WO2022118639A1

WO2022118639A1 - Authentication server, system, authentication server control method, and recording medium

Info

Publication number: WO2022118639A1
Application number: PCT/JP2021/041832
Authority: WO
Inventors: 雅典小林; 昭彦市川; 雄司山口; 翼荻窪
Original assignee: 日本電気株式会社
Priority date: 2020-12-03
Filing date: 2021-11-15
Publication date: 2022-06-09
Also published as: JPWO2022118639A1

Abstract

In order to provide an authentication server that further promulgates biometric authentication, the authentication server of the present invention comprises a database, an authentication means, and an information provision means. The database stores the following in association with each other: biometric information of a user; a first ID for distinguishing an operator that provides a service to the user; and a second ID that is uniquely established by combining the user and the operator. The database also stores the following in association with each other: the biometric information of the user; and public information-specifying data for specifying public information for which provision has been granted by the user. The authentication means executes authentication processing in response to receiving an authentication request, and transmits the second ID, of a person who has been successfully authenticated, to a first operator. The information provision means receives, from a second operator, a public information provision request that includes the type of public information that the second operator desires to reference. The information provision means acquires the public information, that the second operator desires to reference, from a public server that retains said public information, and transmits the acquired public information to the second operator.

Description

Authentication server, system, authentication server control method and recording medium

The present invention relates to an authentication server, a system, a control method of the authentication server, and a recording medium.

In recent years, various services using biometric information have begun to spread. For example, face recognition is used for various procedures (check-in, baggage check-in, etc.) performed at the airport and hotel check-in. In recent years, various technologies related to biometric authentication have been developed.

For example, Patent Document 1 describes that it is possible to unify biometric information used for biometric authentication. The information processing terminal described in Patent Document 1 transmits the identification information to the acquisition unit that acquires the biometric information for biometric authentication and the identification information of the device to which the service is provided, depending on the success of the biometric authentication. It is equipped with a transmitter.

Patent Document 2 describes that personal authentication is efficiently performed when a user performs various procedures. The authentication system of Patent Document 2 accesses the management device from the user's mobile terminal and performs initial registration including the user's moving image. In the authentication system, when a user receives a service at a convenience store at a financial institution store, a moving image is transmitted to a management device to perform authentication processing according to the usage type, and the authentication result is notified.

Patent Document 3 states that shopping at duty-free facilities by foreign tourists will be efficient and comfortable. The payment support server of Patent Document 3 includes a communication device, a storage device, and an arithmetic unit. The communication device communicates with another device. The storage device stores the passport information of the traveler, the information of the means of transportation or the facility used in the trip, and the information for biometric authentication in association with each other. The arithmetic unit uses the traveler's biometric information included in the payment information received from the terminal of the tax exemption facility as the passport information indicating the predetermined validity and the information of the means of transportation or the facility used among the biometric authentication information of the storage device. Match with the associated one. If the biometric authentication information that matches the biometric information is registered, the arithmetic unit returns the payment permission information to the terminal.

International Publication No. 2018/096772 Japanese Unexamined Patent Publication No. 2020-113107 Japanese Unexamined Patent Publication No. 2017-123202

As mentioned above, in recent years, technological development related to biometric authentication has been promoted, and various services using biometric authentication have been provided to users. More specifically, private businesses such as lodging businesses and public institutions such as local governments are providing services using biometric authentication, or are considering providing services.

Here, biometric authentication is realized by comparing the biometric information of the person to be authenticated with the biometric information registered in the database, and even if the certifier (authentication subject; service provider) is a private business operator, it is public. The basic mechanism of certification is the same even if it is a target organization. However, in the current authentication system, a system specialized for each business operator is often configured, which raises the hurdle to introduce biometric authentication.

The main object of the present invention is to provide an authentication server, a system, a control method for an authentication server, and a recording medium that contribute to the further spread of biometric authentication.

According to the first viewpoint of the present invention, the biometric information of the user, the first ID (identifier) that identifies the business operator that provides the service to the user, and the combination of the user and the business operator are unique. The second ID determined in the above, the public information identification data for specifying the public information licensed by the user, the database stored in association with each other, and the first business operator to be certified. The authentication process is executed in response to receiving the authentication request including the biometric information of the person and the first ID of the first business operator, and the second ID of the successful authentication person is used as the first business operator. A public information provision request including the biometric information of the user to whom the second business operator wants to refer to the public information and the type of the public information to be referred to is requested from the authentication means to be transmitted to the second business operator. Upon receipt, the public information to be referred to is acquired from the public server holding the public information to be referred to by using the public information specific data, and the acquired public information is transmitted to the second business operator. An authentication server is provided that comprises means of transmitting and providing information.

According to the second viewpoint of the present invention, the first terminal installed in the first business operator, the second terminal installed in the second business operator, and the first and second terminals. The authentication server includes a connected authentication server, and the authentication server is based on a combination of a user's biometric information, a first ID that identifies a business operator that provides a service to the user, and the user and the business operator. From the database and the first terminal, which are stored in association with the second ID uniquely determined, the public information identification data for specifying the public information licensed by the user, and the public information identification data. The authentication process is executed in response to receiving the authentication request including the biometric information of the certifier and the first ID of the first business operator, and the second ID of the successful authentication person is used as the first terminal. From the authentication means and the second terminal, the second business operator requests to provide public information including the biometric information of the user who wants to refer to the public information and the type of the public information to be referred to. Upon reception, the public information to be referred to is acquired from the public server holding the public information to be referred to by using the public information specific data, and the acquired public information is transmitted to the second terminal. A system is provided that comprises means of providing information.

According to the third viewpoint of the present invention, the biometric information of the user, the first ID that identifies the business operator that provides the service to the user, and the combination of the user and the business operator are uniquely determined. In an authentication server provided with a database that stores the ID of 2 and the public information identification data for specifying the public information licensed by the user in association with each other, the first business operator receives the data. The authentication process is executed in response to receiving the authentication request including the biometric information of the certifier and the first ID of the first business operator, and the second ID of the successful authentication person is used as the first business. When the second business operator receives a public information provision request including the biometric information of the user who wants to refer to the public information and the type of the public information to be referred to, the second business operator receives the request. The public information to be referred to is acquired from a public server holding the public information to be referred to by using the public information specific data, and the acquired public information is transmitted to the second business operator. A method of controlling the authentication server is provided.

According to the fourth viewpoint of the present invention, the biometric information of the user, the first ID that identifies the business operator that provides the service to the user, and the combination of the user and the business operator are uniquely determined. The first is to the computer mounted on the authentication server provided with the database, which stores the ID of 2 and the public information identification data for specifying the public information licensed by the user in association with each other. The authentication process is executed in response to receiving the authentication request including the biometric information of the person to be authenticated and the first ID of the first business operator from the business operator, and the second ID of the successful authentication person is obtained. The process of transmitting to the first business operator, and the public information including the biometric information of the user from which the second business operator wants to refer to the public information and the type of public information to be referred to from the second business operator. Upon receiving the information provision request, the public information to be referred to is acquired from the public server holding the public information to be referred to by using the public information specific data, and the acquired public information is referred to as the second. A computer-readable recording medium containing a program for executing a process to be transmitted to a business operator is provided.

According to each viewpoint of the present invention, an authentication server, a system, a control method of the authentication server, and a recording medium that contribute to further popularization of biometric authentication are provided. The effect of the present invention is not limited to the above. According to the present invention, other effects may be produced in place of or in combination with the effect.

It is a figure for demonstrating the outline of one Embodiment. It is a figure which shows an example of the schematic structure of the authentication system which concerns on 1st Embodiment. It is a figure for demonstrating the operation in the user registration phase of the authentication system which concerns on 1st Embodiment. It is a figure for demonstrating operation in the service information registration phase of the authentication system which concerns on 1st Embodiment. It is a figure for demonstrating operation in the public information provision permission phase of the authentication system which concerns on 1st Embodiment. It is a figure for demonstrating operation in the service provision phase of the authentication system which concerns on 1st Embodiment. It is a figure for demonstrating operation in the service provision phase of the authentication system which concerns on 1st Embodiment. It is a figure which shows an example of the processing configuration of the authentication server which concerns on 1st Embodiment. It is a figure which shows an example of the business operator information database which concerns on 1st Embodiment. It is a figure which shows an example of the business operator information database which concerns on 1st Embodiment. It is a figure which shows an example of the business operator information database which concerns on 1st Embodiment. It is a figure which shows an example of the public information database which concerns on 1st Embodiment. It is a figure which shows an example of the public information database which concerns on 1st Embodiment. It is a flowchart which shows an example of the operation of the authentication part which concerns on 1st Embodiment. It is a flowchart which shows an example of the operation of the public information providing part which concerns on 1st Embodiment. It is a figure which shows an example of the processing configuration of the management server which concerns on 1st Embodiment. It is a figure which shows an example of the user information database which concerns on 1st Embodiment. It is a figure which shows an example of the processing configuration of the authentication terminal which concerns on 1st Embodiment. It is a figure which shows an example of the processing structure of the staff terminal which concerns on 1st Embodiment. It is a figure for demonstrating the operation of the information provision request part which concerns on 1st Embodiment. It is a figure for demonstrating the operation of the information provision request part which concerns on 1st Embodiment. It is a figure for demonstrating the operation of the message output part which concerns on 1st Embodiment. It is a figure which shows an example of the processing structure of the terminal which concerns on 1st Embodiment. It is a figure for demonstrating the operation of the user support part which concerns on 1st Embodiment. It is a figure for demonstrating the operation of the user registration support part which concerns on 1st Embodiment. It is a figure for demonstrating the operation of the user registration support part which concerns on 1st Embodiment. It is a figure for demonstrating the operation of the service registration support part which concerns on 1st Embodiment. It is a figure for demonstrating the operation of the service registration support part which concerns on 1st Embodiment. It is a figure for demonstrating the operation of the service registration support part which concerns on 1st Embodiment. It is a figure for demonstrating the operation of the provision license support part which concerns on 1st Embodiment. It is a figure for demonstrating the operation of the provision license support part which concerns on 1st Embodiment. It is a sequence diagram which shows an example of the operation of the authentication system which concerns on 1st Embodiment. It is a sequence diagram which shows an example of the operation of the authentication system which concerns on 1st Embodiment. It is a sequence diagram which shows an example of the operation of the authentication system which concerns on 1st Embodiment. It is a sequence diagram which shows an example of the operation of the authentication system which concerns on 1st Embodiment. It is a figure which shows an example of the hardware configuration of the authentication server disclosed in this application. It is a figure which shows an example of the authentication information database which concerns on the modification of the present disclosure.

First, the outline of one embodiment will be explained. It should be noted that the drawing reference reference numerals added to this outline are added to each element for convenience as an example for assisting understanding, and the description of this outline is not intended to limit anything. Further, unless otherwise specified, the blocks described in each drawing represent not the configuration of hardware units but the configuration of functional units. The connecting lines between the blocks in each figure include both bidirectional and unidirectional. The one-way arrow schematically shows the flow of the main signal (data), and does not exclude bidirectionality. In the present specification and the drawings, elements that can be similarly described may be designated by the same reference numerals, so that duplicate description may be omitted.

