WO2023058225A1

WO2023058225A1 - System, departure management server, departure management server control method, and storage medium

Info

Publication number: WO2023058225A1
Application number: PCT/JP2021/037353
Authority: WO
Inventors: 伸明川瀬; 邦生筆本; 律子中平
Original assignee: 日本電気株式会社
Priority date: 2021-10-08
Filing date: 2021-10-08
Publication date: 2023-04-13

Abstract

Provided is a system for alleviating a load on staff and other personnel in charge of operations for departure from a country in an airport and other facilities. This system comprises a departure management server and an inspection server. The departure management server manages departure of a user from a country and stores health passport information on the health of a user who has booked an airplane ticket. The inspection server inspects a requirement for entering each country. The departure management server transmits, to the inspection server, a country entry requirement inspection request including the health passport information relating to a user who performs at least a check-in procedure. The inspection server inspects whether or not the health passport information satisfies a requirement for entering an arrival country to be entered by the user, and transmits an inspection result to the departure management server. The departure management server issues a boarding ticket to the user if the user is determined to be eligible for entering the arrival country.

Description

SYSTEM, DEPARTURE MANAGEMENT SERVER, CONTROL METHOD OF DEPARTURE MANAGEMENT SERVER, AND STORAGE MEDIUM

The present invention relates to a system, a departure management server, a departure management server control method, and a storage medium.

　Technologies aimed at improving convenience for airport users and technologies aimed at improving operational efficiency within airports are being developed.

For example, Patent Document 1 states that by using biometric information as a boarding pass, it is possible to eliminate the need to use (present) paper or mobile media, thereby improving user convenience and improving airport throughput. It is In Patent Literature 1, after selecting a menu for confirming a reservation or changing a flight, a check-in terminal reads biometric information, acquires the biometric information of the user, and searches the biometric information in the boarding server. If the matching of the biometric information is established, the reservation information is displayed and the flight is selected. Then, check-in is performed, and when "Confirm" is selected, the data in the host server is changed.

In Patent Document 2, by automatically performing immigration control and check-in operations that are performed at airports and seaports where international flights depart and land, in a limited facility space, immigration related to a large number of passengers It is stated that security management and service operations will be carried out quickly and efficiently. In Patent Document 2, when traveling abroad, a user carries a smart passport card with an image, which is an IC card having a passport function, an air ticket or boarding ticket function, and a credit card function. In addition, the user undergoes check-in or examination by sharing this image-attached smart passport card for security check and boarding or boarding check-in and departure examination or immigration examination.

JP 2007-079656 A Japanese Unexamined Patent Application Publication No. 2002-304448

　When traveling across countries, you may be required to possess a certificate related to infectious diseases. Users who cannot present a valid certificate will not be allowed to enter the country. Therefore, confirmation of the certificate in the country of departure is carried out by airline staff, etc., but immigration requirements differ from country to country, which places a heavy burden on the staff. It should be noted that this problem cannot be solved even by applying the techniques disclosed in Patent Documents 1 and 2. There is no documented mention of infectious diseases in these documents.

The main purpose of the present invention is to provide a system, a departure management server, a control method for the departure management server, and a storage medium that contribute to reducing the burden on staff who are involved in departure work at airports and the like.

According to a first aspect of the present invention, a departure management server that manages the departure of a user and stores health passport information regarding the health of said user who has booked an airline ticket; and verifies the entry requirements of each country; a verification server, wherein the departure management server transmits to the verification server an immigration requirements verification request including at least the health passport information of the user who performs check-in procedures, and the verification server receives the health passport information. verifies whether the user satisfies the entry requirements of the country of arrival into which the user enters, transmits the verification result to the departure management server, and the departure management server determines that the user is permitted to enter the country of arrival. A system is provided that, if determined, issues a boarding pass to the user.

According to a second aspect of the present invention, an immigration requirement including at least a storage unit for storing health passport information relating to health of a user who has reserved an airline ticket, and the health passport information of the user who performs check-in procedures a sending unit for sending a verification request to a verification server that verifies the entry requirements of each country; Provided by a departure management server, comprising: a receiving unit for receiving a verification result; be done.

According to a third aspect of the present invention, the departure management server stores health passport information relating to the health of a user who has reserved an airline ticket, and an immigration management server that includes at least the health passport information of the user who performs check-in procedures. Sending a requirements verification request to a verification server that verifies the entry requirements of each country, and receiving from the verification server a verification result as to whether the health passport information satisfies the entry requirements of the country of arrival of the user. A method for controlling a departure management server is provided for receiving and issuing a boarding pass to the user when the user is determined to be allowed to enter the arrival country.

According to a fourth aspect of the present invention, a computer installed in a departure management server stores health passport information relating to the health of a user who has reserved an airline ticket; a process of transmitting an entry requirements verification request including at least health passport information to a verification server that verifies the entry requirements of each country; A program for executing a process of receiving a verification result regarding whether or not the requirements are satisfied, and a process of issuing a boarding pass to the user when the user is determined to be allowed to enter the country of arrival. A computer-readable storage medium is provided for storing.

According to each aspect of the present invention, a system, a departure management server, a control method for the departure management server, and a storage medium are provided that contribute to reducing the burden on staff who are in charge of departure work at an airport or the like. In addition, the effect of this invention is not limited above. Other effects may be achieved by the present invention instead of or in addition to this effect.

FIG. 1 is a diagram for explaining an overview of one embodiment. FIG. 2 is a diagram showing an example of a schematic configuration of the immigration control system according to the first embodiment. FIG. 3 is a diagram illustrating an example of display on a terminal according to the first embodiment; FIG. 4 is a diagram for explaining the operation of the immigration control system according to the first embodiment. FIG. 5 is a diagram for explaining the operation of the immigration control system according to the first embodiment. FIG. 6 is a diagram for explaining the operation of the immigration control system according to the first embodiment. FIG. 7 is a diagram for explaining the operation of the immigration control system according to the first embodiment. FIG. 8 is a diagram for explaining the operation of the immigration control system according to the first embodiment. FIG. 9 is a diagram illustrating an example of a processing configuration of a reservation server according to the first embodiment; FIG. 10 is a diagram illustrating an example of display on a terminal according to the first embodiment; FIG. 11 is a diagram showing an example of a user information database according to the first embodiment. 12 is a diagram illustrating an example of a processing configuration of a departure management server according to the first embodiment; FIG. FIG. 13 is a diagram showing an example of a reservation person information database according to the first embodiment. 14 is a flowchart illustrating an example of the operation of the boarding pass control unit according to the first embodiment; FIG. 15 is a diagram illustrating an example of a processing configuration of a verification server according to the first embodiment; FIG. FIG. 16 is a diagram showing an example of an entry requirement database according to the first embodiment. 17 is a diagram illustrating an example of a processing configuration of an authentication server according to the first embodiment; FIG. 18 is a diagram illustrating an example of a display on the terminal according to the first embodiment; FIG. FIG. 19 is a diagram showing an example of an authenticated person information database according to the first embodiment. 20 is a diagram illustrating an example of a processing configuration of a CIQ server according to the first embodiment; FIG. 21 is a diagram illustrating an example of a processing configuration of a check-in terminal according to the first embodiment; FIG. FIG. 22 is a diagram showing an example of display on the check-in terminal according to the first embodiment. 23A and 23B are diagrams showing an example of a boarding pass according to the first embodiment. 24 is a diagram illustrating an example of a processing configuration of an authentication terminal according to the first embodiment; FIG. 25 is a diagram illustrating an example of a processing configuration of a terminal according to the first embodiment; FIG. 26 is a sequence diagram showing an example of the operation of the immigration control system according to the first embodiment; FIG. FIG. 27 is a diagram showing an example of a schematic configuration of an immigration control system according to the second embodiment. FIG. 28 is a diagram illustrating an example of a processing configuration of a joint reservation server according to the second embodiment; FIG. 29 is a diagram for explaining the operation of air ticket reservation according to the second embodiment. FIG. 30 is a diagram for explaining the operation of the immigration control system according to the second embodiment. FIG. 31 is a diagram for explaining the operation of the immigration control system according to the second embodiment. FIG. 32 is a sequence diagram showing an example of the operation of the immigration control system according to the second embodiment. FIG. 33 is a diagram showing an example of a schematic configuration of an immigration control system according to the third embodiment. FIG. 34 is a diagram for explaining the operation of air ticket reservation according to the third embodiment. FIG. 35 is a diagram showing an example of a user information database according to the third embodiment. FIG. 36 is a diagram for explaining the operation of the immigration control system according to the third embodiment. FIG. 37 is a diagram for explaining the operation of the immigration control system according to the third embodiment. FIG. 38 is a sequence diagram showing an example of the operation of the immigration control system according to the third embodiment. FIG. 39 is a diagram showing an example of a hardware configuration of a departure management server according to the disclosure of the present application.

First, an outline of one embodiment will be described. It should be noted that the drawing reference numerals added to this outline are added to each element for convenience as an example to aid understanding, and the description of this outline does not intend any limitation. Also, unless otherwise specified, the blocks shown in each drawing represent the configuration of each function rather than the configuration of each hardware unit. Connecting lines between blocks in each figure include both bi-directional and uni-directional. The unidirectional arrows schematically show the flow of main signals (data) and do not exclude bidirectionality. In addition, in the present specification and drawings, elements that can be described in the same manner can be omitted from redundant description by assigning the same reference numerals.

A system according to one embodiment includes a departure management server 101 and a verification server 102 (see FIG. 1). The departure management server 101 manages departures of users and stores health passport information regarding the health of users who have reserved airline tickets. Validation server 102 validates the entry requirements of each country. The departure management server 101 transmits to the verification server 102 an immigration requirement verification request including at least the health passport information of the user who performs the check-in procedure. The verification server 102 verifies whether the health passport information satisfies the entry requirements of the country of arrival of the user, and transmits the verification result to the departure management server 101 . The departure management server 101 issues a boarding pass to the user when it is determined that the user can enter the country of arrival.

When the departure management server 101 issues a boarding pass to a person departing from the airport, it requests the verification server 102 to verify whether the person can enter the country of arrival. The verification server 102 stores the immigration requirements of each country and performs requested verification. The departure management server 101 issues a boarding pass to the departing person when it is confirmed that the departing person can enter the arrival country. Airport departure personnel do not need to check the entry requirements of countries around the world and verify the entry requirements for each person leaving the country. As a result, the burden on the staff concerned is reduced.

Specific embodiments will be described in more detail below with reference to the drawings.

[First embodiment]
The first embodiment will be described in more detail with reference to the drawings.

[System configuration]
FIG. 2 is a diagram showing an example of a schematic configuration of an immigration control system (information processing system) according to the first embodiment. As shown in FIG. 2 , the immigration control system includes a reservation server 10 , an authentication server 20 and a verification server 30 .

The departure airport includes the departure management server 40, check-in terminal 50, and authentication terminal 51-1. The arrival airport includes a CIQ (Customs Immigration Quarantine) server 60 and an authentication terminal 51-2. In the following description, the authentication terminal 51-1 and the authentication terminal 51-2 are simply referred to as "authentication terminal 51" unless there is a particular reason to distinguish them. Similarly, other elements are represented by the symbols on the left side of the hyphen.

The reservation server 10 is a server that implements an airline reservation system. Each airline manages and operates its own reservation server 10 . The reservation server 10 implements the main functions of a reservation system called PSS (Passenger Service System). The reservation server 10 is installed in facilities of an airport company, an airline company, or the like. Alternatively, the reservation server 10 may be a server installed in the cloud on the network.

The authentication server 20 is a server that authenticates users who use the airport. Here, the user can proceed with procedures in the airport by presenting a paper boarding pass or passport to a staff member or the like, or can proceed with biometric authentication. The authentication server 20 provides a biometric authentication service using user's biometric information (for example, face image).

A predetermined procedure is required to use biometric authentication, and users who have completed the procedure can proceed with various procedures (services) at the airport using biometric authentication. The authentication server 20 is installed in a facility such as an airport company. Alternatively, the authentication server 20 may be a server installed in the cloud on the network.

The verification server 30 verifies the entry requirements of each country. More specifically, verification server 30 verifies (confirms) the entry requirements of the country of arrival of the aircraft. Validation server 30 implements a database function called TIMATIC, which can look up documents required for entry into the country of arrival. TIMATIC is managed and operated by IATA (International Air Transport Association). The verification server 30 is installed in the facility of the association. Alternatively, verification server 30 may be a server located in a cloud on a network.

As described above, the departure management server 40 is installed at the departure airport. The departure management server 40 is a server that manages departures of users. More specifically, the departure management server 40 implements the main functions of an airport check-in system called DCS (Departure Control System). The departure management server 40 is installed at each airport by each airline company. Therefore, although FIG. 2 shows the departure management server 40 installed at the departure airport, the departure management server 40 may actually be a server installed on the cloud.

The check-in terminal 50 is a terminal that provides check-in services to users. The check-in terminal 50 issues a boarding pass to the user who has reserved the airline ticket. The boarding pass issued by the check-in terminal 50 includes a paper boarding pass and an electronic boarding pass (for example, a boarding pass converted into a two-dimensional code).

The authentication terminal 51 is a terminal that is installed at the airport of departure and the airport of arrival and provides predetermined services. More specifically, the authentication terminal 51 provides services to users who have successfully passed biometric authentication. For example, the authentication terminal 51-1 has a gate and is installed at the boarding gate. The authentication terminal 51-1 installed at the boarding gate permits the passage of the user who has a valid passport and boarding pass.

