The business management server 20 provides a service to the user when both biometric authentication and electronic authentication are "authentication successful".

In this way, in a service provider that requires biometric authentication and electronic authentication, biometric authentication may be executed on the service provider side (edge side), and electronic authentication may be executed on the authentication center side (cloud side).

FIG. 4 describes the operation when the business management server 20 performs biometric authentication. As described above, biometric authentication may be performed visually by the staff of the service provider. In this case, the service provider (business management server 20, terminal 30) does not need to acquire a face image or perform biometric authentication using the face image.

<Authentication request 3 (biometric authentication)>
FIG. 5 is a diagram for explaining an outline of the operation of the authentication system when the service provider sends the “authentication request 3” to the authentication server 10.

The business management server 20 transmits an authentication request 3 including a service provider ID and two face images (photographed face image and chip face image) to the authentication server 10. The business management server 20 may send personal information to the authentication server 10.

The authentication server 10 performs biometric authentication (one-to-one matching) using two face images (photographed face image and chip face image). The authentication server 10 transmits the authentication result (authentication success, authentication failure) to the business management server 20. If the authentication is successful, the authentication server 10 sends a response including the user ID to the business management server 20.

The business management server 20 provides a service to the user when the authentication result is "authentication successful".

When the service provider requests biometric authentication from the authentication server 10, it is not necessary to send the digital certificate to the authentication server 10. Therefore, the terminal 30 does not need to acquire a password for reading the digital certificate.

As described above for the processes of authentication requests 1 to 3, the authentication server 10 executes at least one of biometric authentication and electronic authentication depending on the type of authentication request.

Subsequently, the details of each device included in the authentication system according to the first embodiment will be described.

[Terminal]
FIG. 6 is a diagram showing an example of a processing configuration (processing module) of the terminal 30 according to the first embodiment. Referring to FIG. 6, the terminal 30 includes a communication control unit 201, a user information acquisition unit 202, a message output unit 203, and a storage unit 204.

The communication control unit 201 is a means for controlling communication with other devices. For example, the communication control unit 201 receives data (packets) from the business management server 20. Further, the communication control unit 201 transmits data to the business management server 20. The communication control unit 201 passes the data received from the other device to the other processing module. The communication control unit 201 transmits the data acquired from the other processing module to the other device. In this way, the other processing module transmits / receives data to / from the other device via the communication control unit 201.

The user information acquisition unit 202 is a means for acquiring information about a user who wishes to provide a service.

For example, the user information acquisition unit 202 acquires the service desired by the user by using a GUI (Graphical User Interface) including a list of services that can be provided by the service provider as shown in FIG. .. After that, the user information acquisition unit 202 displays a GUI as shown in FIG. 8 and acquires a user's face image (photographed face image) and a password for reading the digital certificate.

The user information acquisition unit 202 controls the camera and acquires image data in which the user is captured. The user information acquisition unit 202 extracts a face image from the acquired image data.

Since the existing technology can be used for the face image extraction process by the user information acquisition unit 202, detailed description thereof will be omitted. For example, the user information acquisition unit 202 may extract a face image (face region) from the image data by using a learning model learned by CNN (Convolutional Neural Network). Alternatively, the user information acquisition unit 202 may extract a face image by using a method such as template matching.

The user information acquisition unit 202 controls the card reader and reads information from the IC chip mounted on the identification card. The user information acquisition unit 202 acquires a face image (chip face image), an electronic certificate, and the like from the IC chip. The password obtained above is required when reading the digital certificate.

If the digital certificate cannot be read by the acquired password, the user information acquisition unit 202 notifies the user to that effect.

The user information acquisition unit 202 transmits the photographed face image and IC chip information (chip face image, electronic certificate, personal information) to the business management server 20.

The message output unit 203 is a means for outputting various messages to the user. For example, the message output unit 203 outputs a message regarding service provision. The message output unit 203 may display a message using a display device such as a liquid crystal monitor, or may reproduce a voice message using an audio device such as a speaker.

The storage unit 204 stores information necessary for the operation of the terminal 30.

[Business management server]
FIG. 9 is a diagram showing an example of a processing configuration (processing module) of the business management server 20 according to the first embodiment. Referring to FIG. 9, the business management server 20 includes a communication control unit 301, an authentication request unit 302, a service provision unit 303, a biometric authentication unit 304, and a storage unit 305.

The communication control unit 301 is a means for controlling communication with other devices. For example, the communication control unit 301 receives data (packet) from the authentication server 10. Further, the communication control unit 301 transmits data to the authentication server 10. The communication control unit 301 passes the data received from the other device to the other processing module. The communication control unit 301 transmits the data acquired from the other processing module to the other device. In this way, the other processing module transmits / receives data to / from other devices via the communication control unit 301.

The authentication request unit 302 is a means for requesting the authentication server 10 to authenticate the user. It is predetermined what kind of authentication is required from the authentication server 10 according to the type of business of the service provider and the like. The authentication request unit 302 generates any one of the authentication requests 1 to 3 according to a predetermined setting and transmits it to the authentication server 10.

The authentication request unit 302 generates an authentication request in the format shown in FIG. In the authentication request, an ID indicating what type of authentication is requested (authentication type ID), an ID for identifying a service provider (service provider ID), two facial images, an electronic certificate, etc. are stored. Includes fields. As described above, the authentication request unit 302 may generate an authentication request including personal information read from the IC chip.

The authentication request unit 302 sets "1" for the authentication type ID when requesting biometric authentication and electronic authentication. When requesting electronic authentication, the authentication request unit 302 sets "2" for the authentication type ID. When requesting biometric authentication, the authentication request unit 302 sets "3" for the authentication type ID.

The authentication request unit 302 sets a blank in the information field that does not require authentication. For example, the authentication request unit 302 sets a blank in the face image field when transmitting the authentication request 2, and sets a blank in the electronic certificate field when transmitting the authentication request 3.

The format of the authentication request shown in FIG. 10 is an example, and the content is not intended to be limited. For example, the authentication type ID does not have to be included in the authentication request. The authentication server 10 may determine which type of authentication is requested according to the information set in the authentication request. For example, when the authentication request including the two facial images and the digital certificate is received, the authentication server 10 may determine that the authentication request 1 has been received. The authentication server 10 may determine that the authentication request that does not include the two facial images is the authentication request 2 and the authentication request that does not include the digital certificate is the authentication request 3.

Upon receiving the authentication failure from the authentication server 10, the authentication request unit 302 notifies the user via the terminal 30 to that effect.

Upon receiving the authentication success from the authentication server 10, the authentication request unit 302 hands over the user ID transmitted together with the authentication result to the service providing unit 303.

