WO2022118377A1

WO2022118377A1 - Information processing device, information processing system, information processing method, and non-transitory computer-readable medium

Info

Publication number: WO2022118377A1
Application number: PCT/JP2020/044706
Authority: WO
Inventors: 雅典小林; 昭彦市川
Original assignee: 日本電気株式会社
Priority date: 2020-12-01
Filing date: 2020-12-01
Publication date: 2022-06-09
Also published as: JPWO2022118377A1; JP2022087799A; JP6933317B1

Abstract

An information processing device (1) comprises: an acquisition unit (11) that acquires registration information in which information about proof of a negative test for a prescribed infection, the test being conducted by a first country on a prescribed user, and insurance information relating to medical insurance purchased by the user and applicable in a second country, are registered in association with the user; an authentication control unit (12) that controls a first biometric authentication regarding biometric information acquired from the user attempting to enter the second country; an identification unit (13) that, if the first biometric authentication was successful, identifies, on the basis of the registration information, the negative proof information and the insurance information associated with the user that was successfully authenticated by the first biometric authentication; and a determination unit (14) that determines the validity of the identified negative proof information and the identified insurance information.

Description

Information processing equipment, information processing systems, information processing methods and non-temporary computer-readable media

The present invention relates to an information processing apparatus, an information processing system, an information processing method and a non-temporary computer-readable medium, and in particular, an information processing apparatus for managing infectious disease countermeasures, an information processing system, an information processing method and a non-temporary computer. Computer-readable media.

The movement restrictions that had been enforced due to the spread of infectious diseases are gradually being lifted, and after measures against infectious diseases are taken, the acceptance of travelers, especially travelers from overseas, will be increased in various places. Is required.

Patent Document 1 discloses a technique related to an immigration examination system. The immigration server device according to Patent Document 1 searches for a visa number issued to a person who has succeeded in personal authentication. The determination device decodes the encrypted additional personal information (visa number) acquired from the terminal of the person, and collates the searched visa number with the decrypted visa number. Then, the determination device displays the collation result on the display unit. The immigration inspector decides whether or not to allow a person to enter the country based on the information displayed on the display unit of the judgment device.

JP-A-2010-092442

Here, in recent years, immigration inspections at airports, etc. have become stricter due to the spread of infectious diseases. Therefore, it is required to improve the efficiency of immigration examinations for immigrants, especially foreign nationals.

This disclosure is made to solve such problems, and is an information processing device, an information processing system, an information processing method, and a non-temporary computer for streamlining immigration examinations related to infectious disease control. The purpose is to provide a readable medium.

The information processing apparatus according to the first aspect of the present disclosure is
Negative proof information of a predetermined infectious disease test conducted for a predetermined user in a first country and insurance information on medical insurance that the user has subscribed to and is applicable in a second country are given to the user. An acquisition method for acquiring registration information registered in association with each other,
An authentication control means for controlling the first biometric authentication for biometric information acquired from a user who intends to enter the second country.
When the first biometric authentication is successful, the specific means for specifying the negative certification information and the insurance information associated with the user who succeeded in the first biometric authentication based on the registration information, and the specific means.
A determination means for determining the validity of the specified negative proof information and the insurance information, and
To prepare for.

The information processing system according to the second aspect of the present disclosure is
Negative proof information of a predetermined infectious disease test conducted for a predetermined user in a first country and insurance information on medical insurance that the user has subscribed to and is applicable in a second country are given to the user. A storage device that is associated and stored as registration information,
The storage device is provided with an information processing device connected to the storage device.
The information processing device is
An acquisition means for acquiring the registration information from the storage device, and
An authentication control means for controlling the first biometric authentication for biometric information acquired from a user who intends to enter the second country.
When the first biometric authentication is successful, the specific means for specifying the negative certification information and the insurance information associated with the user who succeeded in the first biometric authentication based on the registration information, and the specific means.
A determination means for determining the validity of the specified negative proof information and the insurance information, and
To prepare for.

The information processing method according to the third aspect of the present disclosure is
The computer
Negative proof information of a predetermined infectious disease test conducted for a predetermined user in a first country and insurance information on medical insurance that the user has subscribed to and is applicable in a second country are given to the user. Acquire the registration information registered in association with each other,
For the biometric information acquired from the user who is going to enter the second country, the first biometric authentication is controlled.
When the first biometric authentication is successful, the negative certification information and the insurance information associated with the user who succeeded in the first biometric authentication are specified based on the registration information.
The validity of the specified negative proof information and the insurance information is determined.

The non-temporary computer-readable medium containing the program according to the fourth aspect of the present disclosure is
Negative proof information of a predetermined infectious disease test conducted for a predetermined user in a first country and insurance information on medical insurance that the user has subscribed to and is applicable in a second country are given to the user. The acquisition process to acquire the registration information registered in association with each other,
The authentication control process that controls the first biometric authentication for the biometric information acquired from the user who is going to enter the second country,
When the first biometric authentication is successful, the specific process for specifying the negative certification information and the insurance information associated with the user who succeeded in the first biometric authentication based on the registration information, and the specific processing.
Judgment processing for determining the validity of the specified negative proof information and the insurance information, and
Let the computer run.

With this disclosure, it is possible to provide information processing devices, information processing systems, information processing methods, and non-temporary computer-readable media for streamlining immigration examinations related to infectious disease control.

It is a block diagram which shows the whole structure of the information processing apparatus which concerns on this Embodiment 1. It is a flowchart which shows the flow of the information processing method which concerns on this Embodiment 1. It is a block diagram which shows the structure of the information processing system which concerns on this Embodiment 2. It is a block diagram which shows the structure of the authentication apparatus which concerns on this Embodiment 2. It is a flowchart which shows the flow of the face information registration processing which concerns on this Embodiment 2. It is a flowchart which shows the flow of the face recognition process by the authentication device which concerns on this Embodiment 2. It is a block diagram which shows the structure of the server which concerns on this Embodiment 2. It is a block diagram which shows the structure of the user terminal which concerns on this Embodiment 2. It is a flowchart which shows the flow of the pre-registration process which concerns on this Embodiment 2. It is a block diagram which shows the structure of the immigration terminal which concerns on this Embodiment 2. It is a flowchart which shows the flow of the immigration processing which concerns on this Embodiment 2. It is a figure which shows the display example of the health passport immediately after issuance which concerns on Embodiment 2. FIG. It is a figure which shows the other display example of the health passport immediately after issuance which concerns on Embodiment 2. FIG. It is a flowchart which shows the flow of the registration process of the health report which concerns on this Embodiment 2. It is a flowchart which shows the flow of the renewal process of the health passport which concerns on Embodiment 2. It is a flowchart which shows the flow of the display process of the health passport which concerns on Embodiment 2. It is a figure which shows the display example of the health passport of the state "good" which concerns on this Embodiment 2. It is a figure which shows the display example of the health passport of the state "normal" which concerns on this Embodiment 2. It is a figure which shows the display example of the health passport of the state "defective" which concerns on this Embodiment 2. It is a figure which shows the other display example of the health passport of the state "good" which concerns on this Embodiment 2. It is a figure which shows the other display example of the health passport of the state "normal" which concerns on this Embodiment 2. It is a figure which shows the other display example of the health passport of the state "defective" which concerns on this Embodiment 2. It is a block diagram which shows the structure of the store terminal which concerns on this Embodiment 2. It is a flowchart which shows the flow of the store entry process which concerns on this Embodiment 2. It is a figure which shows the display example of the health passport of the state "good" which concerns on this Embodiment 2. It is a figure which shows the display example of the health passport of the state "normal" which concerns on this Embodiment 2. It is a figure which shows the display example of the health passport of the state "defective" which concerns on this Embodiment 2. It is a flowchart which shows the flow of the dense contact person determination process which concerns on this Embodiment 2. It is a figure which shows the display example of the map information which showed the location of the notified medical institution which concerns on Embodiment 2. FIG. It is a block diagram which shows the structure of the user terminal which concerns on this Embodiment 3. It is a block diagram which shows the structure of the immigration terminal which concerns on this Embodiment 3. It is a flowchart which shows the flow of the immigration processing which concerns on this Embodiment 3. It is a block diagram which shows the structure of the store terminal which concerns on this Embodiment 3.

Hereinafter, embodiments of the present disclosure will be described in detail with reference to the drawings. In each drawing, the same or corresponding elements are designated by the same reference numerals, and duplicate explanations are omitted as necessary for the sake of clarity of explanation.

<Embodiment 1>
FIG. 1 is a block diagram showing an overall configuration of the information processing apparatus 1 according to the first embodiment. The information processing device 1 is a computer for determining the validity of the infectious disease countermeasure proof information and the medical insurance enrollment information required for a predetermined user to leave the country. Here, the information processing apparatus 1 is directly connected to a predetermined terminal by a communication network (not shown, hereinafter, the communication network is also simply referred to as a network) or a predetermined wireless communication. The network may be wired or wireless, and may be of any type of communication protocol. The terminal may input to the information processing apparatus 1 and perform processing according to the output from the information processing apparatus 1.

The information processing device 1 includes an acquisition unit 11, an authentication control unit 12, a specific unit 13, and a determination unit 14. The acquisition unit 11 acquires the registration information in which the negative proof information and the insurance information are registered in association with a predetermined user. Negative proof information is information certifying that the result of a predetermined infectious disease test conducted in a first country for a predetermined user is negative. Insurance information is information about medical insurance that the user has subscribed to and is applicable in a second country. In addition, "corresponding to the user" means that it is associated with the user's identification information (for example, user ID or biometric information). Further, the acquisition unit 11 may acquire the registration information from the terminal described above. Alternatively, the acquisition unit 11 may acquire registration information from a storage unit built in the information processing device 1 or an external storage device to which the information processing device 1 is connected.

The authentication control unit 12 controls the first biometric authentication for the biometric information acquired from the user who is going to enter the second country. For example, when the information processing apparatus 1 holds the biometric information for authentication in advance, the authentication control unit 12 performs the biometric authentication process by collating the held biometric information with the acquired biometric information. .. Alternatively, when the biometric information for authentication is stored in an external authentication device, the authentication control unit 12 causes the authentication device to perform an authentication process and acquires an authentication result. A "user trying to enter a second country" is, for example, a user who leaves the first country to enter the second country, or a user who enters the second country after leaving the first country. Is. That is, the authentication control unit 12 uses the biometric information acquired from the user at the time of departure from the first country (for example, at the time of immigration examination) or at the time of entry into the second country (for example, at the time of immigration examination), and the first living body. Control authentication.

When the first biometric authentication is successful, the identification unit 13 identifies the negative certification information and the insurance information associated with the user who succeeded in the first biometric authentication based on the registration information.

The determination unit 14 determines the validity of the negative proof information and insurance information specified by the specific unit 13.

The proof information for infectious disease countermeasures may be proof information for vaccination against infectious diseases instead of negative proof information.

Further, instead of biometric authentication, a predetermined identity verification authentication may be used. Identity verification authentication is to perform authentication by collating the acquired identity verification information with the identity verification information for authentication. Examples of the identity verification information include, but are not limited to, biometric information, a combination of ID and password, a two-dimensional code that can identify the person, an electronic certificate, and the like.

FIG. 2 is a flowchart showing the flow of the information processing method according to the first embodiment. First, the acquisition unit 11 relates to the negative proof information of the predetermined infectious disease test conducted on the predetermined user in the first country and the medical insurance that the user has subscribed to and is applicable in the second country. The insurance information and the registration information registered in association with the user are acquired (S11).

Next, the authentication control unit 12 controls the first biometric authentication for the biometric information acquired from the user who is going to enter the second country (S12). Then, the information processing apparatus 1 determines whether or not the first biometric authentication is successful (S13). When the first biometric authentication is successful, the identification unit 13 identifies the negative certification information and the insurance information associated with the user who succeeded in the first biometric authentication based on the registration information acquired in step S11 (S14). ). Then, the determination unit 14 determines the validity of the specified negative proof information and insurance information (S15). If it is determined in step S13 that the first biometric authentication has failed, the process ends.

As described above, the information processing apparatus 1 according to the present embodiment can obtain the determination result of the validity of the negative certification information and the insurance information registered in advance for the user who succeeded in biometric authentication. Therefore, the determination result can be provided to the outside. In addition, various processes can be performed according to the determination result. For example, if the determination result shows validity, the departure from the first country or the entry into the second country may be permitted. Therefore, it is possible to improve the efficiency of immigration, etc. regarding infectious disease control.

The information processing device 1 includes a processor, a memory, and a storage device as a configuration (not shown). Further, the storage device stores a computer program in which the processing of the information processing method according to the present embodiment is implemented. Then, the processor reads the computer program from the storage device into the memory and executes the computer program. As a result, the processor realizes the functions of the acquisition unit 11, the authentication control unit 12, the specific unit 13, and the determination unit 14.

Alternatively, the acquisition unit 11, the authentication control unit 12, the specific unit 13, and the determination unit 14 may each be realized by dedicated hardware. Further, a part or all of each component of each device may be realized by a general-purpose or dedicated circuitry, a processor, or a combination thereof. These may be composed of a single chip or may be composed of a plurality of chips connected via a bus. A part or all of each component of each device may be realized by the combination of the circuit or the like and the program described above. Further, as a processor, a CPU (Central Processing Unit), a GPU (Graphics Processing Unit), an FPGA (field-programmable gate array), a quantum processor (quantum computer control chip), or the like can be used.

Further, when a part or all of each component of the information processing device 1 is realized by a plurality of information processing devices and circuits, the plurality of information processing devices and circuits may be centrally arranged. It may be distributed. For example, the information processing device, the circuit, and the like may be realized as a form in which each is connected via a communication network, such as a client-server system and a cloud computing system. Further, the function of the information processing apparatus 1 may be provided in the SaaS (Software as a Service) format.

<Embodiment 2>
The second embodiment is a specific example of the first embodiment described above. As mentioned above, immigration of travelers is becoming stricter due to the spread of infectious diseases. In addition, it is required to manage and understand the health condition of travelers even after entering Japan.