Alternatively, the authentication terminal 51-1 is a baggage deposit machine. An authentication terminal 51-1 that operates as a baggage check-in machine is installed in an area adjacent to the baggage counter (manned counter) or in the vicinity of the check-in terminal 50 in the airport. The authentication terminal 51-1 is a self-service terminal that is operated by the user to carry out procedures for checking in baggage that is not carried into the aircraft (baggage check-in procedure).

Alternatively, the authentication terminal 51-2 installed at the arrival airport, for example, is installed at the immigration office and permits passage (entry into the country) of users who have valid passports.

As explained above, the authentication terminal 51 is an arbitrary terminal that provides services to users who have successfully passed biometric authentication. In the drawings including FIG. 2, the authentication terminal 51 is illustrated as a gate device having a gate.

The CIQ server 60 is installed at the arrival airport and performs processing related to customs, immigration control, and quarantine when the user enters the country. The CIQ server 60 distributes necessary information regarding quarantine inspections of immigrants to government agencies such as customs.

The user uses the terminal 70. For example, the terminal 70 is a mobile terminal such as a smart phone, mobile phone, or tablet. Alternatively, the terminal 70 may be an information processing terminal such as a personal computer or a notebook computer.

Each device (reservation server 10, authentication server 20, verification server 30, departure management server 40, etc.) shown in FIG. 2 is configured to be able to communicate with each other via a network. For example, the reservation server 10 and the departure management server 40 are connected by wired or wireless communication means, and are configured to be able to communicate with each other.

FIG. 2 is an example and is not intended to limit the configuration of the immigration control system disclosed in the present application. For example, the immigration control system may include two or more authentication servers 20 and verification servers 30 . Although one reservation server 10 is shown in FIG. 2, the system actually includes a plurality of reservation servers 10 managed and operated by each airline company. Furthermore, in FIG. 2, the illustration of the departure management server 40 is omitted at the arrival airport and the illustration of the CIQ server 60 is omitted at the departure airport, but in reality these servers are installed corresponding to each airport. be done.

[Overview of operation]
Next, an outline of the operation of the immigration control system according to the first embodiment will be described.

<Preparing a digital wallet>
A user installs an application for realizing a digital wallet on the terminal 70 that the user possesses. For example, by creating a digital wallet on the terminal 70, the user can use electronic money, identification cards such as passports and driver's licenses, various ticket information such as airline tickets and boarding passes, vaccination certificates and negative certificates. (Common Pass) and other certificates are stored in the terminal 70 .

For example, the user's terminal 70 stores digital information as shown in FIG. For example, public identification documents such as passports, driver's licenses, health certificates (certificates related to infectious diseases) such as vaccination certificates, negative certificates, and recovery certificates are stored in the digital wallet. .

Vaccination certificate includes name, date of birth, passport number, vaccine type, manufacturer, product name, production number, date of vaccination, country of vaccination, certificate issuer, certificate ID, certificate Information such as the date of issue, the expiration date of the vaccine, and the number of vaccinations is included.

The negative certificate includes the subject's name, date of birth, passport number, sex, test method, collected sample, result, sample collection date, result date, test certificate issuance date, medical institution name, medical institution Information such as address, doctor name, medical institution seal impression, negative certificate expiration date, etc. is included.

The recovery certificate includes the subject's name, date of birth, passport number, gender, test method, sample collected, result (positive), date and time of sample collection, date of result determination, date of test certificate issuance, test medical institution Information such as the name, address of the examination medical institution, name of the examination doctor, seal imprint of the examination medical institution, etc. is included. Furthermore, the recovery certificate includes information such as the name of the medical institution, the address of the medical institution, the name of the doctor, the imprint/signature of the medical institution, etc., related to the certificate of healing.

In the following explanation, health-related certificates such as vaccination certificates, negative certificates, and recovery certificates regarding infectious diseases are referred to as "health passport information". FIG. 3 shows an example of three health passport information stored in a digital wallet.

The health passport information may be a digital certificate or image data (a copy of the certificate) obtained by taking a picture of a paper certificate. Alternatively, the health passport information may be a two-dimensional code obtained by converting the content described in a vaccination certificate or the like.

The terminal 70 stores the user ID and biometric information of the user in the digital wallet in addition to the vaccination certificate. For example, the user operates the terminal 70 to photograph his/her own face. The terminal 70 stores the facial image or the feature amount generated from the facial image as the biometric information of the user.

Examples of biometric information include data (feature amounts) calculated from physical features unique to individuals, such as faces, fingerprints, voiceprints, veins, retinas, and iris patterns. Alternatively, the biometric information may be image data such as a face image or a fingerprint image. The biometric information should just contain a user's physical characteristic as information. In the disclosure of the present application, a case of using biometric information (a face image or a feature amount generated from the face image) regarding a person's “face” will be described.

<Air ticket reservation>
A user who travels across countries reserves an airline ticket (see FIG. 4). The user accesses the reservation server 10 of the airline company to use and reserves an airline ticket. For example, the user operates the terminal 70 to access the homepage provided by the reservation server 10 and reserve an airline ticket.

At that time, the terminal 70 inputs information on the passport (hereinafter referred to as passport information) and health passport information to the reservation server 10. The passport information includes a passport face image, name, gender, nationality, passport number, passport issuing country, and the like. Alternatively, the passport information may be image data (a copy of the passport) obtained by photographing the passport.

When a user reserves an aircraft, the reservation server 10 issues an airline ticket. The reservation server 10 issues paper airline tickets or electronic airline tickets. When an electronic medium airline ticket (for example, a two-dimensional code converted from airline ticket information) is issued, information about the airline ticket (hereinafter referred to as airline ticket information) is sent to the terminal 70. .

Airline ticket information includes airline code, flight number, departure date, departure time, destination (arrival airport), seat type, etc.

When an electronic medium airline ticket is issued, the terminal 70 stores the issued airline ticket (airline ticket information) in a digital wallet. Alternatively, when a paper-medium airline ticket is issued, the user may operate the terminal 70 to take an image of the airline ticket and store the acquired image data in the digital wallet.

In addition, when the user completes the aircraft reservation (airline ticket reservation), a reservation number will be issued. The ticket includes reservation information (the information on the ticket and the reservation information are the same). Also, if the person who made the reservation completes the check-in procedure a predetermined time before departure (for example, 24 hours before), a boarding pass is issued. That is, the airline ticket is issued at the time of reservation, and the boarding pass is issued after the check-in procedure is completed.

The reservation server 10 associates passport information, health passport information, and airline ticket information and stores them in the user information database. Details of the user information database will be described later. The reservation server 10 stores the acquired passport information and the like as a PNR (Passenger Name Record). A PNR is a reservation record of an airline ticket by a user, and includes information such as the user's name, nationality, reserved flight number, and the like.

<Transfer of Airline Ticket Reservation Records>
A user's airline ticket reservation record is transferred from the reservation server 10 to the departure management server 40 a predetermined time before the departure of the reserved aircraft (see FIG. 5). Specifically, 24 hours before departure of an aircraft, passport information, airline ticket information, and health passport information regarding each passenger (a plurality of passengers) who have reserved the aircraft are sent to the departure management server 40 .

More specifically, the reservation server 10 transmits the PNR of the set of passengers of the aircraft to the departure management server 40 as a PNL (Passenger Name List). The reservation server 10 transmits the health passport information to the departure management server 40 using DOCO (Document Other; definition of additional information to be added to SSR) of SSR (Special Service Requirement), which is an additional information format of PNR. In SSR, information is defined by giving a four letter prefix with the information added to the PNR. When sending and receiving health passport information, it may be added to an existing DOCO, or a new prefix may be defined. For example, prefixes (codes) such as "DOCH" and "HLCT" may be defined.

If there is a change in the content of the PNL that has already been sent, the latest airline ticket reservation record is sent to the departure management server 40 using the ADL (Additions/Deletions List). The departure management server 40 stores the acquired airline ticket reservation record in the reservation person information database. The details of the reservation person information database will be described later.

In this way, the reservation server 10 transmits at least the health passport information of the user who reserved the airline ticket to the departure management server 40 a predetermined time before the departure of the aircraft corresponding to the reserved airline ticket.

<Issuance of boarding pass>
When the departure date arrives, the user moves to the departure airport. A user performs a check-in procedure using a check-in terminal 50 installed at the departure airport (see FIG. 6).

The check-in terminal 50 acquires the user's biometric information, passport information, and airline ticket information. The check-in terminal 50 performs biometric authentication (for example, one-to-one authentication) using the obtained biometric information (face image obtained by photographing) and the face image written on the passport. When the authentication is successful, the check-in terminal 50 transmits a "boarding pass request" including the passport information and airline ticket information of the user to the departure management server 40 (step S1).

Upon receiving the request, the departure management server 40 identifies the user who will be checking in from the passport information, and issues a boarding pass for the identified user. Specifically, the departure management server 40 determines whether or not the airline ticket information acquired from the check-in terminal 50 is stored in the reservation person information database.

If the airline ticket information is stored, the departure management server 40 sends an "immigration requirements verification request" including at least information about the user's arrival airport (for example, airport code), the user's passport information and health passport information. to the verification server 30 (step S2).

The verification server 30 processes the entry requirements verification request. Specifically, the verification server 30 verifies (examines) whether or not the user satisfies the entry requirements of the country of arrival using the user's passport information, health passport information, and the like.

The verification server 30 sends a response including the verification result (entry permitted, entry denied) to the departure management server 40 (step S3). Validation server 30 may send details regarding the validation of entry requirements to departure control server 40 .

The departure management server 40 issues a boarding pass for the user if the user's immigration verification result is "permitted to enter". The departure management server 40 determines the seat of the user and issues a boarding pass.

When the boarding pass is issued, the departure management server 40 transmits a response including information on the issued boarding pass (hereinafter referred to as boarding pass information) to the check-in terminal 50 (step S4). The boarding pass information includes name (surname, first name), airline code, flight number, boarding date, departure point (boarding airport), destination (arrival airport), seat number, boarding time, arrival time, and the like.

Alternatively, the departure management server 40 may send health passport information to the check-in terminal 50 in addition to the boarding pass information, or may send details regarding verification of entry requirements to the check-in terminal 50 .

The check-in terminal 50 issues a boarding pass based on the acquired boarding pass information. The check-in terminal 50 issues a paper boarding pass or an electronic boarding pass. When an electronic boarding pass (for example, a two-dimensional code converted from the boarding pass information) is issued, the user operates the terminal 70 to read the two-dimensional code and read the issued boarding pass. Store in a digital wallet. Alternatively, the user may store the boarding pass in the digital wallet by taking a picture of the paper boarding pass.

It should be noted that the issued boarding pass may include the details of the verification result by the verification server 30. For example, information such as "health passport information: OK" and "negative certificate: OK" may be written on the boarding pass.

Also, when the boarding pass is issued, the departure management server 40 transmits a "passenger information notification" including passport information and health passport information to the CIQ server 60 of the arrival country (step S5). More specifically, the departure management server 40 uses iAPI (Interactive API; an interactive API (Application Programming Interface), an API that enables two-way information exchange between the government of the arrival country and the airline). Send the information to the CIQ server 60 . Passenger information, also called APIS (Advance Passenger Information System), is information sent in advance from the airline to the government of the arrival country.

In this way, the departure management server 40 transmits to the verification server 30 an immigration requirements verification request that includes at least the health passport information of the user who performs the check-in procedure. The verification server 30 verifies whether the health passport information satisfies the entry requirements of the country of arrival of the user, and transmits the verification result to the departure management server 40 . The departure management server 40 issues a boarding pass to the user when it is determined that the user can enter the country of arrival. More specifically, the check-in terminal 50 transmits to the departure management server 40 a boarding pass issuance request including airline ticket information related to the airline ticket reserved (purchased) by the user. The departure management server 40 transmits boarding pass information related to the issued boarding pass to the check-in terminal 50 when it is determined that the airline ticket information is valid and that the user can enter the country of arrival.

<Biometric authentication use registration>
When the boarding pass is issued, the user can register for use in order to proceed with procedures at the airport using biometric authentication (see FIG. 7). It should be noted that whether or not to proceed with the procedure using biometric authentication is an option, and is a matter for each user to decide.

A user who wishes to be provided with a service using biometric authentication operates the terminal 70, accesses the authentication server 20, and registers for use of biometric authentication. For example, the user operates the terminal 70 to access the homepage provided by the authentication server 20 and register for use of biometric authentication.

Specifically, the user inputs biometric information, passport information, boarding pass information, and health passport information stored in the digital wallet into the authentication server 20. The authentication server 20 associates the acquired biometric information, passport information, boarding pass information, and health passport information and stores them in the authenticated person information database. Details of the authenticated person information database will be described later.

<Immigration procedures>
A user who has completed registration for use of biometric authentication can proceed with procedures at the airport using biometric authentication (see FIG. 8). Specifically, when the user arrives at the authentication terminal 51, the authentication terminal 51 acquires the biometric information of the user (person to be authenticated). The authentication terminal 51 transmits an authentication request including the biometric information of the user and the terminal ID to the authentication server 20 .