The authentication server 100 according to one embodiment includes a database 101, an authentication unit 102, and an information providing unit 103 (see FIG. 1). The database 101 associates the biometric information of the user with the first ID that identifies the business operator that provides the service to the user and the second ID that is uniquely determined by the combination of the user and the business operator. Remember. Further, the database 101 stores the biometric information of the user and the like in association with the public information specifying data for specifying the public information licensed by the user. The authentication unit 102 executes the authentication process in response to receiving the authentication request including the biometric information of the person to be authenticated and the first ID of the first business operator from the first business operator, and the authentication unit 102 executes the authentication process. The second ID is transmitted to the first business operator. The information providing unit 103 receives from the second business operator a public information provision request including the biometric information of the user who the second business operator wants to refer to and the type of public information to be referred to. The information providing unit 103 acquires the public information to be referred from the public server holding the public information to be referred to by using the public information specific data, and transmits the acquired public information to the second business operator. ..

When the authentication server 100 receives an authentication request from the first business operator (for example, a private business operator), the authentication server 100 assigns a second ID (service user ID) uniquely determined from the combination of the user and the business operator to the first business operator. Send to. The first business operator stores the service information required when providing the service to the user in association with the second ID, and the required service is based on the second ID acquired from the authentication server 100. Information can be identified. Further, when the authentication server 100 is requested to provide public information by a second business operator (for example, a public institution such as a city hall), the user is specified by biometric authentication and the information is requested to be provided. Obtain data for identifying public information (for example, passport number, etc.). The authentication server 100 acquires the corresponding public information (for example, items described in a passport) by transmitting the public information specific data to a public server that holds and manages the public information. The authentication server 100 transmits the acquired public information to the second business operator. The second business operator can provide the service to the user while using the acquired public information. In this way, the authentication server 100 processes requests from private businesses and public institutions by executing authentication processing and verification processing using the database 101. In other words, neither private businesses nor public institutions need to build their own authentication system, which lowers the hurdles for introducing biometrics. As a result, biometrics becomes even more widespread.

Specific embodiments will be described in more detail below with reference to the drawings.
[First Embodiment]
The first embodiment will be described in more detail with reference to the drawings.
[System configuration]
FIG. 2 is a diagram showing an example of a schematic configuration of the authentication system according to the first embodiment. As shown in FIG. 2, the authentication system includes at least one business operator, an authentication center, and a group of public servers.

Each business operator participating in the authentication system provides services using biometric authentication.

The business operator (service provider) that provides the service to the user may be a private business operator or a public institution.

Examples of private businesses include retail stores, lodging businesses, event companies, medical institutions, etc. For example, a retail store provides a payment service using biometric authentication. The lodging company manages check-in procedures and room entry / exit using biometric authentication. The event company uses biometrics to control entry and exit to and from the event venue.

Examples of public institutions include city halls, health centers, hospitals, etc. For example, biometric authentication is used when a staff member of a city hall or the like confirms the identity of a user (resident). Alternatively, biometrics may be used to confirm eligibility to receive benefits, etc.

The business operator disclosed in the present application may be either a private business operator or a public institution, as long as it can provide an arbitrary service using biometric authentication.

As shown in FIG. 2, each business operator has various internal configurations. For example, as an internal configuration of a business operator, a configuration including a management server 20 and an authentication terminal 30 like the business operator S1 is exemplified.

The management server 20 is a server that controls and manages the entire business of the business operator. For example, when the business operator is a retail store, the management server 20 performs inventory management of products, payment processing, and the like.
Alternatively, if the business operator is an accommodation business operator, the management server 20 manages the reservation information of the guest.

The management server 20 has a control function and a management function related to biometric authentication of the user, in addition to the functions related to the above service provision.

The authentication terminal 30 is a device (first terminal) that serves as an interface for a user (customer) who has visited the business operator. The user receives various services via the authentication terminal 30. For example, when the business operator is a retail store, the user pays the price using the authentication terminal 30. Alternatively, if the business operator is an accommodation business operator, the user performs a check-in procedure using the authentication terminal 30.

In the first embodiment, the authentication terminal 30 is described as a terminal (self terminal) used by the user himself / herself. However, the purpose is not to limit the usage pattern of the authentication terminal 30, and the employees, staff, etc. of the business operator may provide the service to the user using the authentication terminal 30, and both the user and the employee may provide the service. The authentication terminal 30 may be used.

There may be an internal configuration of a business operator equipped with a staff terminal 31 without installing a server, as in the business operator S2 shown in FIG. For example, the staff terminal 31 is a terminal (second terminal) installed at the reception desk of a city hall, a hospital, or the like. The staff of the city hall or the like provides services to the users while operating the staff terminal 31. For example, an employee of a city hall or the like uses the employee terminal 31 to confirm the service eligibility of a user who intends to receive an administrative service.

In the first embodiment, the staff terminal 31 is described as a terminal used by a third party other than the user. However, the staff terminal 31 may be a terminal used by the user in the same manner as the authentication terminal 30, or may be a terminal used by both the user and the staff.

The certification center provides certification services and information provision services. An authentication server 10 is installed in the authentication center. The authentication server 10 operates as a certificate authority for authentication using biometric information. The authentication server 10 may be a server installed on the site of the authentication center or a server installed on the cloud.

In addition, the biometric information of the user exemplifies data (feature amount) calculated from physical characteristics peculiar to an individual such as a face, a fingerprint, a voice print, a vein, a retina, and an iris pattern (pattern) of the pupil. To. Alternatively, the biometric information of the user may be image data such as a face image and a fingerprint image. The biometric information of the user may be any information that includes the physical characteristics of the user. In the first embodiment, the face image or the feature amount generated from the face image is treated and described as biometric information.

The authentication server 10 is a server device for realizing a service by biometric authentication. The authentication server 10 provides an authentication service and an information providing service to each business operator.

A public server group is a set of servers (public servers) that handle public information. For example, a passport server 41 that stores and manages passport information and an insurance certificate server 42 that stores and manages insurance certificate information are included in the public server group. The public server is managed and operated by a government agency such as the Ministry of Foreign Affairs or a business operator entrusted by the government agency.

The devices shown in FIG. 2 are connected to each other. For example, the authentication server 10 and the management server 20 are connected by a wired or wireless communication means and are configured to be able to communicate with each other.

The configuration shown in FIG. 2 is an example, and is not intended to limit the configuration of the authentication system disclosed in the present application. For example, the authentication center may include two or more authentication servers 10. Alternatively, the functions of the management server 20 and the authentication terminal 30 may be integrated, and the integrated device may provide a service using biometric authentication. Further, each public server included in the public server group may handle two or more public information. For example, the passport server 41 and the insurance card server 42 may be integrated, and the integrated server may handle public information of the passport and the insurance card.
[Overview of system operation]
Subsequently, the schematic operation of the authentication system according to the first embodiment will be described.

The operation of the authentication system includes four phases.

The first phase is the phase for registering the user's system (user registration phase).

The second phase is the phase (service information registration phase) in which the information necessary for the user to receive the service is registered in the system, in particular, the service information necessary for the user to receive the service from the private business operator. be.

The third phase is a phase (public information provision permission phase) in which the user's permission to provide the user's public information from the authentication center to the business operator is registered (given) in the system.

The fourth phase is a phase (service provision phase) in which each business operator provides a service using biometric authentication to a user. The service provision phase includes service provision using the service information registered by the user in the system and service provision using the user's own public information.
[User registration phase]
FIG. 3 is a diagram for explaining the operation in the user registration phase of the authentication system according to the first embodiment.

Users who wish to provide services using biometric authentication should register as users in advance. The user inputs his / her biometric information (for example, a facial image) and identification documents into the system. The identification documents that can be used in the disclosure of the present application shall be documents containing biometric information such as passports and driver's licenses.

The user inputs the above two pieces of information (biological information, identity verification document) into the system by any means. For example, the user may mail a document containing the above two information to the authentication center, and an employee of the authentication center may input the above two information into the authentication server 10. Alternatively, the user may mail an external storage device such as USB (Universal Serial Bus) in which the above two pieces of information are stored to the authentication center.

Alternatively, the user may input the above two pieces of information into the authentication server 10 using the application installed on the terminal 40. Examples of the terminal 40 include mobile terminal devices such as smartphones, mobile phones, game machines, and tablets, computers (personal computers, notebook computers), and the like.

In the first embodiment, the case where the user performs the above-mentioned user registration or the like by using the application installed on the terminal 40 will be described. Further, in the following description, the above application will be referred to as a "user support application" or simply a "support application". The user support application is an application that assists a user in inputting information necessary for receiving a service from a business operator.

The terminal 40 (support application) transmits a "user registration request" including the user's biometric information (for example, a face image) and identification documents (for example, a copy of a passport) to the authentication server 10.

For example, the authentication server 10 performs identity verification using the acquired face image and the face image described in the passport (hereinafter referred to as a passport face image). The authentication server determines that the identity verification has been successful when the two face images are substantially the same person's face images.

If the identity verification is successful, the authentication server 10 generates a feature amount (feature vector consisting of a plurality of feature amounts) from the acquired face image. After that, the authentication server 10 generates an ID (user ID) for uniquely identifying the user.

The authentication server 10 stores the generated feature amount (biological information) in association with the user ID in the database. More specifically, the authentication server 10 adds an entry to each of the business information database and the public information database, and stores the generated biometric information and the user ID. In the first embodiment, the case where the authentication server 10 manages the biometric information of the user by using two databases will be described. However, the authentication server 10 may manage the biometric information, the authentication information, and the like of the user by using the database in which the above two databases are integrated.

The business operator information database is a database required when processing an authentication request from a business operator that uses service information. Details of the database will be described later. Service information is information required for a business operator (particularly a private business operator) to provide a service to a user. For example, reservation information necessary for a hotel operator to provide an accommodation service, ticket information issued by an event organizer, and the like are exemplified as service information.

The public information database is a database that stores biometric information and information necessary for providing public information in association with each other. Details of the database will be described later. Public information is information generated, issued, and managed by a public institution. For example, the items described in the passport and the items described in the health insurance card are exemplified as public information.

Further, the authentication server 10 distributes the generated user ID to the terminal 40. The terminal 40 (support application) stores the acquired user ID.
[Service information registration phase]
FIG. 4 is a diagram for explaining the operation of the authentication system according to the first embodiment in the service information registration phase.

A user who wants to receive a service from a business operator registers service information in the system.
More specifically, the user selects a business operator who wants to receive the service by biometric authentication, and registers the selected business operator and the service information used (referenced) by the business operator in the system.

For example, in FIG. 2, when the user wishes to provide the service from the business operator S1, the service information required by the business operator S1 and the business operator S1 is registered in the system. For example, if the business operator S1 is an accommodation business operator, the user can receive the service from the accommodation business operator (business operator S1) and the service information (reservation information; name, accommodation) required by the accommodation business operator when providing the service. Date etc.) is registered in the system.

In addition, the user registers the user ID issued in the user registration phase in the system together with the above service information.

In the disclosure of the present application, the service information is defined as information that does not include the biometric information of the user (certified person). That is, the biological information and the feature amount generated from the biological information are excluded from the "service information" disclosed in the present application.

The user inputs the above two pieces of information (user ID, service information) to the business operator by any means. In the first embodiment, as shown in FIG. 4, a case where the user operates the terminal 40 and inputs the above two information to the management server 20 will be described. In this case, the user inputs the above two pieces of information into the management server 20 via the support application installed on the terminal 40. Specifically, the terminal 40 transmits a "service information registration request" including a user ID and service information of the user to the management server 20.