The service providing unit 303 is a means for providing a service to a successful authentication person. The service providing unit 303 manages users by using a business management database (DB; DataBase).

FIG. 11 is a diagram showing an example of a business management database according to the first embodiment. For example, the service providing unit 303 manages business using a database as shown in FIG.

For example, the service providing unit 303 adds a new entry if the user ID acquired from the authentication server 10 is not registered in the database.

If the user ID acquired from the authentication server is already registered in the database, the service providing unit 303 provides the service based on the information read from the corresponding entry. In the example of FIG. 11, the service providing unit 303 guides the certified successful person to the internal medicine department.

Of course, the business management database shown in FIG. 11 is an example and does not mean to limit its contents. For example, the service providing unit 303 may manage the user (authentication successful person) by using the basic 4 information or the like without using the user ID. Further, if the type of business and the type of business of the service provider are different, the information stored in the business management database is also different, and it is natural that the operation of the service providing unit 303 is different.

The biometric authentication unit 304 is a means for performing biometric authentication of the user. As shown in FIG. 4, the biometric authentication unit 304 is a module required when the business management server 20 executes biometric authentication.

When performing biometric authentication on the business management server 20, the authentication requesting unit 302 delivers two face images (photographed face image and chip face image) to the biometric authentication unit 304.

The biometric authentication unit 304 executes one-to-one collation using two face images. Specifically, the biometric authentication unit 304 generates a feature amount (feature vector composed of a plurality of feature amounts) from each of the two face images. The biometric authentication unit 304 calculates the similarity between the two features. If the calculated similarity is equal to or higher than a predetermined value, the biometric authentication unit 304 determines that the authentication is successful. If the calculated similarity is smaller than a predetermined value, the biometric authentication unit 304 determines that the authentication has failed.

Since existing technology can be used for the feature quantity generation process, detailed description thereof will be omitted. For example, the biometric authentication unit 304 extracts eyes, nose, mouth and the like as feature points from the face image. After that, the biometric authentication unit 304 calculates the position of each feature point and the distance between each feature point as a feature amount, and generates a feature vector (vector information that characterizes the face image) composed of a plurality of feature amounts. Further, the biometric authentication unit 304 calculates the chi-square distance, the Euclidean distance, and the like as the similarity of the feature amount (face image). The farther the distance is, the lower the similarity is, and the closer the distance is, the higher the similarity is.

The biometric authentication unit 304 notifies the authentication request unit 302 of the authentication result (authentication success, authentication failure).

When performing biometric authentication on the business management server 20, the authentication request unit 302 sends an authentication request 2 to the authentication server 10 according to the success of the biometric authentication. The authentication requesting unit 302 determines whether or not the authentication of the person to be authenticated is successful according to the results of the two authentications (biometric authentication and electronic authentication).

The storage unit 305 stores information necessary for the operation of the business management server 20.

[Authentication server]
FIG. 12 is a diagram showing an example of a processing configuration (processing module) of the authentication server 10 according to the first embodiment. Referring to FIG. 12, the authentication server 10 includes a communication control unit 401, an authentication request processing unit 402, an authentication history management unit 403, and a storage unit 404.

The communication control unit 401 is a means for controlling communication with other devices. For example, the communication control unit 401 receives data (packets) from the business management server 20. Further, the communication control unit 401 transmits data to the business management server 20. The communication control unit 401 passes the data received from the other device to the other processing module. The communication control unit 401 transmits the data acquired from the other processing module to the other device. In this way, the other processing module transmits / receives data to / from other devices via the communication control unit 401. The communication control unit 401 includes a function as a receiving unit for receiving an authentication request and a function as a transmitting unit for transmitting an authentication result.

The authentication request processing unit 402 is a means for processing an authentication request acquired from a service provider. The authentication request processing unit 402 includes submodules of the biometric authentication unit 411 and the electronic authentication unit 412.

When the authentication request 1 or the authentication request 3 is received from the business management server 20, the biometric authentication unit 411 performs biometric authentication.

The biometric authentication unit 411 executes one-to-one verification (biometric authentication) using the biometric information (photographed face image) of the person to be authenticated and the biometric information (chip face image) extracted from the identification card. That is, the biometric authentication unit 411 performs a collation process (one-to-one collation) using two face images (photographed face image and chip face image), and whether the two face images are images obtained from the same person. Judge whether or not. Since the operation of the biometric authentication unit 411 can be the same as that of the biometric authentication unit 304 of the business management server 20, further detailed description will be omitted.

When the authentication request 1 or the authentication request 2 is received from the business management server 20, the electronic authentication unit 412 performs electronic authentication.

The electronic authentication unit 412 sends the digital certificate to the verification server 40, and requests the verification server 40 to verify the certificate. When the response to the effect that the verification of the digital certificate is successful is received from the verification server 40, the electronic authentication unit 412 determines that the digital authentication is successful. When the response to the effect that the verification of the digital certificate has failed is received from the verification server 40, the electronic authentication unit 412 determines that the digital authentication has failed.

When the authentication request 1 is received, the authentication request processing unit 402 sets the authentication result to "authentication success" when both biometric authentication and electronic authentication are "successful". In other words, if at least one of biometric authentication and electronic authentication is "failure", "authentication failure" is set.

Further, the authentication request processing unit 402 may perform electronic authentication depending on the success of biometric authentication. That is, when the biometric authentication fails, the authentication result transmitted to the service provider is "authentication failure" regardless of the result of the electronic authentication. The authentication request processing unit 402 can suppress unnecessary verification requests by making an electronic authentication request to the verification server 40 in response to the success of biometric authentication. Alternatively, the authentication request processing unit 402 may perform biometric authentication depending on the success of the electronic authentication.

When the authentication request 2 is received, the authentication request processing unit 402 sets the authentication result to "authentication successful" when the electronic authentication is "successful".

When the authentication request 3 is received, the authentication request processing unit 402 sets the authentication result to "authentication successful" when the biometric authentication is "successful".

When "authentication success" is set in the authentication result, the authentication request processing unit 402 generates a user ID for identifying the authentication success person. The authentication request processing unit 402 generates the user ID by an arbitrary method. For example, the authentication request processing unit 402 may generate a user ID by calculating a hash value of a face image (feature amount) of a successful authentication person. Alternatively, the authentication request processing unit 402 may concatenate the four basic information (name, gender, address, date of birth) of the successful authentication person, and generate the hash value of the concatenated value as the user ID. If the successful authentication user is not a new user, it is not necessary for the authentication request processing unit 402 to generate a user ID. The authentication request processing unit 402 may determine (specify) whether or not the user is new by using the authentication history database described later.