　The terminal ID is an ID for identifying the authentication terminal 51 installed in various places in the airport. The MAC (Media Access Control) address or IP (Internet Protocol) address of the authentication terminal 51 can be used as the terminal ID. Also, the terminal ID is shared between the authentication server 20 and the authentication terminal 51 by any method. For example, a system administrator determines a terminal ID and sets the determined terminal ID in the authentication server 20 . Also, the system administrator sets the determined terminal ID to the authentication terminal 51 .

The authentication server 20 identifies the type of the authentication terminal 51 that is the source of the authentication request based on the terminal ID included in the authentication request (identifies the function of the authentication terminal 51). The authentication server 20 acquires requirements for the authentication terminal 51 to provide services to the user based on the type of the authentication terminal 51 . For example, if the authentication terminal 51 is a gate device installed at a boarding gate, the authentication server 20 acquires the requirements for passing through the gate device (for example, the user possesses a valid passport and boarding pass). .

Furthermore, the authentication server 20 identifies the user through biometric authentication using the acquired biometric information and the biometric information stored in the authenticated person information database. The authentication server 20 determines whether or not the service can be provided to the user based on each information (passport information, boarding pass information, health passport information) of the specified user and the requirements of the specified authentication terminal 51. .

If the authentication terminal 51 determines that the service can be provided to the user, it sets the authentication result to "authentication success". If the authentication terminal 51 determines that the service cannot be provided to the user, the authentication terminal 51 sets the authentication result to "authentication failure".

The authentication server 20 notifies the authentication terminal 51 of the authentication result (authentication success, authentication failure). The authentication terminal 51 provides services to users who have succeeded in authentication, and does not provide services to users who have failed in authentication.

Here, as described above, it is up to the user to decide whether or not to proceed with procedures in the airport using biometric authentication. Therefore, there are users who do not use biometric authentication. In order to facilitate such procedures for the user, the departure management server 40 may notify the details of the verification result of the verification server 30 regarding the user to the terminal possessed by the staff working in the airport. Terminals carried by staff may display information such as "health passport information: OK" and "negative certificate: OK" for each user. Employees exposed to such information will be able to proceed smoothly with their work if it is necessary to verify the health passport information. In this case, the user is identified by a passport or the like possessed by the user instead of biometric information.

Thus, the authentication server 20 stores at least the first biometric information of the user. The authentication terminal 51 acquires the second biometric information of the user and transmits an authentication request including the acquired biometric information to the authentication server 20 . The authentication server 20 performs biometric authentication using the first biometric information and the second biometric information, and transmits the authentication result to the authentication terminal 51 . The authentication terminal 51 provides services to users who have successfully authenticated.

Next, details of each device included in the immigration control system according to the first embodiment will be described.

[Reservation server]
The reservation server 10 is a server that realizes airline ticket reservations by users. The reservation server 10 stores at least health passport information of the user (the user who purchased the airline ticket).

FIG. 9 is a diagram showing an example of the processing configuration (processing modules) of the reservation server 10 according to the first embodiment. Referring to FIG. 9, reservation server 10 includes communication control section 201 , reservation control section 202 , reservation record transmission section 203 , and storage section 204 .

The communication control unit 201 is means for controlling communication with other devices. For example, the communication control unit 201 receives data (packets) from the terminal 70 . Also, the communication control unit 201 transmits data to the terminal 70 . The communication control unit 201 transfers data received from other devices to other processing modules. The communication control unit 201 transmits data acquired from other processing modules to other devices. In this manner, other processing modules transmit and receive data to and from other devices via the communication control unit 201 . The communication control unit 201 has a function as a receiving unit that receives data from another device and a function as a transmitting unit that transmits data to the other device.

The reservation control unit 202 is means for controlling air ticket reservations by users. When the user uses the terminal 70 to perform a predetermined operation (for example, accesses a ticket reservation page), the reservation control unit 202 displays a GUI (Graphical User Interface) or the like for reserving an airline ticket on the terminal 70. do.

For example, the reservation control unit 202 displays a GUI as shown in FIG. The reservation control unit 202 uses a GUI as shown in FIG. 10 to obtain information on a flight for which the user wishes to make a reservation.

Also, the reservation control unit 202 acquires the user's passport information and health passport information. The user operates the terminal 70 to select passport information and health passport information (at least one of vaccination certificate, negative certificate and recovery certificate) stored in the digital wallet.

The reservation control unit 202 issues an airline ticket when the "Confirm" button is pressed. The reservation control unit 202 generates airline ticket information according to the user's selection and transmits it to the terminal 70 . The airline ticket information may be a text file containing the contents of the issued airline ticket, or a two-dimensional code containing the contents of the airline ticket (in which the contents of the airline ticket are converted).

When the reservation is completed, the reservation control unit 202 associates the user's passport information, health passport information, and airline ticket information and stores them in the user information database (see FIG. 11). As shown in FIG. 11, the user information database includes passport information fields, airline ticket information fields, and health passport information fields. Note that the user information database shown in FIG. 11 is an example, and is not meant to limit the items to be stored. In addition, in FIG. 11, health passport information that the user does not possess (not stored in the digital wallet) is indicated using "hyphens".

The reservation record transmission unit 203 is means for transmitting the user's airline ticket reservation record to the departure management server 40 . The reservation record transmission unit 203 accesses the user information database regularly or at a predetermined timing. The reservation record transmission unit 203 checks the airline ticket information field (departure time field) of each entry, and extracts an aircraft (flight number) that departs after a predetermined time (for example, 24 hours) from the current time.

The reservation record transmission unit 203 collects the extracted entries for each aircraft (flight, flight number) and transmits them to the departure management server 40 . The reservation record transmission unit 203 transmits the passport information, airline ticket information, and health passport information of each user who has reserved an aircraft to depart after the elapse of a predetermined time as an "airline ticket reservation record" to the departure management server 40 .

The storage unit 204 is means for storing information necessary for the operation of the reservation server 10. A user information database is constructed in the storage unit 204 .

[Departure management server]
The departure management server 40 manages the departure of the user and stores at least the health passport information regarding the health of the user who has reserved the airline ticket.

FIG. 12 is a diagram showing an example of the processing configuration (processing modules) of the departure management server 40 according to the first embodiment. Referring to FIG. 12 , departure management server 40 includes communication control section 301 , reservation record control section 302 , boarding pass control section 303 , and storage section 304 .

The communication control unit 301 is means for controlling communication with other devices. For example, the communication control unit 301 receives data (packets) from the verification server 30 . Also, the communication control unit 301 transmits data to the verification server 30 . The communication control unit 301 passes data received from other devices to other processing modules. The communication control unit 301 transmits data acquired from other processing modules to other devices. In this way, other processing modules transmit and receive data to and from other devices via the communication control unit 301 . The communication control unit 301 has a function as a receiving unit that receives data from another device and a function as a transmitting unit that transmits data to the other device.

The reservation record control unit 302 is means for controlling air ticket reservation records (passport information, airline ticket information, health passport information) transmitted from the reservation server 10 . When the reservation recording control unit 302 acquires the passport information and the like from the reservation server 10, the acquired information is registered in the reservation person information database (see FIG. 13).

As shown in FIG. 13, the reservation person information database includes a passport information field, an airline ticket information field, a health passport information field, and a boarding pass information field. Note that the reservation person information database shown in FIG. 13 is an example, and is not meant to limit the items to be stored.

The boarding pass control unit 303 is means for controlling the issuance of boarding passes. The operation of the boarding pass control unit 303 will be described with reference to FIG. FIG. 14 is a flow chart showing an example of the operation of the boarding pass control unit 303 according to the first embodiment.

The boarding pass control unit 303 receives a "boarding pass issuance request" from the check-in terminal 50 (step S101).

The boarding pass control unit 303 searches the reservation person information database using the passport number of the passport information included in the request as a key, and tries to identify the corresponding user (searches the reservation person information database (DB; Data Base); step S102).

If the search fails and the user is not identified (step S103, No branch), the boarding pass control unit 303 sets the processing result to prohibit the issuance of a boarding pass (step S104).

When the search succeeds and the user is specified (step S103, Yes branch), the boarding pass control unit 303 determines whether the airline ticket information in the corresponding entry matches the airline ticket information included in the boarding pass issuance request. Determine (verification of airline ticket information; step S105). That is, the boarding pass control unit 303 determines whether or not the airline ticket (pre-reserved aircraft) registered in the reservation person information database matches the airline ticket obtained from the check-in terminal 50 .

If the airline ticket information does not match (step S106, No branch), the boarding pass control unit 303 sets the processing result to prohibit issuance of a boarding pass (step S104).

If the airline ticket information matches (step S106, Yes branch), the boarding pass control unit 303 sends to the verification server 30 an "immigration requirements verification request" including the passport information and health passport information of the user specified by the above search. Send (step S107)

The boarding pass control unit 303 receives the verification result (entry permitted, entry denied) from the verification server 30 (step S108). The boarding pass control unit 303 receives a response (positive response, negative response) to the entry requirements verification request from the verification server 30 .

If the verification result is "impossible to enter the country" (step S109, No branch), the boarding pass control unit 303 sets the processing result to prohibit issuance of a boarding pass (step S104).

If the verification result is "permitted to enter the country" (step S109, Yes branch), the boarding pass control unit 303 sets the processing result to permit issuance of a boarding pass (step S110).

After that, the boarding pass control unit 303 issues a boarding pass (step S111). The boarding pass control unit 303 refers to the seat type or the like described in the airline ticket information, determines the seat of the user, and issues a boarding pass (boarding pass information). The boarding pass control unit 303 registers the generated boarding pass information (boarding pass information) in the reservation person information database.

The boarding pass control unit 303 transmits the processing result (boarding pass issuable or not) to the check-in terminal 50 (step S112).

If the processing result is "cannot issue a boarding pass", the boarding pass control unit 303 notifies the check-in terminal 50 that a boarding pass cannot be issued. Specifically, the boarding pass control unit 303 transmits to the check-in terminal 50 a negative response indicating that the boarding pass cannot be issued.

If the processing result is "boarding pass issuable", the boarding pass control unit 303 notifies the check-in terminal 50 of the issued boarding pass (boarding pass information). Specifically, the boarding pass control unit 303 transmits to the check-in terminal 50 an affirmative response indicating that the boarding pass has been successfully issued. At that time, the boarding pass control unit 303 transmits an acknowledgment including the boarding pass information to the check-in terminal 50 .

When receiving details regarding the verification of entry requirements from the verification server 30, the boarding pass control unit 303 may send a response (positive response, negative response) including the details to the check-in terminal 50.

Furthermore, the boarding pass control unit 303 notifies the CIQ server 60 of the arrival country of the information of the user who issued the boarding pass. Specifically, the boarding pass control unit 303 transmits a "passenger information notification" including the user's passport information and health passport information to the CIQ server 60 (step S113).

In this way, the boarding pass control unit 303 realizes the user's check-in procedure, and when the boarding pass is successfully issued, notifies the check-in terminal 50 of the boarding pass information related to the boarding pass. At that time, when the verification server 30 acquires the detailed information regarding the verification of the entry requirements, the boarding pass control section 303 may notify the check-in terminal 50 of the detailed information regarding the verification of the entry requirements. The check-in terminal 50 may issue a boarding pass with detailed information regarding verification of entry requirements.

In addition, the boarding pass control unit 303 is installed in the arrival airport of the arrival country, and the CIQ server 60 that performs processing related to customs, immigration control, and quarantine when the user enters the country. Send information (including passport information, health passport information). By sending the passenger information to the CIQ server 60 by the boarding pass control unit 303, information cooperation with government agencies is realized.

The storage unit 304 is means for storing information necessary for the operation of the departure management server 40 . A reservation person information database is constructed in the storage unit 304 .

[Validation server]
FIG. 15 is a diagram showing an example of a processing configuration (processing modules) of the verification server 30 according to the first embodiment. Referring to FIG. 15 , verification server 30 includes communication control section 401 , immigration requirement verification section 402 , and storage section 403 .

The communication control unit 401 is means for controlling communication with other devices. For example, the communication control unit 401 receives data (packets) from the departure management server 40 . The communication control unit 401 also transmits data to the departure management server 40 . The communication control unit 401 transfers data received from other devices to other processing modules. The communication control unit 401 transmits data acquired from other processing modules to other devices. In this manner, other processing modules transmit and receive data to and from other devices via the communication control unit 401 . The communication control unit 401 has a function as a receiving unit that receives data from another device and a function as a transmitting unit that transmits data to the other device.

The entry requirements verification unit 402 is a means of verifying the entry requirements of travelers. The entry requirements verification unit 402 processes the entry requirements verification request received from the departure management server 40 . The entry requirements verification unit 402 refers to the entry requirements database and processes the entry requirements verification request.

FIG. 16 is a diagram showing an example of the entry requirement database according to the first embodiment. As shown in FIG. 16, the entry requirements database stores entry requirements by country (by airport code). Entry requirements include entry requirements for passport information and entry requirements for health passport information. Note that the immigration requirement database shown in FIG. 16 is an example, and is not meant to limit the items to be stored.

The entry requirements verification unit 402 refers to the entry requirements database and reads the entry requirements corresponding to the information on the arrival airport (airport code) included in the entry requirements verification request. The entry requirements verification unit 402 uses the read entry requirements and the passport information and health passport information included in the entry requirements verification request to determine whether the traveler satisfies the entry requirements of the arrival country.

