WO2023042317A1

WO2023042317A1 - Server device, system, server device control method, and storage medium

Info

Publication number: WO2023042317A1
Application number: PCT/JP2021/033990
Authority: WO
Inventors: 憲由平本
Original assignee: 日本電気株式会社
Priority date: 2021-09-15
Filing date: 2021-09-15
Publication date: 2023-03-23

Abstract

Provided is a server device which facilitates disease prevention measures with respect to an infectious disease. This server device has a storage unit and an authentication unit. In the storage unit, there is constructed a user information database which stores, in association, biological information, and disease prevention certificates relating to disease prevention of the infectious disease, of each of a plurality of users. The authentication unit receives an authentication request including biological information of a person subject to authentication from an authentication terminal, and executes collation processing using the biological information included in the authentication request and the biological information stored in the user information database. If the disease prevention certificate of the user identified by the collation processing is valid, the authentication unit transmits a positive response representing authentication success to the authentication terminal, said positive response including information relating to a benefit conferred to the person subject to authentication.

Description

SERVER DEVICE, SYSTEM, CONTROL METHOD FOR SERVER DEVICE, AND STORAGE MEDIUM

The present invention relates to a server device, a system, a server device control method, and a storage medium.

Various services using biometric authentication are being developed.

For example, Patent Literature 1 states that it provides a data processing device that can easily and reliably provide age-restricted services to service users. The data processing device of Patent Literature 1 receives simultaneously captured images of an official document and a service target user, extracts the official document from it as a captured document image, and extracts a user's facial photograph from this as a document facial image. do. On the other hand, the data processing device extracts the user's face portion from the simultaneously captured image as a captured face image, and determines matching between the captured face image and the document face image. The data processing device also determines whether the service target user is within a specific age range based on the extracted captured document image. Therefore, the data processing device permits the provision of the age-restricted service when the captured facial image matches the documented facial image and the service target user is determined to be within a specific age range.

Patent Document 2 states that it aims to provide a passage permission device, system, method, and program for determining desired passage permission while suppressing contact with the person to be authenticated. The passage permission device of Patent Document 2 has image data acquisition means, authentication control means, certification information acquisition means, determination means, and output means. The image data obtaining means obtains image data including a user's face image photographed by a predetermined photographing device. The authentication control means causes the authentication device storing the facial feature information of the user to perform face authentication on the image data. When the face authentication is successful, the certificate information acquisition means acquires the user's certificate information related to the face authentication from the storage device that stores the user's certificate information related to the epidemic prevention measures. The determining means determines whether or not to allow the user to pass based on the certification information associated with the user. The output means outputs the determination result to a predetermined terminal device corresponding to the photographing device.

JP 2010-079393 A Japanese Patent No. 6838689

During epidemics of infectious diseases, etc., it is important to take measures to prevent epidemics. For example, when boarding an aircraft, passengers are required to carry a negative certificate for infectious diseases. Similarly, in tourist spots such as remote islands, it is desirable that tourists possess negative certificates from the viewpoint of preventing the spread of infectious diseases in the tourist spots. However, in order to obtain a negative certificate, it is necessary for air passengers and tourists to bear the cost of the test. As a result, the acquisition of negative certificates is often hindered by the cost of testing.

It should be noted that this problem cannot be solved by using the techniques disclosed in Patent Documents 1 and 2. This is because these documents merely disclose a technique for confirming the user's age or a technique for determining whether or not a predetermined certificate has been obtained.

The main purpose of the present invention is to provide a server device, a system, a server device control method, and a storage medium that contribute to promoting quarantine measures against infectious diseases.

According to the first aspect of the present invention, a storage unit in which a user information database for storing biometric information of each of a plurality of users and quarantine certificates relating to quarantine against infectious diseases in association with each other is constructed; The quarantine certificate of the user identified by receiving an authentication request including the biometric information of the person to be authenticated, and using the biometric information included in the authentication request and the biometric information stored in the user information database. is valid, the authentication unit transmits to the authentication terminal an affirmative response indicating successful authentication, the acknowledgment including information about a privilege given to the person to be authenticated. be.

According to a second aspect of the present invention, an authentication terminal and a server device are included, and the server device stores biometric information of each of a plurality of users and quarantine certificates relating to quarantine against infectious diseases in association with each other. a storage unit in which a user information database is constructed; and an authentication request including biometric information of a person to be authenticated is received from the authentication terminal, and the biometric information included in the authentication request and the biometric stored in the user information database If the quarantine certificate of the user identified by the collation process using information is valid, the authentication is a response indicating success of authentication and includes information about privileges given to the person to be authenticated. A system is provided comprising: an authenticator for sending to a terminal.

According to the third aspect of the present invention, in the server device, biometric information of each of a plurality of users and quarantine certificates relating to quarantine against infectious diseases are associated with each other and stored in a user information database. is received, and the quarantine certificate of the user identified by verification processing using the biometric information included in the authentication request and the biometric information stored in the user information database is valid If there is, there is provided a method for controlling a server device, which transmits to the authentication terminal an affirmative response, which is a response indicating successful authentication and which includes information about a privilege given to the person to be authenticated.

According to a fourth aspect of the present invention, a computer installed in a server device stores biometric information of each of a plurality of users and quarantine certificates relating to quarantine against infectious diseases in association with each other in a user information database. receiving an authentication request including the biometric information of a person to be authenticated from an authentication terminal, and identifying a user identified by a matching process using the biometric information included in the authentication request and the biometric information stored in the user information database; a process of transmitting to the authentication terminal, if the quarantine certificate is valid, a response indicating successful authentication, the positive response including information about privileges given to the person to be authenticated. A computer readable storage medium is provided for storing the

Each aspect of the present invention provides a server device, a system, a server device control method, and a storage medium that contribute to promoting quarantine measures against infectious diseases. In addition, the effect of this invention is not limited above. Other effects may be achieved by the present invention instead of or in addition to this effect.

FIG. 1 is a diagram for explaining an overview of one embodiment. FIG. 2 is a diagram illustrating an example of a schematic configuration of an information processing system according to the first embodiment; FIG. 3 is a diagram for explaining the operation of the information processing system according to the first embodiment. FIG. 4 is a diagram for explaining the operation of the information processing system according to the first embodiment. FIG. 5 is a diagram illustrating an example of a display on the authentication terminal according to the first embodiment; FIG. 6 is a diagram for explaining the operation of the information processing system according to the first embodiment. 7 is a diagram illustrating an example of a processing configuration of a server device according to the first embodiment; FIG. FIG. 8 is a diagram showing an example of a user information database according to the first embodiment. FIG. 9 is a diagram showing an example of a reservation person information database according to the first embodiment. 10 is a flowchart illustrating an example of the operation of an authentication unit according to the first embodiment; FIG. 11 is a diagram illustrating an example of a processing configuration of a laboratory server according to the first embodiment; FIG. 12 is a diagram illustrating an example of a processing configuration of an authentication terminal according to the first embodiment; FIG. 13 is a diagram illustrating an example of a display on the authentication terminal according to the first embodiment; FIG. 14 is a diagram illustrating an example of a display on the authentication terminal according to the first embodiment; FIG. 15 is a diagram illustrating an example of a display on the authentication terminal according to the first embodiment; FIG. 16 is a sequence diagram illustrating an example of the operation of the information processing system according to the first embodiment; FIG. 17 is a sequence diagram illustrating an example of the operation of the information processing system according to the first embodiment; FIG. FIG. 18 is a diagram illustrating an example of a hardware configuration of a server device according to the disclosure of the present application.