When the authentication of the authenticated person is successful, the authentication request processing unit 402 sends the authentication result (authentication success) including the generated user ID to the business management server 20. When the authentication of the person to be authenticated fails, the authentication request processing unit 402 notifies the business management server 20 of the fact (authentication failure). The response sent from the authentication request processing unit 402 to the business management server 20 may include other information (for example, the name of the person to be authenticated, the date and time of authentication, etc.) in addition to the authentication result.

The authentication request processing unit 402 hands over the generated user ID and the service provider ID extracted from the authentication request to the authentication history management unit 403.

The authentication history management unit 403 is a means for managing the authentication history of successful authentication persons. The authentication history management unit 403 manages the authentication history using the authentication history database. The authentication history database stores the history of successful authentication for each service provider for each of biometric authentication and electronic authentication.

FIG. 13 is a diagram showing an example of the authentication history database according to the first embodiment. As shown in FIG. 13, the date and time when the biometric authentication and the electronic authentication are successful are stored for each user ID of the successful authentication person and the service provider.

The authentication history management unit 403 searches the authentication history database using the user ID acquired from the authentication request processing unit 402 as a key. If there is no corresponding entry, the authentication history management unit 403 generates a new entry and stores the date and time of biometric authentication and electronic authentication separately for each service provider.

If the entry corresponding to the user ID exists and the corresponding service provider field exists, the authentication history management unit 403 updates the authentication date and time stored in the field. If the entry corresponding to the user ID does not exist and the corresponding service provider field does not exist, the authentication history management unit 403 adds a new service provider field and stores the authentication date and time in the field. ..

In this way, the authentication history management unit 403 updates the authentication history database using the authentication dates and times of the user ID, the service provider ID, the biometric authentication, and the electronic authentication.

As shown in FIG. 13, even if the same authentication is successful, the required authentication method (biometric authentication, electronic authentication) may differ depending on the service provider.

The authentication history management unit 403 manages the authentication history of each service provider, so that the service provider can refer to the authentication history of the user. Specifically, the service provider transmits the user ID of the user who wants to refer to the history and his / her service provider ID to the authentication server 10. The authentication history management unit 403 specifies the corresponding authentication date and time based on the user ID and the service provider ID, and returns the authentication date and time to the service provider.

The storage unit 404 stores information necessary for the operation of the authentication server 10.

[Verification server]
The verification server 40 can be configured by the existing authentication infrastructure technology, and its configuration and operation are obvious to those skilled in the art, so detailed description thereof will be omitted.

[System operation]
Subsequently, the operation of the authentication system according to the first embodiment will be described.

FIG. 14 is a sequence diagram showing an example of the operation of the authentication system according to the first embodiment.

The terminal 30 acquires the user's face image and IC chip information, and transmits these information to the business management server 20 (step S01).

The business management server 20 generates an authentication request using the acquired face image and IC chip information, and sends the authentication request to the authentication server 10 (step S02).

The authentication server 10 confirms the "authentication type ID" included in the authentication request, and determines the authentication method that needs to be executed (step S03).

The authentication server 10 executes the determined authentication method (execution of authentication; step S04). Specifically, when the authentication request 1 is received, the authentication server 10 executes biometric authentication and electronic authentication. When the authentication request 2 is received, the authentication server 10 executes electronic authentication. Upon receiving the authentication request 3, the authentication server 10 executes biometric authentication.

The authentication server 10 generates an authentication result and sends it to the business management server 20 (step S05).

Upon receiving the successful authentication, the service provider (terminal 30, business management server 20) provides the service to the user (step S06).

As described above, in the authentication system according to the first embodiment, the authentication server 10 processes an authentication request from a service provider. In particular, the authentication server 10 can process an authentication request that simultaneously requests biometric authentication and electronic authentication of the person to be authenticated. As a result, the service provider does not need to take measures such as the staff or the like comparing the face of the user with the face written on the ID card. Since the validity of the identification card is guaranteed by the electronic authentication using the electronic information, the service provider can provide the service to the user based on the highly reliable and reliable information. That is, in the authentication system according to the first embodiment, it is not necessary for the staff or the like to compare faces and determine whether or not the identification card is correct. Further, in the authentication system according to the first embodiment, two identity verifications (identity verifications) can be performed in parallel, so that efficient identity verification using an identification card is realized.

Since the authentication server 10 can respond to various requests (biometric authentication and electronic authentication request, electronic authentication limited request, biometric limited limited request), it is flexible according to the type of business, business type, etc. of each of the plurality of service providers. Authentication services can be provided.

[Second Embodiment]
Subsequently, the second embodiment will be described in detail with reference to the drawings.

In the first embodiment, the case where the service provider sends an authentication request suitable for its own industry and business type to the authentication server 10 and the authentication server 10 responds to the request has been described. Here, depending on the type of business of the service provider, there are cases where biometric authentication and electronic authentication are required but either authentication can be omitted. For example, in a medical institution such as a hospital, the above two certifications are required at the time of the first medical examination, but it is conceivable to omit the electronic certification within the same month.

In the second embodiment, a case where the authentication server 10 provides a flexible authentication service in line with the business of each service provider will be described.

Since the configuration of the authentication system according to the second embodiment can be the same as that of the first embodiment, the description corresponding to FIG. 2 will be omitted. Further, since the processing configuration of the authentication server 10, the business management server 20, and the terminal 30 according to the second embodiment can be the same as that of the first embodiment, the description thereof will be omitted.

Hereinafter, the differences between the first and second embodiments will be mainly described.

The service provider according to the second embodiment pre-registers an authentication policy that defines how the authentication server 10 processes the authentication request transmitted by itself in the authentication server 10.

For example, the service provider S1 requests biometric authentication and electronic authentication (sends authentication request 1 to authentication server 1). Regarding the processing of the authentication request 1, the service provider S1 registers in the authentication server 10 an authentication policy that requires the execution of each of biometric authentication and electronic authentication each time the authentication request is received.

The service provider S2 also requests biometric authentication and electronic authentication from the authentication server 10 in the same manner as the service provider S1. Regarding the processing of the authentication request 1, the service provider S2 requires that biometric authentication be executed each time the authentication request is received, while the electronic authentication requires authentication once within the same month. To register with.

The service provider can also register the same authentication policy in the authentication server 10 even when requesting only one of biometric authentication and electronic authentication. For example, the service provider requests electronic authentication (authentication request 2 is transmitted to the authentication server 10). The service provider can also register an authentication policy that executes electronic authentication once a month in the authentication server 10 regarding the processing of the authentication request 2.

The detailed explanation on how to register the authentication policy by the service registrant is omitted. The service provider may register the authentication policy in the authentication server 10 by any method. For example, the certification policy may be registered when the service provider participates in the certification system, or the person in charge of the service provider may visit the certification center and register the certification policy. The service provider may notify (input) the assigned service provider ID and the authentication policy to the authentication server 10.