FIG. 3 is a block diagram showing the configuration of the information processing system 1000 according to the second embodiment. The information processing system 1000 takes measures against infectious diseases while staying in the first country C1, and when the user U11 or the like who has taken out medical insurance enters the second country C2, the information processing system 1000 informs the user based on these registration information. Issuance of a health passport. A user who has entered the second country C2 can enter a facility such as a store C22 if the health passport is valid. In addition, the information processing system 1000 receives, registers, and manages health reports and action histories from users U11 and the like each time after issuing a health passport (after entering the second country C2). In response to this, the information processing system 1000 updates the health passport.

The information processing system 1000 includes user terminals 101 to 104, an authentication device 200, a server 300, an immigration inspection terminal 400, and a store terminal 600. The user terminals 101 to 104, the authentication device 200, the server 300, the immigration terminal 400, and the store terminal 600 are connected via the network N. Here, the network N is a wired or wireless communication line, for example, the Internet. The users U11 to U14 may indicate the same person. Further, the user terminals 101 to 104 are assumed to have the same functions. Further, the authentication device 200 and the server 300 do not need to be installed in the second country C2, and may be installed in the first country C1 or another country. Further, the store C22 is an example of a usage destination in the second country C2. The user may be a facility such as a restaurant, a stadium, a movie theater, or a theater where the user's health passport can be confirmed at the time of use and the use can be permitted. Further, the information processing system 1000 can be applied to two or more facilities in the second country C2.

In the following explanation, biometric authentication is referred to as face authentication, and biometric information is referred to as facial feature information. However, other techniques using captured images can be applied to biometric authentication and biometric information. For example, as the biological information, data (feature amount) calculated from physical characteristics peculiar to an individual such as fingerprints, voice prints, veins, retinas, and iris patterns (patterns) of the pupil may be used. Further, instead of the biometric authentication, another identity verification authentication may be applied, and the biometric information may be another identity verification information.

The authentication device 200 is an information processing device that stores facial feature information of a plurality of persons (user U11, etc.). Further, the authentication device 200 collates the face image or face feature information included in the request with the face feature information of each user in response to the face recognition request received from the outside, and requests the collation result (authentication result). Reply to the original.

FIG. 4 is a block diagram showing the configuration of the authentication device 200 according to the second embodiment. The authentication device 200 includes a face information DB (DataBase) 210, a face detection unit 220, a feature point extraction unit 230, a registration unit 240, and an authentication unit 250. The face information DB 210 stores the user ID 211 and the face feature information 212 of the user ID in association with each other. The face feature information 212 is a set of feature points extracted from the face image. The authentication device 200 may delete the face feature information 212 in the face feature DB 210 in response to a request from the registered user of the face feature information 212. Alternatively, the authentication device 200 may be deleted after a certain period of time has elapsed from the registration of the face feature information 212.

The face detection unit 220 detects the face area included in the registered image for registering face information and outputs it to the feature point extraction unit 230. The feature point extraction unit 230 extracts feature points from the face region detected by the face detection unit 220, and outputs face feature information to the registration unit 240. Further, the feature point extraction unit 230 extracts feature points included in the face image received from the user terminal 101 or the like, the server 300, or the like, and outputs the face feature information to the authentication unit 250.

The registration unit 240 newly issues the user ID 211 when registering the facial feature information. The registration unit 240 registers the issued user ID 211 and the face feature information 212 extracted from the registered image in the face information DB 210 in association with each other. The authentication unit 250 performs face authentication using the face feature information 212. Specifically, the authentication unit 250 collates the face feature information extracted from the face image with the face feature information 212 in the face information DB 210. If the verification is successful, the authentication unit 250 identifies the user ID 211 associated with the collated face feature information 212. The authentication unit 250 returns to the requester as a face authentication result whether or not the face feature information matches. The presence or absence of matching of facial feature information corresponds to the success or failure of authentication. The fact that the facial feature information matches (with matching) means that the degree of matching is equal to or higher than the threshold value. Further, the face authentication result shall include the specified user ID when the face authentication is successful.

FIG. 5 is a flowchart showing the flow of the face information registration process according to the second embodiment. Here, the information registration terminal (not shown) photographs the body including the user's face, and transmits a face information registration request including the captured image (registered image) to the authentication device 200 via the network N. The information registration terminal is, for example, an information processing device such as a personal computer, a smartphone, or a tablet terminal. For example, the information registration terminal may be a user terminal 101 or the like. Alternatively, the information registration terminal may be the server 300 that has received the face information registration request from the user terminal 101 or the like.

First, the authentication device 200 acquires the registered image included in the face information registration request (S21). For example, the authentication device 200 receives the face information registration request from the information registration terminal via the network N. Next, the face detection unit 220 detects the face region included in the registered image (S22). Next, the feature point extraction unit 230 extracts feature points from the face region detected in step S22, and outputs face feature information to the registration unit 240 (S23). Finally, the registration unit 240 issues the user ID 211, associates the user ID 211 with the face feature information 212, and registers the user ID 211 in the face information DB 210 (S24). The authentication device 200 may receive the face feature information 212 from the information registration terminal and register it in the face information DB 210 in association with the user ID 211. Further, the registration unit 240 may notify the registered (issued) user ID to the information registration terminal or the server 300.

FIG. 6 is a flowchart showing the flow of face recognition processing by the authentication device 200 according to the second embodiment. First, the feature point extraction unit 230 acquires a face image for authentication included in the face authentication request (S31). For example, the authentication device 200 receives a face authentication request from the server 300 via the network N, and extracts face feature information from the face image included in the face authentication request as in steps S21 to S23. Alternatively, the authentication device 200 may receive the face feature information from the server 300. Next, the authentication unit 250 collates the acquired face feature information with the face feature information 212 of the face information DB 210 (S32). When the face feature information matches, that is, when the degree of match of the face feature information is equal to or higher than the threshold value (Yes in S33), the authentication unit 250 identifies the user ID 211 of the user whose face feature information matches (S34). The user ID 211 identified as having succeeded in face authentication is returned to the server 300 (S35). When the matching face feature information does not exist (No in S33), the authentication unit 250 returns to the server 300 that the face authentication has failed (S36).

Return to Fig. 3 and continue the explanation. The server 300 is an example of the above-mentioned information processing apparatus 1. The server 300 is an information processing device that processes information such as determining the validity of negative proof information and medical insurance information, issuing a health passport, issuing a health report, registering an action history, updating a health passport, and processing a store to enter a store. be. The server 300 may be made redundant to a plurality of servers, and each functional block may be realized by a plurality of computers.

Next, the server 300 will be described in detail. FIG. 7 is a block diagram showing a configuration of the server 300 according to the second embodiment. The server 300 includes a storage unit 310, a memory 320, a communication unit 330, and a control unit 340. The storage unit 310 is an example of a storage device such as a hard disk and a flash memory. The storage unit 310 stores the program 311, the user management information 312, the medical institution information 313, and the consultation center information 314. The program 311 is a computer program in which the processing of the information processing method according to the second embodiment is implemented.

User management information 312 is for infectious disease control, medical insurance subscription information and health of users who stay in the first country C1 and try to enter the second country C2, or users who are admitted to the second country C2. Information for managing the state. The user management information 312 is information associated with user ID 3121, personal information 3122, negative proof information 3123, medical insurance information 3124, visa information 3125, health status information 3126, health passport 3127, and behavior history 3128.

User ID 3121 is an example of user identification information. Further, the user ID 3121 is information corresponding to the user ID 211 in the face information DB 210 of the authentication device 200 described above. Personal information 3122 is information such as name, date of birth, gender, and language used. That is, the personal information 3122 includes the language information used by the user.

Negative proof information 3123 is information for certifying a negative test result by an infectious disease test (PCR test, etc.) carried out on a user at a laboratory specified by C1 of the first country. Negative proof information 3123 includes the type of test and the date of the test. Specifically, the negative proof information 3123 may be a negative test result proof in which the test type and the test date are described, or may be electronic data such as a digital proof. Further, the negative proof information 3123 may include the expiration date of the test.

In addition, instead of the negative proof information 3123, proof information certifying the vaccination of the infectious disease given to the user at the medical institution of the first country C1 may be used. In that case, the proof information includes the type of vaccine and the date of inoculation. Specifically, the proof information may be a vaccination certificate (vaccination proof information) in which the vaccine name and the vaccination date are described, or may be electronic data such as a digital certificate. The proof information may include the expiration date of the vaccine. The proof information may include both a negative test result proof and vaccination proof information.

The medical insurance information 3124 is the user's enrollment information regarding the medical insurance applied to the cost of inspection and treatment of infectious diseases at the medical institution of the second country C2, and the medical insurance institution when the user enrolls in the medical insurance. Includes information about contracts entered into with. Further, the medical insurance information 3124 includes a contract period and a contract expiration date (expiration date). More specifically, the medical insurance information 3124 describes the name of the insurance institution or insurance company that operates the medical insurance to which the user is enrolled, the type of medical insurance, the medical practice covered by the medical insurance, and the user in the medical insurance. Contains information about at least one of the unique identification information of. The user's unique identification information in medical insurance is information for identifying a contract between a user and a medical insurance institution, and is also referred to as, for example, a contract number or a securities number. The medical insurance information 3124 may include profile information such as a user's name, gender, date of birth and nationality. The medical insurance information 3124 may include a user's contact information (telephone number, e-mail address, social network service account, etc.).

Visa information 3125 is electronic data of a residence permit (visa) issued by the embassy of the second country C2 in order for the user to stay in the second country C2 in the first country C1. The visa information 3125 may be, for example, a digital certificate.

Health status information 3126 is information indicating the health status of a user who has entered the second country C2 while the status of the health passport 3127 is valid while staying in the second country C2. The health state information 3126 is, for example, a body surface temperature or a judgment result (good, normal, bad, etc.) of the physical condition by the user himself / herself. That is, the health state information 3126 can be said to be information (physical condition information) indicating the physical condition content of the user. Further, the health status information 3126 may include date and time information (measurement date and time, report date and time, registration date and time).

The health passport 3127 proves that the user corresponding to the user ID 3121 has taken measures against the prescribed infectious disease in the first country C1 and has already taken out medical insurance applicable to the medical institution in the second country C2. This is the countermeasure certification information. The health passport 3127 may be, for example, a digital certificate. Here, the countermeasure against infectious diseases is at least one of testing and vaccination. The test is, for example, a PCR (Polymerase Chain Reaction) test, an antigen test, or the like.

Health passport 3127 contains status information indicating validity or invalidity. The state information may indicate a state (level) of three or more stages in addition to two stages of valid or invalid. In addition, the health passport 3127 may include the implementation date of measures against infectious diseases. For example, the health passport 3127 may include an examination date or an inoculation date, an expiration date for guaranteeing countermeasures, an expiration date, and the like. The validity period included in the health passport shall be set longer when the measures against infectious diseases are vaccinated than when the measures are taken. For example, in the case of a test, the effective period may be set to several days to several weeks, and in the case of vaccination, the effective period may be set to several months. In addition, the expiration date included in the health passport may be set differently depending on the type of vaccine and the manufacturer when the countermeasure against infectious diseases is vaccination.

The health passport 3127 is issued to the user with the status information valid based on the negative proof information 3123 and the medical insurance information 3124 of the test for infectious diseases performed in the first country C1. However, since the negative proof information 3123 is just a proof of the implementation of infectious disease countermeasures in the first country C1, the expiration date of the health passport 3127 will expire after a predetermined period has passed from the certified test date or inoculation date. , The status information of the health passport 3127 is invalidated. Further, as will be described later, the status information of the health passport 3127 may be invalidated even when the user is determined to be a close contact person of the infected person. In that case, the user may be tested for infectious diseases and vaccinated while staying in the second country C2.

The behavior history 3128 is the behavior history of the user after the issuance of the health passport 3127 (particularly after entering the second country C2). For example, the action history 3128 is an authentication history of authentication processing via an immigration terminal 400, a store terminal 600, or the like. Alternatively, the action history 3128 may be a history of GPS (Global Positioning System) information received by the user terminal 101 or the like. The action history 3128 includes at least the date and time (authentication date and time) and location information (location of the facility).

Medical institution information 313 is information on a plurality of medical institutions that exist in the second country C2 and can carry out examination, examination, treatment, vaccination, etc. of a predetermined infectious disease. The medical institution information 313 includes, for example, the name, address, contact information, clinical department, possible measures (examination, examination, treatment, vaccination, etc.) of the medical institution, and information in the available language.

Consultation center information 314 is information about a consultation center that exists in C2 of the second country and can respond to consultations on predetermined infectious diseases. The consultation center information 314 includes, for example, information on the name, address, contact information, and available languages of the consultation center. The consultation center information 314 may be information such as a health center.

The memory 320 is a volatile storage device such as a RAM (RandomAccessMemory), and is a storage area for temporarily holding information when the control unit 340 operates. The communication unit 330 is a communication interface with the network N.

The control unit 340 is a processor, that is, a control device that controls each configuration of the server 300. The control unit 340 reads the program 311 from the storage unit 310 into the memory 320, and executes the program 311. As a result, the control unit 340 realizes the functions of the registration unit 341, the acquisition unit 342, the authentication control unit 343, the specific unit 344, the determination unit 345, the issuing unit 346, and the processing unit 347.

The acquisition unit 342 is an example of the acquisition unit 11 described above. The acquisition unit 342 acquires a registration request including biometric information, negative proof information, medical insurance information, and visa information of the user U11 from the user terminal 101 while the user U11 stays in the first country C1. If the negative certification information included in the registration request is a reference number, the acquisition unit 342 shall access the server of the inspection institution or the medical institution and acquire the negative certification information corresponding to the reference number.

Further, the acquisition unit 342 acquires the registration information registered by the registration unit 341. For example, the acquisition unit 342 acquires the user management information 312 in which the negative certification information 3123, the medical insurance information 3124, and the visa information 3125 are registered in association with the user ID 3121 from the storage unit 310 as registration information.