The management server 20 receives a service information registration request including the above two pieces of information (user ID and service information). In response to the reception of the service information registration request, the management server 20 transmits a "business registration request" to the authentication server 10. Specifically, the management server 20 transmits a business registration request including a user ID and a business ID to the authentication server 10.

The business ID is identification information for uniquely identifying the business (subject participating in the authentication platform using biometric authentication) included in the authentication system. In the example of FIG. 2, different business IDs are assigned to each of the business operators S1 and S2.

The business ID is an ID assigned to each business, not an ID assigned to each service. For example, in FIG. 2, even if the businesses S1 and S2 are businesses that provide the same type of service (for example, accommodation service), different IDs are assigned to these businesses if the management entity is different.

The authentication server 10 and the management server 20 share the business ID by any method. For example, when a business operator participates in the authentication infrastructure, the authentication server 10 may generate a business operator ID and distribute (notify) the generated servicer ID to the business operator.

Upon receiving the business registration request, the authentication server 10 searches the business information database using the user ID included in the request as a key, and identifies the corresponding user. After that, the authentication server 10 generates a "service user ID".

The service user ID is identification information that uniquely defines the correspondence (combination) between the user and the business operator. For example, in the example of FIG. 2, different values are generated for the service user ID determined from the combination of the user U1 and the operator S1 and the service user ID determined from the combination of the user U1 and the operator S2.

The authentication server 10 stores the user ID, biometric information (feature amount), the business operator ID, and the service user ID generated above in association with each other in the business operator information database.

The authentication server 10 transmits the service user ID generated above to the sender of the business operator registration request. The authentication server 10 sends a response including the service user ID to the management server 20, and issues the service user ID.

The management server 20 stores the service user ID acquired from the authentication server 10 in association with the service information acquired from the user. The management server 20 adds a new entry to the user information database and stores the above information (service user ID, service information).

The user repeats the above registration operation for each business operator who wants to receive the service using biometric authentication. In other words, the user does not need to register the use of the business operator who does not need to provide the service. In addition, users who do not plan to receive services from businesses do not have to carry out the service information registration phase.
[Public information provision permission phase]
FIG. 5 is a diagram for explaining the operation of the authentication system according to the first embodiment in the public information provision permission phase.

A user who permits the provision of his / her own public information (for example, the items described in the passport and the items described in the insurance card) to the business operator grants the system permission to provide the public information. More specifically, the user selects the type of public information (passport entry, insurance card entry) for which provision is permitted. The user registers the data for specifying the public information type (passport, health insurance card) selected by himself / herself (hereinafter referred to as public information specific data) in the system. For example, when permitting the business operator (third party) to provide the items described in the passport, the user registers the passport number in the system as public information identification data.

In addition, the user registers the user ID issued in the user registration phase in the system together with the above-mentioned public information specific data.

The user inputs the above two pieces of information (user ID, public information specific data) into the authentication server 10 by any means. In the first embodiment, as shown in FIG. 5, a case where the user operates the terminal 40 and inputs the above two information to the authentication server 10 will be described. In this case, the user inputs the above two pieces of information into the authentication server 10 via the support application installed on the terminal 40. Specifically, the terminal 40 transmits a public information provision permission including a user ID and public information specific data to the authentication server 10.

Upon receiving the public information provision permission, the authentication server 10 searches the public information database using the user ID included in the permission as a key, and identifies the corresponding user.

The authentication server 10 stores the user ID, biometric information (feature amount), and public information specific data (for example, passport number) in the public information database in association with each other.

When the information is registered in the public information database, the authentication server 10 sends an acknowledgment indicating that the process is completed normally to the terminal 40. If the information cannot be registered in the public information database, the authentication server 10 sends a negative response indicating that the process has not been completed normally to the terminal 40.

The terminal 40 that has received the response from the authentication server 10 outputs a message or the like according to the content.

Users who do not permit the provision of their own public information to businesses do not need to carry out the public information licensing phase.
[Service provision phase]
The service provision phase includes the provision of services using service information and the provision of services using public information.

First, we will explain the provision of services using service information. FIG. 6 is a diagram for explaining the operation of the authentication system according to the first embodiment in the service provision phase.

The user who has completed the registration of service information (service information registration phase) visits the business operator. The user moves in front of the authentication terminal 30.

The authentication terminal 30 acquires biometric information from the user in front of him. Specifically, the authentication terminal 30 takes an image of the user and acquires a face image. The authentication terminal 30 transmits the acquired face image to the management server 20.

The management server 20 generates a feature amount from the acquired face image. The management server 20 transmits an authentication request including the generated feature amount (biological information) and a business operator ID to the authentication server 10.

The authentication server 10 extracts a feature amount from an authentication request, and performs a collation process (1 to N collation; N is a positive integer, the same applies hereinafter) using the extracted feature amount and the feature amount registered in the business information database. Run.

The authentication server 10 identifies a user by collation processing, and specifies a service user ID corresponding to a business operator ID included in an authentication request among a plurality of service user IDs associated with the specified user.

The authentication server 10 transmits the specified service user ID to the sender of the authentication request. The authentication server 10 transmits a response (affirmative response to the authentication request) including the specified service user ID to the management server 20.

The management server 20 searches the user information database using the acquired service user ID as a key, and identifies the service information corresponding to the service user ID. The business operator (management server 20, authentication terminal 30) provides a service (for example, payment settlement, check-in procedure, etc.) to the user based on the specified service information.

Next, we will explain the provision of services using public information. FIG. 7 is a diagram for explaining the operation of the authentication system according to the first embodiment in the service provision phase.

A user who has completed the public information provision permission (public information provision permission phase) visits the business operator. The user moves to the area where the staff terminal 31 is placed (for example, the reception desk of the city hall or the like). There are staff of the business operator in the area, and the service is provided to the user using the staff terminal 31.

The staff, etc. who heard the user's story (request) may judge that it is necessary to refer to the public information of the user. For example, it is determined that reference to public information is necessary to confirm the identity of the user and to confirm the qualification to receive administrative services. In this case, the staff or the like operates the staff terminal 31 to acquire the biometric information (face image) of the user. The staff terminal 31 generates a feature amount from the face image.

In addition, the staff, etc. determine the type of public information to be referred to (for example, passport, health insurance card). The staff or the like operates the staff terminal 31 to transmit a "public information provision request" including biometric information (feature amount) and public information type (public document) to the authentication server 10.

The authentication server 10 extracts a feature amount from a public information provision request, and executes a collation process (one-to-N collation) using the extracted feature amount and the feature amount registered in the public information database.

The authentication server 10 identifies a user by collation processing, and identifies public information identification data that is associated with the specified user and corresponds to the public information type included in the public information provision request. For example, when the staff terminal 31 requests the provision of a passport, the authentication server 10 reads the passport number from the public information database.

The authentication server 10 transmits the acquired public information specific data to the public server group. More specifically, the authentication server 10 transmits the public information specific data to the public server corresponding to the specified public information specific data. In the above passport example, the passport number is transmitted to the passport server 41.

The public server transmits the public information corresponding to the acquired public information specific data to the authentication server 10. In the above passport example, the passport server 41 transmits the description items (name, date of birth, nationality, passport face image, etc.) of the passport corresponding to the acquired passport number to the authentication server 10.

When the authentication server 10 acquires public information from the public server group, the authentication server 10 transmits a response (affirmative response; response to a public information provision request) including the acquired public information to the staff terminal 31. When the authentication server 10 cannot acquire public information from the public server group, the authentication server 10 transmits a negative response to that effect to the staff terminal 31.

The staff terminal 31 that has acquired the public information takes measures such as displaying the acquired public information. Employees, etc. refer to the displayed public information and provide administrative services.

Subsequently, the details of each device included in the authentication system according to the first embodiment will be described.
[Authentication server]
FIG. 8 is a diagram showing an example of a processing configuration (processing module) of the authentication server 10 according to the first embodiment. Referring to FIG. 8, the authentication server 10 includes a communication control unit 201, a user registration unit 202, a business operator registration unit 203, a specific data registration unit 204, an authentication unit 205, and a public information provision unit 206. , And a storage unit 207.

The communication control unit 201 is a means for controlling communication with other devices. For example, the communication control unit 201 receives data (packets) from the management server 20. Further, the communication control unit 201 transmits data to the management server 20. The communication control unit 201 passes the data received from the other device to the other processing module. The communication control unit 201 transmits the data acquired from the other processing module to the other device. In this way, the other processing module transmits / receives data to / from the other device via the communication control unit 201.

The user registration unit 202 is a means for realizing the above-mentioned user registration (user system registration). The user registration unit 202 acquires biometric information (face image) and identity verification documents of a user (a user who wishes to provide a service using biometric authentication; a system user).

The user registration unit 202 acquires the above two pieces of information (biological information and identity verification documents) by any means. For example, the user registration unit 202 acquires the above two pieces of information by receiving the user registration request transmitted by the terminal 40.

When the user registration unit 202 acquires biometric information (face image), it generates a feature amount (feature vector composed of a plurality of feature amounts) from the face image.

Since existing techniques can be used for the feature quantity generation process, detailed explanations will be omitted. For example, the user registration unit 202 extracts eyes, nose, mouth, and the like as feature points from the face image. After that, the user registration unit 202 calculates the position of each feature point and the distance between each feature point as a feature amount, and generates a feature vector (vector information that characterizes the face image) composed of a plurality of feature amounts.

The user registration unit 202 verifies that the generated feature amount does not overlap with the already registered feature amount. The user registration unit 202 executes a collation process (one-to-N collation) using the generated feature amount and the feature amount registered in the two databases (service information database and public information database). If the collation process fails, the user registration unit 202 determines that the above duplication has not occurred.

If the duplication does not occur, the user registration unit 202 confirms the identity of the user. Specifically, the user registration unit 202 acquires a face image for identity verification (hereinafter referred to as a verification face image) from the identity confirmation document. The user registration unit 202 extracts a verification face image from a predetermined area of the identification document by using a technique such as template matching.

At the time of identity verification, the user registration unit 202 executes one-to-one verification using the biometric information of the user included in the user registration request and the biometric information obtained from the identity verification document. If the collation process is successful, the user registration unit 202 determines that the identity of the user has been confirmed successfully.

Specifically, the user registration unit 202 generates a feature amount from each of the acquired face image and the verified face image. Next, the user registration unit 202 calculates the similarity between the two images. The user registration unit 202 executes threshold processing for the similarity, and determines the success or failure of identity verification according to the result.

If the degree of similarity is higher than the threshold value, the user registration unit 202 determines that the identity verification is successful. On the other hand, if the similarity is equal to or less than the threshold value, the user registration unit 202 determines that the identity verification has failed.

If the identity verification is successful, the user registration unit 202 generates a user ID to be assigned to the user (distributed to the user). For example, the user registration unit 202 assigns a unique value every time it processes a user registration request and generates a user ID.

The user registration unit 202 stores the generated user ID and feature amount in the business information database and the public information database.

More specifically, the user registration unit 202 adds a new entry to the above two databases, and stores the user ID and biometric information (feature amount) in each database. For example, when registering a user for user U1, the user registration unit 202 adds an entry shown at the bottom of FIGS. 9A and 10A. At the user registration stage, since the business operator ID, the service user ID, and the public information specific data are not input to the system, nothing is set in these fields.

