WO2023145081A1

WO2023145081A1 - System, server device, control method for server device, and storage medium

Info

Publication number: WO2023145081A1
Application number: PCT/JP2022/003624
Authority: WO
Inventors: 隆森川; 裕之岡田
Original assignee: 日本電気株式会社
Priority date: 2022-01-31
Filing date: 2022-01-31
Publication date: 2023-08-03

Abstract

Provided is a system that reduces the burden on a user when the user enters a facility such a casino. When first user identification confirmation, which is required before a user enters a facility, is carried out, a facility server sends, to a first PF server, a first electronic certificate stored in an identification card of the user. When a second or subsequent user identification confirmation, which is required when the user enters the facility, is carried out, the facility server sends, to the first PF server, a second electronic certificate stored in the identification card of the user. The first PF server associates and stores first identification information of the first electronic certificate and second identification information of the second electronic certificate. The first PF server extracts the second identification information from the second electronic certificate at a time of the second or subsequent identity confirmation. The first PF server uses at least the first identification information corresponding to the extracted second identification information to perform processing related to the second or subsequent identity confirmation.

Description

SYSTEM, SERVER DEVICE, CONTROL METHOD FOR SERVER DEVICE, AND STORAGE MEDIUM

The present invention relates to a system, a server device, a server device control method, and a storage medium.

There is an admission control system that manages admission to amusement facilities such as casinos.

For example, Patent Literature 1 states that admission to amusement facilities is appropriately managed. The entrance management system of Patent Literature 1 includes face authentication means, user determination means, entrance number determination means, and entrance availability determination means. The face authentication means performs face authentication based on the face image of the user entering the facility and the face image obtained from the user's identification card. The user determination means determines whether or not the user is a user requiring admission management to the facility, based on the identification card type of the identification card. The number-of-entry determining means determines whether or not the user's number of times of entering the facility exceeds the limit of the number of times of entering the facility when the user is a user who needs to be managed to enter the facility. The admission decision means decides whether or not the user is allowed to enter the facility based on the face recognition result and the admission limit decision result. Furthermore, Patent Document 1 describes that identity verification and number of times verification are required to enter a casino facility (see paragraphs [0051] to [0058] of the same document).

Patent Document 2 states that entry control to casino facilities is made more efficient. In Patent Literature 2, in a casino facility, as pre-registration, a user has his or her My Number card read, enters various passwords, pays an entrance fee, and has his or her own biometric information read via an operation terminal. The information processing device executes personal authentication processing, confirmation processing for limiting the number of times of admission, and processing for collecting admission fees, and stores the confirmation results of each processing in the confirmation result database in association with the biometric information of the user. A user who has performed pre-registration arrives at the entrance gate and has his/her biometric information read through the operation terminal. The information processing device refers to the confirmation results stored in the confirmation result database, and the confirmation results associated with the read biometric information are "identity confirmed", "number of times limited OK", and "entrance fee collected". , then permission to enter the casino facility.

JP 2021-144757 A JP 2021-135813 A

As disclosed in Patent Literature 1 and Patent Literature 2, when entering a facility such as a casino, identity verification and number of times verification are required. In this respect, Patent Document 1 requires the user to input a 6-digit to 16-digit personal identification number for reading out the signature electronic certificate every time the user is authenticated. However, it is a heavy burden for the user to input a password with a large number of digits every time he/she enters the casino facility.

The main object of the present invention is to provide a system, a server device, a server device control method, and a storage medium that contribute to reducing the burden on users when entering facilities such as casinos.

According to a first aspect of the present invention, a facility server that controls a user to enter a facility, and a first platform server that performs an authentication procedure using an electronic certificate stored in an identification card. and the facility server transmits the first electronic certificate stored in the identification card to the first platform server at the time of initial identity verification required before the user enters the facility. and sending the second electronic certificate stored in the identification card to the first platform server at the time of the second or later identity verification required when the user enters the facility, The first platform server associates and stores the first identification information of the first electronic certificate and the second identification information of the second electronic certificate, and at the time of identity verification after the second time , extracting the second identification information from the second electronic certificate, and using at least the first identification information corresponding to the extracted second identification information, the second and subsequent identity verification processes A system is provided for performing the

According to the second aspect of the present invention, at the time of initial identification required before the user enters the facility, the first electronic certificate stored in the identification card is stored in the identification card. a personal identification processing unit that transmits to a first platform server that performs an authentication procedure using an electronic certificate obtained from the user; an admission confirmation processing unit that transmits a second electronic certificate stored in a certificate to the first platform server.