Further, the acquisition unit 342 acquires the user's health report from the user terminal 101 or the like after the issuance of the health passport. Here, the health report includes health condition information, date and time information, and facial images. The health report may include a user ID instead of the face image. In particular, the acquisition unit 342 receives the health report at predetermined intervals from the user terminal of the user after entering the second country C2. Alternatively, the acquisition unit 342 may receive the health report from an authentication terminal such as a store terminal installed in each place of the second country C2. Further, the acquisition unit 342 acquires the user's action history from the user terminal 101 or the like after the issuance of the health passport. For example, the acquisition unit 342 periodically acquires GPS information or the like as an action history from the user terminal 101 or the like. Further, the acquisition unit 342 acquires the user's authentication history as an action history from the authentication terminal. The authentication history includes the authentication terminal ID (or the installation position of the authentication terminal), the user ID of successful authentication, and the date and time of successful authentication. In addition, the acquisition unit 342 may acquire information on a person infected with an infectious disease from the outside. For example, the acquisition unit 342 may receive a notification of the infected person's information from a server such as a health center. Here, the information of the infected person is the behavior history (combination of location information and date and time) of the infected person for several weeks before the day when the infected person is determined to be positive. This is to efficiently track close contacts. Further, the acquisition unit 342 acquires a photographed image (face image) of the user from the user terminal 101 or the like, and outputs the acquired face image to the authentication control unit 343.

The registration unit 341 corresponds to the identification information (user ID 3121) corresponding to the biometric information acquired from the user U11, the negative certification information 3123, and the medical insurance information 3124 while the user U11 stays in the first country C1. Attach and register as registration information (user management information 312). For example, when the registration request is acquired by the acquisition unit 342, the registration unit 341 transmits a face information registration request including the face image included in the registration request to the authentication device 200, and the authentication device 200 registers the face feature information. Acquire the user ID issued at that time. Then, the registration unit 341 registers the acquired user ID 3121, the negative proof information 3123, and the medical insurance information 3124 in association with each other. Further, the registration unit 341 registers the acquired personal information 3122 as user management information 312 in association with the user ID 3121. The registration unit 341 updates the user management information 312 in association with the health passport 3127 issued by the issuing unit 346 and the user ID 3121, and registers the user management information 312 in the storage unit 310. After registering in response to the registration request, the registration unit 341 issues pre-registration code information indicating reference information to the user management information 312 corresponding to the user, and pre-registration code information to the user terminal 101. May be replied.

Further, the registration unit 341 updates the user management information 312 by associating the health state information 3126 received from the user terminal 101 or the like or the store terminal 600 with the user ID 3121, and registers it in the storage unit 310. If the health status information 3126 does not include the date and time information, the registration unit 341 includes the registration date and time in the health status information 3126.

Further, when the authentication by the authentication control unit 343 is successful, the registration unit 341 sets the authentication history as the action history 3128, associates the successfully authenticated user ID 3121 with the action history 3128, and stores the user management information 312 in the storage unit 310. sign up. For example, if the authentication of the biometric information acquired from the authentication terminal (immigration terminal 400, store terminal 600, etc.) installed in the predetermined facility is successful, the activity history includes the facility (location) and the authentication date and time. including. Further, the registration unit 341 registers the authentication history acquired by the acquisition unit 342 as the action history 3128 in the storage unit 310 in association with the user ID 3121 that has succeeded in authentication.

The authentication control unit 343 is an example of the above-mentioned authentication control unit 12. The authentication control unit 343 controls face authentication based on the captured image (face image, identity verification information) acquired by the acquisition unit 342. That is, the authentication control unit 343 causes the authentication device 200 to perform face authentication for the face image. For example, the authentication control unit 343 transmits a face authentication request including the acquired face image to the authentication device 200 via the network N, and receives the face authentication result from the authentication device 200. The authentication control unit 343 may detect the user's face area from the face image and include the image of the face area in the face authentication request. Alternatively, the authentication control unit 343 may extract the face feature information from the face region and include the face feature information in the face authentication request. The authentication control unit 343 acquires the face recognition result from the authentication device 200 via the network N, and outputs the face recognition result to the determination unit 345.

The specific unit 344 is an example of the above-mentioned specific unit 13. When the authentication by the authentication control unit 343 is successful, the identification unit 344 identifies the negative certification information 3123 and the medical insurance information 3124 associated with the user ID 3121 that has succeeded in the authentication based on the user management information 312. Further, when the authentication by the authentication control unit 343 is successful, the identification unit 344 identifies the health passport 3127 associated with the user ID 3121 that has been successfully authenticated based on the user management information 312. Further, when the determination unit 345 determines that the user is a close contact, the specific unit 344 can refer to the medical institution information 313 and apply the medical insurance related to the medical insurance information 3124 associated with the user. Identify the medical institution. Further, when the expiration date of the validity period set in the health passport of a specific user has been exceeded, the specific unit 344 refers to the medical institution information 313 and applies to the medical insurance information 3124 associated with the user. It is good to identify the medical institutions to which medical insurance is applicable. Further, when the determination unit 345 determines that the user is a close contact, the identification unit 344 specifies the language information of the personal information 3122 associated with the user ID 3121 of the user. Then, the specific unit 344 refers to the consultation center information 314 and specifies a consultation center that provides consultation and response regarding infectious diseases based on the specified linguistic information.

The determination unit 345 is an example of the determination unit 14 described above. The determination unit 345 determines whether or not the face authentication is successful based on the face authentication result. When it is determined that the face authentication is successful, the determination unit 345 identifies the user ID included in the face authentication result. In addition, the determination unit 345 determines the validity of the negative proof information 3123 and the medical insurance information 3124 specified by the specific unit 344. Further, when a visa is required for entry from the first country C1 to the second country C2, the determination unit 345 further determines the validity of the visa information 3125. In addition, the determination unit 345 determines whether or not the health passport 3127 specified by the specific unit 344 is valid. Alternatively, the determination unit 345 may determine the level of the condition of the health passport 3127.

The determination unit 345 determines the registration interval of the health status information 3126 for each user on a regular basis or at a predetermined timing. For example, as described above, the determination unit 345 acquires the date and time information included in the plurality of health status information 3126s per user, and calculates the period of the adjacent date and time information as the registration interval. When the registration date and time is 3 or more registered for a specific user, the determination unit 14 calculates the registration interval of 2 or more from the latest. Then, the determination unit 345 determines whether or not each of the calculated registration intervals satisfies the predetermined interval. Here, the predetermined interval is, for example, once a day, or a plurality of times a day (am, afternoon) and the like. Further, the determination unit 345 may determine whether or not the registration is performed in a fixed time zone (8:00 to 10:00) every day in addition to the registration interval. Further, the determination unit 345 may determine whether the registration interval satisfying the predetermined interval has continued up to the present time since the entry of the second country C2. Alternatively, the determination unit 345 may determine whether the registration interval satisfies the predetermined interval, which is continuous from the latest a predetermined number of times. That is, the determination unit 345 may determine that even if the health report is interrupted, the health report is restarted and continued for a certain period of time.

Further, the determination unit 345 may determine the physical condition of the user indicated by the registered health condition information. For example, the determination unit 345 determines whether or not the body surface temperature included in the health condition information is less than the reference value (for example, 37.5 degrees). Alternatively, the determination unit 345 determines whether the judgment result of the physical condition by the user himself / herself included in the health condition information is "good", "normal", or "poor".

Further, the determination unit 345 may determine an infectious disease countermeasure index indicating the state of the health passport 3127 of the user based on the health state information 3126 for each user. The infectious disease control index is an example of (level) status information. The infectious disease control index is an index showing the safety of the user against infectious diseases after the issuance of the health passport 3127 (or after entering the second country C2). The infectious disease control index may be two levels of high or low, three levels from the first level to the third level, or four or more levels. For example, if the health passport is valid and the health condition indicates "good", the determination unit 345 determines that the health passport is the first level. If the status information in the health passport indicates the first level, it may be possible to permit the use of a given facility. Further, when the health passport is valid and the health condition indicates "normal (normal)", the determination unit 345 determines that the health passport is the second level. The determination unit 345 may determine the second level when the registration interval satisfies the predetermined interval and the health condition is "normal (normal)". Alternatively, the determination unit 345 may determine the second level when the health condition indicates "good" even if some of the registration intervals do not satisfy the predetermined intervals. Further, the determination unit 345 may determine the second level when the registration interval is once a day but the daily reporting time has a large variation. If the health passport status information indicates a second level, care must be taken in using the given facility and additional health status confirmation may be required. Further, the determination unit 345 may determine the third level when the health passport is invalid or the health condition is "poor". If the status information of the health passport indicates the third level, the use of the predetermined facility may be denied (not permitted).

Further, when the determination unit 345 determines that the face authentication is successful, the infectious disease countermeasure indicating the state of the health passport 3127 of the user based on the health condition information 3126 associated with the user ID 3121 that has succeeded in the face authentication. The index may be determined.

Further, the determination unit 345 determines whether or not each user is a close contact of the infected person based on the behavior history of the infected person with the infectious disease acquired from the outside and the registered behavior history 3128 of each user. judge. For example, the determination unit 345 determines a user who has stayed within a predetermined range of the stay position of the infected person and in a time zone overlapping with the stay time zone of the infected person as a candidate for a close contact. However, when the infectious disease countermeasure indicated by the proof information includes vaccination, the determination unit 345 determines whether or not a predetermined period has passed from the date of vaccination of the vaccine, and the predetermined period has passed. In some cases, it is advisable to determine whether or not the person is a close contact. This is to prevent an excessive increase in the number of close contacts and reduce the burden on medical institutions and the like. The deadline for a predetermined period from the date of vaccination may be several days or several hours before the expiration date of the vaccine.

When the judgment unit 345 determines that both the negative certification information 3123 and the medical insurance information 3124 are valid, the issuing unit 346 issues a valid health passport to the user who has succeeded in biometric authentication. Furthermore, if a visa is required to enter from the first country C1 to the second country C2, the issuing unit 346 is valid if all of the negative proof information 3123, the medical insurance information 3124 and the visa information 3125 are determined to be valid. Issue a health passport. The issuing unit 346 may transmit the issued health passport 3127 to the user terminal of the corresponding user.

Here, the issuing unit 346 may issue a health passport 3127 by setting a valid period based on the negative certification information 3123, the medical insurance information 3124, and the visa information 3125. Therefore, the health passport 3127 may include at least the status information and may further include a validity period, an expiration date, or a start date of the expiration date. The state information may be any of a plurality of levels indicating "valid". That is, the status information of the health passport 3127 may be any information other than "invalid" at the time of issuance.

The processing unit 347 is an example of an update unit. If the physical condition information associated with the user does not satisfy the predetermined condition, the processing unit 347 may invalidate the health passport issued to the user. Alternatively, in this case, the processing unit 347 may be updated to lower the level of health passport status. For example, if the physical condition changed from "good" or "normal" to "bad" until the day before, the processing unit 347 changes the state of the health passport from the first level to the second or third level. You may lower it to. Further, the processing unit 347 may update the state of the health passport associated with the user according to the registration interval. For example, if the registration interval does not meet the predetermined interval, the processing unit 347 updates the state of the health passport as invalid. Alternatively, the processing unit 347 updates to lower the level of the state of the health passport when the registration interval does not meet the predetermined interval. "Reducing the level of health passport status" includes, for example, changing from a first level to a second or third level, or from a second level to a third level.

Further, when the determination unit 345 determines that the user is a close contact, the processing unit 347 updates the level of the infectious disease control index indicating the state of the health passport associated with the user. For example, the processing unit 347 may update the state of the health passport as invalid when the user is determined to be a close contact. As a result, even if the user properly reports his / her health, the use of the user's facility can be immediately suppressed, and the spread of the infectious disease can be suppressed.

The processing unit 347 is an example of the notification unit. The processing unit 347 notifies the user who is determined to be a close contact person to that effect. At the same time, the processing unit 347 may notify the latest health passport (infectious disease control index indicating the state of the user) determined to be a close contact. Here, the infectious disease control index may be display information such as a mark or a message in which each stage or level can be distinguished by a color or the like. For example, the infectious disease control index may be displayed as blue at the first level, yellow at the second level, and red at the third level.

Further, the processing unit 347 notifies the user determined to be a close contact with the medical institution specified by the specific unit 344. Further, the processing unit 347 may notify the user who is determined to be a close contact to the consultation center specified by the specific unit 344. Further, when the physical condition information associated with the user does not satisfy the predetermined condition, the processing unit 347 may notify the user of the consultation center specified by the specific unit 344.

Further, the processing unit 347 may output the validity period set in the health passport to the request source in response to a request from the outside. For example, when a health passport display request is received from the user terminal 101 or the like, the processing unit 347 transmits the validity period together with the health passport status information to the user terminal 101 or the like. As a result, the user can grasp the state and expiration date of his / her health passport, and can take actions (re-examination, etc.) according to the expiration date as soon as possible.

Further, when the expiration date of the validity period set in the health passport is within a predetermined period, the processing unit 347 outputs to that effect and a facility (medical institution, etc.) capable of taking measures against infectious diseases to the user's terminal. It is good to do it. As a result, the user can know that the expiration date of the health passport is approaching, and at the same time, it is not necessary to search for an inspection agency and it becomes easier to receive the inspection. In addition, the processing unit 347 is a facility (medical institution, etc.) that can take measures (tests and vaccinations) against infectious diseases to that effect if the expiration date of the certification information is within a predetermined period or has exceeded the expiration date. May be output to the user's terminal. The processing unit 347 may output to the user's terminal to that effect and to prompt the user to renew or join the medical insurance if the expiration date of the medical insurance information is within a predetermined period or has exceeded the expiration date.

Further, when the authentication control unit 343 succeeds in the authentication, the processing unit 347 may output the health passport associated with the user who succeeded in the authentication to the user terminal 101 or the like corresponding to the user. As a result, the health passport can be appropriately disclosed to the authenticated person. Further, the processing unit 347 may output the infectious disease countermeasure index to the user terminal 101 or the like as the state of the health passport. As a result, the user can grasp the state of the health passport in detail.

Further, the determination unit 345 may determine the infectious disease control index in consideration of the country of stay of the user during the predetermined period. For example, the acquisition unit 342 acquires immigration information, and the judgment unit 345 is infected if the user has stayed in a specific country (a country where infectious diseases are widespread and countermeasures are inadequate) in the past. Judgment is made so that the level of the disease control index is low. Alternatively, the determination unit 345 may determine whether or not the specific country is included in the country of stay of the user in the predetermined period. When it is determined that the country of stay of the user includes a specific country, the processing unit 347 updates the level of the infectious disease control index indicating the status of the health passport associated with the user.

Further, the processing unit 347 may output the usage permission of the predetermined user by the user when the health passport is valid (or the first or second level).