The user registration unit 202 transmits a response to the user registration request to the terminal 40. When the user ID and the biometric information are stored in the business information database and the public information database, the user registration unit 202 transmits an acknowledgment indicating that the user registration is successful to the terminal 40.
If the user ID and biometric information cannot be stored in the above two databases, the user registration unit 202 sends a negative response indicating that the user registration has failed to the terminal 40. For example, when the user is already registered, a negative response is transmitted to the terminal 40 when the identity verification fails. The user registration unit 202 may send a negative response including the above cause of failure of user registration to the terminal 40.

In this way, when the user registration unit 202 receives the user registration request including the biometric information of the user and the identity verification document of the user, the user registration unit 202 confirms the identity of the user based on the identity verification document. The user registration unit 202 registers the biometric information and the user ID (third ID) of the user who has succeeded in identity verification in the database. Further, when the user registration unit 202 succeeds in confirming the identity of the user, the user registration unit 202 pays out the user ID to the user.

The business registration unit 203 is a means for processing the business registration request sent from each business and registering the business in the system. When the business operator registration unit 203 receives a business operator registration request including a business operator ID and a user ID from a first business operator (for example, a private business operator), the business operator registration unit 203 generates a service user ID. The business operator registration unit 203 pays out the generated service user ID to the first business operator.

The business registration unit 203 searches the business information database using the user ID included in the acquired business registration request as a key. The business registration unit 203 confirms the business ID field of the user specified by the search.

The business operator registration unit 203 determines whether or not the business operator ID included in the business operator registration request acquired from the management server 20 is set in the business operator ID field. If the business ID acquired from the management server 20 is already registered in the business information database, the business registration unit 203 notifies the management server 20 to that effect. In this case, since the service (business operator) that the user is trying to register is already registered in the business operator information database, the business operator registration unit 203 sends a "negative response" as a response to the business operator registration request. do.

On the other hand, if the business ID included in the business registration request is not set in the business ID field of the specified user, the business registration unit 203 will be the service user corresponding to the user and the business. Generate an ID.

As described above, the service user ID is identification information uniquely determined from the combination of the user and the business operator. For example, the business operator registration unit 203 calculates a hash value using the user ID and the business operator ID, and uses the calculated hash value as the service user ID. Specifically, the business operator registration unit 203 calculates the concatenated value of the user ID and the business operator ID, and calculates the hash value of the calculated concatenated value to generate the service user ID.

Note that the generation of the service user ID using the above hash value is an example, and does not mean that the method of generating the service user ID is limited. The service user ID may be any information as long as it can uniquely identify the combination of the system user and the business operator. For example, the business operator registration unit 203 may assign a unique value each time it processes a business operator registration request and use it as a service user ID.

When the service user ID is generated, the business operator registration unit 203 registers two IDs (business operator ID and service user ID) in the business operator information database. For example, when the user U1 registers the service information for the business operator S1, the above two IDs are added to the entry shown at the bottom of FIG. 9B.

Since service information is registered for each business operator, multiple business operator IDs and service user IDs may be set for one user. For example, when the user U1 registers the service information for each of the businesses S1 and S2, the entries in the second and third lines of FIG. 9C are generated. When the user U2 registers the service for the business operator S1, the entry at the bottom of FIG. 9C is generated.

When the business operator registration request is processed, the business operator registration unit 203 sends a response to the request to the management server 20. Specifically, when the service user ID is normally generated and stored in the business information database, the business registration unit 203 sends an acknowledgment including the generated service user ID to the management server 20. do.

On the other hand, if the service user ID is not generated, the business operator registration unit 203 sends a negative response to the management server 20. At that time, the business registration unit 203 may send a negative response to the management server 20 including the reason why the business registration request is not normally processed (for example, the business registration has already been performed).

The specific data registration unit 204 is a means for processing the public information provision permission transmitted from the user (terminal 40 possessed by the system user) and registering the public information specific data in the system. Upon receiving the public information provision permission including the user ID and the public information specific data, the specific data registration unit 204 stores the public information specific data in the entry corresponding to the user ID.

The specific data registration unit 204 searches the public information database using the user ID included in the acquired public information provision permission as a key. If the search fails (the user ID is not registered in the public information database), the specific data registration unit 204 determines that the user ID is not registered in the system.

If the search is successful, the specific data registration unit 204 stores the public information specific data included in the acquired public information provision license in the entry of the specified user. More specifically, the specific data registration unit 204 determines the public information corresponding to the public information based on the public information specific data, and writes the public information specific data in the corresponding field of the public information database.
For example, when the user U1 grants permission to provide information regarding the items described in the passport, the acquired passport number is written in the passport number field of the entry shown at the bottom of FIG. 10B.

When the public information provision permission is processed, the specific data registration unit 204 sends a response to the permission to the terminal 40. Specifically, when the public information specific data is stored in the public information database, the specific data registration unit 2034 sends an acknowledgment indicating that the above permission has been normally processed to the terminal 40.

On the other hand, when the public information specific data is not stored in the public information database because the user ID acquired from the terminal 40 is not registered in the public information database, the specific data registration unit 204 , Sends a negative response to the terminal 40. At that time, the specific data registration unit 204 may send a negative response to the terminal 40 including the reason why the public information provision permission is not normally processed (for example, the user is not registered in the system).

The business information database and the public information database shown in FIGS. 9A to 9C, FIGS. 10A to 10B, etc. are examples, and do not intend to limit the information stored in these databases. For example, a face image may be registered in each database instead of the feature amount for authentication. That is, each time the authentication is performed, the feature amount may be generated from the face image registered in each database.

The authentication unit 205 is a means for processing an authentication request from a business operator. Hereinafter, the operation of the authentication unit 205 will be described with reference to the drawings. FIG. 11 is a flowchart showing an example of the operation of the authentication unit 205 according to the first embodiment.

The authentication unit 205 retrieves the feature amount and the business ID included in the authentication request. The authentication unit 205 searches the business information database using the extracted feature amount and the business ID as keys, and identifies the corresponding service user ID.

Specifically, the authentication unit 205 sets the feature amount extracted from the authentication request as the feature amount on the collating side and the feature amount stored in the business information database as the feature amount on the registration side, and performs one-to-N matching. Execute (step S101). At that time, the authentication unit 205 calculates the degree of similarity between the matching side and the feature amount of each of the plurality of registered sides. For the similarity, a chi-square distance, an Euclidean distance, or the like can be used. The farther the distance is, the lower the similarity is, and the closer the distance is, the higher the similarity is.

The authentication unit 205 determines whether or not there is a feature amount whose similarity with the feature amount to be collated is equal to or higher than a predetermined value among the plurality of feature amounts registered in the business information database (step S102). ). If such a feature amount does not exist (step S102, No branch), the authentication unit 205 sets “authentication failure” in the authentication result (step S103).

If such a feature is present (step S102, Yes branch), the authentication unit 205 identifies an entry (user) for the feature with the highest similarity (step S104). The authentication unit 205 determines whether or not there is a business ID that matches the business ID included in the authentication request among at least one business ID associated with the specified user.
That is, the authentication unit 205 determines whether the business ID acquired from the business is registered in the specified user (entry) of the business information database (step S105).

When the business ID is registered (step S105, Yes branch), the authentication unit 205 determines that the user has been successfully authenticated, and sets "authentication successful" in the authentication result (step S106). On the other hand, when the business ID is not registered (step S105, No branch), the authentication unit 205 sets "authentication failure" in the authentication result (step S103).

The authentication unit 205 transmits the result of processing the authentication request to the management server 20 (step S107). When the authentication result is "authentication successful", the authentication unit 205 transmits an acknowledgment including the biometric information and the service user ID specified by the business operator ID to the management server 20. If the authentication result is "authentication failure", the authentication unit 205 sends a negative response to the management server 20.

For example, in the example of FIG. 9C, when the feature amount of "FV1" and the business ID of "S1" are included in the authentication request, the entry (user) in the second line and the third line is specified by the feature amount FV1. , The entry in the second line is specified by the business ID "S1". As a result, the authentication request is processed normally, and an acknowledgment including the service user ID "U1S1" is transmitted to the management server 20.

On the other hand, when the feature amount of "FV2" and the business ID of "S2" are included in the authentication request, the entry at the bottom is specified by the feature amount, but the business ID of the entry is not "S2". Since it is "S1", the above authentication request is not processed normally. As a result, a negative response is transmitted to the management server 20.

In this way, the authentication unit 205 requests authentication from the first business operator (for example, a private business operator) including the biometric information of the person to be authenticated and the business operator ID (first ID) of the first business operator. Is received, the authentication process is executed, and the service user ID (second ID) of the successful authentication person (the person to be authenticated determined to be successful in authentication) is transmitted to the first business operator. At that time, the authentication unit 205 executes 1-to-N collation using the biometric information stored in the business information database and the biometric information of the person to be authenticated included in the authentication request. The authentication unit 205 determines that the authentication process is successful when the business ID included in the authentication request is stored in the business information database in association with the user specified by the one-to-N collation. do.

The public information provision unit 206 is a means for processing a public information provision request from a business operator and providing public information to the business operator. Hereinafter, the operation of the public information providing unit 206 will be described with reference to the drawings. FIG. 12 is a flowchart showing an example of the operation of the public information providing unit 206 according to the first embodiment.

The public information provision unit 206 extracts the feature amount and the public information type included in the public information provision request. The public information providing unit 206 executes a collation process (1 to N collation process) using the extracted feature amount and the feature amount registered in the public information database (step S201).

The public information providing unit 206 determines whether or not there is a feature amount having a similarity between the feature amount registered in the public information database and the feature amount to be collated having a predetermined value or more. (Step S202). If such a feature does not exist (step S202, No branch), the public information providing unit 206 transmits a negative response indicating that the requested public information cannot be provided to the staff terminal 31 (step S203). ).

If such a feature quantity exists (step S202, Yes branch), the public information providing unit 206 identifies an entry (user) of the feature quantity having the highest degree of similarity (step S204). The public information providing unit 206 attempts to read the set value from the field corresponding to the public information type of the public information providing request among the public information specific data fields of the specified entry. That is, the public information providing unit 206 determines whether or not the public information specifying data corresponding to the public information type is registered in the specified user (entry) of the public information database (step S205). ..

When the public information specific data is not registered (step S205, No branch), the public information providing unit 206 transmits a negative response indicating that the requested public information cannot be provided to the staff terminal 31 (step S205). S203).

When the public information specific data is registered (step S205, Yes branch), the public information providing unit 206 transmits the registered public information specific data to the corresponding public server of the public server group (step S205, Yes branch). Step S206).

The public information providing unit 206 acquires public information (for example, items described in a passport) corresponding to public information specific data from a public server (step S207). In response to the acquisition of the information, the public information providing unit 206 transmits an acknowledgment including the requested public information to the staff terminal 31 (step S208).

For example, in the example of FIG. 10B, when the feature amount of "FV1" is included in the public information provision request, the feature amount FV1 specifies the entry (user) in the final stage. Further, if the public information type included in the public information provision request is "passport", the corresponding public information specific data (passport number) exists, so that the public information providing unit 206 uses the passport number. By transmitting to the passport server 41, the description items of the corresponding passport can be obtained. The public information providing unit 206 transmits an acknowledgment including the items described in the acquired passport to the staff terminal 31.