First, an outline of one embodiment will be described. It should be noted that the drawing reference numerals added to this outline are added to each element for convenience as an example to aid understanding, and the description of this outline does not intend any limitation. Also, unless otherwise specified, the blocks shown in each drawing represent the configuration of each function rather than the configuration of each hardware unit. Connecting lines between blocks in each figure include both bi-directional and uni-directional. The unidirectional arrows schematically show the flow of main signals (data) and do not exclude bidirectionality. In addition, in the present specification and drawings, elements that can be described in the same manner can be omitted from redundant description by assigning the same reference numerals.

A server device 100 according to one embodiment includes a storage unit 101 and an authentication unit 102 (see FIG. 1). In the storage unit 101, a user information database is constructed that associates and stores biometric information of each of a plurality of users and quarantine certificates relating to quarantine against infectious diseases. The authentication unit 102 receives an authentication request including the biometric information of the person to be authenticated from the authentication terminal, and performs matching processing using the biometric information included in the authentication request and the biometric information stored in the user information database. If the quarantine certificate of the user specified by the verification process is valid, the authentication unit 102 sends a positive response indicating successful authentication, which includes information about the privilege given to the person to be authenticated, to the authentication terminal. Send.

The server device 100 associates and stores the user's biometric information and the quarantine certificate. When receiving the authentication request from the authentication terminal, the server device 100 determines whether the person to be authenticated possesses a valid quarantine certificate (whether the person to be authenticated is taking quarantine measures). When the server apparatus 100 determines that the person to be authenticated has a valid epidemic prevention certificate, the server device 100 notifies the authentication terminal that the privilege is given to the person to be authenticated. Upon receiving the notification, the authentication terminal takes measures such as discounting the price of the person to be authenticated. In this way, by giving benefits to users, each user (especially tourists) actively takes quarantine measures (e.g., taking a PCR test to prove negative, vaccination). become. That is, quarantine measures against infectious diseases are promoted.

Specific embodiments will be described in more detail below with reference to the drawings.

[First embodiment]
The first embodiment will be described in more detail with reference to the drawings.

[System configuration]
FIG. 2 is a diagram illustrating an example of a schematic configuration of an information processing system according to the first embodiment; As shown in FIG. 2, the information processing system includes a server device 10, a laboratory server 20, and a plurality of authentication terminals 30-1 to 30-3.

The server device 10 is a server managed and operated by an airline company or the like. The server device 10 is a device that takes charge of ticket (airline ticket) reservation and the like. The server device 10 may be installed in the building of the airport company or in the airport, or may be installed on the network (on the cloud).

The laboratory server 20 is a server managed and operated by a medical institution or the like that conducts examinations for infectious diseases. The laboratory examines whether the subject has an infectious disease. For example, a laboratory examines whether or not a subject has an infectious disease by a PCR (Polymerase Chain Reaction) test, an antigen test, or an antibody test. In the first embodiment, it is assumed that the laboratory conducts a PCR test.

The authentication terminals 30-1 to 20-3 are apparatuses and devices installed in tourist spots and the like. In the following description, unless there is a particular reason to distinguish between the authentication terminals 30-1 to 20-3, they will simply be referred to as "authentication terminal 30". The authentication terminal 30 is used for settlement of goods purchased and services received by the user visiting the tourist spot.

Each device shown in FIG. 2 is interconnected. Specifically, the server device 10, the laboratory server 20, and the authentication terminal 30 are connected by wired or wireless communication means, and are configured to be able to communicate with each other.

The configuration of the information processing system shown in FIG. 2 is an example, and is not intended to limit the configuration. For example, the system may include multiple server devices 10 . Also, the number of authentication terminals 30 included in the information processing system is not limited to "3".

[Overview of operation]
Next, an outline of the operation of the information processing system according to the first embodiment will be described.

In the information processing system according to the first embodiment, when a user heading to a sightseeing spot reserves an airplane ticket (airline ticket), the airline company requests the user's cooperation regarding quarantine against infectious diseases. . More specifically, the airline (server device 10) allows the user to receive a PCR test, antigen test, etc. at a low price when reserving an airline ticket with an airport in a tourist area as the arrival airport, and Request the above cooperation by notifying the user that they can get benefits by receiving it.

The airline and the inspection office (medical institutions that operate the inspection office, etc.) have a tie-up, and the airline will notify the inspection office of the information of the user who cooperates with the above epidemic prevention and request the necessary procedures. The inspection office will inspect the user and inform the airline of the result. The airline company (server device 10) issues a certificate regarding quarantine against infectious diseases (hereinafter referred to as a quarantine certificate) to the user if there is no problem with the inspection from the inspection station. In the first embodiment, the server device 10 issues a "negative certificate" to users who have been proved negative by the PCR test.

The user boards the reserved aircraft and arrives at the tourist destination. When the user engages in consumption behavior (purchase of goods, enjoyment of services) at a tourist spot, the server device 10 gives a privilege to the user who has a valid negative certificate. Specifically, the server device 10 gives a benefit such as a discount on the amount paid at a tourist spot. At that time, the server device 10 sets a benefit (discount) for the user that is larger than the amount that the user paid for cooperating with the epidemic prevention measures. In addition, tourist associations, etc. of tourist spots will bear the discount set for users who have a negative certificate.

<User registration>
A user who purchases an airline ticket must register as a user (member registration) in advance. Specifically, the user inputs his or her biometric information (eg, face image) and personal information (eg, name, age, gender, address, e-mail address, credit card information, etc.) to the server device 10 (Fig. 3). More specifically, the user inputs biometric information, personal information, etc. to the server device 10 using the terminal 40 that the user possesses.

When the server device 10 acquires the user's biometric information and personal information, it generates a user ID for identifying the user. The user ID may be any information that can uniquely identify the user. For example, the server device 10 may number a unique value each time a user is registered as a user ID.

Examples of biometric information include data (feature amounts) calculated from physical features unique to individuals, such as face, fingerprints, voiceprints, veins, retinas, and iris patterns. Alternatively, the biometric information may be image data such as a face image or a fingerprint image. Biometric information should just include a resident's physical characteristic as information. In the disclosure of the present application, a case of using biometric information (a face image or a feature amount generated from the face image) regarding a person's “face” will be described.

When the user ID is generated, the server device 10 associates the user ID, biometric information and personal information and registers them in the user information database. After that, the server device 10 issues the user ID to the terminal 40 of the user. Terminal 40 stores the user ID.

<Airline Reservation>
A user who has completed user registration (membership registration) with an airline company can make a reservation for an aircraft. For example, as shown in FIG. 4, a user operates a terminal 40 to access a WEB (web) page provided by the server device 10 . A user makes a reservation for an aircraft on the web page (step S1). When accessing the server device 10 , the terminal 40 transmits the issued user ID to the server device 10 .

The server device 10 recommends that the user who reserves an aircraft traveling to a specific destination undergo an infectious disease test (PCR test). At that time, the server device 10 notifies the user that the airline company will bear part of the cost for undergoing the PCR test, and that the user will receive a benefit that is greater than the self-pay amount.

Specifically, the server device 10 acquires whether or not the user intends to undergo a PCR test while making the above notification when booking an airline ticket. For example, the server device 10 acquires whether or not the user is willing to undergo a PCR test using a GUI (Graphical User Interface) as shown in FIG.

The server device 10 stores the user's reservation information (flight number, departure airport, departure date and time, arrival airport, arrival date and time, etc.) in association with the user ID. The server device 10 registers the user ID and reservation information in the reservation person information database.

When the user wishes to undergo a PCR test, the server device 10 checks the "test request" including the user ID of the user, personal information (name, address, etc.), and reservation information (departure date and time, etc.). It is transmitted to the local server 20 (step S2 in FIG. 4).