The authentication server 10 according to the second embodiment stores the authentication policy for each service provider. The authentication server 10 includes an authentication policy database for storing authentication policies (see FIG. 15). The authentication policy database stores the ID of the service provider and the authentication policy in association with each other.

The authentication request processing unit 402 processes the authentication request based on the authentication policy defined by the service provider as the authentication request processing method. Hereinafter, the operation of the authentication request processing unit 402 will be described with reference to the drawings.

FIG. 16 is a flowchart showing an example of the operation of the authentication server 10 according to the second embodiment. With reference to FIG. 16, the operation of the authentication request processing unit 402 will be mainly described.

Upon receiving the authentication request from the business management server 20, the authentication request processing unit 402 generates a user ID of the person to be authenticated (step S101).

The authentication request processing unit 402 searches the authentication history database using the generated user ID as a key (step S102). In the authentication request processing unit 402, the authenticated person is a user who has been authenticated in the past (hereinafter referred to as an existing authenticated person) or a user who is newly authenticated (hereinafter referred to as a new authenticated person) by the search. (Indicated as a person)).

If the entry corresponding to the generated user ID exists in the authentication history database, the authentication request processing unit 402 determines that the authenticated person is an "existing authenticated person". If the entry corresponding to the generated user ID does not exist in the authentication history database, the authentication request processing unit 402 determines that the authenticated person is a "new authenticated person".

If the authenticated person is a new authenticated person (step S103, Yes branch), the authentication request processing unit 402 executes the process described in the first embodiment. That is, the authentication request processing unit 402 executes the authentication process according to the type of the authentication request (step S104).

If the authenticated person is an existing authenticated person (step S103, No branch), the authentication request processing unit 402 searches the authentication policy database using the service provider ID acquired together with the authentication request as a key, and obtains the corresponding authentication policy. Specify (step S105).

The authentication request processing unit 402 determines whether or not each of biometric authentication and electronic authentication for the person to be authenticated (existing person to be authenticated) needs to be executed (step S106). Specifically, the authentication request processing unit 402 biometrically authenticates based on the authentication policy of the service provider (the service provider that is the sender of the authentication request) and the authentication history of the existing authenticated person obtained from the authentication history database. And, it is judged whether or not the electronic authentication needs to be executed.

For example, regarding the authentication policy of the service provider S1 shown in FIG. 15, since it is required to execute biometric authentication and electronic authentication each time an authentication request is received, the authentication request processing unit 402 performs the authentication history of the person to be authenticated. It is determined that two authentications are executed regardless of the above.

On the other hand, regarding the authentication policy of the service provider S2, it is necessary to execute biometric authentication, but whether or not to execute electronic authentication is determined according to the authentication record of the existing certified person. In other words, if the date of electronic authentication immediately before and the date of receiving the authentication request are within the same month, it is judged that electronic authentication is not necessary, and if the date of receipt is different from the above authentication date, electronic authentication is required. Is judged. In this way, the authentication request processing unit 402 determines whether or not to execute the electronic authentication based on the authentication policy and the electronic authentication history stored in the authentication history database.

The authentication request processing unit 402 executes authentication (biometric authentication, electronic authentication) determined to be necessary (step S107).

The authentication request processing unit 402 transmits the authentication result to the business management server 20 (step S108). If the authentication is not performed according to the authentication policy, the authentication request processing unit 402 treats the unexecuted authentication according to the authentication policy as "authentication success" and generates the authentication result (authentication success, authentication failure) for the authentication request. Just do it. Alternatively, the authentication request processing unit 402 may notify the business management server 20 of an authentication method that has not been implemented according to the authentication policy.

As described above, the authentication system according to the second embodiment can meet the complicated demands of the service provider by using the authentication policy. That is, the service provider does not need to manage the user's authentication status (authentication history), and by transmitting the user's biometric information and electronic information to the authentication server 10, the minimum required for providing his / her own service. Limited authentication can be performed. Further, in the second embodiment, since the data transmission / reception between the authentication server 10 and the verification server 40 is reduced, it is possible to suppress the frequent transmission / reception of highly confidential information such as a digital certificate.

[Third Embodiment]
Subsequently, the third embodiment will be described in detail with reference to the drawings.

In the first and second embodiments, the description has been made on the premise that one type of authentication request is transmitted from one service provider. However, depending on the type of business and business type of the service provider, different types of authentication requests may be sent from the same service provider to the certification center.

For example, consider the case where the service provider is a casino operator. In this case, a terminal 30 is installed at the entrance / exit to the casino, and a user who has passed biometric authentication and electronic authentication can enter. In addition, shops and the like are set up in various places in the casino, and biometric authentication is used to settle the purchase of goods at the shops.

The third embodiment describes a case where a plurality of types of authentication requests are transmitted to the authentication server 10 as in a casino.

Since the configuration of the authentication system according to the third embodiment can be the same as that of the first embodiment, the description corresponding to FIG. 2 will be omitted. Further, since the processing configuration of the authentication server 10, the business management server 20, and the terminal 30 according to the third embodiment can be the same as that of the first embodiment, the description thereof will be omitted.

Hereinafter, the differences between the first to third embodiments will be mainly described.

The service provider according to the third embodiment registers the authentication policy including the matters accompanying the authentication in the authentication server 10 in addition to the policy regarding the implementation of the authentication (biometric authentication, electronic authentication). The authentication server 10 provides an authentication service as required by the casino operator or the like by performing an operation according to the authentication policy.

The service provider registers the following authentication policy 1 regarding authentication request 1.

<Authentication policy 1>
When the authentication request 1 requesting the biometric authentication and the electronic authentication is received, the biometric information of the successful authentication person and the personal information are associated and stored in the biometric information database. The personal information in this case includes credit information for payment (for example, bank account, credit card information).

Furthermore, the service provider registers the following authentication policy 2 regarding the authentication request 3.

<Authentication policy 2>
When the authentication request 3 requesting biometric authentication is received, 1-to-N (N is a positive integer, the same applies hereinafter) collation using the biometric information database is executed, and the corresponding personal information is transmitted to the service provider.

Upon receiving the authentication request from the business management server 20, the authentication request processing unit 402 according to the third embodiment acquires the service provider ID. The authentication request processing unit 402 refers to the authentication policy database using the service provider ID and acquires the corresponding authentication policy.

When the authentication request 1 is received from the service provider who registered the above authentication policies 1 and 2, the authentication request processing unit 402 executes the process according to the "authentication policy 1".