On the other hand, when a public information provision request with the feature amount of "F1V" and the public information type of "health insurance card" is received, the entry in the final stage of FIG. 10B is specified by the feature amount. However, since the public information specific data (health insurance card number) corresponding to the insurance card is not set in the entry at the final stage, the public information providing unit 206 gives a negative response indicating that the public information cannot be provided. It is transmitted to the staff terminal 31.

In this way, the public information providing unit 206 receives the biometric information of the user to whom the second business operator wants to refer to the public information and the public information to be referred to from the second business operator (for example, the city hall). Receive public information requests, including types. The public information providing unit 206 acquires the public information to be referred from the public server holding the public information to be referred to by using the public information specific data. The public information providing unit 206 transmits the acquired public information to the second business operator. In addition, the public information providing unit 206 performs a one-to-N collation using the biometric information stored in the public information database and the biometric information included in the public information provision request, so that the second business operator can perform one-to-many matching. Identify the users (users who visited the city hall, etc.) who want to refer to public information. At that time, the public information providing unit 206 selects the public information specific data corresponding to the public information type included in the public information provision request among the plurality of public information specific data of the specified user as a public server. Send to.

The storage unit 207 stores information necessary for the operation of the authentication server 10. A business information database and a public information database are constructed in the storage unit 207. The storage unit 207 uses the two databases to combine the biometric information of the user, the business operator ID (first ID) that identifies the business operator that provides the service to the user, and the user and the business operator. The service user ID (second ID) uniquely determined by the above is stored in association with each other. Further, the storage unit 207 stores the biometric information of the user and the like in association with the public information specifying data for specifying the public information licensed by the user. The public information database can store a plurality of public information specific data for each user.
[Management server]
FIG. 13 is a diagram showing an example of a processing configuration (processing module) of the management server 20 according to the first embodiment. Referring to FIG. 13, the management server 20 includes a communication control unit 301, a service information acquisition unit 302, a service information registration unit 303, an authentication request unit 304, and a storage unit 305.

The communication control unit 301 is a means for controlling communication with other devices. For example, the communication control unit 301 receives data (packets) from the authentication server 10 and the authentication terminal 30. Further, the communication control unit 301 transmits data to the authentication server 10 and the authentication terminal 30. The communication control unit 301 passes the data received from the other device to the other processing module. The communication control unit 301 transmits the data acquired from the other processing module to the other device. In this way, the other processing module transmits / receives data to / from other devices via the communication control unit 301.

The service information acquisition unit 302 is a means for acquiring service information required when a business operator provides a service. For example, when the business operator is a "retail store", the service information acquisition unit 302 acquires information related to payment (for example, credit card information, bank account information) in addition to the user's name and the like. do. Alternatively, when the business operator is an "accommodation business operator", the service information acquisition unit 302 acquires reservation information (for example, accommodation date, etc.) related to accommodation in addition to the name and the like.

The service information acquisition unit 302 acquires the user ID issued when the user registers the system, in addition to the above name and the like.

The service information acquisition unit 302 acquires the user ID and the service information by any means. In the first embodiment, the service information acquisition unit 302 acquires the above two pieces of information from the service information registration request transmitted by the terminal 40.

The service information acquisition unit 302 delivers the acquired user ID and service information to the service information registration unit 303.

The service information registration unit 303 is a means for registering the acquired service information in the user information database.

The service information registration unit 303 transmits a business operator registration request including a user ID and a business operator ID acquired from the service information acquisition unit 302 to the authentication server 10.

The service information registration unit 303 acquires a response to the business operator registration request from the authentication server 10. If the acquired response is a "negative response", the service information registration unit 303 notifies the user to that effect. For example, the service information registration unit 303 transmits a negative response (negative response to the service information registration request) including the fact that the service registration has already been performed to the terminal 40.

When the acquired response is an "affirmative response", the service information registration unit 303 transmits an affirmative response to the service information registration request to the terminal 40. Further, the service information registration unit 303 registers the service user ID included in the response and the service information acquired from the service information acquisition unit 302 in the user information database. For example, when the management server 20 of the business operator S1 processes the service information registration request from the user U1, the entry shown at the bottom of FIG. 14 is added to the user information database.

The authentication request unit 304 is a means for requesting the authentication of the user from the authentication server 10.

When the authentication request unit 304 acquires biometric information (face image) from the authentication terminal 30, it generates a feature amount from the face image. The authentication request unit 304 transmits an authentication request including the generated feature amount and the business operator ID to the authentication server 10.

When the response from the authentication server 10 is a "negative response" (in the case of an authentication failure), the authentication request unit 304 notifies the authentication terminal 30 to that effect.

When the response from the authentication server 10 is an "affirmative response" (when the authentication is successful), the authentication request unit 304 retrieves the service user ID included in the affirmative response from the authentication server 10. The authentication request unit 304 searches the user information database using the service user ID as a key, and identifies the corresponding entry.

The authentication request unit 304 reads the service information set in the service information field of the specified entry and sends it to the authentication terminal 30. For example, in the example of FIG. 14, if the service user ID is "U1S1", the service information "SI01" at the bottom is transmitted to the authentication terminal 30.

The storage unit 305 stores information necessary for the operation of the management server 20. The user information database is constructed in the storage unit 305.
[Authentication terminal]
FIG. 15 is a diagram showing an example of a processing configuration (processing module) of the authentication terminal 30 according to the first embodiment. Referring to FIG. 15, the authentication terminal 30 includes a communication control unit 401, a biometric information acquisition unit 402, a service providing unit 403, a message output unit 404, and a storage unit 405.

The communication control unit 401 is a means for controlling communication with other devices. For example, the communication control unit 401 receives data (packets) from the management server 20. Further, the communication control unit 401 transmits data to the management server 20. The communication control unit 401 passes the data received from the other device to the other processing module. The communication control unit 401 transmits the data acquired from the other processing module to the other device. In this way, the other processing module transmits / receives data to / from other devices via the communication control unit 401.

The biometric information acquisition unit 402 is a means for controlling the camera and acquiring the biometric information (face image) of the user. The biological information acquisition unit 402 images the front of the own device at regular intervals or at predetermined timings. The biological information acquisition unit 402 determines whether or not the acquired image includes a human face image, and if the acquired image includes a face image, extracts the face image from the acquired image data.

Since the existing technique can be used for the face image detection process and the face image extraction process by the biological information acquisition unit 402, detailed description thereof will be omitted. For example, the biological information acquisition unit 402 may extract a face image (face region) from the image data by using a learning model learned by CNN (Convolutional Neural Network). Alternatively, the biological information acquisition unit 402 may extract a face image by using a technique such as template matching.

The biometric information acquisition unit 402 delivers the extracted face image to the service provision unit 403.

The service providing unit 403 is a means for providing a predetermined service to the user. The service providing unit 403 transmits the face image acquired from the biometric information acquisition unit 402 to the management server 20.
The management server 20 returns service information (for example, hotel reservation information including a name and the like) corresponding to the face image. The service providing unit 403 provides a service to the user by using the returned service information.

Detailed explanation of the service providing unit 403 using the service information will be omitted. The service providing unit 403 may perform processing according to the content of the service to be provided. For example, if the authentication terminal 30 is a check-in terminal installed in a hotel lobby or the like, the service providing unit 403 may perform a check-in process according to the acquired reservation information (service information).

The message output unit 404 is a means for outputting various messages to the user.
For example, the message output unit 404 outputs a message regarding the user's authentication result and a message regarding service provision. The message output unit 404 may display a message using a display device such as a liquid crystal monitor, or may reproduce a voice message using an acoustic device such as a speaker.

The storage unit 405 stores information necessary for the operation of the authentication terminal 30.
[Staff terminal]
FIG. 16 is a diagram showing an example of a processing configuration (processing module) of the staff terminal 31 according to the first embodiment. Referring to FIG. 16, the staff terminal 31 includes a communication control unit 501, an information provision request unit 502, a message output unit 503, and a storage unit 504.

The communication control unit 501 is a means for controlling communication with other devices. For example, the communication control unit 501 receives data (packet) from the authentication server 10. Further, the communication control unit 501 transmits data to the authentication server 10. The communication control unit 501 passes the data received from the other device to the other processing module. The communication control unit 501 transmits the data acquired from the other processing module to the other device. In this way, the other processing module transmits / receives data to / from the other device via the communication control unit 501.

The information provision request unit 502 is a means for requesting the authentication server 10 to provide information regarding the user's public information. The information provision request unit 502 displays a GUI (Graphical User Interface) for selecting public information acquired from the authentication server 10 in response to an operation by a business operator or the like. For example, the information provision requesting unit 502 displays a GUI as shown in FIG. The information provision requesting unit 502 acquires the type of public information (public information type) required for service provision by using the GUI as shown in FIG.

The information provision requesting unit 502 may change the options to be displayed in FIG. 17 according to the place where the own device is installed and the like. For example, if the staff terminal 31 is a terminal installed in a local government such as a city hall, the information provision requesting unit 502 displays as shown in FIG. On the other hand, if the staff terminal 31 is a terminal installed in a private business operator, the documents necessary for the business of the private business operator may be displayed in a selectable manner. For example, if the staff terminal 31 is a terminal installed in a duty-free shop, it may be displayed only for passport-related options. Alternatively, when an employee performs an operation related to a request for providing public information, the information providing request unit 502 may automatically transmit a predetermined public information request.

In addition, the information provision request unit 502 acquires the biometric information of the user before and after the selection of the public information. For example, the information provision requesting unit 502 acquires the biometric information (face image) of the user by using the GUI as shown in FIG. The camera included in the staff terminal 31 (the camera connected to the staff terminal 31) is installed so that the user who visits the staff can be photographed. Further, when the information provision requesting unit 502 acquires the user's face image, it is desirable to notify the user to that effect. The information provision requesting unit 502 generates a feature amount from the acquired face image.

The information provision request unit 502 transmits a public information provision request including the acquired public information type and the generated feature amount to the authentication server 10.

The information provision request unit 502 delivers the response (response to the public information provision request) acquired from the authentication server 10 to the message output unit 503.

The message output unit 503 is a means for outputting various messages to the staff and the like.
When a negative response is received from the authentication server 10, the message output unit 503 notifies the staff and the like that the acquisition of public information has failed.

When an acknowledgment is received from the authentication server 10, the message output unit 503 outputs the public information included in the acknowledgment. For example, the message output unit 503 displays as shown in FIG.

Information necessary for the operation of the storage unit 504 and the staff terminal 31 is stored.
[Terminal]
FIG. 20 is a diagram showing an example of a processing configuration (processing module) of the terminal 40 according to the first embodiment. Referring to FIG. 20, the terminal 40 includes a communication control unit 601, a user support unit 602, and a storage unit 603.

The communication control unit 601 is a means for controlling communication with other devices. For example, the communication control unit 601 receives data (packet) from the authentication server 10. Further, the communication control unit 601 transmits data to the authentication server 10. The communication control unit 601 passes the data received from the other device to the other processing module. The communication control unit 601 transmits the data acquired from the other processing module to the other device. In this way, the other processing module transmits / receives data to / from the other device via the communication control unit 601.

The user support unit 602 is a means for supporting a user who intends to receive a service by biometric authentication.

The user support unit 602 starts operation when the support application installed on the terminal 40 is activated. The user support unit 602 that has started the operation performs a menu display (GUI display) as shown in FIG. 21 and acquires an operation desired by the user.