The staff of the laboratory operates the laboratory server 20, grasps the content of the inspection request, and sends the test kit for the PCR test to the notified address (step S3). In addition, the staff manages the user ID of the user who sent the test kit in association with the ID (serial number) given to the test kit.

Upon receiving the search kit, the user puts the sample (for example, saliva) into the test kit and returns it to the test center (step S4). At that time, the date and time of sample collection may be written in the test kit.

The laboratory staff will perform a PCR test using the returned test kit sample. A laboratory staff member inputs the results of the PCR test to the laboratory server 20 . The staff member acquires the user ID of the user from the ID given to the test kit, and inputs the details of the test results to the laboratory server 20 together with the user ID.

For example, the staff inputs details such as the test result (negative, positive), sample collection date/time, test date/time, test method, etc. to the laboratory server 20. The laboratory server 20 transmits a test result notification including details of the test result and the user ID to the server device 10 (step S5).

The server device 10 notifies the user of the inspection results (step S6). For example, the server device 10 transfers the details of the test results obtained from the laboratory server 20 to a pre-registered e-mail address.

If the test result is "negative", the server device 10 generates a negative certificate. The negative certificate includes information such as that the PCR test result is negative, the sample collection date, the test date, the test method, and the certificate expiration date. In addition, since the response when the test result is "positive" is different from the gist of the present application, detailed description is omitted. In this case, the server device 10 takes appropriate measures such as contacting the public health center.

The server device 10 registers the generated negative certificate in the user information database.

As mentioned above, benefits are given to users who have undergone a PCR test. For example, the server device 10 allows a user (a user whose PCR test result is negative) to receive a discount for payment at a tourist spot arriving by air. At that time, the server device 10 sets a discount amount that provides an incentive for the user to undergo the PCR test.

For example, if a self-pay of 5000 yen is required to undergo a PCR test, the server device 10 sets a discount amount of 5000 yen or more for the user. When the server device 10 generates the negative certificate, it sets the discount amount and stores it in the user information database.

Regarding the cost of the PCR test, the airline and the laboratory (medical institution) will discuss and decide in advance the amount of the airline's subsidy, the user's self-pay amount, etc. In addition, regarding the discount amount at tourist spots, the airline company and the tourist association of the tourist spot will discuss and set the discount amount in advance. Employees of the airline company or the like enter the self-pay amount and the discount amount into the server device 10 .

<Exercise of privilege>
As described above, the user can exercise the privilege (discount set by taking the PCR test) at the tourist destination to which the user travels by air. Payments related to the consumption behavior of users at tourist sites are made using the authentication terminal 30 (see FIG. 6). The authentication terminal 30 is configured so that both the user and the store clerk can operate the authentication terminal 30 and view the display.

For example, when a user eats at a tourist spot, buys souvenirs, or stays at a hotel, the store clerk or the like inputs the billed amount to the user into the authentication terminal 30 . When the user approves the amount (payment amount), the authentication terminal 30 acquires the user's biometric information (for example, face image). The authentication terminal 30 transmits an authentication request including the acquired biometric information and terminal ID to the server device 10 .

The terminal ID is an ID for identifying each authentication terminal 30 included in the information processing system (such as a store where the authentication terminal 30 is installed). The MAC (Media Access Control) address or IP (Internet Protocol) address of the authentication terminal 30 can be used as the terminal ID.

The server device 10 performs matching processing using the biometric information included in the authentication request and the biometric information registered in the user information database to identify the user. If the identified user has a valid negative certificate and has a discount balance remaining, the server device 10 determines that authentication has succeeded.

The server device 10 determines that authentication has failed if the verification process has failed, the user does not have a valid negative certificate, or there is no remaining discount balance.

The server device 10 notifies the authentication terminal 30 of the authentication result (authentication success, authentication failure). When notifying the authentication success, the server device 10 transmits to the authentication terminal 30 a positive response including the user ID and the balance of the discount amount set for the user (discount balance).

The authentication terminal 30, which has received a positive response (successful authentication), presents the discount balance to the user and inquires of the user whether or not to receive the discount. When the user receives a discount, the user inputs the amount of money to be discounted to the authentication terminal 30. - 特許庁

The authentication terminal 30 notifies the server device 10 of the discount amount entered by the user (hereinafter referred to as the usage discount amount). Specifically, the authentication terminal 30 transmits to the server device 10 a “discount usage notification” including the user ID of the user and the usage discount amount. The server device 10 subtracts the notified usage discount amount from the discount balance of the user, and updates the discount balance of the user information database.

The store clerk deducts the discount amount determined by the user from the payment price and completes the payment for the user.

Next, details of each device included in the information processing system according to the first embodiment will be described.

[Server device]
FIG. 7 is a diagram showing an example of a processing configuration (processing modules) of the server device 10 according to the first embodiment. Referring to FIG. 7, the server device 10 includes a communication control unit 201, a user registration unit 202, a reservation control unit 203, an inspection control unit 204, an authentication unit 205, a discount balance control unit 206, and a storage unit. 207;

The communication control unit 201 is means for controlling communication with other devices. For example, the communication control unit 201 receives data (packets) from the laboratory server 20 . The communication control unit 201 also transmits data to the laboratory server 20 . The communication control unit 201 transfers data received from other devices to other processing modules. The communication control unit 201 transmits data acquired from other processing modules to other devices. In this manner, other processing modules transmit and receive data to and from other devices via the communication control unit 201 . The communication control unit 201 has a function as a receiving unit that receives data from another device and a function as a transmitting unit that transmits data to the other device.

The user registration unit 202 is means for realizing the above-described user registration. The user registration unit 202 acquires biometric information and personal information of a user who is to be registered as a user using any means.

For example, the user registration unit 202 may acquire biometric information and personal information from the terminal 40 operated by the user. For example, the user registration unit 202 may display a GUI for acquiring biometric information and personal information on the terminal 40 in response to the user accessing a predetermined home page.

When the user's biometric information (for example, a face image) is acquired, the user registration unit 202 generates a feature quantity (feature vector consisting of a plurality of feature quantities) that characterizes the face image.

In addition, existing technology can be used for the feature amount generation processing, so detailed description thereof will be omitted. For example, the user registration unit 202 extracts the eyes, nose, mouth, etc. from the face image as feature points. After that, the user registration unit 202 calculates the position of each feature point and the distance between each feature point as a feature amount, and generates a feature vector (vector information that characterizes the face image) composed of a plurality of feature amounts.

After that, the user registration unit 202 generates a user ID for identifying the user. The user registration unit 202 issues the generated user ID to the terminal 40 .

The user registration unit 202 associates the generated user ID, biometric information and personal information and stores them in the user information database (see FIG. 8). As shown in FIG. 8, the user information database stores user IDs, biometric information, personal information, negative certificates, discount balances, etc. in association with each other. Note that the user information database shown in FIG. 8 is an example, and is not meant to limit the items to be stored.

The reservation control unit 203 is means for controlling airline ticket reservations by airline company members (users who have registered in advance). The reservation control unit 203 displays a GUI or the like for reserving an airline ticket in response to the user's access to the reservation page. When the user inputs information (reservation information) regarding an airline ticket that the user wants to purchase and performs a predetermined operation (for example, pressing a confirmation button), the reservation control unit 203 displays a GUI as shown in FIG.

As shown in FIG. 5, when a member of an airline company (a user who has registered in advance as a user) makes an airline ticket reservation, the reservation control unit 203 acquires a quarantine certificate (negative certificate) for the person who made the reservation. recommend. Further, as shown in FIG. 5, the reservation control unit 203 may notify the user that the quarantine certificate (negative certificate) can be obtained at a low price. That is, the reservation control unit 203 may notify the reservation person that the airline company will bear part of the cost required to obtain the negative certificate. In addition, the reservation control unit 203 may notify the reservation person that the privilege given with the acquisition of the negative certificate can be used at the destination (tourist spot) of the reserved aircraft.