For example, the entry requirements verification unit 402 uses the nationality of the passport information to determine whether the entry requirements of the arrival country are met. Alternatively, the entry requirements verification unit 402 determines whether or not the user possesses the type of health passport information specified by the arrival country. For example, if the arrival country stipulates possession of a valid "vaccination certificate" or "negative certificate" as entry requirements, the entry requirements verification unit or "negative certificate" is included. In other words, the entry requirements verification unit 402 does not determine that the entry requirements of the destination country are satisfied even if the entry requirements verification request includes a valid "recovery certificate".

Alternatively, the immigration requirements verification unit 402 determines that even a valid vaccination certificate or a valid negative certificate does not meet the entry requirements if it has not been tested with the vaccine or method required by the country of arrival.

The entry requirements verification unit 402 notifies the departure management server 40 of the verification result (entry permitted, entry denied). If it is determined that the entry requirements are satisfied, the entry requirements verification unit 402 transmits to the departure management server 40 a positive response indicating that the traveler is permitted to enter the country. If it is determined that the entry requirements are not met, the entry requirements verification unit 402 sends a negative response to the departure management server 40 indicating that the traveler is not allowed to enter the country.

The immigration requirement verification unit 402 may notify the departure management server 40 of details regarding the verification of entry requirements. For example, when the immigration requirement verification unit 402 determines that the entry is not allowed, it notifies the departure management server 40 of the factors that led to the determination. For example, the entry requirements verification unit 402 notifies the departure management server 40 of detailed information such as "I do not have a valid vaccination certificate" and "The test method for the negative certificate does not meet the entry requirements".

Alternatively, when it is determined that entry is permitted, the entry requirement verification unit 402 may notify the departure management server 40 of the details of all or part of the entry requirements subject to the determination. For example, regarding the health passport information, the immigration requirement verification unit 402 indicates that "there is no problem with the verification of the vaccination certificate (vaccination certificate: OK)" and "there is no problem with the verification of the negative certificate (negative certificate: OK)". ” to the departure management server 40 .

The immigration requirements verification unit 402 may send a positive response or a negative response including details regarding the verification result of the immigration requirements to the departure management server 40 .

The storage unit 403 is means for storing information necessary for the operation of the verification server 30 . An entry requirements database is constructed in the storage unit 403 .

[Authentication server]
FIG. 17 is a diagram showing an example of the processing configuration (processing modules) of the authentication server 20 according to the first embodiment. Referring to FIG. 17 , the authentication server 20 includes a communication control section 501 , a usage registration control section 502 , an authentication section 503 and a storage section 504 .

The communication control unit 501 is means for controlling communication with other devices. For example, the communication control unit 501 receives data (packets) from the authentication terminal 51 . Also, the communication control unit 501 transmits data to the authentication terminal 51 . The communication control unit 501 passes data received from other devices to other processing modules. The communication control unit 501 transmits data acquired from other processing modules to other devices. In this manner, other processing modules transmit and receive data to and from other devices via the communication control unit 501 . The communication control unit 501 has a function as a receiving unit that receives data from another device and a function as a transmitting unit that transmits data to the other device.

The use registration control unit 502 is means for controlling the user's biometric authentication use registration. When the user performs a predetermined operation (for example, accesses a biometrics authentication usage registration page) using the terminal 70, the usage registration control unit 502 displays a GUI for acquiring information for realizing biometrics authentication of the user. etc. are displayed on the terminal 70 .

For example, the usage registration control unit 502 displays a GUI as shown in FIG. The use registration control unit 502 acquires the user's biometric information, passport information, boarding pass information, and health passport information through a GUI as shown in FIG. When the use registration control unit 502 acquires a face image as biometric information, the use registration control unit 502 generates a feature amount from the face image.

The usage registration control unit 502 stores the acquired biometric information in the authenticated person information database (see FIG. 19). FIG. 19 is a diagram showing an example of an authenticated person information database according to the first embodiment. As shown in FIG. 19, the authenticated person information database stores the biometric information (feature amount) of the authenticated person, passport information, boarding pass information, and health passport information in association with each other. Note that the authentication-subjected person information database shown in FIG. 19 is an example, and is not intended to limit the items to be stored.

The authentication unit 503 is means for performing biometric authentication of the user (person to be authenticated) who has arrived at the authentication terminal 51 . The authentication unit 503 receives an authentication request including the biometric information of the person to be authenticated and the terminal ID from the authentication terminal 51 . The authentication unit 503 performs biometric authentication using the acquired biometric information and the biometric information stored in the authentication subject information database.

More specifically, the authentication unit 503 extracts biometric information (feature amount) from the authentication request. The authenticating unit 503 sets the feature amount as a matching target, and performs matching processing with the feature amount registered in the authenticated person information database. More specifically, the authentication unit 503 sets the extracted feature amount (feature vector) as a matching object, and compares the extracted feature amount (feature vector) with a plurality of feature amounts registered in the authenticated person information database in a one-to-N (N is a positive integer, the same applies below).

The authentication unit 503 calculates the degree of similarity between the feature amount to be matched and each of the plurality of feature amounts on the registration side. Chi-square distance, Euclidean distance, or the like can be used for the degree of similarity. Note that the greater the distance, the lower the similarity, and the closer the distance, the higher the similarity.

The authenticating unit 503 succeeds in the matching process if there is a feature amount whose similarity to the feature amount to be matched is equal to or greater than a predetermined value among the plurality of feature amounts registered in the authentication subject information database. I judge. The authenticating unit 503 fails the matching process if there is no feature amount whose similarity to the matching target feature amount is equal to or greater than a predetermined value among the plurality of feature amounts registered in the authentication subject information database. It is determined that

If the verification process fails, the authentication unit 503 sets "authentication failure" to the authentication result. If the collation process succeeds, the authentication unit 503 identifies the entry with the highest degree of similarity (entries in the person-to-be-authenticated information database), and reads out the corresponding passport information, health passport information, and boarding pass information.

The authentication unit 503 identifies the type of the authentication terminal 51 from the terminal ID included in the authentication request, and the passport information of the person to be authenticated meets the predetermined requirements for the identified authentication terminal 51 (determined as successful authentication). requirements) are met.

For example, if the requirements for determining that the person to be authenticated of the authentication terminal 51 is "successfully authenticated" are "having a valid passport" and "having a valid negative certificate", the authentication unit 503 reads the passport Refer to information and health passport information to determine whether or not the requirements are met.

If the requirements are satisfied, the authentication unit 503 sets the authentication result of the person to be authenticated to "successful authentication". If the requirements are not met, the authentication unit 503 sets the authentication result of the person-to-be-authenticated to "authentication failure".

The authentication unit 503 notifies the authentication terminal 51 of the authentication result (authentication success, authentication failure). In the case of authentication success, the authentication unit 503 transmits an affirmative response to that effect to the authentication terminal 51 . In the case of authentication failure, the authentication unit 503 transmits a negative response to that effect to the authentication terminal 51 .

When notifying the authentication terminal 51 of successful authentication, the authentication unit 503 may notify the authentication terminal 51 of the passport information of the person who has successfully authenticated.

The storage unit 504 is means for storing information necessary for the operation of the authentication server 20. An authenticated person information database is constructed in the storage unit 504 .

[CIQ Server]
FIG. 20 is a diagram showing an example of the processing configuration (processing modules) of the CIQ server 60 according to the first embodiment. Referring to FIG. 20 , CIQ server 60 includes communication control section 601 , passenger information processing section 602 , and storage section 603 .

The communication control unit 601 is means for controlling communication with other devices. For example, the communication control unit 601 receives data (packets) from the departure management server 40 . The communication control unit 601 also transmits data to the departure management server 40 . The communication control unit 601 passes data received from other devices to other processing modules. The communication control unit 601 transmits data acquired from other processing modules to other devices. In this way, other processing modules transmit and receive data to and from other devices via the communication control unit 601 . The communication control unit 601 has a function as a receiving unit that receives data from another device and a function as a transmitting unit that transmits data to another device.

The passenger information processing unit 602 is means for processing passenger information notifications received from the departure management server 40 . Passenger information processing unit 602 provides the passport information and health passport information included in the notification to each government agency responsible for customs, immigration, and quarantine. More specifically, the passenger information processing unit 602 transmits passport information and health passport information to terminals used by customs officials.

Passport information and health passport information sent to the terminals used by staff will be used for the work of each department.

The storage unit 603 is means for storing information necessary for the operation of the CIQ server 60.

[Check-in terminal]
The check-in terminal 50 is a terminal that acquires airline ticket information related to an airline ticket reserved by a user (an airline ticket purchased by the user) and implements a check-in procedure.

FIG. 21 is a diagram showing an example of the processing configuration (processing modules) of the check-in terminal 50 according to the first embodiment. Referring to FIG. 21, the check-in terminal 50 includes a communication control section 701, a check-in control section 702, and a storage section 703.

The communication control unit 701 is means for controlling communication with other devices. For example, the communication control unit 701 receives data (packets) from the departure management server 40 . The communication control unit 701 also transmits data to the departure management server 40 . The communication control unit 701 passes data received from other devices to other processing modules. The communication control unit 701 transmits data acquired from other processing modules to other devices. In this manner, other processing modules transmit and receive data to and from other devices via the communication control unit 701 . The communication control unit 701 has a function as a receiving unit that receives data from another device and a function as a transmitting unit that transmits data to another device.

The check-in control unit 702 is means for controlling the user's check-in procedure. When the user performs a predetermined action (for example, pressing a check-in start button) on the device, the check-in control unit 702 acquires the user's biometric information, passport information, and airline ticket information.

For example, the check-in control unit 702 displays a GUI as shown in FIG. 22, and upon detecting pressing of the “photograph” button, controls the camera device installed in the check-in control unit 702 to display the biometric information (face image) of the user. ). When the check-in control unit 702 detects pressing of the "start" button, the check-in control unit 702 controls the scanner to acquire passport information and airline ticket information.

If the electronic passport or airline ticket is stored in a digital wallet, the user may operate the terminal 70 to display the two-dimensional code converted from the passport information or airline ticket information. . The check-in control unit 702 may read the two-dimensional code displayed on the terminal 70 to acquire passport information and airline ticket information.

The check-in control unit 702 generates a feature amount from the acquired face image. Also, the check-in control unit 702 generates a feature amount from the face image included in the passport information (described in the passport).

The check-in control unit 702 executes biometric authentication (one-to-one authentication) using the two generated feature amounts.

If biometric authentication fails, the check-in control unit 702 notifies the user that the check-in procedure has failed. At that time, the check-in control unit 702 may guide the passenger to go to the counter where an airline staff member or the like is waiting.

When the biometric authentication is successful, the check-in control unit 702 sends a "boarding pass request" including the user's passport information and airline ticket information to the departure management server 40.

The check-in control unit 702 receives a response (positive response, negative response) from the departure management server 40.

When receiving a negative response (boarding pass issuance not possible), the check-in control unit 702 notifies the user that a boarding pass cannot be issued.

When a positive response (response including boarding pass information) is received, the check-in control unit 702 issues a boarding pass. For example, the check-in control unit 702 issues a paper medium or electronic medium boarding pass with the content shown in FIG. 23A.

When the departure management server 40 notifies the detailed information about the verification result of the immigration requirements, the check-in control unit 702 may issue a boarding pass on which the detailed information is described (see FIG. 23B). . Alternatively, the verification result of the entry requirements (entry allowed) by the verification server 30 may be described in the boarding pass.

A boarding pass as shown in FIGS. 23A and 23B may be displayed on the check-in terminal 50 or may be displayed on the terminal 70 carried by the user. Alternatively, the boarding pass as shown in FIGS. 23A and 23B may be displayed on a terminal used by an airport company, airline staff, or the like. Alternatively, the user may operate the terminal 70 to read information about the boarding pass from the online check-in described below or from the check-in terminal 50 (kiosk terminal), and store the boarding pass information in the terminal 70 .

The storage unit 703 is means for storing information necessary for the operation of the check-in terminal 50.

[Authentication terminal]
FIG. 24 is a diagram showing an example of a processing configuration (processing modules) of the authentication terminal 51 according to the first embodiment. Referring to FIG. 24 , authentication terminal 51 includes communication control section 801 , biometric information acquisition section 802 , authentication request section 803 , and storage section 804 .

The communication control unit 801 is means for controlling communication with other devices. For example, the communication control unit 801 receives data (packets) from the authentication server 20 . Also, the communication control unit 801 transmits data to the authentication server 20 . The communication control unit 801 passes data received from other devices to other processing modules. The communication control unit 801 transmits data acquired from other processing modules to other devices. In this way, other processing modules transmit and receive data to and from other devices via the communication control unit 801 . The communication control unit 801 has a function as a receiving unit that receives data from another device and a function as a transmitting unit that transmits data to the other device.

The biometric information acquisition unit 802 is means for controlling the camera device (the camera device provided in the authentication terminal 51) and acquiring the biometric information (for example, face image) of the user in front of the user. The biological information acquisition unit 802 captures an image of the front of the device periodically or at a predetermined timing. The biometric information acquisition unit 802 determines whether or not the acquired image contains a face image of a person, and if the face image is contained, extracts the face image from the acquired image data.

Since existing techniques can be used for face image detection processing and face image extraction processing by the biometric information acquisition unit 802, detailed description thereof will be omitted. For example, the biometric information acquisition unit 802 may extract a face image (face region) from image data using a learning model learned by a CNN (Convolutional Neural Network). Alternatively, the biometric information acquisition unit 802 may extract a facial image using a technique such as template matching.