The user support unit 602 includes a sub-module consisting of a user registration support unit 611, a service registration support unit 612, and a provision license support unit 613.

The user registration support unit 611 is activated in response to the selection of "user registration" shown in FIG. The user registration support unit 611 is a means for supporting (realizing) the system registration of the user.

For user registration, it is necessary to enter the user's biometric information and identity verification documents into the system.
The user registration support unit 611 displays a GUI for acquiring such information.

For example, the user registration support unit 611 displays a GUI as shown in FIG. 22. For example, the user presses the "file selection" button shown in FIG. 22 and specifies the image data of the face image to be registered in the system. The designated face image is displayed in the preview area (displayed as a selected face image in FIG. 22). When registering the previewed face image, the user presses the "OK" button.

Following the acquisition of the face image, the user registration support department 611 acquires the identification document. For example, the user registration support unit 611 displays a GUI as shown in FIG. 23. For example, the user uses the camera of the terminal 40 to take an image of the identification document. The user presses the "File selection" button and specifies the image of the identity verification document taken. After that, the user presses the "OK" button and inputs the identification document.

The identity verification documents that can be registered in the system include documents with facial images such as passports and driver's licenses (documents issued by public institutions that contribute to identity verification). In addition, the identification documents include not only paper documents but also electronic documents.

The user registration support unit 611 sends a user registration request including the acquired biometric information (face image) and identity verification documents to the authentication server 10.

Upon receiving an acknowledgment (a response indicating that the user registration was normally performed) from the authentication server 10, the user registration support unit 611 stores the user ID included in the acknowledgment in the storage unit 603.

Further, the user registration support unit 611 outputs a message or the like according to the response (affirmative response, negative response) received from the authentication server 10.

The service registration support unit 612 is activated in response to the selection of "service information registration" shown in FIG. The service registration support unit 612 is a means for supporting (realizing) the registration of service information by the user.

The service registration support unit 612 enables the user to select the type of industry in which the service is desired by displaying the type of business of the business operator participating in the system. For example, the service registration support unit 612 displays a GUI as shown in FIG. 24 so that the user can select the type of service desired.

After that, the service registration support unit 612 displays a GUI that allows the user to select a specific business operator (service provider). For example, in FIG. 24, when the user selects “hotel”, the service registration support unit 612 displays a GUI as shown in FIG. 25. The service registration support unit 612 uses the GUI as shown in FIG. 25 to obtain information on the business operator (the business operator that registers the service information) that the user wants to use among the business operators participating in the authentication infrastructure. get.

The service registration support unit 612 acquires service information according to the business operator selected by the user. For example, when the user selects a hotel operator, the service registration support unit 612 displays a GUI for acquiring hotel reservation information (see FIG. 26).

The service registration support unit 612 requests the service information registration including the service information acquired by using the GUI as shown in FIG. 26 and the user ID (user ID issued from the authentication server 10) by the user. It is transmitted to the management server 20 of the selected business operator. For example, in the example of FIG. 2, when the user wishes to receive the service from the business operator S1, the service registration support unit 612 requests the service information registration to the management server 20 of the business operator S1. Send. The service registration support unit 612 sends the service information registration request to the destination by referring to the table information or the like in which the business operator selected by the GUI and the address of the management server 20 of the business operator are associated with each other as shown in FIG. The management server 20 to be used is determined.

The service registration support unit 612 determines the service information to be acquired by referring to the information or the like that associates the selected business operator with the service information to be acquired. Alternatively, the service registration support unit 612 may inquire the management server 20 of the business operator selected by the user about the items to be acquired, or may acquire an input form or the like for inputting service information. In the above example, after the user selects the business operator S1, the service registration support unit 612 may obtain an acquisition item, an input form, or the like from the management server 20 of the business operator S1.

Further, the service registration support unit 612 outputs a message or the like according to the response (affirmative response, negative response) received from the management server 20.

The provision permission support unit 613 is activated according to the selection of "permission to provide public information" shown in FIG. The provision permission support unit 613 is a means for supporting (realizing) the provision permission of public information by the user.

The provision permission support unit 613 displays a GUI that allows the user to select the public information for which the provision is permitted. For example, the license support unit 613 displays a GUI as shown in FIG. 27.

When the public information (public information type) for which provision is permitted is selected, the provision permission support unit 613 displays a GUI for inputting public information specific data corresponding to the public information. For example, the provision permission support unit 613 acquires public information specific data using a GUI as shown in FIG. 28.

The provision permission support unit 613 transmits the public information provision permission including the user ID of the user and the public information specific data to the authentication server 10.

The provision permission support unit 613 outputs a message or the like according to the response (affirmative response, negative response) received from the authentication server 10.

The storage unit 603 is a means for storing information necessary for the operation of the terminal 40.
[Public server]
The description of the internal configuration of the public server will be omitted. The public server may include a database that stores public information specific data in association with public information. The public server may search the database using the public information specific data as a key and send the corresponding public information to the authentication server 10.
[System operation]
Subsequently, the operation of the authentication system according to the first embodiment will be described. The operation will be described for the service information registration phase, the public information provision permission phase, and the service provision phase, and the description regarding the user registration phase will be omitted.

FIG. 29 is a sequence diagram showing an example of the operation related to the service information registration phase of the authentication system according to the first embodiment.

The management server 20 acquires service information (information necessary for providing the service) and a user ID from the user (terminal 40) (step S01).

The management server 20 transmits a business registration request including the acquired user ID and business ID to the authentication server 10 (step S02).

The authentication server 10 generates a service user ID using the acquired user ID and business operator ID (step S03).

The authentication server 10 stores the business operator ID and the service user ID in the business operator information database (step S04).

The authentication server 10 transmits a response including the service user ID (a positive response to the business operator registration request) to the management server 20 (step S05).

The management server 20 associates the service information acquired in step S01 with the service user ID acquired from the authentication server 10 and stores it in the user information database (step S06).

FIG. 30 is a sequence diagram showing an example of the operation related to the public information provision permission phase of the authentication system according to the first embodiment.

The terminal 40 acquires the public information type and public information specific data that the user permits to provide using a GUI or the like (step S11).

The terminal 40 transmits the public information provision permission including the user ID of the user and the public information specific data to the authentication server 10 (step S12). The terminal 40 may transmit a public information provision permission including a public information type to the authentication server 10. That is, the terminal 40 may clearly indicate to the authentication server 10 the type of public information licensed by the user.

The authentication server 10 identifies a user who grants information provision permission based on the user ID (step S13).

The authentication server 10 stores the public information specific data in the public information specific field of the specified user (step S14).

The authentication server 10 transmits an acknowledgment to the public information provision permission to the terminal 40 (step S15).

The terminal 40 displays a message or the like according to the acquired response (step S16).

FIG. 31 is a sequence diagram showing an example of the operation related to the service provision phase of the authentication system according to the first embodiment. With reference to FIG. 31, the system operation when the service is provided using the service information will be described.

The authentication terminal 30 acquires a user's face image (biological information) and transmits the acquired face image to the management server 20 (step S21).

The management server 20 generates a feature amount from the acquired face image (step S22).

The management server 20 transmits an authentication request including the generated feature amount and the business operator ID to the authentication server 10 (step S23).

The authentication server 10 executes an authentication process using the feature amount included in the authentication request and the business operator ID, and identifies the corresponding service user ID (step S24).

The authentication server 10 transmits an acknowledgment including the specified service user ID to the management server 20 (sends the service user ID; step S25).

The management server 20 searches the user information database using the acquired service user ID, and specifies the corresponding service information (step S26).

The management server 20 transmits the specified service information to the authentication terminal 30 (step S27).

The authentication terminal 30 provides a service using the acquired service information (step S28).

FIG. 32 is a sequence diagram showing an example of the operation related to the service provision phase of the authentication system according to the first embodiment. With reference to FIG. 32, the system operation when the service is provided using public information will be described.

The staff terminal 31 acquires the user (user who receives the service) biometric information (face image) and the public information type to be referred to according to the operation of the staff or the like (step S31). The staff terminal 31 generates a feature amount from the face image.

The staff terminal 31 transmits a public information provision request including a user's feature amount and a public information type to the authentication server 10 (step S32).

The authentication server 10 executes a collation process using the feature amount included in the public information provision request, and identifies the corresponding user (step S33).

The authentication server 10 reads out from the public information database the data corresponding to the public information type included in the public information provision request among the public information specific data of the specified user (acquisition of public information specific data; step). S34).

The authentication server 10 transmits the acquired public information specific data to the corresponding public server (step S35).

The public server reads the public information corresponding to the received public information specific data from the database, and transmits the public information to the authentication server 10 (step S36).

The authentication server 10 transmits an acknowledgment to the public information provision request including public information to the staff terminal 31 (transmission of public information; step S37).

The staff terminal 31 outputs the received public information (step S38). For example, the staff terminal 31 presents the acquired public information to the staff.

As described above, in the authentication system according to the first embodiment, the authentication server 10 can process a request from a private business operator and a request from a public institution. In other words, both private businesses and public institutions do not need to build their own authentication system and can easily use biometric authentication. Specifically, it is sufficient for a private business operator (service provider who uses service information) to acquire the user ID and service information of the user and request the authentication server 10 to register the business operator when providing the service. Private businesses can easily provide services using biometrics by outsourcing the actual processing of biometrics to a certification center. Similarly, a public institution (a service provider who uses public information) need only request the user for permission to provide public information in advance when providing the service. By notifying the authentication server 10 of the user's biometric information and necessary public information, the public institution can refer to the user's public information without performing substantial processing of biometric authentication. .. In addition, for users, by registering the information of public information (public information identification data; for example, passport number) that permits the provision of information in the system in advance, official documents (identification documents; passport). Etc.), you can receive administrative services from public institutions even if you do not carry it. Further, since the user can select the public information for which the information provision is permitted, the information provision permission can be flexibly performed according to the nature of the public information and the like.

Further, the biometric information of the user is stored in the authentication server 10, and each business operator does not have the biometric information. The user's service information (personal information such as name) is stored in the management server 20 managed and operated by the business operator, and the authentication server 10 does not have the service information. The authentication system according to the first embodiment provides a robust authentication platform against information leakage by distributing and arranging information in this way. That is, biological information (particularly, feature amount) that is not associated with service information is merely a list of numerical values and is low value information for criminals and the like. Therefore, even if information leakage occurs from the authentication server 10, its influence is limited. Further, the authentication server 10 does not hold the actual contents of public information about each user. Since the authentication server 10 acquires information from the corresponding public server each time the public information is required, the possibility that the public information is leaked from the authentication server 10 is low. With the configuration of the authentication system according to the first embodiment, the participants of the authentication system (users who receive the service, business operators who provide the service) can use the authentication system with peace of mind.

Next, the hardware of each device that constitutes the authentication system will be described. FIG. 33 is a diagram showing an example of the hardware configuration of the authentication server 10.

The authentication server 10 can be configured by an information processing device (so-called computer), and includes the configuration illustrated in FIG. 33. For example, the authentication server 10 includes a processor 311, a memory 312, an input / output interface 313, a communication interface 314, and the like. The components such as the processor 311 are connected by an internal bus or the like and are configured to be able to communicate with each other.

However, the configuration shown in FIG. 33 does not mean to limit the hardware configuration of the authentication server 10. The authentication server 10 may include hardware (not shown) or may not include an input / output interface 313 if necessary. Further, the number of processors 311 and the like included in the authentication server 10 is not limited to the example of FIG. 33, and for example, a plurality of processors 311 may be included in the authentication server 10.