According to the third aspect of the present invention, in the server device, the first electronic certificate stored in the identification card is used as the identification card at the time of initial identity verification required before the user enters the facility. to the first platform server that performs the authentication procedure using the electronic certificate stored in the certificate, and when the user enters the facility for the second and subsequent identity verifications, the identification card A method for controlling a server device is provided for transmitting a stored second digital certificate to the first platform server.

According to a fourth aspect of the present invention, a computer installed in a server device stores a first electronic certificate stored in an identification card at the time of initial identity verification required before a user enters a facility. to the first platform server that performs the authentication procedure using the electronic certificate stored in the identification card, and the second and subsequent identity verifications required when the user enters the facility. Sometimes, a computer-readable storage medium is provided storing a program for executing a process of transmitting a second digital certificate stored in said identification card to said first platform server.

Each aspect of the present invention provides a system, a server device, a server device control method, and a storage medium that contribute to reducing the burden on users when entering facilities such as casinos. In addition, the effect of this invention is not limited above. Other effects may be achieved by the present invention instead of or in addition to this effect.

FIG. 1 is a diagram for explaining an overview of one embodiment. FIG. 2 is a flow chart for explaining the operation of one embodiment. FIG. 3 is a diagram showing an example of a schematic configuration of an entrance management system according to the first embodiment. FIG. 4 is a diagram for explaining the operation of the entrance management system according to the first embodiment. FIG. 5 is a diagram for explaining the operation of the entrance management system according to the first embodiment. FIG. 6 is a diagram for explaining the operation of the entrance management system according to the first embodiment. 7 is a diagram illustrating an example of a processing configuration of a reception terminal according to the first embodiment; FIG. FIG. 8 is a diagram illustrating an example of a display on the reception terminal according to the first embodiment; FIG. 9 is a diagram illustrating an example of a display on the reception terminal according to the first embodiment; 10A and 10B are diagrams showing examples of displays on the reception terminal according to the first embodiment. 11 is a diagram illustrating an example of a processing configuration of an entrance terminal according to the first embodiment; FIG. FIG. 12 is a diagram illustrating an example of a display on an entrance terminal according to the first embodiment; FIG. 13 is a diagram illustrating an example of a display of an entrance terminal according to the first embodiment; FIG. 14 is a diagram showing an example of the processing configuration of the casino server according to the first embodiment. FIG. 15 is a diagram illustrating an example of a user information database according to the first embodiment; 16 is a flowchart illustrating an example of the operation of an entry confirmation processing unit according to the first embodiment; FIG. 17 is a diagram illustrating an example of a processing configuration of the first PF server according to the first embodiment; FIG. FIG. 18 is a diagram showing an example of a user management database according to the first embodiment; 19 is a diagram illustrating an example of a processing configuration of a management server according to the first embodiment; FIG. FIG. 20 is a diagram showing an example of a visitor information database according to the first embodiment. 21 is a diagram illustrating an example of a processing configuration of a second PF server according to the first embodiment; FIG. FIG. 22 is a diagram showing an example of a visitor management database according to the first embodiment. 23 is a diagram illustrating an example of a processing configuration of a certificate authority server according to the first embodiment; FIG. 24 is a sequence diagram illustrating an example of the operation of the entrance management system according to the first embodiment; FIG. 25 is a sequence diagram illustrating an example of the operation of the entrance management system according to the first embodiment; FIG. FIG. 26 is a diagram showing an example hardware configuration of a casino server according to the disclosure of the present application.

First, an outline of one embodiment will be described. It should be noted that the drawing reference numerals added to this outline are added to each element for convenience as an example to aid understanding, and the description of this outline does not intend any limitation. Also, unless otherwise specified, the blocks depicted in each drawing represent the configuration of each function rather than the configuration of each hardware unit. Connecting lines between blocks in each figure include both bi-directional and uni-directional. The unidirectional arrows schematically show the flow of main signals (data) and do not exclude bidirectionality. In addition, in the present specification and drawings, elements that can be described in the same manner can be omitted from redundant description by assigning the same reference numerals.

A system according to one embodiment includes a facility server 101 and a first platform server 102 (see FIG. 1). The facility server 101 performs control for users to enter the facility. The first platform server 102 performs an authentication procedure using the electronic certificate stored in the identification card. The facility server 101 transmits the first electronic certificate stored in the identification card to the first platform server 102 at the time of initial identity verification required before the user enters the facility (step in FIG. 2). S1). Furthermore, the facility server 101 transmits the second electronic certificate stored in the identification card to the first platform server 102 at the time of the second and subsequent identity verifications required when the user enters the facility ( step S2). The first platform server 102 associates and stores the first identification information of the first electronic certificate and the second identification information of the second electronic certificate. The first platform server 102 extracts the second identification information from the second electronic certificate during the second and subsequent identity verifications. The first platform server 102 uses at least the first identification information corresponding to the extracted second identification information to perform the second and subsequent identity verification processes (execution of identity verification processing; step S3).