In this case, the authentication request processing unit 402 executes biometric authentication and electronic authentication. The authentication request processing unit 402 notifies the business management server 20 of the authentication result. If both authentications are successful, the authentication request processing unit 402 associates the face image (photographed face image and / or chip face image) of the successful authentication person acquired from the business management server 20 with the personal information. Store in the biometric information database (see FIG. 17).

When the authentication request 3 is received from the business management server 20 of the service provider, the authentication request processing unit 402 executes the process according to the "authentication policy 2".

In this case, the authentication request processing unit 402 executes biometric authentication. At that time, the authentication request processing unit 402 (biometric authentication unit 411) sets the face image acquired from the business management server 20 on the collation side and the face image registered in the biometric information database on the registration side, respectively, and performs 1-to-N collation. To execute. The biometric authentication unit 411 identifies the face image of the registration side having the similarity between the collation side and the registration side at a predetermined value or more and has the highest similarity, and acquires the corresponding personal information. The authentication request processing unit 402 calculates the feature amount from the face image and calculates the similarity (distance) between the feature amounts.

The authentication request processing unit 402 transmits the personal information of the successful authentication person to the business management server 20.

The business management server 20 provides a service to a successful authentication person using the acquired personal information. For example, the business management server 20 performs payment processing using credit information registered as personal information.

The operation according to the third embodiment will be specifically described with reference to FIG. Note that the business management server 20 is not shown in FIG. The authentication terminal 30 and the authentication server 10 transmit and receive data via the business management server 20.

User U1 presents an ID card to the terminal 30-3 installed at the entrance of a casino or the like. The user U1 operates the terminal 30-3 to input personal information (credit information). Alternatively, the personal information may be input using a terminal such as a smartphone of the user U1. For example, personal information may be input to the terminal 30-3 by presenting the two-dimensional bar code including the personal information to the terminal 30-3.

The terminal 30-3 transmits the face image, IC chip information, and personal information of the user U1 to the business management server 20. The business management server 20 transmits the authentication request 1 including the face image, the digital certificate, and the personal information acquired from the terminals 30-3 to the authentication server 10.

If the authentication results of both biometric authentication and electronic authentication are successful, the authentication server 10 stores the face image of the successful authentication person (user U1) and personal information in the biometric information database in association with each other.

The authentication server 10 notifies the service provider (business management server 20, terminal 30-3) of the success of the authentication. Upon receiving the successful authentication, the terminal 30-3 opens the gate and allows the user U1 to enter.

User U1 moves to the casino and pays for the purchased product at the terminal 30-4 installed at the shop.

The terminal 30-4 acquires the face image of the user U1 and sends it to the business management server 20. The business management server 20 transmits an authentication request 3 including a face image of the user U1 to the authentication server 10.

The authentication server 10 identifies the personal information of the user U1 by biometric authentication. More specifically, the authentication server 10 executes 1-to-N collation using the face image registered in the biological information database and the face image extracted from the authentication request 3, and identifies the personal information of the user U1.

The authentication server 10 transmits the specified personal information (credit information) to the service provider (business management server 20, authentication terminal 30-4).

The service provider completes the payment processing of the user U1 using the acquired personal information.

As described above, the authentication server 10 according to the third embodiment is required to perform biometric authentication and electronic authentication by a service provider that sends different types of authentication requests. When the biometric authentication and the electronic authentication are successful, the authentication server 10 stores the biometric information of the successful authentication person and the personal information (credit information) in the biometric information database in association with each other. When the service provider requests biometric authentication, the authentication server 10 performs a one-to-N verification using the biometric information stored in the biometric information database and the biometric information of the authenticated person to perform the individual authentication of the authenticated person. Identify the information. The authentication server 10 transmits the specified personal information to the service provider. As a result, in the third embodiment, even if different types of authentication are required in the same facility, the service provider can realize the required authentication without being aware of the specific content of the authentication process. That is, in the third embodiment, the authentication terminal 30 installed at the entrance is set to transmit the authentication request 1 and the authentication terminal 30 installed at the shop is set to transmit the authentication request 3, as in the casino hall. It is possible to provide an authentication service suitable for the service provider.

Next, the hardware of each device that constitutes the authentication system will be described. FIG. 19 is a diagram showing an example of the hardware configuration of the authentication server 10.

The authentication server 10 can be configured by an information processing device (so-called computer), and includes the configuration illustrated in FIG. For example, the authentication server 10 includes a processor 311, a memory 312, an input / output interface 313, a communication interface 314, and the like. The components such as the processor 311 are connected by an internal bus or the like and are configured to be able to communicate with each other.

However, the configuration shown in FIG. 19 does not mean to limit the hardware configuration of the authentication server 10. The authentication server 10 may include hardware (not shown). Further, the number of processors 311 and the like included in the authentication server 10 is not limited to the example shown in FIG. 19, and for example, a plurality of processors 311 may be included in the authentication server 10.

The processor 311 is a programmable device such as a CPU (Central Processing Unit), an MPU (Micro Processing Unit), and a DSP (Digital Signal Processor). Alternatively, the processor 311 may be a device such as an FPGA (Field Programmable Gate Array) or an ASIC (Application Specific Integrated Circuit). The processor 311 executes various programs including an operating system (OS).

The memory 312 is a RAM (RandomAccessMemory), a ROM (ReadOnlyMemory), an HDD (HardDiskDrive), an SSD (SolidStateDrive), or the like. The memory 312 stores an OS program, an application program, and various data.

The input / output interface 313 is an interface of a display device or an input device (not shown). The display device is, for example, a liquid crystal display or the like. The input device is, for example, a device that accepts user operations such as a keyboard and a mouse.

The communication interface 314 is a circuit, module, etc. that communicates with other devices. For example, the communication interface 314 includes a wireless communication circuit, a NIC (Network Interface Card), and the like.

The function of the authentication server 10 is realized by various processing modules. The processing module is realized, for example, by the processor 311 executing a program stored in the memory 312. The program can also be recorded on a computer-readable storage medium. The storage medium may be a non-transient such as a semiconductor memory, a hard disk, a magnetic recording medium, or an optical recording medium. That is, the present invention can also be embodied as a computer program product. Further, the above program can be downloaded via a network or updated by using a storage medium in which the program is stored. Further, the processing module may be realized by a semiconductor chip.

Note that the business management server 20, the terminal 30, and the like can also be configured by the information processing device in the same manner as the authentication server 10, and the basic hardware configuration thereof is not different from that of the authentication server 10, so the description thereof will be omitted. For example, the terminal 30 may be provided with a camera for photographing a user or a card reader for reading information from an IC chip.

The authentication server 10 is equipped with a computer, and the function of the authentication server 10 can be realized by causing the computer to execute a program. Further, the authentication server 10 executes the authentication request processing method by the program.