The processor 311 is a programmable device such as a CPU (Central Processing Unit), an MPU (Micro Processing Unit), and a DSP (Digital Signal Processor). Alternatively, the processor 311 may be a device such as an FPGA (Field Programmable Gate Array) or an ASIC (Application Specific Integrated Circuit). The processor 311 executes various programs including an operating system (OS).

The memory 312 is a RAM (RandomAccessMemory), a ROM (ReadOnlyMemory), an HDD (HardDiskDrive), an SSD (SolidStateDrive), or the like. The memory 312 stores an OS program, an application program, and various data.

The input / output interface 313 is an interface of a display device or an input device (not shown). The display device is, for example, a liquid crystal display or the like. The input device is, for example, a device that accepts user operations such as a keyboard and a mouse.

The communication interface 314 is a circuit, module, etc. that communicates with other devices. For example, the communication interface 314 includes a NIC (Network Interface Card) and the like.

The function of the authentication server 10 is realized by various processing modules. The processing module is realized, for example, by the processor 311 executing a program stored in the memory 312. The program can also be recorded on a computer-readable storage medium. The storage medium may be a non-transient such as a semiconductor memory, a hard disk, a magnetic recording medium, or an optical recording medium. That is, the present invention can also be embodied as a computer program product. Further, the above program can be downloaded via a network or updated by using a storage medium in which the program is stored. Further, the processing module may be realized by a semiconductor chip.

The management server 20, the authentication terminal 30, the staff terminal 31, the terminal 40, and the like can also be configured by the information processing device in the same manner as the authentication server 10, and the basic hardware configuration thereof is not different from the authentication server 10. Therefore, the explanation is omitted. For example, the authentication terminal 30 may be provided with a camera for photographing the user.

The authentication server 10 is equipped with a computer, and the function of the authentication server 10 can be realized by causing the computer to execute a program. Further, the authentication server 10 executes the control method of the authentication server by the program.
[Modification example]
It should be noted that the configuration, operation, and the like of the authentication system described in the above embodiment are examples, and are not intended to limit the system configuration and the like.

In the above embodiment, the case where the authentication server 10 has a business information database and a public information database has been described. However, these databases may be built on a database server different from the authentication server 10. Further, the authentication system may include various means (authentication unit 205, public information providing unit 206, etc.) described in the above embodiment.

In the above embodiment, the case where the biometric information of the user and the like are stored and managed using the two databases has been described. However, the authentication server 10 may manage the biometric information of the user or the like by using a database in which the two databases are integrated. For example, the authentication server 10 may perform biometric authentication and information provision using an authentication information database (corresponding to database 101) as shown in FIG. 34.

In the above embodiment, it has been explained that public documents (passports, health insurance cards) issued in Japan are targeted for information provision, but the target of information provision is not limited to documents issued by domestic public institutions. That is, public information regarding public documents issued by a foreign public institution may be provided by the certification system. Even in this case, it is sufficient that the public information specific data corresponding to the foreign public information is registered in the authentication system. From the same viewpoint, the users disclosed in the present application may be foreigners as well as Japanese.
In the above embodiment, the operation of the authentication system and the like have been described by taking a public institution as an example of requesting the provision of public information. However, it may be a private business that requires the provision of public information. For example, when the duty-free shop confirms the passport of the user, even if the public information provision request described in the above embodiment is transmitted from the duty-free shop terminal (terminal corresponding to the staff terminal 31) to the authentication server 10. good.

Also, it may be a public institution that provides services using service information. For example, the reservation information of the hospital may be registered in the hospital as service information, and the reservation information may be specified by the biometric authentication described in the above embodiment.

In the above embodiment, it has been described that the authentication server 10 generates a user ID at the time of user registration and pays out the generated user ID to the user. However, the user ID is determined by the user, and the user may input the user ID into the system. For example, an ID, a password, or a combination thereof for the user to log in to the authentication server 10 may be used as the user ID.

In the above embodiment, it has been explained that the user registration phase and the service information registration phase are executed at different timings, but these phases may be executed at substantially the same timing. For example, the authentication terminal 30 installed in the business operator who wants to provide the service may be used, and the above two registration phases may be executed. Specifically, the user registers as a user (inputs biometric information and identity verification documents) using the authentication terminal 30, and then continuously registers service information (inputs user ID and service information). May be done.

Similarly, the user registration phase and the public information provision permission phase may be executed at substantially the same timing. The user may operate the terminal 40 to input biometric information, identity verification documents, and types of public information for which provision is permitted to the authentication server 10.

In the above embodiment, it has been described that one business operator ID is assigned to one business operator, but one business operator ID may be assigned to a plurality of business operators. A plurality of businesses may be grouped together and a business ID may be issued for each group. For example, when the businesses S1 and S2 cooperate to provide the same service, a common business ID may be issued to these businesses S1 and S2.

In the above embodiment, the case where the biometric information related to the "feature amount generated from the face image" is transmitted from the management server 20 or the staff terminal 31 to the authentication server 10 has been described. However, the biometric information related to the "face image" may be transmitted from the management server 20 or the like to the authentication server 10. In this case, the authentication server 10 may generate a feature amount from the acquired face image and execute the authentication process (verification process).

In the above embodiment, the case where the authentication terminal 30 acquires the face image and the management server 20 generates the feature amount from the face image has been described. However, the authentication terminal 30 may generate a feature amount from the face image and transmit the generated feature amount to the management server 20. That is, the management server 20 does not have to generate the feature amount.

When processing the public information provision permission from the terminal 40, the authentication server 10 may verify the validity of the public information specific data (even if it verifies whether the public information specific data is correct data or not). good). When a checksum or the like is attached to the public information specific data, the authentication server 10 may verify the validity of the public information specific data by the checksum. Alternatively, the authentication server 10 may send the acquired public information specific data to the corresponding public server and request verification of its validity.

The staff terminal 31 may provide information on a plurality of types of public information to the authentication server 10. For example, the staff terminal 31 may send a public information provision request regarding the information described in the passport and the insurance card of the same user to the authentication server 10. In this case, the authentication server 10 may transmit the passport number and the insurance card number to the passport server 41 and the insurance card server 42, respectively, and acquire necessary public information. For example, consider the case where the staff terminal 31 is installed in a drug store. In this case, the staff (pharmacist) operates the staff terminal 31 to acquire the information of the insurance card when providing the medicine to the patient, or the information of the passport when performing the tax exemption processing of the product purchaser. You may. In this way, the staff terminal 31 can be a hybrid terminal that acquires different public information from the authentication server 10 according to the operation of the user (staff) or the like.

In the above embodiment, it has been described that the authentication terminal 30 transmits a user's authentication request (biological information) to the authentication server 10 via the management server 20. However, the authentication terminal 30 may send an authentication request directly to the authentication server 10. That is, the authentication terminal 30 may directly or indirectly transmit an authentication request (biological information) to the authentication server 10.

Further, in the above embodiment, the case where the staff terminal 31 directly transmits the public information provision request to the authentication server 10 has been described. However, the staff terminal 31 may send a public information provision request to the authentication server 10 via a server connected between the authentication server 10 and the staff terminal 31. That is, the staff terminal 31 may directly or indirectly transmit a public information provision request (biological information) to the authentication server 10.

One terminal (authentication terminal 30, staff terminal 31) may send a user's authentication request and a public information provision request to the authentication server 10. For example, consider the case where the authentication terminal 30 shown in FIG. 2 is a terminal installed in a hotel. In this case, the authentication terminal 30 can be provided with a function as a check-in terminal responsible for the user's check-in process and a function as a tax exemption terminal for performing the tax exemption process. When functioning as a check-in terminal, the authentication terminal 30 directly or indirectly transmits an authentication request including biometric information of a guest who has visited the hotel to the authentication server 10. The authentication terminal 30 proceeds with the check-in procedure based on the service information (reservation information) of the user. When functioning as a duty-free terminal, the authentication terminal 30 directly or indirectly transmits a request for providing public information regarding the biometric information of the duty-free goods purchaser and the passport to the authentication server 10. The authentication terminal 30 proceeds with tax exemption processing according to the items described in the passport obtained from the authentication server 10. In this way, the terminal may transmit the authentication request and the public information provision request to the authentication server 10 according to the function to be realized. Further, the authentication server 10 notifies the terminal of the service user ID or notifies the terminal of public information according to the type of the received request.

In the above embodiment, for example, as shown in FIG. 27, a case where the user grants permission to provide information in units of public information (for example, passport, health insurance card) has been described. However, the user may be provided with an interface for inputting whether or not the user permits the provision of each item of public information. For example, a GUI that allows input such as permitting information provision only for the name and nationality of the items described in the passport may be provided to the user.

The terminal 40 may notify the user of the advantage of providing the information when obtaining the permission to provide the public information of the user. For example, the terminal 40 may output a message such as "If the passport information is provided, the tax exemption procedure can be easily completed" in the display shown in FIG. 27.

The authentication server 10 can also store the identification documents acquired at the time of user registration in a public information database or the like. In this case, the authentication server 10 does not have to acquire the public information specific data from the user when the official document licensed by the user and the identity verification document registered in the database are the same. For example, consider a case where a "passport" is obtained as an identity verification document and the user grants permission to provide the items described in the passport. In this case, the authentication server 10 may read the passport number from the passport (user ID, identity verification document associated with the biometric information) registered in the database.

Each device included in the authentication system may be given an electronic signature when transmitting information (authentication request, public information provision request, etc.). The device that has acquired the information (for example, an authentication server or a public server) may verify the digital signature given and process only the information whose identity can be correctly confirmed.

The form of data transmission / reception between each device (authentication server 10, management server 20, authentication terminal 30, staff terminal 31) is not particularly limited, but the data transmitted / received between these devices may be encrypted. Biometric information is transmitted and received between these devices, and it is desirable that encrypted data be transmitted and received in order to appropriately protect the biometric information.

In the flow chart (flow chart, sequence diagram) used in the above description, a plurality of processes (processes) are described in order, but the execution order of the processes executed in the embodiment is not limited to the order of description. In the embodiment, the order of the illustrated processes can be changed within a range that does not hinder the contents, for example, each process is executed in parallel.

The above embodiment has been described in detail in order to facilitate understanding of the disclosure of the present application, and is not intended to require all the configurations described above. Moreover, when a plurality of embodiments are described, each embodiment may be used alone or in combination. For example, it is possible to replace a part of the configuration of the embodiment with the configuration of another embodiment, or to add the configuration of another embodiment to the configuration of the embodiment. Further, it is possible to add, delete, or replace a part of the configuration of the embodiment with another configuration.

Although the industrial applicability of the present invention is clear from the above description, the present invention is suitably applicable to an authentication system for authenticating users of private businesses and public institutions.