The biometric information acquisition unit 802 generates a feature amount from the extracted face image. The biometric information acquisition unit 802 passes the generated feature amount to the authentication request unit 803 .

The authentication requesting unit 803 is means for requesting authentication of the user in front of the authentication server 20 . The authentication requesting unit 803 generates an authentication request including the acquired biometric information and the terminal ID, and transmits the authentication request to the authentication server 20 .

The authentication request unit 803 receives a response (authentication success, authentication failure) from the authentication server 20 to the authentication request.

If the authentication result is "authentication failure", the authentication requesting unit 803 notifies the user (authentication failure person; person to be authenticated who is determined to have failed authentication) to that effect. For example, the authentication requesting unit 803 outputs a message such as "A valid vaccination certificate is required to pass through the gate. Please ask the staff how to deal with this." For example, the authentication requesting unit 803 uses a display device such as a liquid crystal panel or an acoustic device such as a speaker to notify the person to be authenticated of the message.

If the authentication result is "successful authentication", the authentication requesting unit 803 provides services to the user (authenticated person; person to be authenticated who is determined to be authenticated successfully). For example, the authentication terminal 51 installed at the boarding gate opens the gate and guides the user to pass through the gate.

The storage unit 804 is means for storing information necessary for the operation of the authentication terminal 51 .

[Terminal]
FIG. 25 is a diagram showing an example of a processing configuration (processing modules) of the terminal 70 according to the first embodiment. Referring to FIG. 25, the terminal 70 includes a communication control section 901, an electronic wallet control section 902, an airline ticket reservation section 903, a usage registration section 904, and a storage section 905.

The communication control unit 901 is means for controlling communication with other devices. For example, the communication control unit 901 receives data (packets) from the reservation server 10 . Also, the communication control unit 901 transmits data to the reservation server 10 . The communication control unit 901 passes data received from other devices to other processing modules. The communication control unit 901 transmits data acquired from other processing modules to other devices. In this way, other processing modules transmit and receive data to and from other devices via the communication control unit 901 . The communication control unit 901 has a function as a receiving unit that receives data from another device and a function as a transmitting unit that transmits data to the other device.

The electronic wallet control unit 902 is a means for managing and controlling digital wallets. The electronic wallet control unit 902 acquires various certificates and the like according to the user's operation, and stores them in the storage unit 905 .

The electronic wallet control unit 902 is implemented by an application installed on the terminal 70. A detailed description of the installation of the application for implementing the digital wallet and the registration of specific certificates will be omitted. This is because these operations and the like are different from the gist of the disclosure of the present application.

For example, regarding the registration of digital information, the user may operate the terminal 70 to access the homepage provided by the issuer of various certificates, etc., and register the digital information in the digital wallet from the homepage.

For example, regarding vaccination certificates and negative certificates, the electronic wallet control unit 902 accesses websites managed by certificate issuing entities such as local governments and medical institutions. The electronic wallet control unit 902 acquires a vaccination certificate or a negative certificate by inputting the user's ID or the like into the home page according to the user's operation, and stores it in the storage unit 905 .

Alternatively, for documents such as passports, airline tickets, boarding passes, etc., the electronic wallet control unit 902 may capture images of these documents according to the user's operation, and store the image data as digital information related to passports and the like. . Alternatively, the electronic wallet control unit 902 may acquire the vaccination certificate or the like by photographing a two-dimensional code corresponding to the vaccination certificate or the like according to the user's operation.

Also, the electronic wallet control unit 902 generates a user ID for identifying the user who owns the digital wallet. The user ID may be any information as long as it can uniquely identify the user. For example, the electronic wallet control unit 902 may acquire an e-mail address from the user and treat the e-mail address as the user ID. Electronic wallet control unit 902 stores the user ID in storage unit 905 .

The airline ticket reservation section 903 is a means for realizing airline ticket reservations by users. The airline ticket reservation unit 903 accesses a predetermined homepage provided by the reservation server 10 according to the user's operation. For example, the airline ticket reservation unit 903 acquires the information shown in FIG. 10 and transmits it to the reservation server 10 .

The airline ticket reservation unit 903 stores the airline ticket information received from the reservation server 10 in the storage unit 905 . The airline ticket reservation unit 903 stores the airline ticket information in the digital wallet.

The usage registration unit 904 is means for realizing usage registration for biometric authentication. The usage registration unit 904 accesses a predetermined homepage provided by the authentication server 20 according to the user's operation. The use registration unit 904 acquires biometric information (face image), passport information, boarding pass information, health passport information (vaccination certificate, negative certificate, recovery certificate) and the like shown in FIG. The use registration unit 904 transmits the acquired biometric information and the like to the authentication server 20 .

The storage unit 905 is means for storing information necessary for the operation of the terminal 70 .

[System operation]
Next, operation of the immigration control system according to the first embodiment will be described. 26 is a sequence diagram showing an example of the operation of the immigration control system according to the first embodiment; FIG. The operation of the immigration control system for issuing a boarding pass will be described with reference to FIG.

The check-in terminal 50 transmits a boarding pass issuance request including the user's passport information and airline ticket information to the departure management server 40 (step S11).

When valid airline ticket information is registered in the reservation person information database, the departure management server 40 sends an entry requirements verification request including the user's passport information and health passport information to the verification server 30 (step S12).

The verification server 30 transmits the verification result (entry permitted, entry denied) to the departure management server 40 (step S13).

If the verification result of the user (the user who performs the check-in procedure) is "permitted to enter the country," the departure management server 40 issues a boarding pass and notifies the check-in terminal 50 of the boarding pass information (step S14). .

The check-in terminal 50 issues a boarding pass based on the acquired boarding pass information (step S15).

Furthermore, when the boarding pass is issued, the departure management server 40 transmits passenger information notification including the user's passport information and health passport information to the CIQ server 60 (step S16). The departure management server 40 preferably transmits the passenger information notification to the CIQ server 60 of the arrival country after the aircraft has departed. By such measures, it is possible to avoid a situation in which the user reported to the destination country as a passenger on board the aircraft is different from the user who actually arrived.

As described above, in the immigration control system according to the first embodiment, when issuing a boarding pass, the departure control server 40 requests the verification server 30 to verify whether the traveler can enter the country of arrival. . The verification server 30 verifies whether the health passport information (eg, vaccination certificate, etc.) possessed by the traveler meets the entry requirements of the destination country. The departure management server 40 issues a boarding pass for the traveler when the verification server 30 confirms that the traveler can enter the country of arrival. As a result, airline staff and others do not need to confirm the entry requirements of the destination country, reducing the burden on the staff and others. In addition, by automating the confirmation of immigration requirements, it is possible to eliminate human error caused by staff, etc., and prevent users who cannot enter the country of arrival from boarding the aircraft. In addition, the automation facilitates confirmation of entry requirements and improves throughput in departure operations.

[Second embodiment]
Next, a second embodiment will be described in detail with reference to the drawings.

In the first embodiment, the case where an airline ticket is reserved using an airline company's reservation system (reservation server 10) has been described. In the second embodiment, a case will be described in which an airline ticket is reserved using a reservation system of an alliance (airline alliance) formed by a plurality of airlines working together.

In particular, we will explain when users use code-share flights (aircraft jointly operated by two or more airlines). In the case of using an airline alliance reservation system, the system operation in the case of reserving a normal flight (aircraft that is not a codeshare flight) can be the same as in the first embodiment. omitted.

In addition, on codeshare flights, flight numbers of multiple airlines are assigned to each flight. However, the actual operation of the aircraft is one airline that provides the aircraft, and the user (passenger) is subject to the airline's regulations (e.g., weight restrictions, in-flight meals, etc.) .

The following description will focus on the differences between the first embodiment and the second embodiment.

FIG. 27 is a diagram showing an example of the schematic configuration of the immigration control system according to the second embodiment. As shown in FIG. 27, the immigration control system according to the second embodiment includes a joint reservation server 11. FIG. The joint reservation server 11 is a server managed and operated by an airline alliance.

FIG. 27 shows the reservation servers 10-1 and 10-2 of each airline participating in the airline alliance. FIG. 27 also shows a departure management server 40-1 and a departure management server 40-2 operated by each airline corresponding to the departure airport.

The reservation server 10-1 and departure management server 40-1 are managed and operated by the same airline, and the reservation server 10-2 and departure management server 40-2 are managed and operated by the same airline. Note that in FIG. 27, illustration of other servers and the like described in the first embodiment is omitted.

FIG. 28 is a diagram showing an example of the processing configuration of the joint reservation server 11 according to the second embodiment. As shown in FIG. 28 , the joint reservation server 11 includes a communication control section 211 , a reservation control section 212 , a reservation record transmission section 213 and a storage section 214 .

The basic operations of the processing modules of the joint reservation server 11 may be the same as those of the corresponding processing modules (with the same names) of the reservation server 10 described with reference to FIG. 9 in the first embodiment. can. Differences between the joint reservation server 11 and the reservation server 10 will be mainly described below.

The reservation control unit 212 of the joint reservation server 11 enables users to reserve codeshare flights. For example, the reservation control unit 212 displays information such as that shown in FIG. 29 on the user's terminal 70 and accepts a reservation for a codeshare flight. Note that the flight shown in the first line of FIG. 29 is a codeshare flight, and the operating company is indicated by a circle.

FIG. 29 is a drawing corresponding to FIG. 10 described in the first embodiment, and is a display (GUI) related to airline ticket reservation extracted from the display of FIG. The reservation control unit 212, like the reservation control unit 202 of the reservation server 10, acquires airline ticket information for codeshare flights, passport information, and health passport information.

The reservation control unit 212 transmits the acquired passport information, health passport information, and airline ticket information related to the code-share flight to the reservation server 10 of each code-share airline (see FIG. 30). The reservation control unit 212 transmits passport information, health passport information, and air ticket information (air ticket information for code-share flights) to the reservation servers 10 of the airlines that jointly operate the aircraft.

As shown in FIG. 30, passport information and the like are sent not only to the reservation server 10-1 of the operating company, but also to the reservation server 10-2 of another airline.

The reservation control unit 202 of each reservation server 10 stores the passport information, health passport information and airline ticket information received from the joint reservation server 11 in the user information database.

The reservation record transmission unit 203 of each reservation server 10 transmits the user's airline ticket reservation record to the corresponding departure management server 40 a predetermined time before the departure of the aircraft (see FIG. 31). As shown in FIG. 31, the reservation server 10-1 transmits the airline ticket reservation record to the departure management server 40-1 managed by the company, and the reservation server 10-2 transmits the airline ticket reservation record to the departure management server 40-2. Submit your records.

After that, each departure management server 40 at the departure airport issues a boarding pass according to the procedure referring to FIG. 6 in the first embodiment. That is, when each departure management server 40 receives a boarding pass issuance request from its own check-in terminal 50, it transmits an "entry requirements verification request" to the verification server 30. issue a ticket.

[System operation]
Next, operation of the immigration control system according to the second embodiment will be described. FIG. 32 is a sequence diagram showing an example of the operation of the immigration control system according to the second embodiment. The operation of the immigration control system for airline ticket reservation will be described with reference to FIG.

The joint reservation server 11 transmits the airline ticket information, passport information, and health passport information when the codeshare flight was reserved to each reservation server 10 (step S21).

Each reservation server 10 transmits an airline ticket reservation record to its own departure management server 40 a predetermined time before the departure of the codeshare flight (step S22).

The departure management server 40 executes processing related to issuing a boarding pass in response to a request from the check-in terminal 50 (step S23). The departure management server 40 determines a seat within the range assigned to the company and issues a boarding pass. Also in the second embodiment, when the departure management server 40 requests the verification server 30 to verify the immigration requirements of the user, and obtains a result indicating that the verification of the immigration requirements for the user has been successful, boarding is performed. issue a ticket.

As described above, the immigration control system according to the second embodiment includes the joint reservation server 11 that realizes reservations for codeshare flights jointly operated by a plurality of airlines. The joint reservation server 11 transmits at least the health passport information of the user who has reserved the code-share flight to the reservation servers 10 corresponding to each of the plurality of airlines operating the code-share flight. The reservation server 10 corresponding to each of the plurality of airlines transmits at least health passport information to the departure management server 40 corresponding to each reservation server 10 of each of the plurality of airlines. In this way, when a codeshare flight is used, the user's health passport information is shared by each airline that jointly operates the codeshare flight. Verification of immigration requirements for users using codeshare flights is also automatically performed, reducing the burden on staff involved in departure work.

[Third embodiment]
Next, a third embodiment will be described in detail with reference to the drawings.

In the first and second embodiments, the case where the user moves directly from the country of departure to the country of arrival (destination country) has been described. In the third embodiment, a case will be described in which the user travels to the destination via a transit country.

The following description will focus on the points of difference between the first to third embodiments.

FIG. 33 is a diagram showing an example of the schematic configuration of the immigration control system according to the third embodiment. As shown in FIG. 33, the immigration control system according to the third embodiment includes a departure control server 40-3 and a departure control server 40-4 at each of the departure airport and the transfer airport. Note that in FIG. 33, illustration of some servers and the like described in the first embodiment is omitted.

In FIG. 33, the reservation server 10, departure management server 40-3 and departure management server 40-4 are managed and operated by the same airline.