[Modification example]
The configuration, operation, and the like of the authentication system described in the above embodiment are examples, and are not intended to limit the system configuration and the like.

In the above embodiment, the case where the user who receives the service visits the service provider and presents the identification card is mainly described. However, the disclosure of the present application can be applied even when the user receives the service via the WEB (web) page or the like. Specifically, the user takes a face image of himself / herself using a terminal such as a smartphone, and registers the face image on the WEB page. Further, the user may input the IC chip information read from the IC chip of the identification card into the WEB page using a card reader.

The disclosure of this application is intended for any identification card that stores electronic information. For example, a driver's license equipped with an IC chip may be used as an identification card, or an identification card for certifying a specific qualification (for example, a doctor) may be used. Alternatively, if an IC chip is mounted on an identification card such as an SNN (Social Security Number) card in the United States, the card can also be used as the identification card disclosed in the present application.

In the above embodiment, electronic authentication using an electronic certificate extracted from an IC chip has been described. However, the information used for electronic authentication is not limited to the electronic certificate, and the electronic signature may be used for the electronic authentication. When the authentication server 10 receives an authentication request including an electronic signature extracted from the IC chip of the driver's license, the authentication server 10 acquires information for verifying the electronic signature from an external server. Specifically, the authentication server 10 acquires the public key of the signer of the electronic signature (the issuer of the driver's license). When the authentication server 10 succeeds in verifying the electronic signature using the acquired information (public key), the authentication server 10 determines that the electronic authentication is successful. Alternatively, even if the identification card does not store an electronic certificate, an electronic signature, etc. like a passport, the authentication server 10 can perform electronic authentication using the information taken out from the IC chip of the identification card. be. For example, the authentication server 10 may perform electronic authentication by inquiring an external server about the validity of the passport number and the like.

In the above embodiment, the case where the biometric information related to the "face image" is transmitted from the business management server 20 to the authentication server 10 has been described. However, the biometric information related to the "feature amount generated from the face image" may be transmitted from the business management server 20 to the authentication server 10. Further, if the chip face image read from the IC chip is biometric information related to the "feature amount", the authentication server 10 generates a feature amount corresponding to the chip face image from the photographed face image and performs biometric authentication (1). One-to-one matching) may be executed.

The plurality of authentication terminals 30 owned by the service provider do not have to be installed on the same site, building, or the like. If the service providers are common, each authentication terminal 30 may be installed in a spatially separated place.

In the above embodiment, the case where the authentication server 10 generates the user ID and notifies the service provider of the user ID has been described. However, the business management server 20 may generate a user ID, and the generated user ID may be notified to the authentication server 10. For example, the business management server 20 may generate a user ID from the basic 4 information. In this case, frequent transmission / reception of personal information can be suppressed.

In the above embodiment, it has been described that the authentication server 10 notifies only the fact to the business management server 20 when the authentication fails. The authentication server 10 may also notify the business management server 20 of the reason why the authentication has failed. For example, the authentication server 10 may notify the business management server 20 of the type (biometric authentication, electronic authentication) for which authentication has failed. Alternatively, when the electronic authentication fails, the authentication server 10 may notify the business management server 20 of the reason for the failure of the electronic authentication (for example, the validity period of the electronic certificate has expired). The service provider may notify the user of the reason why the authentication fails. Alternatively, the terminal 30 may display so that the reason why the user cannot receive the service can be intuitively grasped. For example, the terminal 30 clearly informs the user whether the service cannot be provided due to an incorrect password or whether the service cannot be provided because the validity period of the identification card has expired. May be provided.

Alternatively, even if the validity period of the digital certificate has not expired, the authentication server 10 may notify the business management server 20 of the fact when the validity period is about to expire. The service provider may notify the user of the fact that the validity period of the digital certificate is about to expire.

In the above embodiment, the case where the user inputs the password for reading the digital certificate has been described. However, by storing the password in the authentication server 10, the user can omit the input of the password. The user registers his / her face image and the above password in the authentication server 10. The terminal 30 transmits the photographed face image and the IC chip information to the business management server 20. The business management server 20 transmits the photographed face image to the authentication server 10. The authentication server 10 executes collation (one-to-N collation) using the face image registered in advance and the photographed face image acquired via the business management server 20, and identifies the corresponding password. The authentication server 10 transmits the specified password to the business management server 20. The business management server 20 retrieves the digital certificate using the acquired password. Regarding the subsequent processing, the business management server 20 may transmit the authentication request 1 or the authentication request 2 described above. Alternatively, when the business management server 20 supports biometric authentication, the business management server 20 may store the user's biometric information and the password in association with each other. In this case, the business management server 20 can acquire the digital certificate without obtaining the password for extracting the digital certificate from the authentication server 10. That is, when the authentication request 2 is transmitted, if the biometric authentication by the service provider on the edge side is successful, the business management server 20 can read the electronic certificate without acquiring the password from the user.

The authentication server 10 may check the authentication history periodically or at a predetermined timing, and notify the service provider (business management server 20) of various information according to the result. For example, the authentication server 10 uses a successful authentication person (user who has entered the casino) according to the authentication request 1 after a predetermined time (for example, 24 hours) has elapsed after processing the authentication request 1 from the casino. The person ID may be notified to the business management server 20. The casino operator may urge the corresponding user (the user who has passed 24 hours after entering the casino) to leave and re-enter in response to the notification. Alternatively, the authentication server 10 may again request the user who has passed a predetermined period of time after entering the casino to perform biometric authentication and electronic authentication by presenting an identification card. Specifically, the authentication server 10 notifies the service provider (business management server 20) of the above fact (a predetermined period has passed since the entrance to the casino) and the user ID of the user. Even if the service provider (business management server 20) instructs (notifies) the user corresponding to the notified user ID to leave the casino once and move to the authentication terminal 30 at the entrance. good. Alternatively, the service provider may instruct the user to move to the authentication terminal 30 installed inside the casino. The user may present the identification card at the instructed authentication terminal 30 and receive biometric authentication and electronic authentication again.

When processing an authentication request from one service provider, the authentication server 10 may use the result (authentication history) of processing the authentication request from another service provider. For example, in the example of FIG. 13, consider the case where the authentication server 10 receives the authentication request 1 from the service provider S2. In this case, if the month including the authentication request date is "July 2020", the user (use) because the immediately preceding electronic authentication date and the authentication request date are not within the same month according to the authentication policy of the service provider S2. Electronic authentication of the user whose personal ID is ID 11) is executed. However, since the electronic authentication by the service provider S1 of the user has already been executed and succeeded in "July 2020", the authentication server 10 has "the immediately preceding electronic authentication date and the authentication request date" due to the fact. It is also possible to omit the electronic authentication by judging that it is within the same month.