Some or all of the above embodiments may also be described, but not limited to:
[Appendix 1]
The biometric information of the user, the first ID that identifies the business operator that provides the service to the user, the second ID that is uniquely determined by the combination of the user and the business operator, and the provision by the user. A database that stores in association with public information specific data for specifying licensed public information,
The authentication process is executed in response to receiving the authentication request including the biometric information of the person to be authenticated and the first ID of the first business operator from the first business operator, and the second of the authentication successful persons. The authentication unit, which sends the ID of the above to the first business operator,
When the second business operator receives a public information provision request including the biometric information of the user who wants to refer to the public information and the type of the public information to be referred to, the public information is specified. An information providing unit that acquires the public information to be referred to from a public server that holds the public information to be referred to using data and transmits the acquired public information to the second business operator.
An authentication server.
[Appendix 2]
The database further stores a third ID for identifying the user.
Upon receiving the user registration request including the user's biometric information and the user's identity verification document, the user's identity is confirmed based on the identity verification document, and the user's living body that succeeds in identity verification. The authentication server according to Appendix 1, further comprising a user registration unit that registers information and the third ID in the database.
[Appendix 3]
The authentication server according to Appendix 2, wherein the user registration unit issues the third ID to the user when the user's identity is successfully confirmed.
[Appendix 4]
When the user registration unit succeeds in one-to-one verification using the biometric information of the user included in the user registration request and the biometric information obtained from the identity verification document, the user registration unit confirms the identity of the user. The authentication server according to Appendix 2 or 3, which is determined to be successful.
[Appendix 5]
Upon receiving a business registration request including the first ID and the third ID from the first business, the second ID is generated, and the generated second ID is used as the first ID. The authentication server according to any one of Supplementary note 2 to 4, further comprising a business registration unit, which is paid out to the business.
[Appendix 6]
Upon receiving the public information provision permission including the third ID and the public information specific data, a specific data registration unit for storing the public information specific data in the entry corresponding to the third ID is further provided. , The authentication server according to any one of Supplementary note 2 to 5.
[Appendix 7]
The authentication unit executes one-to-N (N is a positive integer) collation using the biometric information stored in the database and the biometric information of the person to be authenticated included in the authentication request, any of Supplementary note 1 to 6. The authentication server described in Kaichi.
[Appendix 8]
The authentication unit succeeded in the authentication process when the first ID included in the authentication request is stored in the database in association with the user specified by the one-to-N collation. The authentication server according to Appendix 7.
[Appendix 9]
The information providing unit performs a one-to-N (N is a positive integer) collation using the biometric information stored in the database and the biometric information included in the public information provision request, thereby performing the second method. The authentication server according to any one of Supplementary note 1 to 8, which identifies a user who wants to refer to public information by a business operator.
[Appendix 10]
The database stores a plurality of the public information specific data for each user.
The information providing unit uses the public information specifying data corresponding to the type of the public information included in the public information providing request among the plurality of public information specifying data of the specified user. The authentication server according to Appendix 9 to be transmitted to the server.
[Appendix 11]
The authentication server according to any one of Supplementary note 1 to 10, wherein the biometric information is a face image or a feature amount generated from the face image.
[Appendix 12]
The first terminal installed in the first operator and
The second terminal installed in the second operator,
An authentication server connected to the first and second terminals,
Including
The authentication server is
The biometric information of the user, the first ID that identifies the business operator that provides the service to the user, the second ID that is uniquely determined by the combination of the user and the business operator, and the provision by the user. A database that stores in association with public information specific data for specifying licensed public information,
The authentication process is executed in response to receiving the authentication request including the biometric information of the person to be authenticated and the first ID of the first business operator from the first terminal, and the second person of the successful authentication person. And the authentication unit that sends the ID of
When the second business operator receives a public information provision request including the biometric information of the user who wants to refer to the public information and the type of the public information to be referred to from the second terminal, the public information identification An information providing unit that acquires the public information to be referred to from a public server that holds the public information to be referred to using data and transmits the acquired public information to the second terminal.
The system.
[Appendix 13]
The biometric information of the user, the first ID that identifies the business operator that provides the service to the user, the second ID that is uniquely determined by the combination of the user and the business operator, and the provision by the user. In an authentication server equipped with a database that stores in association with public information identification data for identifying licensed public information.
The authentication process is executed in response to receiving the authentication request including the biometric information of the person to be authenticated and the first ID of the first business operator from the first business operator, and the second of the authentication successful persons. ID is sent to the first business operator,
When the second business operator receives a public information provision request including the biometric information of the user who wants to refer to the public information and the type of the public information to be referred to, the public information is specified. A control method of an authentication server that acquires the public information to be referred to from a public server that holds the public information to be referred to using data and transmits the acquired public information to the second business operator. ..
[Appendix 14]
The biometric information of the user, the first ID that identifies the business operator that provides the service to the user, the second ID that is uniquely determined by the combination of the user and the business operator, and the provision by the user. A computer installed in an authentication server equipped with a database that stores the public information identification data for specifying the licensed public information in association with it.
The authentication process is executed in response to receiving the authentication request including the biometric information of the person to be authenticated and the first ID of the first business operator from the first business operator, and the second of the authentication successful persons. And the process of transmitting the ID of
When the second business operator receives a public information provision request including the biometric information of the user who wants to refer to the public information and the type of the public information to be referred to, the public information is specified. A process of acquiring the public information to be referred to from a public server holding the public information to be referred to using data and transmitting the acquired public information to the second business operator.
A program to execute.

The disclosures of the above-mentioned prior art documents cited shall be incorporated into this document by citation. Although the embodiments of the present invention have been described above, the present invention is not limited to these embodiments. It will be appreciated by those skilled in the art that these embodiments are merely exemplary and that various modifications are possible without departing from the scope and spirit of the invention. That is, it goes without saying that the present invention includes all disclosure including claims, various modifications and modifications that can be made by those skilled in the art in accordance with the technical idea.

This application claims priority on the basis of Japanese Application Japanese Patent Application No. 2020-201061 filed on December 3, 2020, and incorporates all of its disclosures herein.

10, 100 Authentication server 20 Management server 30 Authentication terminal 31 Staff terminal 40 Terminal 41 Passport server 42 Insurance certificate server 101

Database

102, 205 Authentication unit 103

Information provision unit

201, 301, 401, 501, 601 Communication control unit 202 User registration Department 203 Business Registration Department 204 Specific Data Registration Department 206 Public

Information Providing Department

207, 305, 405, 504, 603 Storage Unit 302 Service Information Acquisition Department 303 Service Information Registration Department 304 Authentication Request Department 311 Processor 312 Memory 313 Input / Output Interface 314 Communication interface 402 Biometric information acquisition unit 403

Service provision unit

404, 503 Message output unit 502 Information provision request unit 602 User support unit 611 User registration support unit 612 Service registration support unit 613 Provision permission support unit

Claims

The biometric information of the user, the first ID that identifies the business operator that provides the service to the user, the second ID that is uniquely determined by the combination of the user and the business operator, and the provision by the user. A database that stores in association with public information specific data for specifying licensed public information,
The authentication process is executed in response to receiving the authentication request including the biometric information of the person to be authenticated and the first ID of the first business operator from the first business operator, and the second of the authentication successful persons. An authentication means for transmitting the ID of the above to the first business operator,
When the second business operator receives a public information provision request including the biometric information of the user who wants to refer to the public information and the type of the public information to be referred to, the public information is specified. An information providing means for acquiring the public information to be referred to from a public server holding the public information to be referred to using data and transmitting the acquired public information to the second business operator.
An authentication server.
The database further stores a third ID for identifying the user.
Upon receiving the user registration request including the user's biometric information and the user's identity verification document, the user's identity is confirmed based on the identity verification document, and the user's living body that succeeds in identity verification. The authentication server according to claim 1, further comprising a user registration means for registering information and the third ID in the database.
The authentication server according to claim 2, wherein the user registration means issues the third ID to the user when the identity of the user is successfully confirmed.
When the user registration means succeeds in one-to-one verification using the biometric information of the user included in the user registration request and the biometric information obtained from the identity verification document, the identity verification of the user is confirmed. The authentication server according to claim 2 or 3, which is determined to have succeeded.
Upon receiving a business registration request including the first ID and the third ID from the first business, the second ID is generated, and the generated second ID is used as the first ID. The authentication server according to any one of claims 2 to 4, further comprising a business registration means for paying out to a business.
Upon receiving the public information provision permission including the third ID and the public information specific data, the specific data registration means for storing the public information specific data in the entry corresponding to the third ID is further provided. , The authentication server according to any one of claims 2 to 5.
The authentication means according to claims 1 to 6, wherein the authentication means executes one-to-N (N is a positive integer) collation using the biometric information stored in the database and the biometric information of the person to be authenticated included in the authentication request. The authentication server described in any one of the items.
The authentication means succeeds in the authentication process when the first ID included in the authentication request is stored in the database in association with the user specified by the one-to-N collation. The authentication server according to claim 7.
The information providing means performs a one-to-N (N is a positive integer) collation using the biological information stored in the database and the biological information included in the public information provision request, thereby performing the second method. The authentication server according to any one of claims 1 to 8, wherein the business operator identifies a user who wants to refer to public information.
The database stores a plurality of the public information specific data for each user.
The information providing means obtains the public information specifying data corresponding to the type of the public information included in the public information providing request among the plurality of public information specifying data of the specified user. The authentication server according to claim 9, which is transmitted to the server.
The authentication server according to any one of claims 1 to 10, wherein the biometric information is a face image or a feature amount generated from the face image.
The first terminal installed in the first operator and
The second terminal installed in the second operator,
An authentication server connected to the first and second terminals,
Including
The authentication server is
The biometric information of the user, the first ID that identifies the business operator that provides the service to the user, the second ID that is uniquely determined by the combination of the user and the business operator, and the provision by the user. A database that stores in association with public information specific data for specifying licensed public information,
The authentication process is executed in response to receiving the authentication request including the biometric information of the person to be authenticated and the first ID of the first business operator from the first terminal, and the second person of the successful authentication person. An authentication means for transmitting the ID of the above to the first terminal, and
When the second business operator receives a public information provision request including the biometric information of the user who wants to refer to the public information and the type of the public information to be referred to from the second terminal, the public information identification An information providing means for acquiring the public information to be referred to from a public server holding the public information to be referred to using data and transmitting the acquired public information to the second terminal.
The system.
The biometric information of the user, the first ID that identifies the business operator that provides the service to the user, the second ID that is uniquely determined by the combination of the user and the business operator, and the provision by the user. In an authentication server equipped with a database that stores in association with public information identification data for identifying licensed public information.
The authentication process is executed in response to receiving the authentication request including the biometric information of the person to be authenticated and the first ID of the first business operator from the first business operator, and the second of the authentication successful persons. ID is sent to the first business operator,
When the second business operator receives a public information provision request including the biometric information of the user who wants to refer to the public information and the type of the public information to be referred to, the public information is specified. A control method of an authentication server that acquires the public information to be referred to from a public server that holds the public information to be referred to using data and transmits the acquired public information to the second business operator. ..
The biometric information of the user, the first ID that identifies the business operator that provides the service to the user, the second ID that is uniquely determined by the combination of the user and the business operator, and the provision by the user. A computer installed in an authentication server equipped with a database that stores the public information identification data for specifying the licensed public information in association with it.
The authentication process is executed in response to receiving the authentication request including the biometric information of the person to be authenticated and the first ID of the first business operator from the first business operator, and the second of the authentication successful persons. And the process of transmitting the ID of
When the second business operator receives a public information provision request including the biometric information of the user who wants to refer to the public information and the type of the public information to be referred to, the public information is specified. A process of acquiring the public information to be referred to from a public server holding the public information to be referred to using data and transmitting the acquired public information to the second business operator.
A computer-readable recording medium that contains a program for running the program.