The user operates the terminal 70 to access the reservation server 10 and arrange an airline ticket to the destination (arrival airport). The reservation control unit 202 of the reservation server 10 enables reservation of airline tickets including connecting flights.

The reservation control unit 202 displays information such as that shown in FIG. 34 on the user's terminal 70, and accepts reservations for airline tickets (a plurality of airline tickets) including connecting flights. FIG. 34 shows an example in which a connection is made at B2 airport in A2 country.

FIG. 34 is a drawing corresponding to FIG. 10 described in the first embodiment, and is a display (GUI) related to airline ticket reservation extracted from the display of FIG. The reservation control unit 202 acquires a plurality of pieces of airline ticket information, passport information, and health passport information.

The reservation control unit 202 stores the acquired passport information, health passport information, and multiple pieces of airline ticket information in the user information database (see FIG. 35).

The reservation record transmission unit 203 transmits the user's airline ticket reservation record to the departure management server 40-3 and departure management server 40-4 of the departure country and the transit country a predetermined time before the departure of the aircraft (see FIG. 36). Note that the reservation record transmission unit 203 sends an air ticket reservation record including air ticket information related to the air ticket from the departure country to the transit country (air ticket for the departure flight) to the departure management server 40-3 of the departure country. Send. In the example of FIG. 35, an airline ticket reservation record relating to the entry in the first row of the user information database is transmitted.

The reservation record transmission unit 203 transmits an air ticket reservation record including air ticket information related to an air ticket from the transit country to the destination country (air ticket of the transit flight) to the departure management server 40-4 of the transit country. . In the example of FIG. 35, the airline ticket reservation record regarding the entry on the second line of the user information database is transmitted.

The departure management server 40-3 of the departure country and the departure management server 40-4 of the transit country store the received airline ticket reservation record in the reservation person information database. The reservation record control unit 302 of the departure management server 40-3 and the departure management server 40-4 reflects the acquired airline ticket reservation record in the reservation person information database.

The user visits the departure airport and starts the check-in procedure (see Figure 37).

The check-in terminal 50 acquires airline ticket information (air ticket information for departing flights and connecting flights) and passport information from the user. The check-in terminal 50 performs biometric authentication of the user (one-to-one authentication using the biometric information obtained by photographing the face image of the passport information and the user). When the biometric authentication is successful, the check-in terminal 50 (check-in control unit 702) transmits a "boarding pass request" including the airline ticket information and passport information of the user to the departure management server 40-3 (step S31 ).

Upon receiving the request, the departure management server 40-3 performs boarding pass issuance processing for the user. Specifically, the boarding pass control unit 303 of the departure management server 40-3 confirms the airline ticket information (airline ticket information regarding the departure flight) of the user to determine whether a valid airline ticket has been reserved. verify whether

If the verification succeeds (if the two pieces of airline ticket information match), the boarding pass control unit 303 sends an "entry requirements verification request" containing information about the user's transit airport (airport code), passport information, and health passport information. ” to the verification server 30 (step S32).

Also, the boarding pass control unit 303 of the departure management server 40-3 transmits a "boarding pass issue request" to the departure management server 40-4 of the transit country (step S33). The boarding pass control unit 303 of the departure management server 40-3 transmits a boarding pass issuance request including airline ticket information (airline ticket information of the connecting flight) and passport information to the departure management server 40-4 of the connecting country.

The departure management server 40-4 of the transit country checks the user's airline ticket information (airline ticket information related to the connecting flight) and determines whether a valid airline ticket reservation has been made. The boarding pass control unit 303 of the departure management server 40-4 verifies the airline ticket of the connecting flight (verifies whether or not the reservation is valid).

If the verification succeeds, the boarding pass control unit 303 of the departure management server 40-4 sends the "immigration requirements verification request" including information (airport code) on the user's arrival airport, passport information and health passport information to the verification server. 30 (step S34).

The verification server 30 processes immigration requirement verification requests received from the departure management server 40-3 and the departure management server 40-4 of the country of departure and the country of transit, respectively. The verification server 30 verifies whether the user's passport information or health passport information satisfies the entry requirements of the transit country with respect to the entry requirements verification request received from the departure management server 40-3. The verification server 30 verifies whether or not the user's passport information and health passport information meet the entry requirements of the arrival country in response to the entry requirements verification request received from the departure management server 40-4.

The verification server 30 transmits a response including the verification result (entry permitted, entry denied) to each of the departure management server 40-3 and departure management server 40-4 (steps S35 and S36).

The departure management server 40-4 (boarding pass control unit 303) of the transit country issues a boarding pass (boarding pass for the transit flight) to the user if the verification result of the arrival country is "entry possible". The boarding pass control unit 303 of the departure management server 40-4 transmits the issued boarding pass (boarding pass information) to the departure management server 40-3 of the departure country (step S37).

Departure management server 40-3 (boarding pass control unit 303) of the departure country issues a boarding pass for the departure flight when the verification result of the transit country is "entry permitted" and a boarding pass for the transit flight is issued. issue. The boarding pass control unit 303 of the departure management server 40-3 determines the seat of the user and issues a boarding pass for the departing flight.

When the boarding pass for the departure flight is issued, the boarding pass control unit 303 of the departure management server 40-3 transmits the boarding pass information and the like for the departure flight and the connecting flight to the check-in terminal 50 (step S38).

The check-in terminal 50 issues boarding passes for each departure flight and connecting flight based on the obtained boarding pass information. When the check-in terminal 50 issues boarding passes for multiple countries, the check-in terminal 50 may write detailed information on the verification result of the entry requirements by the verification server 30 on each boarding pass. The check-in terminal 50 may issue a boarding pass on which information such as that shown in FIG. 23B (certificate of vaccination: information such as OK) is described.

In this case, the verification server 30 notifies the departure management server 40-3 (first departure management server 40) of the departure country of detailed information regarding the verification of the entry requirements of the transit country. The verification server 30 also notifies the departure management server 40-4 (second departure management server 40) of the transit country of detailed information on the verification of the entry requirements of the arrival country. The transit country departure management server 40-4 notifies the departure country departure management server 40-3 of detailed information regarding the verification of entry country entry requirements. The departure management server 40-3 of the departure country notifies the check-in terminal 50 of information regarding the verification of the entry requirements of the transit country and the arrival country. A check-in terminal 50 issues a boarding pass for a departing flight describing detailed information on verification of entry requirements of a transit country and a boarding pass for a connecting flight describing detailed information on verification of entry requirements for an arrival country.

Further, when the boarding pass is issued, the boarding pass control unit 303 of the departure management server 40-3 transmits a "passenger information notification" including passport information and health passport information to the CIQ server 60 of the arrival country (step S39). In this way, the departure management server 40-3 (first departure management server 40) of the departure country stores the health passport information, etc. of the user entering the arrival country in the CIQ server 60 installed at the arrival airport of the arrival country. to send.

[System operation]
Next, the operation of the immigration control system according to the third embodiment will be explained. FIG. 38 is a sequence diagram showing an example of the operation of the immigration control system according to the third embodiment. The operation of the immigration control system for issuing a boarding pass will be described with reference to FIG.

Upon receiving a boarding pass issuance request from the check-in terminal 50, the departure management server 40-3 transmits a "request for verifying immigration requirements" to the verification server 30 (step S41).

Also, before and after sending the immigration requirements verification request, the departure management server 40-3 sends a "boarding pass issue request" to the departure management server 40-4 (step S42).

Upon receiving the boarding pass issuance request from the departure management server 40-3, the departure management server 40-4 transmits a "request to verify entry requirements" to the verification server 30 (step S43).

The verification server 30 processes the two immigration requirement verification requests and sends the verification results to the departure management server 40-3 and departure management server 40-4 (steps S44 and S45).

Departure management server 40-4 issues a boarding pass for the connecting flight and transmits the boarding pass information to departure management server 40-3 (step S46 ).

The departure management server 40-3 issues a boarding pass for the departing flight when the verification result regarding the immigration requirements of the transit country is "entry allowed" and a boarding pass for the connecting flight is issued. The departure management server 40-3 transmits the boarding pass information of the departure flight and the connecting flight to the check-in terminal 50 (step S47).

Around the time of sending the boarding pass information, the departure management server 40-3 sends "passenger information notification" to the CIQ server 60 of the arrival country (step S48).

In this way, the reservation server 10 makes it possible to reserve airline tickets for departing flights and connecting flights. A first departure management server 40 that manages departure from the country of departure of the departure flight transmits to the verification server 30 an entry requirement verification request for verification of the entry requirements of the transit country where the departure flight arrives for transit. . The second departure management server 40, which manages departures from the transit country, transmits to the verification server 30 an entry requirements verification request for verifying the entry requirements of the destination country where the transit flight arrives. The second departure management server 40 issues a boarding pass for a connecting flight when it is determined that the user is permitted to enter the country of arrival, and sends the boarding pass information of the issued boarding pass to the first departure management server 40. Send to The first departure management server 40 issues a boarding pass for the departure flight and, if it is determined that the user is allowed to enter the transit country and has issued a boarding pass for the transit flight, (The boarding pass information is sent to the check-in terminal 50).

<Modified example of the third embodiment>
3rd Embodiment demonstrated the case where the same airline took charge of the operation of a departure flight and a connecting flight. However, as described in the second embodiment, different airlines participating in the airline alliance may operate departure flights and connecting flights.

In this case, the joint reservation server 11 acquires airline ticket information for each departure flight and connecting flight. The joint reservation server 11 sends passport information, health passport information, and airline ticket information (for both the departure flight and the connection flight) to the reservation server 10 of the airline that operates the departing flight and the reservation server 10 of the airline that operates the connecting flight. flight ticket information).

The departing flight reservation server 10 transmits the airline ticket reservation record of the departing flight to the departure management server 40 of the departure country, and the connecting flight reservation server 10 transmits the airline ticket reservation record of the connecting flight to the departure management server 40 of the connecting country. Send to

Upon receiving a boarding pass issuance request from the check-in terminal 50 in the departure country, the departure management server 40 in the departure country requests the verification server 30 to verify the immigration requirements for the transit country. Further, the departure management server 40 transmits a boarding pass issuance request for the connecting flight corresponding to the departing flight to the departure management server 40 of the transit country.

Upon receiving the boarding pass issuance request, the departure management server 40 of the transit country requests the verification server 30 to verify the immigration requirements for the arrival country.

The verification server 30 verifies the entry requirements of each transit country and arrival country, and sends the verification results (entry allowed, entry not allowed) to each departure management server 40.

When the departure management server 40 of the transit country receives the verification result that entry is permitted, it issues a boarding pass for the connecting flight and transmits the boarding pass information to the departure management server 40 of the departure country.

When the departure management server 40 of the country of departure receives the verification result that entry is permitted and the boarding pass of the transit country is issued, it issues the boarding pass of the departure flight. The departure management server 40 of the departure country transmits the boarding pass information of the departure flight and the connecting flight to the check-in terminal 50 .

As described above, in the modification of the third embodiment, as shown in FIG. 30, the ticket information for departure flights and connecting flights is sent to the reservation server 10 of each airline. After that, as shown in FIG. 31, the airline ticket reservation record is transmitted from the reservation server 10 to each corresponding departure management server 40 . Thereafter, as shown in FIG. 37, when the check-in terminal 50 of the departure country requests issuance of a boarding pass, the verification server 30 verifies the immigration requirements of the transit country and the arrival country. If the immigration requirements of the transit country and the arrival country are met, the check-in terminal 50 issues boarding passes for the departure flight and the transit flight.

As described above, in the immigration control system according to the third embodiment, when a user enters an arrival country using a connecting flight, not only the entry requirements of the arrival country but also the entry requirements of the transit country are verified. be. Therefore, users who do not meet the entry requirements of the transit and/or destination countries are prevented from leaving the country.

Next, we will explain the hardware of each device that makes up the immigration control system. FIG. 39 is a diagram showing an example of the hardware configuration of the departure management server 40. As shown in FIG.

The departure management server 40 can be configured by an information processing device (so-called computer), and has the configuration illustrated in FIG. For example, the departure management server 40 includes a processor 311, a memory 312, an input/output interface 313, a communication interface 314, and the like. Components such as the processor 311 are connected by an internal bus or the like and configured to be able to communicate with each other.

However, the configuration shown in FIG. 39 is not meant to limit the hardware configuration of the departure management server 40. The departure management server 40 may include hardware (not shown), and may not have the input/output interface 313 if necessary. Also, the number of processors 311 and the like included in the departure management server 40 is not limited to the example shown in FIG.

The processor 311 is, for example, a programmable device such as a CPU (Central Processing Unit), MPU (Micro Processing Unit), DSP (Digital Signal Processor). Alternatively, processor 311 may be a device such as FPGA (Field Programmable Gate Array), ASIC (Application Specific Integrated Circuit), or the like. The processor 311 executes various programs including an operating system (OS).

The memory 312 is RAM (Random Access Memory), ROM (Read Only Memory), HDD (Hard Disk Drive), SSD (Solid State Drive), or the like. The memory 312 stores an OS program, application programs, and various data.

The input/output interface 313 is an interface for a display device and an input device (not shown). The display device is, for example, a liquid crystal display. The input device is, for example, a device such as a keyboard or mouse that receives user operations.

The communication interface 314 is a circuit, module, etc. that communicates with other devices. For example, the communication interface 314 includes a NIC (Network Interface Card) or the like.