In the above embodiment, it has been explained that the service provider registers its own authentication policy in the authentication server 10 in advance. However, the service provider may send the authentication policy to the authentication server 10 together with the authentication request. With such a response, even if the authentication policy of the service provider is changed, it is possible to change the processing method of the authentication request without requiring any procedure.

In the third embodiment, a case where different authentication requests (different types of authentication requests) are processed from the same service provider by the authentication policy has been described. However, in the authentication system according to the third embodiment, the authentication request may be extended to realize the request of the service provider. For example, the authentication server 10 processes an authentication request whose authentication type is set to "4" according to the contents of the authentication policy 1 described above. The authentication server 10 processes the authentication request whose authentication type is set to "5" according to the contents of the authentication policy 2 described above.

The third embodiment may be applied to the provision of services related to preferential treatment regarding the use of transportation by the local government to the elderly and persons with disabilities. Specifically, the service provider (local government) requests the authentication server 10 for both biometric authentication and electronic authentication when issuing a welfare pass to the elderly and the like. When a user who has a welfare pass uses transportation, the transportation provides biometric information (photographed face image, chip face image) of the user to the business management server 20. The business management server 20 requests the authentication server 10 to authenticate the biometric information. The business management server 20 manages the use of the welfare pass according to the result of biometric authentication. Also, regarding the provision of services related to the welfare pass, if electronic authentication is not required within the same month, as in the second embodiment, biometric authentication is executed only within the same month, and electronic authentication is omitted. good.

In the above embodiment, the explanation was given by taking the case where one type of identification card is presented to the service provider as an example. However, the identification card presented to each service provider may be different. In this case, the authentication server 10 may change the request destination for electronic verification or the like according to the type of the presented identification card (IC chip information acquired from the service provider). That is, the authentication system may include a plurality of external servers 50 as shown in FIG. The authentication server 10 (electronic authentication unit 412) may switch the external server 50 to be accessed according to the type of the identification card presented by the user to the service provider. The authentication server 10 may determine the type of the identification card presented from the information (for example, an electronic certificate) acquired from the business management server 20, or the type of the identification card presented by the business management server 20. May be notified to the authentication server 10.

As described above, the authentication server 10 when a plurality of external servers 50 are included performs the operation as shown in FIG. 21. The authentication server 10 acquires information regarding the identification card acquired from the service provider (step S201). The authentication server 10 specifies the type of the acquired identification card (step S202). The authentication server 10 selects an external server 50 (verification server) to be accessed according to the type of the specified identification card (step S203). The authentication server 10 accesses the selected external server 50 and performs electronic authentication suitable for the specified identification card (step S204).

As described above, when the system supports a plurality of identification cards, the authentication server 10 may store the authentication history for each identification card. More specifically, the authentication server 10 may store and manage the successful date and time of electronic authentication for each identification card (or for each external server 50).

The certification center can request the service provider that provided the certification service to pay the fee. At that time, the certification center may change the amount to be charged according to the type of service provider (public institution or private operator) and industry (financial industry, retail industry, etc.).

The form of data transmission / reception between each device (authentication server 10, business management server 20, terminal 30) is not particularly limited, but the data transmitted / received between these devices may be encrypted. Biometric information is transmitted and received between these devices, and it is desirable that encrypted data be transmitted and received in order to appropriately protect the biometric information.

In the flow chart (flow chart, sequence diagram) used in the above description, a plurality of processes (processes) are described in order, but the execution order of the processes executed in the embodiment is not limited to the order of description. In the embodiment, the order of the illustrated processes can be changed within a range that does not hinder the contents, for example, each process is executed in parallel.

The above embodiment has been described in detail in order to facilitate understanding of the disclosure of the present application, and is not intended to require all the configurations described above. Moreover, when a plurality of embodiments are described, each embodiment may be used alone or in combination. For example, it is possible to replace a part of the configuration of the embodiment with the configuration of another embodiment, or to add the configuration of another embodiment to the configuration of the embodiment. Further, it is possible to add, delete, or replace a part of the configuration of the embodiment with another configuration.

Although the industrial applicability of the present invention is clear from the above description, the present invention is suitably applicable to an authentication system or the like for identity verification using an identification card.

Some or all of the above embodiments may also be described, but not limited to:
[Appendix 1]
A receiver that receives an authentication request from a service provider regarding a person to be authenticated who presents an ID card.
An authentication request processing unit that processes the authentication request by executing biometric authentication using the biometric information of the person to be authenticated and electronic authentication using the electronic information extracted from the identification card. ,
A transmission unit that transmits authentication results according to the results of the biometric authentication and the electronic authentication to the service provider, and
An authentication server.
[Appendix 2]
The authentication server according to Appendix 1, wherein the authentication request processing unit executes at least one of the biometric authentication and the electronic authentication according to the type of the authentication request.
[Appendix 3]
The authentication server according to Appendix 1 or 2, wherein the authentication request processing unit executes one-to-one collation using the biometric information of the person to be authenticated and the biometric information extracted from the identification card as the biometric authentication.
[Appendix 4]
If the electronic information is an electronic certificate, the authentication request processing unit requests an external server to verify the electronic certificate, and if the verification result is successful, it is determined that the electronic authentication is successful. The authentication server according to any one of Supplementary note 1 to 3.
[Appendix 5]
The authentication server according to any one of Supplementary note 1 to 4, further comprising an authentication history database that stores the history of successful authentication for each of the biometric authentication and the electronic authentication for each service provider.
[Appendix 6]
The authentication server according to Appendix 5, wherein the authentication request processing unit processes the authentication request based on the authentication policy defined by the service provider for the processing method of the authentication request.
[Appendix 7]
The authentication server according to Appendix 6, further comprising an authentication policy database that stores the ID of the service provider in association with the authentication policy.
[Appendix 8]
The authentication server according to Appendix 7, wherein the authentication request processing unit determines whether or not to execute the electronic authentication based on the authentication policy and the history of the electronic authentication stored in the authentication history database.
[Appendix 9]
The authentication request processing unit is
If the service provider who sends a different type of authentication request requests the biometric authentication and the electronic authentication, and the biometric authentication and the electronic authentication are successful, the biometric information and the individual of the authentication successful person. The information is associated and stored in the biometric information database,
When the biometric authentication is requested by the service provider who sends the different type of authentication request, a pair using the biometric information stored in the biometric information database and the biometric information of the person to be authenticated. The personal information of the person to be authenticated is identified by N collation,
The transmitter is
The authentication server according to any one of Supplementary note 1 to 8, which transmits the specified personal information to the service provider that transmits the authentication request of the different type.
[Appendix 10]
The authentication request processing unit executes the biometric authentication using the face image of the person to be authenticated and the face image extracted from the IC chip of the identification card, and also uses the electronic certificate stored in the IC chip. The authentication server according to Appendix 9, which is used to perform the electronic authentication.
[Appendix 11]
If the electronic information is an electronic signature, the authentication request processing unit acquires information for verifying the electronic signature from an external server, and when the verification of the electronic signature is successful, the electronic authentication is performed. The authentication server according to any one of Supplementary note 1 to 3, which is determined to be successful.
[Appendix 12]
A business management server that sends an authentication request for a person to be authenticated who presents an ID card,
The authentication server connected to the business management server and
Including
The authentication server is
The receiver that receives the authentication request and
An authentication request processing unit that processes the authentication request by executing biometric authentication using the biometric information of the person to be authenticated and electronic authentication using the electronic information extracted from the identification card. ,
A transmission unit that transmits authentication results according to the results of the biometric authentication and the electronic authentication to the business management server.
With an authentication system.
[Appendix 13]
On the authentication server
Receive an authentication request from the service provider regarding the person to be authenticated who presents the ID card,
The authentication request is processed by executing the biometric authentication using the biometric information of the person to be authenticated and the electronic authentication using the electronic information extracted from the identification card.
An authentication request processing method for transmitting an authentication result corresponding to the result of the biometric authentication and the electronic authentication to the service provider.
[Appendix 14]
On the computer installed in the authentication server,
The process of receiving an authentication request from the service provider regarding the person to be authenticated who presents the ID card,
A process for executing biometric authentication using the biometric information of the person to be authenticated and electronic authentication using the electronic information extracted from the identification card.
The process of transmitting the authentication result according to the result of the biometric authentication and the electronic authentication to the service provider, and
A computer-readable storage medium that stores programs for executing.