When the user presses the "reserve ticket without inspection" button or "reserve ticket with inspection" button, the reservation control unit 203 stores the user ID and reservation information of the user in the reservation person information database. Store (see FIG. 9).

When the "reserve ticket after inspection" button is pressed, the reservation control unit 203 notifies the user ID of the user to the inspection control unit 204.

The inspection control unit 204 is means for controlling the inspection of infectious diseases for users who have reserved airline tickets. After acquiring the user ID from the reservation control unit 203, the inspection control unit 204 searches the user information database and the reservation person information database using the user ID as a key, and acquires the personal information and reservation information of the corresponding user. do.

After that, the inspection control unit 204 sends an "inspection request" including the user ID, personal information (name, address, etc.) and reservation information (departure date, departure time) to the inspection station server 20. In this way, the inspection control unit 204, when the reservation person of the airline ticket wishes to obtain the quarantine certificate (negative certificate), the inspection control unit 204 performs the procedure for obtaining the quarantine certificate from the external organization (inspection office server 20 ).

The inspection control unit 204 receives the "inspection result notification" from the laboratory server 20. The examination control unit 204 searches the user information database using the user ID included in the examination result notification as a key, and identifies the corresponding user.

The inspection control unit 204 sends the inspection results to the specified contact information (email address) of the user. Furthermore, if the test result is "negative", the test control unit 204 generates a negative certificate.

The inspection control unit 204 generates a negative certificate including at least the negative certificate expiration date. Specifically, the test control unit 204 sets the expiration date of the negative certificate to the date and time after a predetermined period of time (for example, 72 hours) has passed since the sample collection date and time of the user. In addition to the expiration date of the negative certificate, the test control unit 204 may generate a negative certificate including information such as sample collection date and time, test date, test method, collected sample, name of testing institution, and the like.

The inspection control unit 204 registers the generated negative certificate in the user information database. In addition, the test control unit 204 sets a predetermined discount balance for the user whose PCR test result is negative (registers the initial value of the discount amount in the user information database). At that time, the monetary value of the privilege given to the user (user who obtained a negative certificate; user who underwent PCR testing) is larger than the user's self-pay amount required to obtain a negative certificate. set.

The authentication unit 205 is means for processing an authentication request from the authentication terminal 30. The operation of the authentication unit 205 will be described with reference to FIG. FIG. 10 is a flow chart showing an example of the operation of the authentication unit 205 according to the first embodiment.

Upon receiving the authentication request, the authentication unit 205 generates a feature amount from the biometric information (face image) included in the authentication request (step S101).

The authentication unit 205 sets the generated feature amount as a matching target, and performs matching processing with the feature amount registered in the user information database (step S102). More specifically, the authentication unit 205 sets a feature amount generated from the face image included in the authentication request as a matching target, and performs a one-to-one match with a plurality of feature amounts registered in the user information database. Perform N matches (N is a positive integer, and so on).

The authentication unit 205 calculates the degree of similarity between the feature amount (feature vector) to be matched and each of the plurality of feature amounts on the registration side. Chi-square distance, Euclidean distance, or the like can be used for the degree of similarity. Note that the greater the distance, the lower the similarity, and the closer the distance, the higher the similarity.

The authentication unit 205 determines that the matching process has succeeded if there is a feature amount whose similarity is equal to or greater than a predetermined value, and that the matching process has failed if such a feature amount does not exist.

If the verification process fails (step S103, No branch), the authentication unit 205 sets the authentication result to "authentication failure" (step S104).

If the verification process is successful (step S103, Yes branch), the authentication unit 205 verifies the negative certificate of the user identified by the verification process (the user with the highest degree of similarity) (step S105).

If the verification date and time is before the expiration date of the negative certificate, the authentication unit 205 determines that there is a valid negative certificate for the person to be authenticated. If the verification date and time has passed the expiration date of the negative certificate, or if the negative certificate does not exist in the user information database, the authentication unit 205 determines that there is no valid negative certificate for the person to be authenticated. I judge.

If there is no valid negative certificate (step S106, No branch), the authentication unit 205 sets the authentication result to "authentication failure" (step S104).

If there is a valid negative signature (step S106, Yes branch), the authentication unit 205 determines whether or not the discount balance set for the user remains (step S107).

If the discount balance does not remain (step S107, No branch), the authentication unit 205 sets the authentication result to "authentication failure" (step S104).

If the discount balance remains (step S107, Yes branch), the authentication unit 205 sets the authentication result to "successful authentication" (step S108).

The authentication unit 205 transmits the authentication result (authentication success, authentication failure) to the authentication terminal 30 (step S109). In the case of authentication failure, the authentication unit 205 transmits a negative response to that effect to the authentication terminal 30 . In the case of authentication success, the authentication unit 205 transmits an affirmative response to that effect to the authentication terminal 30 . When sending an acknowledgment, the authentication terminal 30 sends an acknowledgment including the user ID and the discount balance to the authentication terminal 30 .

In this way, the authentication unit 205 receives an authentication request including the biometric information of the person to be authenticated from the authentication terminal 30, and performs verification using the biometric information included in the authentication request and the biometric information stored in the user information database. Execute the process. If the user's quarantine certificate (negative certificate) specified by the collation process is valid, the authentication unit 205 sends a response indicating authentication success, and information (discount) given to the person to be authenticated. balance) to the authentication terminal 30.

The discount balance control unit 206 is means for controlling the discount balance set for the user. The discount balance control unit 206 receives the “discount use notification” from the authentication terminal 30 . The discount balance control unit 206 searches the user information database using the user ID included in the notification, and identifies the corresponding user. The discount balance control unit 206 subtracts the usage discount amount from the specified user's discount balance to update the discount balance.

In this way, the discount balance control unit 206 receives, from the authentication terminal 30, a discount usage notification including the discount amount used by the person to be authenticated (successful authentication person; user determined to be successfully authenticated), Update the discount amount set for the user with the usage discount amount.

The storage unit 207 is means for storing information necessary for the operation of the server device 10 . A user information database and a reservation person information database are constructed in the storage unit 207 . The user information database stores biometric information of each of at least a plurality of users in association with quarantine certificates relating to quarantine against infectious diseases.

[Lab server]
FIG. 11 is a diagram showing an example of a processing configuration (processing modules) of the laboratory server 20 according to the first embodiment. Referring to FIG. 11 , the laboratory server 20 includes a communication control section 301 , an examination request processing section 302 and a storage section 303 .

The communication control unit 301 is means for controlling communication with other devices. For example, the communication control unit 301 receives data (packets) from the server device 10 . Also, the communication control unit 301 transmits data to the server device 10 . The communication control unit 301 passes data received from other devices to other processing modules. The communication control unit 301 transmits data acquired from other processing modules to other devices. In this way, other processing modules transmit and receive data to and from other devices via the communication control unit 301 . The communication control unit 301 has a function as a receiving unit that receives data from another device and a function as a transmitting unit that transmits data to the other device.

The inspection request processing unit 302 is means for performing processing related to inspection requests from the server device 10 . Upon receiving an inspection request from the server device 10, the inspection request processing unit 302 presents the information included in the request to the staff of the inspection center.

For example, the test request processing unit 302 displays the user ID, personal information (name, address, etc.), and reservation information (departure place, departure date and time) on a liquid crystal monitor or the like. Alternatively, the test request processing unit 302 may send an e-mail containing these information to the terminal used by the staff.

The staff will associate and manage the presented user ID and the serial number of the test kit. For example, a staff member inputs a combination of a user ID and a serial number into spreadsheet software or the like for management.