In order to enter facilities (eg casinos), identity verification may be required. At that time, for example, personal identification using a first electronic certificate (for example, a signature electronic certificate stored in a My Number card) is required. Here, if the user is required to enter a password with a large number of digits in order to read out the first electronic certificate every time the user enters the facility, the burden on the user increases. Therefore, in the above system, the first identity verification is performed with the first electronic certificate, and the second and subsequent identity verifications are performed with the second electronic certificate linked to the first electronic certificate (for example, the user certificate electronic certificate). The second electronic certificate can be read by a personal identification number with a smaller number of digits or by biometric authentication, thus reducing the burden on the user. In this way, the system according to one embodiment can reduce the user's burden when entering a facility such as a casino.

Specific embodiments will be described in more detail below with reference to the drawings.

[First embodiment]
The first embodiment will be described in more detail with reference to the drawings.

[System configuration]
FIG. 3 is a diagram showing an example of a schematic configuration of an entrance management system (information processing system) according to the first embodiment. An entrance management system according to the first embodiment performs entrance management for facilities in an integrated resort (IR). Also, as shown in FIG. 3, the admission management system includes a plurality of server devices.

Integrated resorts include international conference halls, exhibition facilities, hotels, commercial facilities, restaurants, theaters, movie theaters, amusement parks, sports facilities, spa facilities, casino action areas, etc.

In the first embodiment, the explanation will be given by taking the "Casino action area" as an example of a facility where users enter. However, it goes without saying that the facility that the user enters may be another facility.

Users who enter the casino action area (hereinafter simply referred to as the casino facility or casino) for the first time must undergo identity verification in advance. Specifically, a user (a person wishing to enter) undergoes identity verification using a reception terminal 10 (kiosk terminal) installed in a corner of the integrated resort facility. The initial identity verification must be completed before entering the casino facility.

Identity verification is performed using an identification card issued by a public institution. Specifically, an IC (Integrated Circuit) card storing an electronic certificate is used for identity verification. In the disclosure of the present application, a My Number card will be described as an example of an IC card (identification card) in which an electronic certificate is stored.

The user operates the reception terminal 10 to carry out procedures related to initial identity verification. After completing the initial identification, the user can enter the casino facility through the entrance terminal 20. - 特許庁

When the user enters the casino facility, the admission terminal 20 performs identity verification of the visitor (identity verification for the second and subsequent times) and the number of visits. However, foreigners who do not have a residence in Japan do not need to confirm their identity and number of times.

The confirmation of the number of times is a confirmation as to whether or not the entry limit to the casino facility set by law has been exceeded. For example, there is a short-term limit on the number of visits, such as "the number of times of admission is limited to 3 times in a continuous 7-day period", and a limit of "the number of times of admission is limited to 10 times in a consecutive 28-day period" as a long-term limit. The confirmation as to whether or not there is a conflict is the confirmation of the number of times.

A user who has successfully completed identity verification and number of times verification at the entrance terminal 20 can pass through the gate and enter the casino facility.

As shown in FIG. 3, the entrance management system includes multiple server devices. Specifically, the admission management system includes a casino server 30, a first platform (PF) server 40, a management server 50, a second platform server 60, and a certificate authority server 70. included.

The casino server 30 is a server device managed by a casino operator or the like. The casino server 30 manages casino users. The casino server 30 performs control for the user to enter the casino facility. The casino server 30 corresponds to the facility server 101 described above.

The first PF server 40 is a server device managed by an authentication business that performs authentication work for electronic certificates. The first PF server 40 performs an authentication procedure using the electronic certificate stored in the identification card. More specifically, the first PF server 40 is a device that authenticates electronic certificates requested by casino operators.

The management server 50 is a server device managed by a casino management committee (an administrative body that creates rules regarding casino usage and manages casino business activities by casino operators). The management server 50 manages the usage status of the casino facility. More specifically, the management server 50 checks the number of casino users and manages (stores) the identities of casino users. The management server 50 does not manage the usage status of one casino facility, but manages the usage status of each casino facility (a plurality of casino facilities) that conduct business activities in Japan. That is, the management server 50 confirms the number of visits not only to the casino facility that the user intends to enter, but also to other casino facilities in Japan (confirms the above-described short-term and long-term number of visits).