Further, if the health passport is valid when the server 300 receives the usage reservation of the predetermined usage destination from the user, the server 300 may perform the usage reservation processing of the usage destination.

Further, when the determination result by the determination unit 345 indicates that the health passport is valid but the health condition information is not registered at predetermined intervals, the acquisition unit 342 acquires the current health condition information from the user. May be good. In this case, the registration unit 341 additionally registers the acquired health state information in association with the user ID. Further, when the physical condition of the additionally registered health condition information is good or normal, the processing unit 347 updates the health passport so as to raise the level of the condition. As a result, even a user whose health report is not sufficiently reported can be permitted to enter the store if the body surface temperature measured at the time of entering the store satisfies the condition. Therefore, flexible response is possible and convenience is improved.

The acquisition unit 342 may further acquire the user's action schedule (travel schedule, etc.). For example, the server 300 may synchronize with a travel schedule or the like registered in the user terminal 101 or the like. In that case, the issuing unit 346 issues a health passport by setting a valid period based on the action period included in the acquired action schedule. As a result, the health passport can be valid for the traveler only during the travel period, the activity period of the traveler can be limited to a certain period, and the spread of the infectious disease can be suppressed.

Furthermore, the issuing unit 346 may issue a health passport by setting an effective action range based on the acquired action schedule. For example, the issuing unit 346 may set the area around the travel destination included in the action schedule as the effective action range. In this case, the acquisition unit 342 periodically acquires the current position of the user, and the determination unit 345 further determines whether or not the acquired current position exceeds the effective action range. Then, when the current position exceeds the effective action range, the processing unit 347 invalidates the state of the health passport associated with the user or lowers the level and updates it. As a result, the range of activities of travelers can be limited to a certain range, and the spread of infectious diseases can be suppressed.

Return to Fig. 3 and continue the explanation. Each of the user terminals 101 to 104 is an information terminal carried and operated by each of the users U11 to U14. The user terminal 101 and the like are, for example, a mobile phone terminal, a smartphone, and a tablet terminal.

Here, it is assumed that the user U11 is staying in the first country C1, and the user has undergone a predetermined infectious disease test at a designated inspection organization of the first country C1 and obtained a negative test result certificate. And. Further, it is assumed that the user U11 has taken out medical insurance applicable to the second country C2 in the first country C1 and obtained medical insurance information (medical insurance certificate, etc.). Further, it is assumed that the user U11 has obtained a visa for entering the second country C2 from the first country C1. Further, the user U11 shall install the application according to the present embodiment on the user terminal 101 and perform various operations described later.

FIG. 8 is a block diagram showing the configuration of the user terminal 101 according to the second embodiment. As described above, since the configurations of the user terminals 102 to 104 are the same as those of the user terminals 101, illustration and detailed description thereof will be omitted. The user terminal 101 includes a camera 110, a storage unit 120, a communication unit 130, an input / output unit 140, and a control unit 150.

The camera 110 is a photographing device that photographs the user U11 according to the control of the control unit 150. The storage unit 120 is a storage device in which an (application) program for realizing each function of the user terminal 101 is stored. The communication unit 130 is a communication interface with the network N. The input / output unit 140 includes a display device and an input device. The input / output unit 140 is, for example, a touch panel. The control unit 150 controls the hardware of the user terminal 101. The control unit 150 reads the program from the storage unit 120 into the memory and executes the program. As a result, the control unit 150 realizes the functions of the registration unit 151, the health passport processing unit 152, the health report unit 153, and the display control unit 154.

For example, the registration unit 151 accepts input of biological information (face image) and personal information from user U11. The face image is a photographed image in which a region including the face of the user U11 is photographed by the camera 110.

In addition, the registration unit 151 photographs a negative test result certificate with the camera 110 in response to the operation of the user U11, and accepts the captured image as negative certificate information for the infectious disease test. In addition, instead of the negative proof information, a vaccination certificate may be used. Further, the registration unit 151 photographs the insurance certificate of the medical insurance applicable in the second country C2 by the camera 110 in response to the operation of the user U11, and accepts the photographed image as the medical insurance information. Further, the registration unit 151 photographs a visa for entering the country from the first country C1 to the second country C2 by the camera 110 in response to the operation of the user U11, and accepts the photographed image as visa information.

Further, some or all of the negative proof information, medical insurance information and visa information may be electronic data. In that case, the registration unit 151 shall acquire each information from the publisher of each information. For example, the negative test result certificate may be printed with a two-dimensional code including the access destination of the negative certification information on the server of the testing institution or the medical institution. In that case, the registration unit 151 may analyze the two-dimensional code taken by the camera 110, access the server of the inspection institution or the medical institution, and acquire the corresponding negative proof information. Alternatively, the laboratory or medical institution may issue a reference number for accessing the negative proof information and present it to the user U11. In that case, the registration unit 151 may accept the reference number input from the user U11 as negative proof information. In the case of medical insurance information, the registration unit 151 acquires the corresponding medical insurance information from the server of the contracted insurance company. In the case of visa information, the registration unit 151 will acquire visa information from the server of the embassy of the second country C2 or the like. Further, medical insurance information and visa information may also be provided by a two-dimensional code or a reference number.

The registration unit 151 transmits a registration request including biometric information, personal information, negative proof information, medical insurance information and visa information of the user U11 to the server 300 via the network N. The registration unit 151 may store the face image, personal information, negative proof information, medical insurance information, and visa information in the storage unit 120. When the registration unit 151 receives the pre-registration code information issued in response to the registration request from the server 300, the registration unit 151 stores the pre-registration code information in the storage unit 120.

The health passport processing unit 152 performs various processes for acquiring and displaying (presenting) the issued health passport. For example, when the health passport processing unit 152 obtains the issued health passport, the health passport is displayed on the input / output unit 140. Further, the health passport processing unit 152 transmits a health passport display request including a face image of the user U11 to the server 300 in response to the health passport display operation by the user U11. Then, the health passport processing unit 152 displays the health passport acquired in response to the display request on the input / output unit 140.

The health report unit 153 sends a health report for reporting the health status of the user U11 to the server 300 after the user U11 enters the second country C2. For example, the user U11 inputs health condition information such as the measured body surface temperature and the determination result of the physical condition (selection value of good, normal, bad, etc.) to the user terminal 101 periodically or at an arbitrary timing. The health report unit 153 may store the input health state information in the storage unit 120 in association with the input date and time (date and time information). The health report unit 153 transmits a health report including the input health state information, date and time information, and the user ID (or biometric information) of the user U11 to the server 300 via the network N. For example, the health report unit 153 sends a health report once a day, at a fixed time every day (8:00 to 10:00), or multiple times a day (am, afternoon).

The display control unit 154 displays various notification information received from the server 300 via the network N on the input / output unit 140.

(Pre-registration)
FIG. 9 is a flowchart showing the flow of the pre-registration process according to the second embodiment. First, the acquisition unit 342 of the server 300 receives the above-mentioned registration request from the user terminal 101 via the network N (S401). Here, the registration request includes biometric information, personal information, negative proof information, medical insurance information and visa information.

Next, the registration unit 341 of the server 300 transmits a face information registration request including the face image included in the registration request to the authentication device 200 (S402). Then, the registration unit 341 acquires the user ID issued at the time of registration of the face feature information in the authentication device 200 (S403). Then, the registration unit 341 registers the acquired user ID 3121, the negative proof information 3123, the medical insurance information 3124, and the visa information 3125 in the storage unit 310 as the user management information 312 (S404). Further, the registration unit 341 registers the personal information 3122 included in the registration request as the user management information 312 in association with the user ID 3121.

(Immigration)
Returning to FIG. 3, the explanation will be continued. It is assumed that the user U12 has been pre-registered in the same manner as the user U11. Then, the user U12 shall undergo immigration at the airport C21 in order to leave the first country C1 and enter the second country C2. Then, the user U12 is inspected for a predetermined infectious disease in addition to the usual immigration inspection. Normally, the user U12 needs to wait at a predetermined place until the inspection result is obtained. At this time, if it is confirmed that the pre-registration process is correctly completed via the immigration terminal 400, the user U12 may be permitted to enter the country without waiting for the inspection result.

The immigration terminal 400 is an information terminal installed at the airport C21 and operated by the immigration inspector U21. FIG. 10 is a block diagram showing the configuration of the immigration terminal 400 according to the second embodiment. The immigration terminal 400 includes a camera 410, a storage unit 420, a communication unit 430, an input / output unit 440, and a control unit 450.

The camera 410 is a photographing device that photographs the user U12 according to the control of the control unit 450. The storage unit 420 is a storage device that stores a program for realizing each function of the immigration terminal 400. The communication unit 430 is a communication interface with the network N. The input / output unit 440 includes a display device and an input device. The input / output unit 440 is, for example, a touch panel. The control unit 450 controls the hardware of the immigration terminal 400. The control unit 450 reads the program from the storage unit 420 into the memory and executes the program. As a result, the control unit 450 realizes the function of the immigration processing unit 451.

The immigration processing unit 451 inquires about the pre-registration process of the user U12, which is the target of immigration, to the server 300. Specifically, the immigration processing unit 451 controls the camera 410 to photograph the face of the user U12, and sends the photographed image (face image) to the server 300 as an inquiry for pre-registration processing. If the pre-registration process is correct, the immigration processing unit 451 receives the health passport as a result of the inquiry, displays it on the input / output unit 440, and presents it to the immigration inspector U21. Alternatively, the immigration processing department 451 may open the immigration gate if the health passport is valid.

Alternatively, the user U12 may display the pre-registration code information on the user terminal 102 and have the immigration terminal 400 read it. In that case, the immigration processing unit 451 of the immigration terminal 400 may analyze the read pre-registration code information and make an inquiry to the server 300 for the pre-registration processing. The user U12 may display the pre-registration code information on the user terminal 102 and present it to the immigration inspector U21.

FIG. 11 is a flowchart showing the flow of immigration processing according to the second embodiment. First, the acquisition unit 342 of the server 300 receives an inquiry for pre-registration processing including a photographed image (face image) of the user U12 from the immigration terminal 400 via the network N. Then, the acquisition unit 342 acquires a photographed image (face image) of the user U12 included in the received inquiry (S411). Then, the acquisition unit 342 outputs the acquired face image to the authentication control unit 343.

Next, the authentication control unit 343 controls face recognition (S412). Specifically, the authentication control unit 343 transmits a face authentication request including the acquired face image to the authentication device 200 via the network N. Then, the authentication control unit 343 acquires the face authentication result from the authentication device 200 via the network N, and outputs the face authentication result to the determination unit 345.

The determination unit 345 determines whether or not the face authentication was successful from the face authentication result (S413). When it is determined that the face authentication is successful (YES in S413), the determination unit 345 identifies the user ID included in the face authentication result. Then, the identification unit 344 identifies the negative certification information 3123, the medical insurance information 3124, and the visa information 3125 associated with the user ID 3121 that has succeeded in authentication from the user management information 312 (S414).

After that, the determination unit 345 determines whether or not the negative proof information 3123, the medical insurance information 3124, and the visa information 3125 specified by the specific unit 344 are valid (S415). Specifically, the determination unit 345 determines that the negative proof information is valid when the period from the test date (or vaccination date) of the negative proof information 3123 to the date of entry into the second country C2 is within a predetermined period. Is determined. Further, the determination unit 345 determines that the medical insurance information is valid when the expiration date of the contract of the medical insurance information 3124 is within a predetermined period from the immigration examination date. Further, the determination unit 345 determines that the visa information is valid when the expiration date of the residence permit of the visa information 3125 is within a predetermined period from the immigration examination date. Further, the determination unit 345 may determine that the negative proof information is valid when the expiration date of the negative proof information 3123 is after the scheduled departure date (scheduled return date) from the second country C2. Similarly, the determination unit 345 may determine that the medical insurance information is valid when the expiration date of the contract of the medical insurance information 3124 is after the scheduled departure date. Similarly, the determination unit 345 may determine that the visa information is valid when the expiration date of the residence permit of the visa information 3125 is after the scheduled departure date.

If all of the negative proof information 3123, medical insurance information 3124 and visa information 3125 are determined to be valid (YES in S415), the issuer 346 will give the user who succeeded in authentication a health passport with valid status. Issue (S416). Then, the registration unit 341 updates the user management information 312 in association with the issued health passport 3127 and the user ID 3121, and registers the user management information 312 in the storage unit 310 (S417).

The issuing department 346 returns the issued health passport 3127 to the immigration terminal 400, which is the inquiring source (S418). The issuing unit 346 may issue code information which is reference information to the issued health passport 3127, and may also return it to the immigration terminal 400. In addition, the issuing unit 346 outputs an immigration permit notification to the immigration terminal 400 (S419). In response to this, the immigration terminal 400 displays the received health passport 3127 and the immigration permit notification on the input / output unit 440. Therefore, the immigration inspector U21 recognizes that the pre-registration process of the user U12 has been performed correctly, and permits the user U12 to enter the country.

On the other hand, if it is determined that the face recognition has failed (NO in S413), the issuing unit 346 returns to the immigration terminal 400 that the issue is not possible (S420). Alternatively, if it is determined that some or all of the negative certification information 3123, the medical insurance information 3124, and the visa information 3125 are not valid (NO in S415), the issuing unit 346 informs the immigration terminal 400 that the issuance is not possible. Reply. In response to this, the immigration terminal 400 presents to the immigration inspector U21 that the pre-registration process of the user U12 is insufficient. Therefore, the immigration inspector U21 makes the user U12 wait at a predetermined place until the infectious disease test result is obtained.

FIG. 12 is a diagram showing a display example of a health passport immediately after issuance according to the second embodiment. The health passport display screen 71 includes a face image 711, a user name 712, a health passport status 713, an expiration date 714, a negative certificate status 715, a medical insurance subscription status 716, a visa status 717, and a code display button 718. However, the display content of the health passport display screen 71 is not limited to these, and may include the health passport state 713. The face image 711 may be a photographed image acquired by the immigration processing unit 451 above, or may be an image obtained by the user U12 registered in the authentication device 200 via the server 300. The user name 712 may be obtained from the server 300, which is included in the personal information 3122 stored in the server 300. The health passport status 713 is the status information included in the health passport received by the immigration processing unit 451 above. The expiration date 714 is displayed when the received health passport also includes an expiration date. Negative certificate status 715, medical insurance coverage status 716 and visa status 717, respectively, when the received health passport contains the statuses of negative certification information 3123, medical insurance information 3124 and visa information 3125, respectively. Is displayed. The code display button 718 is activated when the received health passport contains code information. When the code display button 718 is pressed by the user U12, the code information is displayed as a two-dimensional code.