The staff will send the test kit with the above serial number to the provided address. At that time, the staff takes into account the date and time of departure, and sends an instruction to the user together with the test kit, specifying the date and time to collect the specimen so that the validity period of the negative certificate will be as long as possible. More specifically, the staff will specify the specimen collection date and time so that the period between the specimen collection date and time and the departure date and time is as close as possible to the period during which the negative certificate is determined to be valid (eg, 72 hours).

The staff will receive the test kit containing the sample from the user. A staff member performs a PCR test using the sample stored in the test kit, and obtains the test result. The employee identifies the user ID from the serial number assigned to the test kit. The staff member inputs the specified user ID and the details of the examination contents (inspection results) to the laboratory server 20 .

The inspection request processing unit 302 displays a GUI or the like for acquiring the user ID and details of the inspection results in response to the staff's predetermined operation (for example, pressing the inspection result input button). The staff member inputs test results (negative, positive), sample collection date/time, test date/time, test method, etc. to the laboratory server 20 according to the GUI. The test request processing unit 302 transmits to the server device 10 a “test result notification” including the user ID and details of the test result.

The storage unit 303 is means for storing information necessary for the operation of the laboratory server 20.

[Authentication terminal]
FIG. 12 is a diagram showing an example of a processing configuration (processing modules) of the authentication terminal 30 according to the first embodiment. Referring to FIG. 12 , authentication terminal 30 includes communication control section 401 , payment control section 402 , biometric information acquisition section 403 , authentication request section 404 , and storage section 405 .

The communication control unit 401 is means for controlling communication with other devices. For example, the communication control unit 401 receives data (packets) from the server device 10 . Also, the communication control unit 401 transmits data to the server device 10 . The communication control unit 401 transfers data received from other devices to other processing modules. The communication control unit 401 transmits data acquired from other processing modules to other devices. In this manner, other processing modules transmit and receive data to and from other devices via the communication control unit 401 . The communication control unit 401 has a function as a receiving unit that receives data from another device and a function as a transmitting unit that transmits data to the other device.

The settlement control unit 402 is a means for controlling settlement of product purchase prices and the like. The settlement control unit 402 acquires the amount billed to the customer from the store clerk or the like. When the settlement control unit 402 acquires the billed amount, it asks the user to confirm the amount. For example, the payment control unit 402 displays a GUI as shown in FIG. 13 and acquires the confirmation result of the user.

At that time, it is desirable that the payment control unit 402, as shown in FIG. 13, notify the user that a face image will be acquired in order to check whether there is a privilege that the user can use.

When the user is satisfied with the payment amount (when the confirmation button is pressed), the payment control unit 402 notifies the biometric information acquisition unit 403 to that effect.

The biometric information acquisition unit 403 is means for controlling the camera device (the camera device provided in the authentication terminal 30) and acquiring the biometric information (for example, face image) of the user in front of the user. Upon receiving the notification from the settlement control unit 402 (notification that the user has confirmed the payment amount), the biometric information acquisition unit 403 takes an image of the user. A biometric information acquisition unit 403 extracts a face image from the acquired image data.

It should be noted that existing technology can be used for facial image extraction processing by the biometric information acquisition unit 403, so detailed description thereof will be omitted. For example, the biometric information acquisition unit 403 may extract a face image (face region) from image data using a learning model learned by a CNN (Convolutional Neural Network). Alternatively, the biometric information acquisition unit 403 may extract a face image using a technique such as template matching.

The biometric information acquisition unit 403 delivers the extracted face image to the authentication request unit 404.

The authentication requesting unit 404 is means for requesting the server device 10 to authenticate the user. The authentication requesting unit 404 generates an authentication request including the acquired biometric information (face image) and the terminal ID, and transmits the authentication request to the server device 10 .

The terminal ID is shared between the server device 10 and the authentication terminal 30 by any method. For example, a system administrator determines a terminal ID and sets the determined terminal ID in the server device 10 . Also, the system administrator notifies the staff of each store of the determined terminal ID. The employee sets the notified terminal ID in the authentication terminal 30 .

The authentication request unit 404 receives the authentication result (positive response, negative response) from the server device 10 in response to the authentication request. The authentication requesting unit 404 hands over the obtained authentication result to the settlement control unit 402 . Especially, since the positive response includes the user ID and the discount balance, the authentication requesting unit 404 notifies the settlement control unit 402 of these pieces of information.

In the case of authentication failure, the payment control unit 402 does not need to discount the user's payment amount, so the payment amount confirmed by the user is fixed and the fixed payment amount is displayed. For example, the settlement control unit 402 performs a display as shown in FIG. 14 and notifies the user of the payment amount.

In the case of successful authentication, the payment control unit 402 indicates that the discount is applicable to the payment amount, and inputs the discountable amount (discount balance) and the discount amount that the user wants to use (use discount amount). display a GUI such as For example, the settlement control unit 402 performs display as shown in FIG. 15 and acquires the usage discount amount from the user. Note that, as shown in FIG. 15, the payment control unit 402 may display the reason why the user can receive the discount.

When the user determines the usage discount amount (when the "determine" button is pressed), the payment control unit 402 transmits a "discount usage notification" including the user ID of the user and the usage discount amount to the server device 10. do.

The storage unit 405 is means for storing information necessary for the operation of the authentication terminal 30.

[Terminal]
Examples of the terminal 40 owned by the user include mobile terminal devices such as smartphones, mobile phones, game machines, and tablets, computers (personal computers, laptop computers), and the like. The terminal 40 can be any equipment or device as long as it can receive user operations and communicate with the server device 10 or the like. Also, since the configuration of the terminal 40 and the like are obvious to those skilled in the art, detailed description thereof will be omitted.

[System operation]
Next, operation of the information processing system according to the first embodiment will be described.

FIG. 16 is a sequence diagram showing an example of the operation of the information processing system according to the first embodiment. The operation up to the registration of the negative certificate will be described with reference to FIG.

When the user reserves an airline ticket, the server device 10 acquires the user's wishes regarding the PCR test (step S11).

When the user (ticket reservation person) wishes to undergo a PCR test, the server device 10 sends a test request including the user ID, personal information and reservation information to the laboratory server 20 (step S12).

The test request is processed by the laboratory staff, and the test kit containing the sample arrives at the laboratory. Staff will conduct a PCR test. The laboratory server 20 acquires the details of the inspection results from the staff (step S13).

The laboratory server 20 transmits a test result notification including the details of the test result and the user ID to the server device 10 (step S14).

If the test result is negative, the server device 10 generates a negative certificate and registers the generated negative certificate in the user information database (negative certificate registration; step S15).

FIG. 17 is a sequence diagram showing an example of the operation of the information processing system according to the first embodiment. With reference to FIG. 17, use of a privilege (discount) set for a user who has obtained a negative certificate will be described.

The authentication terminal 30 acquires the biometric information of the person to be authenticated, and transmits an authentication request including the biometric information to the server device 10 (step S21).

The server device 10 executes authentication processing (step S22). The server device 10 determines that the authentication is successful if the person to be authenticated possesses a valid negative certificate, and determines that the authentication fails if the person does not possess a valid negative certificate.

The server device 10 transmits the authentication result (authentication success, authentication failure) to the authentication terminal 30 (step S23).

Upon receiving the authentication success, the authentication terminal 30 presents the discount amount (discount balance) set to the user and acquires the discount amount (use discount amount) that the user wishes to use (step S24). .

The authentication terminal 30 transmits a discount usage notification including the usage discount amount to the server device 10 (step S25).

The server device 10 uses the usage discount amount to update the discount balance set for the user (step S26).

It should be noted that when a user with a remaining discount balance receives payment at a different store, etc., the operation shown in FIG. 17 is repeated.