The second PF server 60 is a server device managed by an authentication business that performs authentication work for electronic certificates. The second PF server 60 performs an authentication procedure using the electronic certificate stored in the identification card. More specifically, the second PF server 60 is a device that performs authentication work for electronic certificates requested by the casino management committee.

The certificate authority server 70 is a server device managed by a corporation called J-LIS (Japan Agency for Local Authority Information Systems), which is jointly operated by the national government and local governments. The certificate authority server 70 verifies the validity of the electronic certificate. More specifically, the certificate authority server 70 is a device that provides a personal authentication service using electronic certificates.

[General operation]
Next, a schematic operation of the entrance management system according to the first embodiment will be described.

<Initial Identity Verification>
With reference to FIG. 4, the general operation of the entrance management system regarding the first personal identification will be described.

A user entering the casino facility for the first time undergoes an initial identity verification at the reception terminal 10. The reception terminal 10 acquires an electronic certificate for signature from the My Number card possessed by the user. The reception terminal 10 transmits an identity verification request including the acquired signature electronic certificate to the casino server 30 (step S01).

The electronic signature certificate is an electronic certificate for signing documents submitted to public institutions, etc. , date of birth, gender, address).

The casino server 30 requests the first PF server 40 to verify the identity of the user. Specifically, the casino server 30 transmits to the first PF server 40 a personal identification request including the signature electronic certificate obtained from the reception terminal 10 (step S02).

Upon receiving the personal identification request, the first PF server 40 requests the certificate authority server 70 to verify the validity of the electronic signature certificate. Specifically, the first PF server 40 transmits a verification request including the issue number of the signature electronic certificate to the certificate authority server 70 (step S03).

The certificate authority server 70 verifies the signature electronic certificate. The certificate authority server 70 transmits the verification result of the electronic certificate for signature (the electronic certificate for signature is valid, the electronic certificate for signature is invalid) to the first PF server 40 (step S04). At that time, if the verification of the electronic certificate for signature is successful, the certificate authority server 70 also sends the issue number of the electronic certificate for user certification linked to the electronic certificate for signature to the first PF. Send to server 40 .

If the signature electronic certificate is valid, the first PF server 40 creates an account for the user (the user entering the casino facility for the first time). In the account, the first PF server 40 has an ID that identifies the user (hereinafter referred to as a user ID), the issue number of the electronic certificate for signature, the issue number of the electronic certificate for user certification, and the person himself/herself. Specific items are associated with each other and stored.

In addition, the personal identification information is information consisting of at least one or a combination of name, date of birth, gender and address. For example, a name or a combination of a name and a date of birth corresponds to personal identification items. Of course, a combination of name, date of birth, sex and address may be the personal identification items.

After that, the first PF server 40 transmits the confirmation result (identity confirmation success, identity confirmation failure) for the identity confirmation request to the casino server 30 (step S05). If the personal identification is successful, the first PF server 40 also transmits the user ID and personal identification items to the casino server 30 .

According to the confirmation result received from the first PF server 40, the casino server 30 transmits a response to the identity confirmation request (identity confirmation success, identity confirmation failure) to the reception terminal 10 (step S06). The casino server 30 also stores the user ID and the like received from the first PF server 40 .

The reception terminal 10 notifies the user of the result of identity verification.

In this way, the casino server 30 uses the first electronic certificate (signature electronic certificate) stored in the identification card (my number card) at the time of initial identity verification required before the user enters the casino facility. ) to the first PF server 40 . The first PF server 40 transmits the first identification information of the first electronic certificate (issuance number of the signature electronic certificate) to the certificate authority server 70 . The certificate authority server 70 verifies the validity of the first electronic certificate based on the first identification information, and if the verification is successful, the second identification information (user (issue number of electronic certificate for proof) to the first PF server 40 . The first PF server 40 uses the first identification information of the first electronic certificate (electronic certificate for signature) and the second identification information of the second electronic certificate (electronic certificate for user proof) as They are associated and stored.

<Confirmation of identity and number of times after the second time when entering the casino facility>
As described above, in order to enter the casino facility, it is necessary to verify the identity of the user and verify the number of visits. The personal identification and the number of times confirmation are performed via the entrance terminal 20 (a terminal installed at the entrance of the casino facility).

The admission terminal 20 acquires an electronic certificate for user verification from the My Number card possessed by the user. The admission terminal 20 transmits an admission confirmation request including the acquired electronic certificate for user verification to the casino server 30 (step S11 in FIG. 5).