The functions of the departure management server 40 are realized by various processing modules. The processing module is implemented by the processor 311 executing a program stored in the memory 312, for example. Also, the program can be recorded in a computer-readable storage medium. The storage medium can be non-transitory such as semiconductor memory, hard disk, magnetic recording medium, optical recording medium, and the like. That is, the present invention can also be embodied as a computer program product. Also, the program can be downloaded via a network or updated using a storage medium storing the program. Furthermore, the processing module may be realized by a semiconductor chip.

Note that the reservation server 10, the authentication server 20, and the like can also be configured by an information processing device in the same manner as the departure management server 40, and the basic hardware configuration thereof is the same as that of the departure management server 40, so description thereof will be omitted. .

The departure management server 40, which is an information processing device, is equipped with a computer, and the functions of the departure management server 40 can be realized by causing the computer to execute a program. Further, the departure management server 40 executes the control method of the departure management server 40 by the program.

[Modification]
The configuration, operation, and the like of the immigration control system described in the above embodiment are examples, and are not intended to limit the configuration and the like of the system.

In the above embodiment, the case where the user travels across countries using an airplane has been explained. However, the immigration control system disclosed in the present application can be applied even when the user travels across countries by ship.

In the above embodiment, we explained the case where digital information (such as vaccination certificates) mainly stored in a digital wallet is provided to the system. However, all or part of the information need not be stored in a digital wallet. As long as the user can provide the system (reservation server 10) with a passport, vaccination certificate, etc., such information may be managed by any means.

In the above-described embodiment, the check-in terminal 50 identifies the user by executing authentication (one-to-one authentication) using the biometric information of the user performing the check-in procedure and the biometric information written in the passport. explained. Here, the check-in terminal 50 can identify the user by storing the airline ticket information (ticket information, reservation information) in addition to the user's biometric information, passport information, health passport information, etc. in the authentication server 20. may Specifically, the check-in terminal 50 transmits to the authentication server 20 the biometric information of the user who desires the check-in procedure. The authentication server 20 executes biometric authentication (one-to-N authentication) using the acquired biometric information and the pre-registered biometric information. The authentication server 20 transmits the passport information and airline ticket information of the successfully authenticated user to the check-in terminal 50 . The check-in terminal 50 may transmit a boarding pass issuance request including the acquired passport information and airline ticket information to the departure management server 40 . Note that the check-in terminal 50 may identify the user using passport information or the like without executing biometric authentication (face authentication).

In the above embodiment, after the check-in procedure is completed (after the boarding pass is issued), the user operates the terminal 70 to register the use of biometric authentication with the authentication server 20. bottom. However, registration regarding the use of biometric authentication may be performed at the check-in terminal 50 . In this case, the check-in terminal 50 may transmit the user's biometric information, passport information, boarding pass information, health passport information, and the like to the authentication server 20 . The biometric information registered in the authentication server 20 may be biometric information acquired by the check-in terminal 50 (a facial image obtained by photographing the user or a facial image written on a passport).

In the above embodiment, the explanation was given on the premise that the authentication server 20 and the CIQ server 60 operate independently. However, these servers may work together. For example, the authentication server 20 may store the user's biometric information and passport information, and obtain the health passport information from the CIQ server 60 .

In the above embodiment, the user uses the check-in terminal 50 to perform the check-in procedure. However, the user may perform online check-in using a smartphone, PC (Personal Computer), or the like. That is, 24 hours before departure of the reserved aircraft, the user may start the check-in procedure using a smartphone or the like and complete the procedure. In this case, before the user arrives at the airport, an immigration requirements verification request is sent from the departure management server 40 to the verification server 30 . Further, among users who have completed the online check-in procedure, those who wish may issue a paper ticket (boarding pass) at the check-in terminal 50 .

Also, by completing the check-in procedure online, it is possible to reduce the burden on the airline (burden on the airline staff, etc.). Specifically, when the check-in procedure requires confirmation of the user's possession of the health passport information, the staff must confirm the health passport information at the check-in counter. In such a situation, online check-in using a smartphone or the like cannot be used, so the online check-in must be suspended. However, even when the possession of the health passport information is requested, the departure management server 40 stores the health passport information as disclosed in the present application, so that the request can be easily met. Specifically, the departure management server 40 can issue a boarding pass to a user who has health passport information by refusing to issue a boarding pass to a user who does not have health passport information. In other words, airlines can operate online check-in because there is no need for manual verification of health passport information at check-in counters. As a result, the burden on the airline staff can be reduced.

Furthermore, in the immigration control system disclosed in the present application, it is possible to easily confirm that the user has information other than the health passport information on the terminal 70. For example, when booking an airline ticket, information on a specific application installed in the terminal 70 (for example, the name and version of the application) can be registered in the reservation server 10 . Specifically, the user (terminal 70) can register information on an application for health management and an application for confirming contact with a patient suffering from an infectious disease in the reservation server 10. FIG. In the immigration control system disclosed in the present application, it is possible to automatically (without human intervention) confirm that the above applications are installed in the terminal 70 . Specifically, the installation of the above application may be included in the requirements for the departure management server 40 to issue a boarding pass. Alternatively, the authentication server 20 may treat the authentication request (authentication request from the authentication terminal 51) of the user who owns the terminal 70 in which the application is not installed as "authentication failure". With such measures, the immigration control system disclosed in the present application can automatically confirm whether or not the application required for immigration has already been installed on the terminal 70 of the user.

The departure management server 40 may notify the check-in terminal 50 of the reason why the boarding pass cannot be issued, when the boarding pass cannot be issued (when a negative response is sent to the boarding pass issuance request). For example, the departure management server 40 may notify the check-in terminal 50 of reasons such as that a valid airline ticket is not registered (no valid reservation), or that entry requirements for the country of arrival have not been met. In this case, the check-in terminal 50 may notify the user of the reason for the notification.

In the above embodiment, a case has been described in which airline ticket reservation information is transferred from the reservation server 10 to the departure management server 40 a predetermined time (24 hours) before the departure of the aircraft. However, at the timing when the check-in procedure becomes possible before the elapse of a predetermined time (24 hours before) and the check-in procedure is performed using the check-in terminal 50 or online check-in, the airline ticket reservation information may be transferred.

In the second embodiment, a case has been described in which the joint reservation server 11 realizes reservations for codeshare flights. However, reservations for code-share flights may be made by the reservation server 10 managed by any one of the airlines jointly operating the code-share flights. In this case, the reservation server 10 that has accepted the reservation for the codeshare flight sends the ticket purchaser's passport information and ticket information to the reservation server 10 managed by another airline (another airline jointly operating the codeshare flight). Information and health passport information should be notified.

In the third embodiment, it was explained that the departure management server 40 of the country of departure and the departure management server 40 of the transit country each transmit an entry requirements verification request to the verification server 30 . However, either one of the two departure management servers 40 may collectively transmit the entry requirement verification requests regarding the entry requirements of the transit country and the arrival country to the verification server 30 . In this case, the verification server 30 collects the verification results regarding the country of transit and the country of arrival and transmits them to the departure management server 40, which is the source of the immigration requirement verification request. For example, consider a case where the departure management server 40 of the country of departure collectively transmits an immigration requirement verification request to the verification server 30 . In this case, the departure management server 40 of the departure country transmits a boarding pass issuance request to the departure management server 40 of the transit country, acquires the boarding pass (boarding pass information of the connecting flight) from the server, and sets the transit country and arrival date. Issue two boarding passes if entry into the country is permitted. In this case, the departure management server 40 of the transit country does not need to send an entry requirements verification request to the verification server 30 because the departure management server 40 of the departure country has sent the entry requirements verification request. After confirming the validity of the airline ticket, the departure management server 40 of the transit country may transmit the boarding pass information of the connecting flight to the departure management server 40 of the departure country.

In the third embodiment, a case has been described in which the departure management server 40 in the country of departure sends a passenger information notification to the CIQ server 60 in the country of arrival after issuing the boarding passes for the departure flight and the connecting flight. However, the departure management server 40 of the transit country may transmit the passenger information notification to the CIQ server 60 of the arrival country. In this case, the departure management server 40 of the departure country notifies the departure management server 40 of the transit country that two boarding passes have been issued. In response to receiving the notification, the transit country departure management server 40 transmits a passenger information notification to the CIQ server 60 . At this time, it is desirable that the departure management server 40 of the connecting country send the passenger information notification to the CIQ server 60 after the connecting flight has departed.

In the third embodiment, the case where the passenger information notification is sent to the CIQ server 60 of the arrival country has been described, but the passenger information may also be sent to the CIQ server 60 of the transit country. In this case, the departure management server 40 of the departure country transmits a passenger information notification regarding the departure flight to the CIQ server 60 of the transit country, and the departure management server 40 of the transit country sends the CIQ server 60 of the arrival country a boarding notification regarding the transit flight. You may send a person information notification. Moreover, it is preferable that the departure management server 40 of the departure country and the departure management server 40 of the connecting country each transmit the passenger information notification to the CIQ server 60 after the departure flight and the connecting flight depart. As described above, this is to avoid a situation in which the user who is reported to the transit country and arrival country as the user boarding the aircraft is different from the user who actually arrived.

In the third embodiment, the check-in terminal 50 may directly transmit a boarding pass issuance request (request for issuing a boarding pass for a connecting flight) to the departure management server 40-4 of the connecting country. The departure management server 40-4 acquires the verification result of the entry requirements of the country of arrival, issues a boarding pass (boarding pass for a connecting flight) for the user permitted to enter the country, and sends the boarding pass information to the check-in terminal 50. You may send. In this case, the check-in terminal 50 acquires the boarding pass information of the departure flight from the departure management server 40-3 of the departure country.

In the third embodiment, the case of entering the arrival country via a transit country has been explained. Here, the immigration control system disclosed in the present application operates in the same manner when entering the arrival country via two or more transit countries. For example, consider a case of passing through two transit countries. In this case, the departure management server 40 of the country of departure sends to the verification server 30 an entry requirements verification request for the entry requirements of the first transit country. The departure management server 40 of the first transit country transmits an entry requirement verification request regarding the entry requirements of the next transit country to the verification server 30, and if the user's entry is permitted, the boarding pass (first transit flight boarding pass). The departure management server 40 of the second transit country transmits an entry requirement verification request regarding the entry requirements of the final arrival country to the verification server 30, and if the user is permitted to enter the country, the boarding pass (second transit issue a boarding pass for the flight. The departure management server 40 of the departure country issues three boarding passes (boarding pass for three boarding passes) if boarding passes for two connecting flights are issued and entry to the first transit country is permitted. information to the check-in terminal 50).

In the above embodiment, the user accesses the reservation server 10 managed by the airline to reserve (purchase) an airline ticket. However, the user can also reserve an airline ticket from a WEB (web) site or the like operated and managed by a travel agency. In this case, the server of the travel agency should notify the reservation server 10 of the airline corresponding to the reserved airline ticket of the ticket purchaser's passport information, airline ticket information, health passport information, and the like.

In the above embodiment, when the authentication server 20 processes an authentication request, a case has been described where authentication success or authentication failure is determined using the passport information, health passport information, etc. of the person to be authenticated. However, the determination may be made at the authentication terminal 51 . That is, the authentication server 20 transmits to the authentication terminal 51 the passport information, health passport information, etc. of the user specified by the verification process using biometric information. The authentication terminal 51 may determine whether or not to provide the service to the person to be authenticated based on the received passport information or the like.

In the above embodiment, a case has been described in which feature values generated from face images are transmitted and received between servers. However, face images may be transmitted and received between servers. In this case, the server on the receiving side may generate a feature amount from the face image and use it for subsequent processing. Alternatively, biometric information stored in various databases may be feature amounts or face images. When face images are stored, feature amounts may be generated from the face images as needed. Alternatively, both face images and feature amounts may be stored in the database.

In the above embodiment, the case where various databases are configured inside each server has been described, but the databases may be configured in an external database server or the like. That is, some functions of each server may be implemented in another server. More specifically, if the above-described "reservation record control section (reservation record control means)", "boarding pass control section (boarding pass control means)", etc. are implemented in any device included in the system good.

The form of data transmission and reception between each device (reservation server 10, authentication server 20, verification server 30, etc.) is not particularly limited, but the data transmitted and received between these devices may be encrypted. Passport information and the like are transmitted and received between these devices, and in order to properly protect personal information, it is desirable that encrypted data be transmitted and received.

In the flowcharts (flowcharts, sequence diagrams) used in the above explanation, multiple steps (processes) are described in order, but the execution order of the steps executed in the embodiment is not limited to the described order. In the embodiment, the order of the illustrated steps can be changed within a range that does not interfere with the content, such as executing each process in parallel.

The above embodiments have been described in detail to facilitate understanding of the disclosure of the present application, and are not intended to require all the configurations described above. Also, when a plurality of embodiments are described, each embodiment may be used alone or in combination. For example, it is possible to replace part of the configuration of the embodiment with the configuration of another embodiment, or to add the configuration of another embodiment to the configuration of the embodiment. Furthermore, additions, deletions, and replacements of other configurations are possible for some of the configurations of the embodiments.

From the above description, the industrial applicability of the present invention is clear, and the present invention can be suitably applied to an immigration control system for users of aircraft.