As described above, in the information processing system according to the first embodiment, for users who have undergone a PCR test (users who have been issued a negative certificate), Benefits greater than the burden amount are given. Airplane users (tourists) will actively take PCR tests by being given benefits that are larger than their own costs. As a result, it is possible to reduce the number of visitors with infectious diseases to visit tourist spots, etc., and prevent the spread of infections in tourist spots. That is, the user can obtain a greater profit by undergoing the PCR test, which leads to an improvement in motivation to undergo the PCR test. In addition, users who have been proven to be free from infectious diseases will visit tourist spots, so that the spread of infectious diseases in the tourist spots can be prevented. In addition, even if tourist sites (tourist associations) pay the discounts given to users, they will be able to appeal that the tourist sites are safe and that sufficient quarantine measures have been taken to attract more visitors. Expected. In addition, airlines will lower the hurdles for users to take PCR tests by bearing part of the PCR test costs by users (airline ticket reservation holders), and provide benefits that can be obtained at tourist spots. , revitalize travel to tourist destinations (use of aircraft).

Next, the hardware of each device that makes up the information processing system will be explained. FIG. 18 is a diagram showing an example of the hardware configuration of the server device 10. As shown in FIG.

The server device 10 can be configured by an information processing device (so-called computer), and has the configuration illustrated in FIG. For example, the server device 10 includes a processor 311, a memory 312, an input/output interface 313, a communication interface 314, and the like. Components such as the processor 311 are connected by an internal bus or the like and configured to be able to communicate with each other.

However, the configuration shown in FIG. 18 is not intended to limit the hardware configuration of the server device 10. FIG. The server device 10 may include hardware (not shown) and may not include the input/output interface 313 as necessary. Also, the number of processors 311 and the like included in the server device 10 is not limited to the example shown in FIG.

The processor 311 is, for example, a programmable device such as a CPU (Central Processing Unit), MPU (Micro Processing Unit), DSP (Digital Signal Processor). Alternatively, processor 311 may be a device such as FPGA (Field Programmable Gate Array), ASIC (Application Specific Integrated Circuit), or the like. The processor 311 executes various programs including an operating system (OS).

The memory 312 is RAM (Random Access Memory), ROM (Read Only Memory), HDD (Hard Disk Drive), SSD (Solid State Drive), or the like. The memory 312 stores an OS program, application programs, and various data.

The input/output interface 313 is an interface for a display device and an input device (not shown). The display device is, for example, a liquid crystal display. The input device is, for example, a device such as a keyboard or mouse that receives user operations.

The communication interface 314 is a circuit, module, etc. that communicates with other devices. For example, the communication interface 314 includes a NIC (Network Interface Card) or the like.

The functions of the server device 10 are realized by various processing modules. The processing module is implemented by the processor 311 executing a program stored in the memory 312, for example. Also, the program can be recorded in a computer-readable storage medium. The storage medium can be non-transitory such as semiconductor memory, hard disk, magnetic recording medium, optical recording medium, and the like. That is, the present invention can also be embodied as a computer program product. Also, the program can be downloaded via a network or updated using a storage medium storing the program. Furthermore, the processing module may be realized by a semiconductor chip.

It should be noted that the authentication terminal 30 and the like can also be configured by an information processing device in the same manner as the server device 10, and the basic hardware configuration thereof is the same as that of the server device 10, so the explanation is omitted. For example, the authentication terminal 30 may include a camera device for photographing the person to be authenticated.

The server device 10, which is an information processing device, is equipped with a computer, and the functions of the server device 10 can be realized by causing the computer to execute a program. Further, the server device 10 executes the control method of the server device 10 by the program.

[Modification]
The configuration, operation, etc. of the information processing system described in the above embodiment are examples, and are not intended to limit the configuration of the system.

In the above embodiment, we explained the operation of the system, etc., taking a negative certificate from a PCR test as an example of an epidemic prevention certificate. However, the quarantine certificate is not limited to a negative certificate by PCR test. For example, a negative certificate from an antigen test or an antibody test may be used as an epidemic prevention certificate.

Alternatively, the vaccination certificate may be used as an epidemic prevention certificate. In this case, the server device 10 recommends vaccination to the user instead of or in addition to the PCR test when reserving the ticket. While bearing a part of the vaccination cost, the airline clearly states that the user will be given benefits that exceed the user's cost burden (cost burden required for vaccination), and provide vaccination to the user. recommend. The server device 10 transmits user information to a medical institution or the like that performs vaccination, and the medical institution provides guidance on vaccination. The medical institution notifies the server device 10 of the information (user ID) of the user who has been vaccinated and the details of the vaccination. The server device 10 may generate a vaccination certificate in the same manner as the negative certificate, and store it in association with the biometric information.

In the above embodiment, it has been explained that users who have obtained a negative certificate (quarantine certificate) are given the privilege of discounting a predetermined amount from the payment at the tourist spot. However, the privilege given to the user may have other forms and contents. For example, a privilege may be set such that the payment is reduced at a predetermined discount rate at a tourist spot. More specifically, a benefit such as 10% off or 20% off payment at a tourist spot may be used. In this case, the authentication terminal 30 that has received the authentication success may present the user with the amount to be paid after the privilege is applied, and pay the store clerk. In this case, the server device 10 manages the total amount of the discounted amount, and if the total amount exceeds a predetermined amount (for example, the self-pay amount required to obtain a negative certificate), the user Biometric authentication may fail. That is, the server device 10 may set an upper limit for the user's discount.

Furthermore, the benefits granted to users are not limited to money. For example, a privilege such as a gift of a special product of a tourist spot may be given to a user who has obtained a negative certificate. In this case, by presenting a special product or the like that is more expensive than the user's self-pay amount for the test, it becomes an incentive for the user to obtain a negative certificate.

In the above embodiment, it was explained that when a user obtains a quarantine certificate (negative certificate, etc.), the user is given benefits. Here, the privilege may be a privilege such as a coupon as well as a discount on consumption at a tourist spot. When processing the authentication request, the server device 10 transmits to the authentication terminal 30 information about the coupon assigned to the user (such as the type and content of the coupon that can be used at the store). The authentication terminal 30 displays coupons that can be used by the user, and displays a GUI that allows the user to select a coupon that he or she desires to use.

It should be noted that when a user is given a coupon, a discount rate benefit, or a gift of a special product, the server device 10 may set a limit on the number of times the user can receive the benefit. The limit on the number of times may be set for each predetermined period (for example, each day) or for each facility.

In the above embodiment, when a user bears the cost of obtaining an epidemic prevention certificate, the user is given a privilege greater than the amount of the burden. However, benefits may also be given to users who have not paid for the quarantine certificate. For example, if the user can get vaccinated for free, the server device 10 may give the vaccinated person a predetermined privilege. With this measure, the server device 10 can increase the motivation of not only users who have obtained negative certificates, but also users who vaccinate free of charge. In addition, for users who do not pay the cost, the server device 10 provides a predetermined amount of discount (a discount amount with a set upper limit), a coupon (a predetermined discount rate is Coupons set), specialty products may be given to rewards. In this case, the server device 10 may determine a privilege to be given to the user who has not paid the cost so that the user who has paid the cost is treated more preferentially. Furthermore, the server device 10 may change the contents of the privilege according to the validity period of the negative certificate, the number of vaccinations, and the like, even for the user who does not bear the cost. Specifically, the server device 10 may give preferential treatment (for example, set a large discount amount or discount rate) to a user who possesses a negative certificate with a long validity period or a user who has received a large number of vaccinations. .