In addition, the electronic certificate for user authentication is an electronic certificate used as a means of authenticating the identity of the person, and the personal information of the user (the resident to whom the My Number Card was issued) (so-called basic 4 information; name , date of birth, gender, address).

The admission management system will perform identity verification and number of times verification. The identity confirmation and the number of times confirmation are executed in parallel, but for the sake of convenience, the identity confirmation and the number of times confirmation will be explained separately.

First, with reference to the identity verification flow shown in the lower part of FIG. 6, the general operation of the entrance management system regarding identity verification when entering the casino facility will be described.

After obtaining the electronic certificate for user verification from the admission terminal 20, the casino server 30 requests the first PF server 40 to verify the identity of the person who wishes to enter. Specifically, the casino server 30 transmits to the first PF server 40 a personal identification request including the electronic certificate for user verification obtained from the entrance terminal 20 (step S21).

The first PF server 40 determines whether or not the initial identity verification has been completed for those who wish to enter the casino facility. Specifically, the first PF server 40 uses the issue number of the user-certifying electronic certificate to determine whether or not the account of the person who wishes to enter has been generated.

If an account has been generated, the first PF server 40 requests the certificate authority server 70 to verify the validity of the signature electronic certificate and the user certification electronic certificate. Specifically, the first PF server 40 transmits a verification request including the issue number of the signature electronic certificate and the issue number of the user certification electronic certificate to the certificate authority server 70 (step S22).

The certificate authority server 70 verifies the electronic certificate for signature and the electronic certificate for user certification. The certificate authority server 70 transmits the verification result of the electronic certificate for signature and the electronic certificate for user proof (certificate is valid, certificate is invalid) to the first PF server 40 (step S23).

According to the verification result obtained from the certification authority server 70, the first PF server 40 transmits to the casino server 30 the confirmation result (identity verification success, identity verification failure) for the identity verification request received from the casino server 30 ( step S24). If the personal identification is successful, the first PF server 40 notifies the casino server 30 of the user ID and personal identification information of the person who wishes to enter.

The casino server 30 stores the confirmation results (identity confirmation success, identity confirmation failure) for those who wish to enter the casino facility.

Next, with reference to the flow of confirmation of the number of visits shown in the upper part of FIG. 6, the general operation of the admission management system regarding confirmation of the number of visits to the casino facility will be described.

When the electronic certificate for user verification is obtained from the admission terminal 20, the casino server 30 requests the management server 50 to confirm the number of times the applicant wants to enter. Specifically, the casino server 30 transmits to the management server 50 a number-of-times confirmation request including the electronic certificate for user verification read out from the My Number card (step S31).

The management server 50 requests the second PF server 60 to identify the visitors. Specifically, the management server 50 transmits to the second PF server 60 a visitor identification request including the electronic certificate for user certification obtained from the casino server 30 (step S32).

Upon receiving the visitor identification request, the second PF server 60 requests the certificate authority server 70 to verify the validity of the electronic certificate for user certification. Specifically, the second PF server 60 transmits a verification request including the issue number of the electronic certificate for user certification to the certification authority server 70 (step S33).

The certificate authority server 70 verifies the electronic certificate for user certification. The certificate authority server 70 transmits the verification result of the user certification electronic certificate (the user certification electronic certificate is valid, the user certification electronic certificate is invalid) to the second PF server 60 (step S34). ).

If the user-certifying electronic certificate is valid, the second PF server 60 creates an account for the visitor. The second PF server 60 associates and stores an ID that identifies a visitor (hereinafter referred to as a visitor ID) and an issue number of an electronic certificate for user certification of the visitor.

The second PF server 60 sends a response to the visitor identification request received from the management server 50 (the visitor is identified, the visitor is not identified) to the management server 50 (step S35). When the visitor is identified, the second PF server 60 also transmits the visitor ID of the identified visitor (expected visitor) to the management server 50 .

The management server 50 identifies the user who is subject to admission confirmation (confirmation of the number of times) based on the visitor ID, and confirms the number of times the identified user has used the casino facility. The management server 50 transmits the result of the confirmation of the number of times (user can use the casino facility, user cannot use the casino facility) to the casino server 30 (step S36).

The casino server 30 stores the results of the confirmation of the number of times.

The casino server 30 determines whether or not the user can enter the casino facility at the timing when the result of the identity verification and the result of the number of times verification are complete. The casino server 30 transmits a response to the admission confirmation request (allowed to enter the casino facility, not allowed to enter the casino facility) to the admission terminal 20 (step S12 in FIG. 5).