FIG. 13 is a diagram showing another display example of the health passport immediately after issuance according to the second embodiment. The health passport display screen 71a has the expiration dates 715a, 716a and 717a of the negative certificate, the medical insurance information and the visa information added, respectively, as compared with FIG. That is, apart from the expiration date of the health passport, the expiration date of each of the negative certificate, the medical insurance information and the visa information may be managed and displayed individually.

(Health report)
Returning to FIG. 3, the explanation will be continued. It is assumed that the user U13, like the user U12, has been confirmed that the pre-registration process has been performed correctly in the immigration examination at the airport C21, a health passport has been issued, and entry into the second country C2 has been permitted. .. In addition, the user U13 periodically makes a health report using his / her own user terminal. For example, the health report unit 153 of the user terminal 103 accepts input of health status information from the user U13. Then, the health report unit 153 transmits the health report including the input health state information, the input date and time (date and time information), and the face image of the user U13 to the server 300 via the network N. The immigration terminal 400 or the store terminal 600 acquires the measured value of the body surface temperature of the user U12 or the like from the thermo camera or the like, and reports the health report including the measured value, the measurement date and time and the user's face image via the network N. May be sent to the server 300. Further, a kiosk terminal installed at the entrance of a hotel or another facility may measure the body surface temperature of the user and transmit the measured value to the server 300 via the network N. As a result, even if you do not measure the body surface temperature with a thermometer etc. yourself, you can clear the conditions for entering the store by measuring the body surface temperature from a thermo camera etc. of the store terminal 600 etc. It can also be used for health reports.

FIG. 14 is a flowchart showing the flow of the health report registration process according to the second embodiment. First, the acquisition unit 342 of the server 300 receives the health report from the user terminal 103 or the like via the network N (S421). Here, the health report includes health condition information, date and time information (input date and time or measurement date and time), and a facial image.

Next, the authentication control unit 343 controls face recognition (S422). Specifically, the authentication control unit 343 transmits a face authentication request including a face image included in the health report to the authentication device 200 via the network N. Then, the authentication control unit 343 receives the face authentication result from the authentication device 200. Then, the determination unit 345 determines whether or not the face recognition is successful (S423).

When the face authentication is successful (YES in step S423), the registration unit 341 updates the user management information 312 by associating the health status information 3126 and the date and time information included in the health report with the user ID 3121 included in the face authentication result. Then, it is registered in the storage unit 310 (S424). This makes it possible to record the history of the health status of each user after entering the second country C2 (after the issuance of the health passport). Therefore, it is possible to grasp that the health reports are continuously made along with the latest health conditions of travelers from overseas.

On the other hand, if the face authentication fails (NO in step S423), the registration unit 341 returns to the user terminal 103 via the network N that registration is not possible (S425). If the health report includes a user ID instead of the face image, the server 300 does not have to perform steps S422, S423, and S425.

(Renewal of health passport)
FIG. 15 is a flowchart showing the flow of the health passport renewal process according to the second embodiment. The server 300 periodically or at a predetermined timing renews the health passport for each user.

First, the determination unit 345 calculates the registration interval of the health status information 3126 for a predetermined user (S431). Next, the determination unit 345 determines whether or not the registration interval is a predetermined interval (S432). When the registration interval is a predetermined interval (YES in S432), the determination unit 345 determines whether or not the physical condition of the health condition information is not ill (S433). When the physical condition is not unwell (YES in S433), the determination unit 345 determines whether or not the level of the state of the health passport is equal to or less than a predetermined value (S434). The predetermined value of the level is, for example, the second level described above. In that case, the determination unit 345 determines that the health passport is at or below a predetermined value when the level of the condition is the second or third level. Alternatively, when the state of the health passport is invalid, the determination unit 345 may determine that the value is equal to or less than a predetermined value.

When the health passport status level is below the predetermined value (YES in S434), the processing unit 347 updates to raise the health passport status level (S435). For example, if the level is the second level, the processing unit 347 raises the level to the first level. If the level is the third level, the processing unit 347 raises the level to the second level. Alternatively, if the health passport status is invalid, the processing unit 347 updates the status to valid. It can be said that the processing unit 347 raises the level of the above-mentioned infectious disease control index. Here, the state of the health passport may include the reason (cause) for being lowered to the third level. For example, even if the current level is the third level, if the reason is a close contact or the expiration date of the health passport, a negative test result or vaccine is used to raise the level to the second level. May be a condition of inoculation. On the other hand, even if the current level is the third level, if the reason is that the health report is interrupted, the processing unit 347 may raise the level to the second level.

If NO is determined in step S432 or S433, the processing unit 347 updates to lower the level of the health passport status (S436). For example, if the level is the first level, the processing unit 347 lowers the level to the second level. When the level is the second level, the processing unit 347 lowers the level to the third level. Alternatively, if the health passport status is valid, the processing unit 347 updates the status to invalid. It can be said that the processing unit 347 lowers the level of the above-mentioned infectious disease control index. If NO is determined in step S434, for example, if the level of the state of the health passport is already the first level or is valid, the state of the health passport is maintained.

The determination process in the health passport renewal process is not limited to steps S431 to S433. As described above, the determination unit 345 may determine the infectious disease control index. Then, the processing unit 347 may update the determined infectious disease control index as the level of the state of the health passport.

FIG. 16 is a flowchart showing the flow of the display processing of the health passport according to the second embodiment. First, the health passport processing unit 152 of the user terminal 103 controls the camera 110 in response to the health passport display operation by the user U13 to acquire the captured image of the user U13. Then, the health passport processing unit 152 transmits a health passport display request including the acquired photographed image (face image) to the server 300 via the network N. In response to this, the acquisition unit 342 of the server 300 receives the health passport display request from the user terminal 103 (S441).

Next, the authentication control unit 343 controls face recognition (S442). Specifically, the authentication control unit 343 transmits a face authentication request including a face image included in the health passport display request to the authentication device 200 via the network N. Then, the authentication control unit 343 receives the face authentication result from the authentication device 200. Then, the determination unit 345 determines whether or not the face recognition is successful (S443).

If the face authentication is successful (YES in step S443), the identification unit 344 identifies the health passport 3127 associated with the user ID 3121 included in the face authentication result (S444). Then, the processing unit 347 returns the specified health passport 3127 to the user terminal 103 (S445). In response to this, the health passport processing unit 152 of the user terminal 103 receives the health passport and displays the health passport on the input / output unit 140.

On the other hand, when the face authentication fails (NO in step S443), the processing unit 347 returns to the user terminal 103 via the network N that the health passport cannot be displayed (S446).

FIG. 17 is a diagram showing a display example of a health passport in the state “good” according to the second embodiment. The health passport display screen 72a includes a face image 721, a user name 722, a health passport state 723a, and an expiration date 724. The face image 721 may be a photographed image acquired by the health passport processing unit 152 above, or may be an image obtained by the user U13 registered in the authentication device 200 via the server 300. The user name 722 may be the one included in the personal information input to the user terminal 103 or the one included in the personal information 3122 stored in the server 300 obtained from the server 300. The health passport state 723a is the state information included in the health passport received by the health passport processing unit 152 above. Here, the health passport state 723a indicates that the health passport is valid and the health state is "good". And the health passport state 723a indicates that the infectious disease control index is the first level. Further, the health passport status 723a may be displayed in blue. Therefore, the health passport state 723a includes the display information of the two stars. The expiration date 724 is also displayed when the received health passport contains an expiration date. Here, it is assumed that it is within the expiration date.

FIG. 18 is a diagram showing a display example of a health passport in the state “normal” according to the second embodiment. The health passport display screen 72b is a change of the health passport state 723b as compared with FIG. 17. Health passport status 723b indicates that the health passport is valid and the health status is "normal". And the health passport state 723b indicates that the infectious disease control index is at the second level. Therefore, the health passport state 723b includes the display information of one star. In addition, the health passport status 723b may be displayed in yellow.

FIG. 19 is a diagram showing a display example of a health passport in the state “defective” according to the second embodiment. The health passport display screen 72c is a change of the health passport state 723c as compared with FIG. 17. Health passport status 723c indicates that the health passport is invalid and the health status is "poor". And the health passport state 723c indicates that the infectious disease control index is at the third level. Therefore, the health passport state 723c does not include the star display information. In addition, the health passport status 723c may be displayed in red. The notations of the health passport states 723a to 723c of FIGS. 17 to 19 are examples, and other notations may be used as long as the states of the health passport can be identified. For example, the health passport states 723a-723c may be either letters or marks.

FIG. 20 is a diagram showing another display example of the health passport in the state “good” according to the second embodiment. The health passport display screen 72a1 is a change of the health passport state 723a1 as compared with FIG. The health passport state 723a1 indicates the same state and level as the health passport state 723a. The health passport state 723a1 indicates that the icon on the left side of the three circles is lit. The lit icon may be displayed in blue, for example.

FIG. 21 is a diagram showing another display example of the health passport in the state “normal” according to the second embodiment. The health passport display screen 72b1 is a change of the health passport state 723b1 as compared with FIG. The health passport state 723b1 indicates the same state and level as the health passport state 723b. The health passport state 723b1 indicates that the icon in the center of the three circles is lit. The lit icon may be displayed in yellow, for example.

FIG. 22 is a diagram showing another display example of the health passport in the state “defective” according to the second embodiment. The health passport display screen 72c1 is a change of the health passport state 723c1 as compared with FIG. The health passport state 723c1 indicates the same state and level as the health passport state 723c. The health passport state 723c1 indicates that the icon on the right side of the three circles is lit. The lit icon may be displayed in red, for example.

By displaying as shown in FIGS. 20 to 22, users and the like can easily grasp the state of the health passport (infectious disease countermeasure index) intuitively. The lighting positions, display colors, and shapes of the health passport states 723a1, 723b1, and 723c1 are merely examples, and are not limited thereto.

The health

passport display screens

72a, 72b, 72c, 72a1, 72b1 and 72c1 each have an expiration date of 715a for the negative certificate, medical insurance information and visa information, as shown in the health passport display screen 71a of FIG. 716a and 717a may be displayed.

(Visit to the store (entry))
Returning to FIG. 3, the explanation will be continued. It is assumed that the user U14 has arrived at the store C22. The store terminal 600 is an information terminal installed in the store C22 and operated by the store clerk U22. FIG. 23 is a block diagram showing the configuration of the store terminal 600 according to the second embodiment. The store terminal 600 includes a camera 610, a storage unit 620, a communication unit 630, an input / output unit 640, and a control unit 650.

The camera 610 is a photographing device that photographs the user U14 according to the control of the control unit 650. The storage unit 620 is a storage device that stores a program for realizing each function of the store terminal 600. The communication unit 630 is a communication interface with the network N. The input / output unit 640 includes a display device and an input device. The input / output unit 640 is, for example, a touch panel. The control unit 650 controls the hardware of the store terminal 600. The control unit 650 reads the program from the storage unit 620 into the memory and executes the program. As a result, the control unit 650 realizes the functions of the authentication control unit 651, the display control unit 652, the store entry control unit 653, and the health reporting unit 654.

The authentication control unit 651 controls the authentication of the user U14 who has visited the store C22. For example, the authentication control unit 651 controls the camera 610 to shoot the user U14 and acquire a shot image (face image). Then, the authentication control unit 651 transmits a health passport confirmation request including a photographed image (face image) to the server 300.

The display control unit 652 receives a notification regarding whether or not the user U14 can enter the store as a result of the health passport confirmation request from the server 300, and displays it on the input / output unit 640. For example, the display control unit 652 displays the state of the health passport of the user U14 (infectious disease countermeasure index) on the input / output unit 640. The input / output unit 640 may be visible only to the clerk U22 and may not be visible to the user U14.

The store entry control unit 653 performs store entry control according to the received notification. For example, if the notification indicates an entry permit, or if the infectious disease control index is at the first level, the entry control unit 653 opens the entry gate. Further, when the notification indicates a conditional entry permission, the entry control unit 653 may request the user U14 for health status information. If the notification indicates that the store is not permitted, the store entry control unit 653 keeps the store entrance gate closed.

When the notification indicates conditional entry permission, the health report unit 654 acquires the body surface temperature of the user U14 as health condition information from a thermo camera (not shown) or the like, and obtains the acquired health condition information via the network N. Send to server 300. The store clerk U22 may measure the body surface temperature of the user U14 using a predetermined body surface temperature measuring device, and input the measured value to the store terminal 600.

FIG. 24 is a flowchart showing the flow of the store entry process according to the second embodiment. First, the acquisition unit 342 of the server 300 acquires a health passport confirmation request including a photographed image of the user U14 from the store terminal 600 via the network N (S601).

Then, the server 300 controls face recognition (S602). Specifically, the authentication control unit 343 of the server 300 transmits a face authentication request including a photographed image (face image) included in the health passport confirmation request to the authentication device 200 via the network N. Then, the authentication control unit 343 receives the face authentication result from the authentication device 200. Then, the determination unit 345 determines whether or not the face recognition is successful (S603).

If the face authentication fails (NO in step S603), the server 300 transmits a store denial notice to the store terminal 600 via the network N (S614). In response to this, the store terminal 600 displays the received store entry disapproval notification on the input / output unit 640 or notifies the store clerk U22 to that effect. Alternatively, the store terminal 600 may display the store entry permission notification to the user U14 via the input / output unit 640.

If the face recognition is successful (YES in step S603), the specific unit 344 specifies the health passport (S604). Specifically, the identification unit 344 identifies the health passport 3127 associated with the user ID 3121 included in the face authentication result. Then, the determination unit 345 determines the state of the specified health passport (S605). For example, the determination unit 345 determines the level of the infectious disease control index of the specified health passport status.