Alternatively, the benefits given to the user may differ depending on the type of shop where the user is authenticated. For example, biometric authentication of a user may be performed at the time of hotel check-in, and if the user possesses a valid negative certificate, it may be possible to stay in a higher-grade room than the reserved room. In this case, the server device 10 may notify the authentication terminal 30 of the authentication result, and give a privilege according to the shop where the authentication terminal 30 itself is installed.

Airlines may grant their own benefits to users who have undergone PCR testing. For example, miles may be awarded not only for the price of the air ticket but also for the self-pay amount for the inspection when the air ticket is reserved.

The server device 10 may determine the content of the privilege (for example, discount amount, discount rate) according to the remaining validity period of the negative certificate. For example, the server device 10 sets a high discount amount or discount rate for users who possess negative certificates with a long remaining validity period, The discount amount and discount rate may be set low. In this way, the contents of the privilege given to the person to be authenticated may be determined according to the remaining valid period of the quarantine certificate (negative certificate, vaccination certificate).

Alternatively, the server device 10 may determine the content of the privilege (discount amount, discount rate) according to the type of epidemic prevention certificate possessed by the user. For example, the server device 10 may set different discount amounts and discount rates for users with negative certificates and users with vaccination certificates.

Alternatively, the server device 10 may change the contents of the privilege according to the number of quarantine certificates owned by the user. For example, the server device 10 may set a discount amount or a discount rate that gives preferential treatment to users who have a negative certificate and a vaccination certificate. In other words, benefits are given to users who possess either a negative certificate or a vaccination certificate, but for users who possess two certificates (negative certificate, vaccination certificate) may be given a greater privilege (large discount amount, discount rate).

In the above embodiment, it was explained that the user's negative certificate is used for discounts at tourist spots. However, the negative certificate may be used for other purposes. For example, an airline may issue a boarding pass to a user for whom a valid negative certificate has been issued. In this case, the check-in terminal acquires the user's biometric information and transmits the biometric information to the server device 10 . The server device 10 identifies a user by biometric authentication, and determines whether or not the identified user possesses a valid negative certificate. As a result of the determination, if the user possesses a valid negative certificate, the server device 10 may issue a boarding pass to the user (complete check-in). As a result, airport staff and airline staff do not need to confirm negative certificates, and smooth procedures are realized.

In addition, the server device 10 stores the biometric information of the user who has completed check-in using the check-in terminal, so that subsequent procedures (for example, baggage check-in, security check, and passage through the boarding gate) can be performed by biometric authentication. good too. It should be noted that the check-in process may not be performed at the check-in terminal, but may be performed by WEB (web) check-in. In this case, the biometric information (face image) of the user is acquired by a terminal (such as a smart phone) possessed by the user. In this way, since the server device 10 of the airline company manages the user's negative certificate, it becomes unnecessary for the airline company and the tourist site (tourist association) to manage the negative certificate respectively.

When sending a negative response to the authentication request received from the authentication terminal 30, the server device 10 may also notify the authentication terminal 30 of the cause of authentication failure. For example, the server device 10 notifies the authentication terminal 30 of the causes such as no registration in the user information database, no negative certificate, negative certificate expiration date, discount balance remaining, etc. may The authentication terminal 30 may present a message according to the acquired cause (cause of authentication failure) to the person to be authenticated. For example, the authentication terminal 30 may guide a user who does not have a negative certificate or a user whose negative certificate has expired to a medical institution that performs a PCR test. .

The server device 10 may use the terminal ID notified from the authentication terminal 30 to manage the usage discount amount for each store. The server device 10 may notify the tourist association or the like of the usage discount amount for each store. The tourism association or the like may use the notified information to return the usage discount amount to each store.

In the above embodiment, the explanation has been given on the premise that the user (customer) hands the cash to the clerk as the payment amount. It may be performed using crypto assets or the like. For example, when a credit card payment is made, the authentication terminal 30 may transmit payment information (payment price, payment date, etc.) to the server device 10 . The server device 10 may request the user's credit card account (credit card company) acquired in advance to settle the above payment information.

Also, by making a credit card payment or transportation IC card payment, the authentication terminal 30 operates as a self-register for the user to make the payment alone.

In the above embodiment, it was explained that the user's PCR test result is notified from the server device 10, but the test result may be notified from the laboratory. Alternatively, the laboratory server 20 may generate a negative certificate, and the server device 10 may register the generated negative certificate in the user information database.

In the above embodiment, it was explained that the authentication terminal 30 transmits the biometric information related to the face image to the server device 10 . However, the authentication terminal 30 may transmit the feature amount generated from the face image to the server device 10 .

In the above embodiment, the case of identifying a user mainly using biometric information related to "face" has been described. However, the means for specifying the user may be other methods and means. For example, the user may be identified by other biometric information (such as iris and fingerprint) other than the "face" or a combination of multiple biometric information. Alternatively, the user may be specified by the terminal 40 presenting the user ID to the authentication terminal 30 . For example, the terminal 40 converts the user ID issued by the server device 10 into a two-dimensional code, and the user operates the terminal 40 to present the two-dimensional code to the authentication terminal 30, thereby allowing the user identification may be made.

In the above embodiment, the user information database and the reservation person information database are configured inside the server device 10, but these databases may be configured in an external database server or the like. That is, some functions of the server device 10 may be implemented in another server. More specifically, the above-described "inspection control unit (inspection control means)", "authentication unit (authentication means)", etc. may be implemented in any device included in the system.

The form of data transmission and reception between each device (server device 10, laboratory server 20, authentication terminal 30) is not particularly limited, but the data transmitted and received between these devices may be encrypted. Biometric information, personal information, and the like are transmitted and received between these devices, and in order to properly protect such information, it is desirable to transmit and receive encrypted data.

In the flowcharts (flowcharts, sequence diagrams) used in the above explanation, multiple steps (processes) are described in order, but the execution order of the steps executed in the embodiment is not limited to the described order. In the embodiment, the order of the illustrated steps can be changed within a range that does not interfere with the content, such as executing each process in parallel.

The above embodiments have been described in detail to facilitate understanding of the disclosure of the present application, and are not intended to require all the configurations described above. Also, when a plurality of embodiments are described, each embodiment may be used alone or in combination. For example, it is possible to replace part of the configuration of the embodiment with the configuration of another embodiment, or to add the configuration of another embodiment to the configuration of the embodiment. Furthermore, additions, deletions, and replacements of other configurations are possible for some of the configurations of the embodiments.

From the above description, the industrial applicability of the present invention is clear, and the present invention can be suitably applied to an information processing system for reserving airline tickets.