The entrance terminal 20 controls the gate according to the response to the entrance confirmation request (the user can enter the casino facility, and the user cannot enter the casino facility).

In this way, the casino server 30 performs processing related to confirmation of the number of visits to the casino facility in parallel with the second and subsequent personal identifications. In addition, the casino server 30 uses the second electronic certificate (user-certifying electronic certificate) stored in the My Number Card at the time of identity verification for the second and subsequent times required when the user enters the casino facility. Send to the first PF server 40 . The first PF server 40 extracts the second identification information (issue number) from the second electronic certificate at the time of the second and subsequent identity verification, and at least the first identification corresponding to the extracted issue number. The information (issuance number of electronic certificate for signature) is used to perform processing related to personal identification for the second and subsequent times.

Furthermore, regarding the confirmation of the number of times, the casino server 30 transmits the second electronic certificate to the management server 50. The management server 50 sends a second electronic certificate to the second PF server 60 to request the second PF server 60 to identify a visitor who is going to enter the casino facility. The second PF server 60 transmits the visitor ID of the visitor to the management server 50 when the second electronic certificate is valid. A management server 50 permits a visitor who intends to enter the casino facility to enter the casino when the casino usage history of the user corresponding to the visitor ID does not violate the limit on the number of times of use of the casino facility.

Next, details of each device included in the entrance management system according to the first embodiment will be described.

[Reception terminal]
FIG. 7 is a diagram showing an example of a processing configuration (processing modules) of the reception terminal 10 according to the first embodiment. Referring to FIG. 7 , reception terminal 10 includes communication control section 201 , identity verification control section 202 , and storage section 203 .

The communication control unit 201 is means for controlling communication with other devices. For example, the communication control section 201 receives data (packets) from the casino server 30 . Also, the communication control unit 201 transmits data to the casino server 30 . The communication control unit 201 transfers data received from other devices to other processing modules. The communication control unit 201 transmits data acquired from other processing modules to other devices. In this manner, other processing modules transmit and receive data to and from other devices via the communication control unit 201 . The communication control unit 201 has a function as a receiving unit that receives data from another device and a function as a transmitting unit that transmits data to the other device.

The identity verification control unit 202 is means for controlling identity verification for those who wish to enter the casino facility. More specifically, the identity verification control unit 202 controls the initial identity verification of the person who wishes to enter.

The personal identification control unit 202 uses a GUI (Graphical User Interface) or the like to acquire the user's (applicant's) desire to enter the casino facility. When a user wishes to enter the casino facility, the personal identification control unit 202 acquires an electronic certificate for signature from the My Number card possessed by the user.

For example, the personal identification control unit 202 displays a GUI as shown in FIG. 8 and recognizes that the My Number card has been inserted into an IC (Integrated Circuit) card reader. After that, the personal identification control unit 202 reads the signature electronic certificate from the My Number card.

At this time, it is necessary to enter a personal identification number (password) corresponding to the electronic certificate for signature. character string mixed with alphanumeric characters).

The personal identification control unit 202 attempts to read out the signature electronic certificate from the My Number card using the acquired personal identification number. If the correct personal identification number is entered, the personal identification control unit 202 can read out the signature electronic certificate.

The identity verification control unit 202 transmits to the casino server 30 an identity verification request including the read electronic certificate for signature.

The personal identification control unit 202 receives a response (positive response, negative response) to the personal identification request from the casino server 30.

The identity verification control unit 202 displays a message or the like according to the identity verification result. When the identity confirmation is successful (when an affirmative response is received), the identity confirmation control unit 202 notifies the user that the "first identity confirmation" has been successful. If the identity verification fails (if a negative response is received), the identity verification control unit 202 notifies the user that the “initial identity verification” has failed.

For example, when the identity verification is successful, the identity verification control unit 202 displays a display as shown in FIG. 10A to inform the user that the user can enter the casino facility. If the personal identification fails, the personal identification control unit 202 displays a display as shown in FIG. 10B to inform the user that he/she cannot enter the casino facility.

The storage unit 203 is means for storing information necessary for the operation of the reception terminal 10 .

[Entrance terminal]
FIG. 11 is a diagram showing an example of a processing configuration (processing modules) of the entrance terminal 20 according to the first embodiment. Referring to FIG. 11 , the admission terminal 20 includes a communication control section 301 , an admission control section 302 , a gate control section 303 and a storage section 304 .