The disclosures of the above-mentioned prior art documents cited shall be incorporated into this document by citation. Although the embodiments of the present invention have been described above, the present invention is not limited to these embodiments. It will be appreciated by those skilled in the art that these embodiments are merely exemplary and that various modifications are possible without departing from the scope and spirit of the invention. That is, it goes without saying that the present invention includes all disclosure including claims, various modifications and modifications that can be made by those skilled in the art in accordance with the technical idea.

10, 100

Authentication server

20, 21 Business management server 30, 31, 30-1 to 30-4, 31-1, 31-2 Terminal 40 Verification server 50, 50-1, 50-2 External server 101

Receiver

102, 402 Authentication request processing unit 103

Transmission unit

201, 301, 401 Communication control unit 202 User information acquisition unit 203

Message output unit

204, 305, 404 Storage unit 302 Authentication request unit 303

Service provision unit

304, 411 Bioauthentication unit 311 Processor 312 Memory 313 Input / output interface 314 Communication interface 403 Authentication history management unit 412 Electronic authentication unit

Claims

A receiver that receives an authentication request from a service provider regarding a person to be authenticated who presents an ID card.
An authentication request processing unit that processes the authentication request by executing biometric authentication using the biometric information of the person to be authenticated and electronic authentication using the electronic information extracted from the identification card. ,
A transmission unit that transmits authentication results according to the results of the biometric authentication and the electronic authentication to the service provider.
An authentication server.
The authentication server according to claim 1, wherein the authentication request processing unit executes at least one of the biometric authentication and the electronic authentication according to the type of the authentication request.
The authentication server according to claim 1 or 2, wherein the authentication request processing unit executes one-to-one collation using the biometric information of the person to be authenticated and the biometric information extracted from the identification card as the biometric authentication. ..
If the electronic information is an electronic certificate, the authentication request processing unit requests an external server to verify the electronic certificate, and if the verification result is successful, it is determined that the electronic authentication is successful. The authentication server according to any one of claims 1 to 3.
The authentication server according to any one of claims 1 to 4, further comprising an authentication history database that stores the history of successful authentication for each of the biometric authentication and the electronic authentication for each service provider.
The authentication server according to claim 5, wherein the authentication request processing unit processes the authentication request based on the authentication policy defined by the service provider as the processing method of the authentication request.
The authentication server according to claim 6, further comprising an authentication policy database that stores the ID of the service provider in association with the authentication policy.
The authentication server according to claim 7, wherein the authentication request processing unit determines whether or not to execute the electronic authentication based on the authentication policy and the electronic authentication history stored in the authentication history database.
The authentication request processing unit is
If the service provider who sends a different type of authentication request requests the biometric authentication and the electronic authentication, and the biometric authentication and the electronic authentication are successful, the biometric information and the individual of the authentication successful person. The information is associated and stored in the biometric information database,
When the biometric authentication is requested by the service provider who sends the different type of authentication request, a pair using the biometric information stored in the biometric information database and the biometric information of the person to be authenticated. The personal information of the person to be authenticated is identified by N collation,
The transmitter is
The authentication server according to any one of claims 1 to 8, wherein the specified personal information is transmitted to the service provider that transmits the authentication request of the different type.
The authentication request processing unit executes the biometric authentication using the face image of the person to be authenticated and the face image extracted from the IC chip of the identification card, and also uses the electronic certificate stored in the IC chip. The authentication server according to claim 9, wherein the electronic authentication is performed by using the authentication server.
If the electronic information is an electronic signature, the authentication request processing unit acquires information for verifying the electronic signature from an external server, and when the verification of the electronic signature is successful, the electronic authentication is performed. The authentication server according to any one of claims 1 to 3, which is determined to be successful.
A business management server that sends an authentication request for a person to be authenticated who presents an ID card,
The authentication server connected to the business management server and
Including
The authentication server is
The receiver that receives the authentication request and
An authentication request processing unit that processes the authentication request by executing biometric authentication using the biometric information of the person to be authenticated and electronic authentication using the electronic information extracted from the identification card. ,
A transmission unit that transmits authentication results according to the results of the biometric authentication and the electronic authentication to the business management server.
With an authentication system.
On the authentication server
Receive an authentication request from the service provider regarding the person to be authenticated who presents the ID card,
The authentication request is processed by executing the biometric authentication using the biometric information of the person to be authenticated and the electronic authentication using the electronic information extracted from the identification card.
An authentication request processing method for transmitting an authentication result corresponding to the result of the biometric authentication and the electronic authentication to the service provider.
On the computer installed in the authentication server,
The process of receiving an authentication request from the service provider regarding the person to be authenticated who presents the ID card,
A process for executing biometric authentication using the biometric information of the person to be authenticated and electronic authentication using the electronic information extracted from the identification card.
The process of transmitting the authentication result according to the result of the biometric authentication and the electronic authentication to the service provider, and
A computer-readable storage medium that stores programs for executing.