Some or all of the above embodiments may also be described in the following additional remarks, but are not limited to the following.
[Appendix 1]
a storage unit in which a user information database is constructed to store biometric information of each of a plurality of users and quarantine certificates relating to quarantine against infectious diseases in association with each other;
An authentication request including biometric information of a person to be authenticated is received from an authentication terminal, and the biometric information of the user specified by the matching process using the biometric information included in the authentication request and the biometric information stored in the user information database an authenticating unit that, if the quarantine certificate is valid, transmits to the authenticating terminal a positive response indicating successful authentication, the affirmative response including information about privileges given to the person to be authenticated;
A server device.
[Appendix 2]
The server device according to Supplementary Note 1, wherein the monetary value of the privilege granted to the person to be authenticated is set to be larger than the self-pay amount of the person to be authenticated required to obtain the quarantine certificate.
[Appendix 3]
Each of the plurality of users is a member of an airline company, and the server device according to supplementary note 1 or 2, further comprising a reservation control unit that encourages a person who reserves an airline ticket to obtain the quarantine certificate.
[Appendix 4]
According to any one of Appendices 1 to 3, further comprising an inspection control unit that requests an external organization to perform a procedure for obtaining the quarantine certificate when the reservation person wishes to obtain the quarantine certificate. Server equipment as described.
[Appendix 5]
5. The server device according to any one of appendices 1 to 4, wherein the content of the privilege given to the person to be authenticated is determined according to the remaining validity period of the quarantine certificate.
[Appendix 6]
6. The server device according to any one of appendices 1 to 5, wherein the authentication unit notifies the balance of the discount amount set for the person to be authenticated as the information on the privilege granted to the person to be authenticated.
[Appendix 7]
A discount balance control unit that receives, from the authentication terminal, a discount usage notification including the usage discount amount used by the person to be authenticated, and updates the discount amount set for the person to be authenticated using the usage discount amount. The server device according to appendix 6, further comprising:
[Appendix 8]
The server device according to supplementary note 3, wherein the reservation control unit notifies the reservation person that the airline company bears part of the cost required to obtain the quarantine certificate.
[Appendix 9]
9. The server device according to supplementary note 8, wherein the reservation control unit notifies the reservation person that the privilege granted to the person to be authenticated can be used at the destination of the reserved aircraft.
[Appendix 10]
10. The server device according to any one of appendices 1 to 9, wherein the quarantine certificate is a negative certificate or a vaccination certificate.
[Appendix 11]
11. The server device according to any one of appendices 1 to 10, wherein the biometric information is a face image or a feature amount generated from the face image.
[Appendix 12]
an authentication terminal;
a server device;
including
The server device
a storage unit in which a user information database is constructed to store biometric information of each of a plurality of users and quarantine certificates relating to quarantine against infectious diseases in association with each other;
An authentication request including biometric information of a person to be authenticated is received from the authentication terminal, and a user identified by a matching process using the biometric information included in the authentication request and the biometric information stored in the user information database an authentication unit that transmits to the authentication terminal, if the quarantine certificate is valid, an affirmative response indicating successful authentication and including information about a privilege given to the person to be authenticated;
A system comprising:
[Appendix 13]
in the server device,
Each biometric information of a plurality of users is associated with the quarantine certificate concerning the prevention of infectious diseases and stored in the user information database,
An authentication request including biometric information of a person to be authenticated is received from an authentication terminal, and the biometric information of the user specified by the matching process using the biometric information included in the authentication request and the biometric information stored in the user information database A control method for a server device, wherein, if the quarantine certificate is valid, a response indicating successful authentication and including information on privileges given to the person to be authenticated is transmitted to the authentication terminal.
[Appendix 14]
The computer installed in the server device,
a process of associating biometric information of each of a plurality of users with a quarantine certificate for quarantine against infectious diseases and storing them in a user information database;
An authentication request including biometric information of a person to be authenticated is received from an authentication terminal, and the biometric information of the user specified by the matching process using the biometric information included in the authentication request and the biometric information stored in the user information database If the quarantine certificate is valid, a process of transmitting to the authentication terminal an affirmative response indicating successful authentication and including information about privileges granted to the person to be authenticated;
A computer-readable storage medium that stores a program for executing

It should be noted that each disclosure of the above cited prior art documents shall be incorporated into this document by citation. Although the embodiments of the present invention have been described above, the present invention is not limited to these embodiments. Those skilled in the art will appreciate that these embodiments are illustrative only and that various modifications can be made without departing from the scope and spirit of the invention. That is, the present invention naturally includes various variations and modifications that can be made by those skilled in the art according to the entire disclosure including claims and technical ideas.

10 Server device 20 Laboratory server 30 Authentication terminal 30-1 Authentication terminal 30-2 Authentication terminal 30-3 Authentication terminal 40 Terminal 100 Server device 101 Storage unit 102 Authentication unit 201 Communication control unit 202 User registration unit 203 Reservation control unit 204 Inspection control unit 205 Authentication unit 206 Discount balance control unit 207 Storage unit 301 Communication control unit 302 Inspection request processing unit 303 Storage unit 311 Processor 312 Memory 313 Input/output interface 314 Communication interface 401 Communication control unit 402 Payment control unit 403 Biometric information acquisition unit 404 authentication request unit 405 storage unit

Claims

a storage unit in which a user information database is constructed to store biometric information of each of a plurality of users and quarantine certificates relating to quarantine against infectious diseases in association with each other;
An authentication request including biometric information of a person to be authenticated is received from an authentication terminal, and the biometric information of the user specified by the matching process using the biometric information included in the authentication request and the biometric information stored in the user information database an authenticating unit that, if the quarantine certificate is valid, transmits to the authenticating terminal a positive response indicating successful authentication, the affirmative response including information about privileges given to the person to be authenticated;
A server device.
　The server device according to claim 1, wherein the monetary value of the privilege given to the person to be authenticated is set to be larger than the self-pay amount of the person to be authenticated required to obtain the quarantine certificate.
3. The server device according to claim 1, further comprising: a reservation control unit, wherein each of said plurality of users is a member of an airline company, and which encourages a person who reserves an airline ticket to obtain said quarantine certificate. .
4. Any one of claims 1 to 3, further comprising an inspection control unit that, when the reservation person wishes to obtain the quarantine certificate, requests an external organization to perform a procedure for obtaining the quarantine certificate. The server device described in .
The server device according to any one of claims 1 to 4, wherein the content of the privilege given to the person to be authenticated is determined according to the remaining valid period of the quarantine certificate.
The server device according to any one of claims 1 to 5, wherein the authentication unit notifies the balance of the discount amount set for the person to be authenticated as the information on the privilege given to the person to be authenticated.
A discount balance control unit that receives, from the authentication terminal, a discount usage notification including the usage discount amount used by the person to be authenticated, and updates the discount amount set for the person to be authenticated using the usage discount amount. The server device according to claim 6, further comprising:
The server device according to claim 3, wherein the reservation control unit notifies the reservation person that the airline company will bear part of the cost required to obtain the quarantine certificate.
The server device according to claim 8, wherein the reservation control unit notifies the reservation person that the privilege given to the person-to-be-authenticated can be used at the destination of the reserved aircraft.
The server device according to any one of claims 1 to 9, wherein the quarantine certificate is a negative certificate or a vaccination certificate.
The server device according to any one of claims 1 to 10, wherein the biometric information is a facial image or a feature amount generated from the facial image.
an authentication terminal;
a server device;
including
The server device
a storage unit in which a user information database is constructed to store biometric information of each of a plurality of users and quarantine certificates relating to quarantine against infectious diseases in association with each other;
An authentication request including biometric information of a person to be authenticated is received from the authentication terminal, and a user identified by a matching process using the biometric information included in the authentication request and the biometric information stored in the user information database an authentication unit that transmits to the authentication terminal, if the quarantine certificate is valid, an affirmative response indicating successful authentication and including information about a privilege given to the person to be authenticated;
A system comprising:
in the server device,
Each biometric information of a plurality of users is associated with the quarantine certificate concerning the prevention of infectious diseases and stored in the user information database,
An authentication request including biometric information of a person to be authenticated is received from an authentication terminal, and the biometric information of the user specified by the matching process using the biometric information included in the authentication request and the biometric information stored in the user information database A control method for a server device, wherein, if the quarantine certificate is valid, a response indicating successful authentication and including information on privileges given to the person to be authenticated is transmitted to the authentication terminal.
The computer installed in the server device,
a process of associating biometric information of each of a plurality of users with quarantine certificates relating to quarantine against infectious diseases and storing them in a user information database;
An authentication request including biometric information of a person to be authenticated is received from an authentication terminal, and the biometric information of the user specified by the matching process using the biometric information included in the authentication request and the biometric information stored in the user information database If the quarantine certificate is valid, a process of transmitting to the authentication terminal an affirmative response indicating successful authentication and including information about privileges granted to the person to be authenticated;
A computer-readable storage medium that stores a program for executing