The communication control unit 301 is means for controlling communication with other devices. For example, the communication control section 301 receives data (packets) from the casino server 30 . Also, the communication control unit 301 transmits data to the casino server 30 . The communication control unit 301 passes data received from other devices to other processing modules. The communication control unit 301 transmits data acquired from other processing modules to other devices. In this way, other processing modules transmit and receive data to and from other devices via the communication control unit 301 . The communication control unit 301 has a function as a receiving unit that receives data from another device and a function as a transmitting unit that transmits data to the other device.

The admission control unit 302 is means for controlling admission confirmation for those who wish to enter the casino facility. When the entrance control unit 302 detects a user in front of its own device (in front of the entrance terminal 20) using a human sensor or the like, it acquires an electronic certificate for user verification from the My Number card possessed by the user. .

For example, the entrance control unit 302 displays a GUI as shown in FIG. 12 and recognizes that the My Number card has been inserted into the IC card reader. After that, the admission control unit 302 reads the electronic certificate for user verification from the My Number card.

At that time, since a personal identification number corresponding to the electronic certificate for user authentication or biometric information of the user (person who wishes to enter) is required, the entrance control unit 302 displays a GUI as shown in FIG. , personal identification number (four-digit sequence) or biometric information (face image).

When the "shooting button" shown in FIG. 13 is pressed, the entrance control unit 302 controls a camera (not shown) to acquire the face image of the person who wishes to enter.

The admission control unit 302 attempts to read out the electronic certificate for user verification from the My Number card using the acquired personal identification number. If the correct password is entered, the admission control unit 302 can read out the electronic certificate for user verification.

Alternatively, when the face image (face information) written on the My Number card and the face image (face information) obtained by photographing the user substantially match, the admission control unit 302 generates an electronic certificate for user authentication. can be read.

The admission control unit 302 sends an admission confirmation request including the read electronic certificate for user verification to the casino server 30 .

The admission control unit 302 receives a response (positive response, negative response) to the admission confirmation request from the casino server 30 .

The admission control unit 302 displays a message or the like according to the admission confirmation result. If the entry confirmation is successful (if an affirmative response is received), the entry control unit 302 notifies the user that he/she can enter the casino facility. If the entry confirmation fails (if a negative response is received), the entry control unit 302 notifies the user that he/she cannot enter the casino facility.

In addition, the entrance control unit 302 passes the confirmation result (entrance permitted, entrance not permitted) to the gate control unit 303 in response to the entrance confirmation request.

The gate control unit 303 is means for controlling the gate. The gate control unit 303 controls gates that restrict the passage of users according to the confirmation result acquired from the entrance control unit 302 .

Upon receiving the result that admission to the casino facility is prohibited, the gate control unit 303 closes the gate and refuses the user's passage.

Upon receiving the result that admission to the casino facility is permitted, the gate control unit 303 opens the gate and permits the user to pass through. At that time, the gate control unit 303 uses a human sensor or the like installed in the entrance terminal 20 to detect that the user has passed through the gate.

When the gate control unit 303 detects that the user has passed through the gate within a predetermined period of time after the gate is opened, the gate control unit 303 notifies the casino server 30 to that effect. Specifically, the gate control unit 303 transmits a “casino entry notification” to the casino server 30 .

If the user's passage through the gate cannot be detected within a predetermined period after the gate is opened, the gate control unit 303 closes the gate.

The storage unit 304 is means for storing information necessary for the operation of the entrance terminal 20 .

[Casino Server]
FIG. 14 is a diagram showing an example of the processing configuration (processing modules) of the casino server 30 according to the first embodiment. Referring to FIG. 14 , the casino server 30 includes a communication control section 401 , an identity verification processing section 402 , an admission verification processing section 403 , an admission notification section 404 and a storage section 405 .

The communication control unit 401 is means for controlling communication with other devices. For example, the communication control unit 401 receives data (packets) from the reception terminal 10 . Also, the communication control unit 401 transmits data to the reception terminal 10 . The communication control unit 401 transfers data received from other devices to other processing modules. The communication control unit 401 transmits data acquired from other processing modules to other devices. In this manner, other processing modules transmit and receive data to and from other devices via the communication control unit 401 . The communication control unit 401 has a function as a receiving unit that receives data from another device and a function as a transmitting unit that transmits data to the other device.

The personal identification processing unit 402 is means for processing personal identification requests received from the reception terminal 10 . The personal identification processing unit 402 requests the first PF server 40 to confirm the personal identification of the person who wishes to enter the casino facility. Specifically, the identity verification processing unit 402 extracts the signature electronic certificate included in the identity verification request, and transmits the identity verification request including the signature electronic certificate to the first PF server 40 .