Some or all of the above embodiments may also be described in the following additional remarks, but are not limited to the following.
[Appendix 1]
a departure management server for managing the departure of a user and storing health passport information relating to the health of said user who has booked an airline ticket;
a validation server that validates each country's entry requirements;
including
The departure management server transmits to the verification server an immigration requirements verification request including at least the health passport information of the user who performs check-in procedures;
The verification server verifies whether the health passport information satisfies the entry requirements of the country of arrival of the user, and transmits the verification result to the departure management server;
The system, wherein the departure management server issues a boarding pass to the user when it is determined that the user is allowed to enter the country of arrival.
[Appendix 2]
further comprising a check-in terminal for obtaining ticket information relating to a ticket booked by the user;
The check-in terminal transmits a boarding pass issuance request including the airline ticket information to the departure management server,
The departure management server transmits boarding pass information related to the issued boarding pass to the check-in terminal when it is determined that the airline ticket information is valid and the user is allowed to enter the arrival country. , Supplement 1.
[Appendix 3]
further comprising a reservation server facilitating reservation of said airline ticket and storing at least said health passport information;
3. The system according to claim 2, wherein the reservation server transmits at least the health passport information to the departure management server a predetermined time before departure of an aircraft corresponding to the reserved airline ticket.
[Appendix 4]
further comprising a joint reservation server for realizing reservations for codeshare flights jointly operated by multiple airlines;
The joint reservation server transmits at least the health passport information of the user who has reserved the code-share flight to the reservation servers corresponding to each of the plurality of airlines operating the code-share flight,
4. The system of Claim 3, wherein the reservation servers corresponding to each of the plurality of airlines transmit at least the health passport information to the departure management server corresponding to the reservation servers of each of the plurality of airlines.
[Appendix 5]
The departure management server is installed at the arrival airport of the arrival country, and is a CIQ (Customs Immigration Quarantine) server that performs processing related to customs, immigration control, and quarantine when the user enters the country. 5. The system according to any one of the appendices 1 to 4, wherein said health passport information of a user is transmitted.
[Appendix 6]
The verification server notifies the departure management server of detailed information regarding the verification of the entry requirements;
The departure management server notifies the check-in terminal of detailed information regarding verification of the entry requirements;
3. The system of Claim 2, wherein the check-in terminal issues a boarding pass containing detailed information regarding verification of the entry requirements.
[Appendix 7]
The reservation server enables reservation of airline tickets for departure flights and connecting flights,
A first departure management server that manages departure from a departure country from which the departure flight departs, transmits the entry requirements verification request regarding verification of entry requirements of a transit country to which the departure flight arrives for transit, to the verification server. send to
A second departure management server that manages departures from the transit country transmits to the verification server the entry requirements verification request for verification of entry requirements of the destination country where the transit flight arrives,
The second departure management server issues a boarding pass for the connecting flight when it is determined that the user is allowed to enter the arrival country, and transfers the boarding pass information of the issued boarding pass to the second departure management server. 1 to the departure management server,
The first departure management server issues a boarding pass for the departure flight if the user is determined to be allowed to enter the transit country and a boarding pass for the transit flight has been issued, and 4. The system of clause 3, issuing boarding passes for outgoing flights and said connecting flights.
[Appendix 8]
The first departure management server is a CIQ (Customs Immigration Quarantine) server that is installed at the arrival airport of the arrival country and performs processing related to customs, immigration control, and quarantine when the user enters the country. 8. The system of claim 7, wherein the health passport information of the user entering the country is transmitted.
[Appendix 9]
The verification server notifies the first departure management server of detailed information regarding the verification of entry requirements of the transit country, and notifies the second departure management server of detailed information regarding the verification of entry requirements of the destination country. death,
The second departure management server notifies the first departure management server of detailed information regarding verification of entry requirements of the arrival country;
The first departure management server notifies the check-in terminal of detailed information regarding verification of the entry requirements of each of the transit country and the arrival country;
The check-in terminal provides a boarding pass for the departing flight containing detailed information regarding verification of entry requirements of the transit country and a boarding pass for the connecting flight containing detailed information regarding verification of entry requirements for the destination country. 9. The system of clause 7 or 8, wherein the system issues a
[Appendix 10]
an authentication server that stores first biometric information of the user;
an authentication terminal that acquires second biometric information of the user and transmits an authentication request including the acquired biometric information to the authentication server;
further comprising
The authentication server performs biometric authentication using the first biometric information and the second biometric information, and transmits an authentication result to the authentication terminal;
10. The system according to any one of appendices 1 to 9, wherein the authentication terminal provides a service to the successfully authenticated user.
[Appendix 11]
11. The system of any one of the clauses 1-10, wherein the health passport information includes at least one of a vaccination certificate, a negative certificate and a recovery certificate for an infectious disease.
[Appendix 12]
a storage unit for storing health passport information relating to the health of a user who has booked an airline ticket;
a transmission unit for transmitting an entry requirements verification request including at least the health passport information of the user who checks in to a verification server for verifying the entry requirements of each country;
a receiving unit that receives verification results from the verification server as to whether or not the health passport information satisfies the entry requirements of the country of arrival of the user;
a boarding pass control unit that issues a boarding pass to the user when the user is determined to be allowed to enter the country of arrival;
Departure management server, comprising:
[Appendix 13]
In the departure management server,
remember health passport information about the health of the user who booked the ticket,
sending an entry requirements verification request including at least said health passport information of said user checking in to a verification server for verifying the entry requirements of each country;
receiving from the verification server a verification result as to whether the health passport information satisfies the entry requirements of the country of arrival of the user;
A control method for a departure management server, wherein a boarding pass is issued to the user when the user is determined to be allowed to enter the arrival country.
[Appendix 14]
On the computer installed in the departure management server,
a process of storing Health Passport information relating to the health of the user who booked the airline ticket;
a process of sending an entry requirements verification request including at least the health passport information of the user who performs the check-in procedure to a verification server that verifies the entry requirements of each country;
a process of receiving, from the verification server, a verification result as to whether the health passport information satisfies the entry requirements of the country of arrival of the user;
a process of issuing a boarding pass to the user when the user is determined to be allowed to enter the country of arrival;
A computer-readable storage medium that stores a program for executing

It should be noted that each disclosure of the above cited prior art documents shall be incorporated into this document by citation. Although the embodiments of the present invention have been described above, the present invention is not limited to these embodiments. Those skilled in the art will appreciate that these embodiments are illustrative only and that various modifications can be made without departing from the scope and spirit of the invention. That is, the present invention naturally includes various variations and modifications that can be made by those skilled in the art according to the entire disclosure including claims and technical ideas.

10 reservation server 10-1 reservation server 10-2 reservation server 11 joint reservation server 20 authentication server 30 verification server 40 departure management server 40-1 departure management server 40-2 departure management server 40-3 departure management server 40-4 departure management Server 50 Check-in terminal 51 Authentication terminal 51-1 Authentication terminal 51-2 Authentication terminal 60 CIQ server 70 Terminal 101 Departure management server 102 Verification server 201 Communication control unit 202 Reservation control unit 203 Reservation record transmission unit 204 Storage unit 211 Communication control unit 212 reservation control unit 213 reservation record transmission unit 214 storage unit 301 communication control unit 302 reservation record control unit 303 boarding pass control unit 304 storage unit 311 processor 312 memory 313 input/output interface 314 communication interface 401 communication control unit 402 immigration requirements verification unit 403 Storage unit 501 Communication control unit 502 Use registration control unit 503 Authentication unit 504 Storage unit 601 Communication control unit 602 Passenger information processing unit 603 Storage unit 701 Communication control unit 702 Check-in control unit 703 Storage unit 801 Communication control unit 802 Biometric information acquisition Unit 803 Authentication request unit 804 Storage unit 901 Communication control unit 902 Electronic wallet control unit 903 Air ticket reservation unit 904 Usage registration unit 905 Storage unit

Claims

a departure management server for managing the departure of a user and storing health passport information relating to the health of said user who has booked an airline ticket;
a validation server that validates each country's entry requirements;
including
The departure management server transmits to the verification server an immigration requirements verification request including at least the health passport information of the user who performs check-in procedures;
The verification server verifies whether the health passport information satisfies the entry requirements of the country of arrival of the user, and transmits the verification result to the departure management server;
The system, wherein the departure management server issues a boarding pass to the user when it is determined that the user is permitted to enter the country of arrival.
further comprising a check-in terminal for obtaining ticket information relating to a ticket booked by the user;
The check-in terminal transmits a boarding pass issuance request including the airline ticket information to the departure management server,
The departure management server transmits boarding pass information related to the issued boarding pass to the check-in terminal when it is determined that the airline ticket information is valid and the user is allowed to enter the arrival country. , the system of claim 1.
further comprising a reservation server facilitating reservation of said airline ticket and storing at least said health passport information;
3. The system according to claim 2, wherein said reservation server transmits at least said health passport information to said departure management server a predetermined time before departure of an aircraft corresponding to said reserved airline ticket.
further comprising a joint reservation server for realizing reservations for codeshare flights jointly operated by multiple airlines;
The joint reservation server transmits at least the health passport information of the user who has reserved the code-share flight to the reservation servers corresponding to each of the plurality of airlines operating the code-share flight,
4. The system of claim 3, wherein the reservation servers corresponding to each of the plurality of airlines transmit at least the health passport information to the departure management server corresponding to the reservation servers of each of the plurality of airlines.
The departure management server is installed at the arrival airport of the arrival country, and is a CIQ (Customs Immigration Quarantine) server that performs processing related to customs, immigration control, and quarantine when the user enters the country. 5. The system according to any one of claims 1 to 4, wherein said health passport information of a user is transmitted.
The verification server notifies the departure management server of detailed information regarding the verification of the entry requirements;
The departure management server notifies the check-in terminal of detailed information regarding verification of the entry requirements;
3. The system of claim 2, wherein the check-in terminal issues a boarding pass containing detailed information regarding verification of the entry requirements.
The reservation server enables reservation of airline tickets for departure flights and connecting flights,
A first departure management server that manages departure from a departure country from which the departure flight departs, transmits the entry requirements verification request regarding verification of entry requirements of a transit country to which the departure flight arrives for transit, to the verification server. send to
A second departure management server that manages departures from the transit country transmits to the verification server the entry requirements verification request for verification of entry requirements of the destination country where the transit flight arrives,
The second departure management server issues a boarding pass for the connecting flight when it is determined that the user is allowed to enter the arrival country, and transfers the boarding pass information of the issued boarding pass to the second departure management server. 1 to the departure management server,
The first departure management server issues a boarding pass for the departure flight if the user is determined to be allowed to enter the transit country and a boarding pass for the transit flight has been issued, and 4. The system of claim 3, issuing boarding passes for outgoing flights and said connecting flights.
The first departure management server is a CIQ (Customs Immigration Quarantine) server that is installed at the arrival airport of the arrival country and performs processing related to customs, immigration control, and quarantine when the user enters the country. 8. The system of claim 7, transmitting the health passport information of the user entering the country.
The verification server notifies the first departure management server of detailed information regarding the verification of entry requirements of the transit country, and notifies the second departure management server of detailed information regarding the verification of entry requirements of the destination country. death,
The second departure management server notifies the first departure management server of detailed information regarding verification of entry requirements of the arrival country;
The first departure management server notifies the check-in terminal of detailed information regarding verification of the entry requirements of each of the transit country and the arrival country;
The check-in terminal provides a boarding pass for the departing flight containing detailed information regarding verification of entry requirements of the transit country and a boarding pass for the connecting flight containing detailed information regarding verification of entry requirements for the destination country. 9. A system according to claim 7 or 8, for issuing tickets for
an authentication server that stores first biometric information of the user;
an authentication terminal that acquires second biometric information of the user and transmits an authentication request including the acquired biometric information to the authentication server;
further comprising
The authentication server performs biometric authentication using the first biometric information and the second biometric information, and transmits an authentication result to the authentication terminal;
10. The system according to any one of claims 1 to 9, wherein said authentication terminal provides services to said user who has been successfully authenticated.
11. The system according to any one of claims 1 to 10, wherein the health passport information includes at least one of a vaccination certificate, a negative certificate and a recovery certificate regarding an infectious disease.
a storage unit for storing health passport information relating to the health of a user who has booked an airline ticket;
a transmission unit for transmitting an entry requirements verification request including at least the health passport information of the user who checks in to a verification server for verifying the entry requirements of each country;
a receiving unit that receives verification results from the verification server as to whether or not the health passport information satisfies the entry requirements of the country of arrival of the user;
a boarding pass control unit that issues a boarding pass to the user when the user is determined to be allowed to enter the country of arrival;
Departure management server, comprising:
In the departure management server,
remember health passport information about the health of the user who booked the ticket,
sending an entry requirements verification request including at least said health passport information of said user checking in to a verification server for verifying the entry requirements of each country;
receiving from the verification server a verification result as to whether the health passport information satisfies the entry requirements of the country of arrival of the user;
A control method for a departure management server, wherein a boarding pass is issued to the user when the user is determined to be allowed to enter the arrival country.
On the computer installed in the departure management server,
a process of storing Health Passport information relating to the health of the user who booked the airline ticket;
a process of sending an entry requirements verification request including at least the health passport information of the user who performs the check-in procedure to a verification server that verifies the entry requirements of each country;
a process of receiving, from the verification server, a verification result as to whether the health passport information satisfies the entry requirements of the country of arrival of the user;
a process of issuing a boarding pass to the user when the user is determined to be allowed to enter the country of arrival;
A computer-readable storage medium that stores a program for executing