Then, the determination unit 345 determines whether or not the user U14 is permitted to enter the store from the level of the determined infectious disease countermeasure index (S606). When the infectious disease control index is the first level, the determination unit 345 determines that entry is permitted. For example, the health passport of the user U14 is valid, the health report is made regularly, and the body surface temperature included in each health condition information is 37.5 degrees or less. Then, in this case (YES in S606), the processing unit 347 returns the store entry permission notification including the health passport to the store terminal 600 via the network N (S607). The processing unit 347 may include the notification information described later, the determination result of the health report, and the like in the notification. In response to this, the display control unit 652 of the store terminal 600 displays the received store entry permission notification on the input / output unit 640.

FIG. 25 is a diagram showing a display example of a health passport in the state “good” according to the second embodiment. The determination result display screen 73a includes a face image 731, a user name 732, a health passport status 733a, an expiration date 734, a health report status 735a, and notification information 736a. The face image 731 may be a captured image acquired by the authentication control unit 651 above, or may be an image obtained by acquiring the face image of the user U14 registered in the authentication device 200 via the server 300. The user name 732 may be obtained from the server 300, which is included in the personal information 3122 stored in the server 300. The health passport status 733a is the status information of the health passport included in the store admission notice. Here, the health passport state 733a indicates that it is the first level, similar to the health passport state 723a of FIG. 17 described above. The expiration date 734 is the same as the expiration date 724 of FIG. 17 described above. The health report status 735a is a determination result of the health report included in the store entry permission notification. Here we show that health reports are made regularly and appropriately. The notification information 736a shows an example of displaying information for notifying the entrance permission.

Return to FIG. 24 and continue the explanation. If NO is determined in step S606, the determination unit 345 determines whether or not the user U14 is conditionally permitted to enter the store from the level of the determined infectious disease countermeasure index (S608). When the infectious disease control index is the second level, the determination unit 345 determines that the store is conditionally permitted to enter the store. For example, a health passport is valid, but health reports are not made regularly (especially the latest health information is not stored). Or, even if health reports are made regularly, if there is a large variation in daily reporting times, the infectious disease control index will be the second level, and the judgment unit 345 will be conditionally permitted to enter the store. You may judge. Then, in these cases (YES in S608), the processing unit 347 returns the store permission notification with the entry condition including the health passport to the store terminal 600 via the network N (S609). The processing unit 347 may include the notification information, the determination result of the health report, and the like in the notification. In response to this, the display control unit 652 of the store terminal 600 displays the received conditional entry permission notification on the input / output unit 640.

FIG. 26 is a diagram showing a display example of a health passport in the state “normal” according to the second embodiment. In the determination result display screen 73b, the health passport status 733b, the health report status 735b, and the notification information 736b are changed and the message 737b is added as compared with FIG. 25. The health passport state 733b indicates a second level, similar to the health passport state 723b of FIG. 18 described above. The health report status 735b is a determination result of the health report included in the conditional entry permission notification. Here, it is shown that health reports are not made regularly (insufficient). The notification information 736b shows an example of displaying information for conditionally notifying the entrance permission. Message 737b is a message requesting health status information such as "You need to report your current health status to enter the store!". As a result, the clerk U22 or the user U14 can understand that he / she cannot enter the store due to lack of health condition information and that he / she can enter the store if there is no problem by measuring the body surface temperature or the like on the spot.

Therefore, the health report unit 654 of the store terminal 600 acquires the body surface temperature of the user U14 as health condition information from a thermo camera (not shown) or the like, and transmits the acquired health condition information to the server 300 via the network N. .. In response to this, the server 300 acquires the current health status information of the user U14 (S610). Then, the registration unit 341 of the server 300 additionally registers the acquired health state information 3126 in association with the user ID 3121 of the user U14 (S611). As a result, the determination unit 345 may determine the infectious disease control index as the first level. Further, in the present embodiment, the registration unit 341 registers the latest health condition information acquired from the store terminal 600 or the like as a health report. Therefore, after that, it may be determined that the health report is periodically made for the user at the usage destination such as another store on the same day.

After that, the determination unit 345 determines whether or not the physical condition of the user indicated by the health condition information acquired in step S610 is higher than normal (S612). For example, if the current body surface temperature is less than 37.5 degrees, the determination unit 345 determines that the physical condition is above normal. When the physical condition is more than normal (YES in S612), the determination unit 345 considers the infectious disease countermeasure index as the first level, permits entry to the store, and proceeds to step S607. At this time, it may be temporarily regarded as the first level, and the state of the health passport may remain at the second level. Alternatively, the processing unit 347 may raise the level to the first level and update it. On the other hand, if the physical condition is not more than normal (NO in S612), the determination unit 345 disallows entry and proceeds to step S613.

When NO is determined in step S608 or S612, and the processing unit 347 returns a store denial notice including the determined infectious disease countermeasure index to the store terminal 600 via the network N (S613). The processing unit 347 may include the notification information, the determination result of the health report, and the like in the notification. Further, in step S613, the processing unit 347 may include the reason for the disapproval in the store disapproval notification. In response to this, the display control unit 652 of the store terminal 600 displays the received store entry disapproval notification on the input / output unit 640. Further, the processing unit 347 may include the guidance information of the facility where the infectious disease test and the vaccination are possible in the notification. At this time, the processing unit 347 may return the map information (described later) indicating the current position of the user and the position of the facility to the store terminal 600. In this case, the user may make a reservation for inspection or the like, as will be described later, via the map information displayed on the store terminal 600.

FIG. 27 is a diagram showing a display example of a health passport in the state “defective” according to the second embodiment. The determination result display screen 73c has the health passport state 733c, the health report status 735b, and the notification information 736c changed as compared with FIG. 25. The health passport state 733c indicates a third level, similar to the health passport state 723c of FIG. 19 described above. The notification information 736c shows an example of displaying information for notifying the permission to enter the store. This allows the clerk U22 or the user U14 to know that he / she cannot enter the store because his / her health passport is invalid (because he / she is in poor physical condition). The

health passport states

733a, 733b and 733c may be replaced with the above-mentioned health passport states 723a1, 723b1 and 723c1, respectively.

In step S602 of FIG. 24, face authentication was performed as authentication for identity verification, but as described above, identity verification is performed using code information (for example, a two-dimensional code) indicating reference information to the health passport. You may authenticate. For example, the user terminal 104 displays the code information, and the store terminal 600 reads the code information. The store terminal 600 transmits a health passport confirmation request including code information to the server 300. Then, the server 300 may authenticate the identity verification from the content of the code information included in the received request and specify the health passport.

(Dense contact judgment)
FIG. 28 is a flowchart showing the flow of the close contact determination process according to the second embodiment. First, the acquisition unit 342 acquires the behavior history of a person infected with a predetermined infectious disease (S451). For example, the acquisition unit 342 may receive a notification (behavior history) of an infected person from a server such as a health center via the network N. Alternatively, the acquisition unit 342 may periodically inquire of a server such as a health center about the newly infected person and acquire the behavior history of the newly infected person. Then, the server 300 shall perform the following processing for each user registered in the user management information 312.

Next, the determination unit 345 determines whether or not vaccination is included in the measures against infectious diseases indicated by the proof information of the target user (S452). When vaccination is included (YES in S452), the determination unit 345 determines whether or not it is within a predetermined period from the vaccination date (S453). If it is within a predetermined period from the vaccination date, that is, if the predetermined period has not passed (YES in S453), the close contact determination process for the target user is not performed and the process ends.

On the other hand, when vaccination is not included (NO in S452) or when a predetermined period has passed from the vaccination date (NO in S453), the determination unit 345 indicates the behavior history of the target user and the infected person. Based on the above, it is determined whether or not the target user is a close contact (S454). Specifically, the determination unit 345 acquires the action history 3128 associated with the user ID 3121 of the target user. Then, the determination unit 345 searches for the acquired behavior history 3128 within a certain range with the date and time and position information of the behavior history of the infected person. When the action history within a certain range is searched, the determination unit 345 determines that the target user is a close contact (YES in S454). In that case, similar to step S436 of FIG. 15, the processing unit 347 is updated to lower the level of the health passport status (S455). In this case, the processing unit 347 may update the state level of the health passport to, for example, a third level. Alternatively, the processing unit 347 may update the state of the health passport as invalid. Then, the specifying unit 344 refers to the medical institution information 313 and identifies the medical institution to which the medical insurance pertaining to the medical insurance information 3124 associated with the user is applicable (S456). For example, the processing unit 347 specifies a medical institution within a predetermined range from the current position of the target user in the medical institution information 313. The processing unit 347 may specify two or more medical institutions. Then, the processing unit 347 is a user terminal corresponding to the user who has determined that the health passport status level (infectious disease countermeasure index) updated in step S455 and the medical institution specified in step S456 are close contacts. (S457). For example, the processing unit 347 notifies to prompt the inspection of the infectious disease at the identified medical institution. In response to this, the notified user terminal displays map information indicating the location of the medical institution on the screen.

If the target user is not determined to be a close contact (NO in S454), the process is terminated. Depending on the type of vaccine, there is a possibility that some people will be infected even if they are vaccinated. Therefore, for example, in step S451, the acquisition unit 342 may further acquire cautionary information on the type of vaccine that is said to have a low vaccine effect (or an infected person has appeared even after inoculation). Then, if YES is determined in step S452, the determination unit 345 further determines whether or not the type of inoculated vaccine is included in the caution information. Then, if it is determined that the type of the inoculated vaccine is included in the caution information, the process may proceed to step S454 or later. That is, when a vaccine with low efficacy is inoculated, a close contact determination process may be applied.

FIG. 29 is a diagram showing a display example of map information showing the location of the notified medical institution according to the second embodiment. The map information 74 includes at least the user's current location 741 and the medical institution location 742. There may be a plurality of positions 742 of the medical institution. As a result, the notified user can grasp that he / she has been determined to be a close contact, that he / she should be inspected for an infectious disease at a medical institution, the location of the medical institution where the inspection can be performed, and the like. Therefore, it is possible to promote the inspection of infectious diseases of close contacts. The map information 74 may be displayed for each medical institution, including the estimated time required for testing and vaccination (according to the degree of congestion), available languages, corresponding medical insurance, and the like.

Even if the processing unit 347 notifies a person who newly needs an infectious disease test or vaccination with a message urging the test or vaccination and the location (map information, etc.) of the testing institution (medical institution). good. That is, the processing unit 347 may give the above notification to a close contact person or a user whose health passport is invalid, has exceeded the expiration date, or has exceeded the valid action range.

In addition, the notified user may select the position 742 of the medical institution on the screen to make an appointment for a test or vaccination. For example, when the user terminal receives the selection of the position 742 of the medical institution from the user, the user's face is photographed by the camera, and the photographed image (face image) and the position information of the selected medical institution (or the identification of the medical institution) are taken. The first reservation request including the information) is transmitted to the server 300. The server 300 performs face authentication on the face image included in the received first reservation request, and when the health report of the user who succeeds in face authentication is appropriately made (for example, at predetermined intervals), a reservation for inspection or the like is made. Perform processing. The server 300 transmits a reservation acceptance screen to the user terminal as a reservation process such as inspection. The user terminal displays the reservation acceptance screen and transmits a second reservation request including the reservation date and time input by the user to the server 300. The server 300 performs a reservation process on the reservation reception server of the selected medical institution, including the reservation date and time and the like included in the received second reservation request and the personal information of the user who has succeeded in authentication. For the authentication of identity verification, the code information of the user ID or the like may be used instead of the face image. In that case, the server 300 performs a predetermined identity verification authentication process on the code information included in the received inspection or other reservation request.

As described above, in the present embodiment, before leaving the country C1 of the first country, the negative proof information of the infectious disease test and the information on joining the medical insurance applied to the test and treatment of the infectious disease in the second country C2 are obtained in advance. If you are a registered user, you can streamline immigration inspection of second country C2. And while suppressing the spread of infectious diseases, it is possible to accept travelers from overseas. Then, by using the health status information reported regularly, the latest status of the health passport can be managed. In other words, the current user's infectious disease countermeasures and health status can be unified with a health passport. Then, by controlling admission to facilities (stores, etc.) in the second country C2 according to the state of the health passport, it is possible to promote the use while suppressing the spread of infectious diseases. Furthermore, it is possible to encourage a user who is determined to be a close contact during his / her stay in the second country C2 to be examined at a medical institution to which his / her medical insurance can be applied.

The validity of the negative proof information and medical insurance information according to this embodiment may be used for the departure examination of the first country C1 and the departure examination when returning from the second country C2 to the first country C1. .. A health passport may be issued if the conditions are met at the time of immigration. Alternatively, following the pre-registration process, a health passport may be issued if the registration information meets the conditions. That is, the user may be able to check the issued health passport before leaving the country C1 of the first country. Further, the immigration terminal 400 may specify the country of stay including the first country C1 from the passport (passport) information of the user U12, and may transmit the information of the country of stay to the server 300 together with the inquiry of the health passport. In that case, the server 300 may renew the health passport of the user U12 as invalid depending on the country of stay. For example, a health passport for an immigrant from a country with a high number of infections may be revoked.

In the above, the validity of the health passport was used to control the entry of the store, but the validity of the user's health passport may be used when making a reservation for the use of the store or the like. That is, if the health passport is valid (second level or higher) at the time of reservation, the reservation may be accepted. This makes it possible to prevent infectious diseases and prevent the use of users with inadequate health conditions.

The information processing system 1000 may be applied to reservations and usage permits of other facilities (hotels, movie theaters, stadiums, etc.) instead of the store C22. For example, if there is a problem with the health passport or health report at the time of hotel reservation or check-in, hotel reservation or check-in may be disabled.

<Embodiment 3>
The third embodiment is a modification of the second embodiment described above. In the third embodiment, the user terminal manages negative certification information, medical insurance information, visa information, health status information, health passport, and the like. Then, when visiting the store, the user terminal directly transmits the identity verification information and the health passport to the authentication terminal such as the store terminal. Then, the authentication terminal performs authentication for identity verification, determination of the state of the health passport, and processing according to the determination result. Therefore, the server 300 according to the third embodiment does not need to store personal information, negative certification information, medical insurance information, visa information, and the like in the user management information 312 of the storage unit 310. Therefore, personal information of travelers and the like can be protected more safely.

FIG. 30 is a block diagram showing the configuration of the user terminal 101a according to the third embodiment. The user terminal 101a is an improved version of the user terminal 101 of FIG. Specifically, the storage unit 120 of the user terminal 101a stores the program 121 and the user management information 122. The program 121 is a program in which the program installed in the user terminal 101 of the second embodiment is improved for the third embodiment. The user management information 122 is obtained by adding the face image 1229 to the information corresponding to the above-mentioned user management information 312. The user ID 1221, personal information 1222, negative certification information 1223, medical insurance information 1224, visa information 1225, health status information 1226, health passport 1227, and behavior history 1228 are the same as the configurations in the user management information 312. The face image 1229 is a photographed image of the user registered for issuing the health passport 1227. The user management information 122 may include passport information and airline ticket information. Passport information is electronic data of the user's passport. Ticket information is electronic data of a round-trip or one-way ticket between a user's first country C1 and second country C2. Further, the storage unit 120 may store the medical institution information 313 and the consultation center information 314 of FIG. 7. These may be acquired and stored after entering the second country C2. The memory 160 is not shown in FIG. 8, and is an example of a volatile storage device.

The control unit 150 of the user terminal 101a reads the program 121 from the storage unit 120 into the memory 160 and executes the program 121. As a result, the control unit 150 realizes the functions of the registration unit 151a, the health passport processing unit 152a, the acquisition unit 153a, the authentication control unit 154a, the specific unit 155, the determination unit 156, the processing unit 157, and the token processing unit 158.

The registration unit 151a receives biometric information (face image), personal information, negative proof information, medical insurance information, and visa information from the user U11 in the same manner as the registration unit 151 described above. Then, the registration unit 151a transmits a face information registration request including a face image to the authentication device 200, and acquires the user ID issued at the time of registration of the face feature information in the authentication device 200. After that, the registration unit 151a registers the acquired user ID 1221, personal information 1222, negative certification information 1223, medical insurance information 1224, visa information 1225, and face image 1229 in the storage unit 120 as user management information 122 in association with each other.

The authentication control unit 154a is an example of the above-mentioned authentication control unit 12. The authentication control unit 154a performs face authentication by collating the captured image captured by the camera 110 with the face image 1229 registered in the storage unit 120. The authentication control unit 154a may use the above-mentioned other authentication for identity verification other than the face authentication.

The acquisition unit 153a is an example of the acquisition unit 11 described above. The acquisition unit 153a acquires the registration information registered by the registration unit 151a. For example, the acquisition unit 153a acquires the user management information 122 registered in association with the user ID 1221, the negative certification information 1223, the medical insurance information 1224, and the visa information 1225 from the storage unit 120 as registration information. The acquisition unit 153a acquires the health report of the user U11 after the issuance of the health passport. Further, the acquisition unit 153a periodically acquires GPS information or the like received by the user terminal 101a as an action history. Further, the acquisition unit 153a acquires the user's authentication history as an action history from the authentication terminal (immigration terminal 400a, store terminal 600a, etc.).

Further, the registration unit 151a updates the user management information 122 by associating the health passport 1227 issued by the immigration terminal 400a or the server 300 with the user ID 1221 and registers it in the storage unit 120. The registration unit 151a updates the user management information 122 by associating the acquired health state information 1226 with the user ID 1221 and registers it in the storage unit 120. The registration unit 151a associates the acquired action history 1228 with the user ID 1221 and registers it in the storage unit 120 as user management information 122.

The specific unit 155 is an example of the above-mentioned specific unit 13. The identification unit 155 identifies the negative certification information 1223, the medical insurance information 1224, the visa information 1225, and the health passport 1227 associated with the user ID 1221 when the authentication by the authentication control unit 154a is successful.

The health passport processing unit 152a reads out the health passport 1227 and displays the health passport 1227 on the input / output unit 140 when the authentication control unit 154a succeeds in authentication in response to the health passport display operation by the user U11. In addition, the health passport processing unit 152a shall renew the health passport in the same manner as the processing unit 347 described above.
The determination unit 156 is an example of the determination unit 14 described above. The determination unit 156 determines whether or not the face authentication is successful based on the face authentication result. The determination unit 156 determines the registration interval of the health status information 1226 periodically or at a predetermined timing. In addition, the determination unit 156 may perform various determination processes similar to the determination unit 345 described above.

When the user U11 is determined to be a close contact, the processing unit 157 displays the fact and the specified medical institution on the input / output unit 140. Further, when the user U11 is determined to be a close contact, the processing unit 157 displays the fact and the specified consultation center on the input / output unit 140.

The token processing unit 158 generates the first token information from the negative proof information 1223, the medical insurance information 1224, the visa information 1225, and the face image 1229 registered in the storage unit 120. Then, the token processing unit 158 transmits the first token information to the immigration terminal 400a. At this time, the token processing unit 158 may transmit the first token information to the immigration terminal 400a by wireless communication (Bluetooth (registered trademark), NFC (Nearfield communication), etc.). Alternatively, when the token processing unit 158 determines that the location information such as the GPS information of the user terminal 101a is within the predetermined range of the immigration terminal 400a, the token processing unit 158 transmits the first token information to the immigration terminal 400a by wireless communication. You may.

Further, the token processing unit 158 generates the second token information from the health passport 1227 and the face image 1229 registered in the storage unit 120. Then, the token processing unit 158 transmits the second token information to the store terminal 600a. The transmission method may be wireless communication as described above. Further, the token processing unit 158 may confirm and consent to the transmission destination to the user before transmitting the first or second token information. Further, when the token processing unit 158 has a plurality of selections for the destination, the token processing unit 158 may confirm and consent to the user before transmitting the first or second token information. It was

FIG. 31 is a block diagram showing the configuration of the immigration terminal 400a according to the third embodiment. In the immigration terminal 400a, the immigration processing unit 451 has been changed to the token processing unit 451a, the authentication control unit 452, the specific unit 453, the determination unit 454, and the issuing unit 455, as compared with the immigration terminal 400 of FIG. Is.

The token processing unit 451a is an example of the acquisition unit 11 described above. The token processing unit 451a acquires the first biometric information (face image) stored in the user terminal 101a from the terminal. Specifically, the token processing unit 451a receives the first token from the user terminal 101a. Then, the token processing unit 451a extracts negative proof information, medical insurance information, visa information, and facial image from the first token. In addition, the token processing unit 451a deletes the first token and the extracted information after the immigration examination is completed or after a certain period of time has elapsed.

The authentication control unit 452 is an example of the above-mentioned authentication control unit 12. The authentication control unit 452 controls the camera 410 to shoot the user U12 and acquire the shot image (face image). Then, the authentication control unit 452 collates the acquired photographed image (first identity verification information) with the extracted face image (second identity verification information) to perform face authentication.

The specific unit 453 is an example of the above-mentioned specific unit 13. If the face recognition is successful, the identification unit 453 identifies the negative proof information, the medical insurance information, and the visa information when extracted.

The determination unit 454 is an example of the determination unit 14 described above. The determination unit 454 determines the validity of the identified negative proof information, medical insurance information, and visa information.

The issuing unit 455 issues a valid health passport to the user who succeeds in authentication when the determination unit 454 determines that the passport is valid. The issuing unit 455 may transmit the issued health passport to the user terminal of the corresponding user.

The issuing department 455 does not have to issue a health passport by itself. For example, the issuing unit 455 transmits a health passport issuance request including a user ID that has been successfully authenticated and that the negative certification information, medical insurance information, and visa information are valid to the server 300 via the network N. May be good. In response to this, the server 300 issues a valid health passport to the user who has succeeded in authentication, and returns the health passport to the immigration terminal 400a. Then, the issuing unit 455 receives the health passport issued by the server 300.

FIG. 32 is a flowchart showing the flow of immigration processing according to the third embodiment. Here, it is assumed that the user U12 possesses a user terminal 102a (not shown) having a function equivalent to that of the user terminal 101a, and is in front of the immigration terminal 400a. First, the token processing unit 451a of the immigration terminal 400a acquires the registration information of the negative certification information and the insurance information of the user U12 (S801). Specifically, the token processing unit 451a receives the first token from the user terminal 102a. Then, the token processing unit 451a analyzes the first token and extracts negative proof information, medical insurance information, visa information, and facial image (S802).

Subsequently, the authentication control unit 452 photographs the user U12 (S803). Then, the authentication control unit 452 performs face authentication processing (S804). Specifically, the authentication control unit 452 collates the captured image (face image of the user U12) acquired in step S803 with the face image extracted in step S802 to perform face authentication. After that, the immigration terminal 400a performs the same processing as in steps S413 to S420 of FIG. 11 described above. The token processing unit 451a deletes the first token and the extracted information after the immigration examination is completed or after a certain period of time has elapsed.

Here, the store terminal 600a is an information terminal installed in the store C22 in the second country C2. Further, it is assumed that the user U14 possesses the user terminal 104a (not shown) having the same function as the user terminal 101a and is in front of the store terminal 600a.

FIG. 33 is a block diagram showing the configuration of the store terminal 600a according to the third embodiment. In the store terminal 600a, the authentication control unit 651a and the store entry control unit 653a have been changed, the token processing unit 655 and the determination unit 656 have been added, and the health report unit 654 has been deleted, as compared with the store terminal 600 in FIG. It is a thing.

The token processing unit 655 receives the second token from the user terminal 101a and extracts the health passport and the face image from the second token. In addition, the token processing unit 655 deletes the second token and the extracted information after the completion of the store entry process or after a certain period of time has elapsed.

The authentication control unit 651a controls the camera 610 to shoot the user U14 and acquire the shot image (face image). Then, the authentication control unit 651a collates the acquired photographed image (first identity verification information) with the extracted face image (second identity verification information) to perform face authentication.

When the face recognition is successful, the determination unit 656 determines the state of the extracted health passport (for example, the level of the infectious disease control index).

The store entry control unit 653a performs store entry control according to the determination result (for example, the level of the infectious disease countermeasure index) by the determination unit 656. For example, when the infectious disease control index is the first level, the store entry control unit 653a permits the user U14 to enter the store. When the infectious disease control index is the second level, the store entry control unit 653a conditionally permits the user U14 to enter the store. When the infectious disease control index is at the third level, the store entry control unit 653a does not allow the user U14 to enter the store. The store entry control unit 653a may display a notification according to the determination result on the input / output unit 640.

As described above, in the third embodiment, the same effect as that of the second embodiment can be obtained. Further, in the third embodiment, the user terminal manages the health passport and the health status information, and transmits the token information to the authentication terminal at the time of authentication. Then, the authentication terminal deletes the token information after the processing such as authentication is completed. Therefore, the server does not need to manage the health passport and health status information. Therefore, the personal information of the user can be protected more safely.

<Embodiment 4>
The fourth embodiment is a modification of the second embodiment described above. In the fourth embodiment, the biometric authentication function is built in the server 300. For example, the server 300 according to the fourth embodiment further associates and stores the user's face image or face feature information with the user ID 3121 of the user management information 312. Then, the authentication control unit 343 of the server 300 according to the fourth embodiment collates the face feature information of a plurality of persons with the face feature information of the user to be authenticated to control face authentication. That is, the authentication control unit 343 acquires the face recognition result by collating the face feature information extracted from the user's face area with the face feature information stored in the storage unit 310 and performing face recognition.

As described above, the same effect as that of the above-mentioned second embodiment can be obtained in the fourth embodiment as well.

<Other embodiments>
In the above-described embodiment, the description is given as a hardware configuration, but the present invention is not limited to this. The present disclosure can also be realized by causing the CPU to execute a computer program for arbitrary processing.

In the above example, the program is stored using various types of non-transitory computer readable medium and can be supplied to the computer. Non-temporary computer-readable media include various types of tangible storage media. Examples of non-temporary computer-readable media include magnetic recording media (eg flexible disks, magnetic tapes, hard disk drives), optomagnetic recording media (eg optomagnetic disks), CD-ROMs (ReadOnlyMemory), CD-Rs, etc. Includes CD-R / W, DVD (DigitalVersatileDisc), semiconductor memory (eg, mask ROM, PROM (ProgrammableROM), EPROM (ErasablePROM), flash ROM, RAM (RandomAccessMemory)). The program may also be supplied to the computer by various types of temporary computer readable media. Examples of temporary computer readable media include electrical, optical, and electromagnetic waves. The temporary computer-readable medium can supply the program to the computer via a wired communication path such as an electric wire and an optical fiber, or a wireless communication path.

Note that this disclosure is not limited to the above embodiment, and can be appropriately changed without departing from the spirit. Further, the present disclosure may be carried out by appropriately combining the respective embodiments.

Some or all of the above embodiments may also be described, but not limited to:
(Appendix 1)
Negative proof information of a predetermined infectious disease test conducted for a predetermined user in a first country and insurance information on medical insurance that the user has subscribed to and is applicable in a second country are given to the user. An acquisition method for acquiring registration information registered in association with each other,
An authentication control means for controlling the first biometric authentication for biometric information acquired from a user who intends to enter the second country.
When the first biometric authentication is successful, the specific means for specifying the negative certification information and the insurance information associated with the user who succeeded in the first biometric authentication based on the registration information, and the specific means.
A determination means for determining the validity of the specified negative proof information and the insurance information, and
Information processing device equipped with.
(Appendix 2)
When both the negative proof information and the insurance information are determined to be valid, the issuing means for issuing a valid health passport to the user who succeeded in the first biometric authentication, and
The information processing apparatus according to Appendix 1, further comprising a first registration means for registering the health passport in association with the registration information of the user.
(Appendix 3)
The authentication control means controls a second biometric authentication with respect to the biometric information acquired from the user at a predetermined facility in the second country.
When the second biometric authentication is successful, the specific means identifies the health passport associated with the user who succeeded in the second biometric authentication based on the registration information.
The information processing apparatus according to Appendix 2, wherein the determination means determines whether or not the specified health passport is valid.
(Appendix 4)
When the second biometric authentication is successful, the second registration means for registering the behavior history including the facility and the authentication date and time in association with the user who succeeded in the second biometric authentication is further provided.
The determination means determines whether or not the user is a close contact of the infected person based on the behavior history of the infected person with the infectious disease acquired from the outside and the registered behavior history.
The information processing apparatus according to Appendix 3, further comprising a first notification means for notifying the user when the user is determined to be the close contact.
(Appendix 5)
When the user is determined to be the close contact, the specific means identifies a medical institution to which the medical insurance related to the insurance information associated with the user can be applied.
The information processing device according to Appendix 4, wherein the first notification means further notifies the user of the specified medical institution.
(Appendix 6)
The registration information is further associated with the language information used by the user to the user.
When the user is determined to be the close contact person, the specific means identifies a consultation center for counseling on the infectious disease based on the linguistic information associated with the user.
The first notification means is the information processing device according to Appendix 4 or 5, which further notifies the user of the specified consultation center.
(Appendix 7)
A third registration means for registering the physical condition information in association with the user when the user receives the physical condition information of the user while staying in the second country.
Addendums 2 to 6 further include a first renewal means for renewing the state of the health passport issued to the user as invalid when the physical condition information associated with the user does not satisfy a predetermined condition. The information processing apparatus according to any one of the following items.
(Appendix 8)
The registration information is further associated with the language information used by the user to the user.
When the physical condition information does not satisfy a predetermined condition, the specific means identifies a consultation center that provides consultation and response regarding the infectious disease based on the linguistic information associated with the user.
The information processing apparatus according to Appendix 7, further comprising a second notification means for further notifying the user of the specified consultation center.
(Appendix 9)
The acquisition means further acquires the action schedule of the user, and the acquisition means further acquires the action schedule of the user.
The information processing apparatus according to any one of Supplementary note 2 to 8, wherein the issuing means sets a valid period based on the action period included in the acquired action schedule and issues the health passport.
(Appendix 10)
The issuing means sets an effective action range based on the acquired action schedule and issues the health passport.
The acquisition means further acquires the current position of the user.
The determination means further determines whether or not the current position exceeds the effective action range, and further determines.
The information processing apparatus according to Appendix 9, further comprising a second updating means for updating the state of the health passport associated with the user as invalid when the current position exceeds the effective action range.
(Appendix 11)
The determination means determines whether or not the country of stay of the user in a predetermined period includes a specific country, and determines whether or not the specific country is included.
If it is determined that the country of stay of the user includes a specific country, a third updating means for updating to lower the level of the infectious disease control index indicating the status of the health passport associated with the user is further provided. The information processing apparatus according to any one of Supplementary note 2 to 10.
(Appendix 12)
A fourth register in which the identification information corresponding to the biometric information acquired from the user, the negative certification information, and the insurance information are associated with each other and registered as the registration information while the user stays in the first country. The information processing apparatus according to any one of Supplementary note 1 to 11, further comprising the registration means of the above.
(Appendix 13)
The acquisition means acquires the first biometric information stored in the user's terminal from the terminal.
When the authentication is performed, the authentication control means collates the first biometric information acquired by the acquisition means with the second biometric information acquired from the user, thereby performing the first biometric information. The information processing apparatus according to any one of Supplementary note 1 to 12, which controls biometric authentication.
(Appendix 14)
Negative proof information of a predetermined infectious disease test conducted for a predetermined user in a first country and insurance information on medical insurance that the user has subscribed to and is applicable in a second country are given to the user. A storage device that is associated and stored as registration information,
The storage device is provided with an information processing device connected to the storage device.
The information processing device is
An acquisition means for acquiring the registration information from the storage device, and
An authentication control means for controlling the first biometric authentication for biometric information acquired from a user who intends to enter the second country.
When the first biometric authentication is successful, the specific means for specifying the negative certification information and the insurance information associated with the user who succeeded in the first biometric authentication based on the registration information, and the specific means.
A determination means for determining the validity of the specified negative proof information and the insurance information, and
Information processing system equipped with.
(Appendix 15)
The information processing device is
When both the negative proof information and the insurance information are determined to be valid, the issuing means for issuing a valid health passport to the user who succeeded in the first biometric authentication, and
The information processing system according to Appendix 14, further comprising a first registration means for registering the health passport in association with the registration information of the user.
(Appendix 16)
The computer
Negative proof information of a predetermined infectious disease test conducted for a predetermined user in a first country and insurance information on medical insurance that the user has subscribed to and is applicable in a second country are given to the user. Acquire the registration information registered in association with each other,
For the biometric information acquired from the user who is going to enter the second country, the first biometric authentication is controlled.
When the first biometric authentication is successful, the negative certification information and the insurance information associated with the user who succeeded in the first biometric authentication are specified based on the registration information.
Judging the validity of the identified negative proof information and the insurance information,
Information processing method.
(Appendix 17)
Negative proof information of a predetermined infectious disease test conducted for a predetermined user in a first country and insurance information on medical insurance that the user has subscribed to and is applicable in a second country are given to the user. The acquisition process to acquire the registration information registered in association with each other,
The authentication control process that controls the first biometric authentication for the biometric information acquired from the user who is going to enter the second country,
When the first biometric authentication is successful, the specific process for specifying the negative certification information and the insurance information associated with the user who succeeded in the first biometric authentication based on the registration information, and the specific processing.
Judgment processing for determining the validity of the specified negative proof information and the insurance information, and
A non-temporary computer-readable medium containing a program that causes a computer to run.

Although the invention of the present application has been described above with reference to the embodiments (and examples), the invention of the present application is not limited to the above embodiments (and examples). Various changes that can be understood by those skilled in the art can be made within the scope of the invention of the present application in terms of the configuration and details of the invention of the present application.

1 Information processing device 11 Acquisition unit 12 Authentication control unit 13 Specific unit 14 Judgment unit 1000 Information processing system C1 First country C2 Second country C21 Airport C22 Store U11 User U12 User U13 User U14 User U21 Immigration inspector U22 Clerk N Network 101 User terminal 101a User terminal 102 User terminal 103 User terminal 104 User terminal 110 Camera 120 Storage unit 121 Program 122 User management information 1221 User ID
1222 Personal information 1223 Negative certification information 1224 Medical insurance information 1225 Visa information 1226 Health status information 1227 Health passport 1228 Action history 1229 Face image 130 Communication department 140 Input / output department 150 Control department 151 Registration department 152 Health passport processing department 153 Health report department 154 Display control unit 151a Registration unit 152a Health passport processing unit 153a Acquisition unit 154a Authentication control unit 155 Specific unit 156 Judgment unit 157 Processing unit 158 Token processing unit 160 Memory 200 Authentication device 210 Face information DB
211 User ID
212 Face feature information 220 Face detection section 230 Feature point extraction section 240 Registration section 250 Authentication section 300 Server 310 Storage section 311 Program 312 User management information 3121 User ID
3122 Personal information 3123 Negative certification information 3124 Medical insurance information 3125 Visa information 3126 Health status information 3127 Health passport 3128 Action history 313 Medical institution information 314 Consultation center information 320 Memory 330 Communication department 340 Control department 341 Registration department 342 Acquisition department 343 Authentication control department 344 Specific unit 345 Judgment unit 346 Issuing unit 347 Processing unit 400 Immigration examination terminal 400a Immigration examination terminal 410 Camera 420 Storage unit 430 Communication unit 440 Input / output unit 450 Control unit 451 Immigration examination processing unit 451a Token processing unit 452 Authentication control unit 453 Department 454 Judgment unit 455 Issuer 600 Store terminal 610 Camera 620 Storage unit 630 Communication unit 640 Input / output unit 650 Control unit 651 Authentication control unit 652 Display control unit 653 Entrance control unit 654 Health report unit 600a Store terminal 651a Authentication control unit 653a Entrance control unit 655 Token processing unit 656 Judgment unit 71 Health passport display screen 711 Face image 712 User name 713 Health passport status 714 Expiration date 715 Negative certificate status 716 Medical insurance subscription status 717 Visa status 718 Code display button 71a Health passport display Screen 715a Expiration date 716a Expiration date 717a Expiration date 72a Health passport display screen 721 Face image 722 Username 723a Health passport status 724 Expiration date 72b Health passport display screen 723b Health passport status 72c Health passport display screen 723c Health passport status 72a1 Health passport display Screen 723a1 Health passport status 72b1 Health passport display screen 723b1 Health passport status 72c1 Health passport display screen 723c1 Health passport status 73a Judgment result display screen 731 Face image 732 User name 733a Health passport status 734 Expiration date 735a Health report status 736a Result display screen 733b Health passport status 735b Health report status 736b Notification information 737b Message 73c Judgment result display screen 733c Health passport status 736c Notification information 74 Map information 7 41 User's current location 742 Medical institution location

Claims

Negative proof information of a predetermined infectious disease test conducted for a predetermined user in a first country and insurance information on medical insurance that the user has subscribed to and is applicable in a second country are given to the user. An acquisition method for acquiring registration information registered in association with each other,
An authentication control means for controlling the first biometric authentication for biometric information acquired from a user who intends to enter the second country.
When the first biometric authentication is successful, the specific means for specifying the negative certification information and the insurance information associated with the user who succeeded in the first biometric authentication based on the registration information, and the specific means.
A determination means for determining the validity of the specified negative proof information and the insurance information, and
Information processing device equipped with.
When both the negative proof information and the insurance information are determined to be valid, the issuing means for issuing a valid health passport to the user who succeeded in the first biometric authentication, and
The information processing apparatus according to claim 1, further comprising a first registration means for registering the health passport in association with the registration information of the user.
The authentication control means controls a second biometric authentication with respect to the biometric information acquired from the user at a predetermined facility in the second country.
When the second biometric authentication is successful, the specific means identifies the health passport associated with the user who succeeded in the second biometric authentication based on the registration information.
The information processing device according to claim 2, wherein the determination means determines whether or not the specified health passport is valid.
When the second biometric authentication is successful, the second registration means for registering the behavior history including the facility and the authentication date and time in association with the user who succeeded in the second biometric authentication is further provided.
The determination means determines whether or not the user is a close contact of the infected person based on the behavior history of the infected person with the infectious disease acquired from the outside and the registered behavior history.
The information processing apparatus according to claim 3, further comprising a first notification means for notifying the user when the user is determined to be the close contact.
When the user is determined to be the close contact, the specific means identifies a medical institution to which the medical insurance related to the insurance information associated with the user can be applied.
The information processing device according to claim 4, wherein the first notification means further notifies the user of the specified medical institution.
The registration information is further associated with the language information used by the user to the user.
When the user is determined to be the close contact person, the specific means identifies a consultation center for counseling on the infectious disease based on the linguistic information associated with the user.
The information processing device according to claim 4 or 5, wherein the first notification means further notifies the user of the specified consultation center.
A third registration means for registering the physical condition information in association with the user when the user receives the physical condition information of the user while staying in the second country.
Claims 2 to 6 further include a first renewal means for renewing the state of the health passport issued to the user as invalid when the physical condition information associated with the user does not satisfy a predetermined condition. The information processing apparatus according to any one of the above items.
The registration information is further associated with the language information used by the user to the user.
When the physical condition information does not satisfy a predetermined condition, the specific means identifies a consultation center that provides consultation and response regarding the infectious disease based on the linguistic information associated with the user.
The information processing apparatus according to claim 7, further comprising a second notification means for further notifying the user of the specified consultation center.
The acquisition means further acquires the action schedule of the user, and the acquisition means further acquires the action schedule of the user.
The information processing apparatus according to any one of claims 2 to 8, wherein the issuing means sets a valid period based on the action period included in the acquired action schedule and issues the health passport.
The issuing means sets an effective action range based on the acquired action schedule and issues the health passport.
The acquisition means further acquires the current position of the user.
The determination means further determines whether or not the current position exceeds the effective action range, and further determines.
The information processing apparatus according to claim 9, further comprising a second updating means for updating the state of the health passport associated with the user as invalid when the current position exceeds the effective action range.
The determination means determines whether or not the country of stay of the user in a predetermined period includes a specific country, and determines whether or not the specific country is included.
If it is determined that the country of stay of the user includes a specific country, a third renewal means for updating to lower the level of the infectious disease control index indicating the status of the health passport associated with the user is further provided. The information processing apparatus according to any one of claims 2 to 10.
A fourth register in which the identification information corresponding to the biometric information acquired from the user, the negative certification information, and the insurance information are associated with each other and registered as the registration information while the user stays in the first country. The information processing apparatus according to any one of claims 1 to 11, further comprising the registration means of the above.
The acquisition means acquires the first biometric information stored in the user's terminal from the terminal.
When the authentication is performed, the authentication control means collates the first biometric information acquired by the acquisition means with the second biometric information acquired from the user, thereby performing the first biometric information. The information processing apparatus according to any one of claims 1 to 12, which controls biometric authentication.
Negative proof information of a predetermined infectious disease test conducted for a predetermined user in a first country and insurance information on medical insurance that the user has subscribed to and is applicable in a second country are given to the user. A storage device that is associated and stored as registration information,
The storage device is provided with an information processing device connected to the storage device.
The information processing device is
An acquisition means for acquiring the registration information from the storage device, and
An authentication control means for controlling the first biometric authentication for biometric information acquired from a user who intends to enter the second country.
When the first biometric authentication is successful, the specific means for specifying the negative certification information and the insurance information associated with the user who succeeded in the first biometric authentication based on the registration information, and the specific means.
A determination means for determining the validity of the specified negative proof information and the insurance information, and
Information processing system equipped with.
The information processing device is
When both the negative proof information and the insurance information are determined to be valid, the issuing means for issuing a valid health passport to the user who succeeded in the first biometric authentication, and
The information processing system according to claim 14, further comprising a first registration means for registering the health passport in association with the registration information of the user.
The computer
Negative proof information of a predetermined infectious disease test conducted for a predetermined user in a first country and insurance information on medical insurance that the user has subscribed to and is applicable in a second country are given to the user. Acquire the registration information registered in association with each other,
For the biometric information acquired from the user who is going to enter the second country, the first biometric authentication is controlled.
When the first biometric authentication is successful, the negative certification information and the insurance information associated with the user who succeeded in the first biometric authentication are specified based on the registration information.
Judging the validity of the identified negative proof information and the insurance information,
Information processing method.
Negative proof information of a predetermined infectious disease test conducted for a predetermined user in a first country and insurance information on medical insurance that the user has subscribed to and is applicable in a second country are given to the user. The acquisition process to acquire the registration information registered in association with each other,
The authentication control process that controls the first biometric authentication for the biometric information acquired from the user who is going to enter the second country,
When the first biometric authentication is successful, the specific process for specifying the negative certification information and the insurance information associated with the user who succeeded in the first biometric authentication based on the registration information, and the specific processing.
Judgment processing for determining the validity of the specified negative proof information and the insurance information, and
A non-temporary computer-readable medium containing a program that causes a computer to run.