The personal identification processing unit 402 receives a response (positive response, negative response) to the personal identification request from the first PF server 40 .

If the identity verification fails (if a negative response is received), the identity verification processing unit 402 notifies the reception terminal 10 that the identity verification has failed. Specifically, the identity verification processing unit 402 transmits a negative response to the identity verification request to the reception terminal 10 .

If the identity verification is successful (if an affirmative response is received), the identity verification processing unit 402 notifies the reception terminal 10 that the identity verification was successful. Specifically, the identity verification processing unit 402 transmits an affirmative response to the identity verification request to the reception terminal 10 .

Here, the acknowledgment sent by the first PF server 40 (the response sent upon successful verification of the electronic certificate for signature) includes the user ID and personal identification information.

The personal identification processing unit 402 associates the user ID and personal identification items included in the affirmative response and stores them in the user information database (see FIG. 15). Note that the user information database shown in FIG. 15 is an example, and is not meant to limit the items to be stored. For example, the processing date and time of the personal identification request may be registered in the user information database. Further, the applicant field shown in FIG. 15 will be described later.

The admission confirmation processing unit 403 is means for processing an admission confirmation request received from the admission terminal 20 . The admission confirmation processing unit 403 receives an admission confirmation request including an electronic certificate for user verification of a person who wishes to enter the casino.

Upon receipt of an admission confirmation request, the admission confirmation processing unit 403 concurrently executes processes related to identity verification and number of visits for those who wish to enter the casino. The operation of the entry confirmation processing unit 403 will be described with reference to FIG.

Upon receiving the entry confirmation request, the entry confirmation processing unit 403 generates identification information for managing (identifying) the inquiry corresponding to the entry confirmation request (step S101). Specifically, the entry confirmation processing unit 403 generates an inquiry ID upon receipt of the entry confirmation request. For example, the admission confirmation processing unit 403 generates an inquiry ID (inquiry number) by calculating a hash value of the reception date and time of the admission confirmation request.

The admission confirmation processing unit 403 requests the first PF server 40 to confirm the identity of the person who wishes to enter. In addition, the admission confirmation processing unit 403 requests the management server 50 to confirm the number of times the applicant wants to enter.

Regarding the identity verification of the person who wishes to enter, the admission verification processing unit 403 transmits to the first PF server 40 a request for identity verification including the electronic certificate for user verification obtained from the admission terminal 20 (step S102).

The admission confirmation processing unit 403 receives a response (positive response, negative response) to the identity verification request from the first PF server 40 . The affirmative response includes the user ID of the person who wishes to enter and the personal identification information.

If the identity verification fails (if a negative response is received), the admission confirmation processing unit 403 stores that the identity verification of the person wishing to enter has failed. Specifically, the admission confirmation processing unit 403 associates and stores (manages) the inquiry ID and the fact that the personal identification failed.

If the identity confirmation is successful (if an affirmative response is received), the admission confirmation processing unit 403 stores that the identity confirmation of the person wishing to enter has been successful. Specifically, the admission confirmation processing unit 403 associates and stores (manages) the inquiry ID, the fact that the identity confirmation was successful, the user ID, and the identity identification item.

In this way, the admission confirmation processing unit 403 stores the result of personal identification in association with the inquiry ID (step S103).

Regarding the confirmation of the number of visits by the applicant, the admission confirmation processing unit 403 sends a request for confirmation of the number of visits including the inquiry ID and the electronic certificate for user certification obtained from the admission terminal 20 to the management server 50 (step S104).

The admission confirmation processing unit 403 receives a response (positive response, negative response) to the number of times confirmation request from the management server 50 . A response (positive response, negative response) received from the management server 50 includes an inquiry ID. In addition, the acknowledgment includes the visitor ID of the applicant.

If the user cannot use the casino facility (if a negative response is received), the admission confirmation processing unit 403 stores that the confirmation of the number of times for the applicant has failed. Specifically, the admission confirmation processing unit 403 associates and stores (manages) the inquiry ID and the fact that the confirmation of the number of times has failed.

If the user can use the casino facility (if an affirmative response is received), the admission confirmation processing unit 403 stores that the number of confirmations regarding the applicant for admission has been successful. Specifically, the admission confirmation processing unit 403 associates and stores (manages) the inquiry ID, the visitor ID, and the fact that the confirmation of the number of times has been successful.

In this way, the entry confirmation processing unit 403 stores the result of the number of times confirmation in association with the inquiry ID (step S105).

When the results of the identity verification and the number of times confirmation of the applicant are obtained, the admission confirmation processing unit 403 determines whether or not the applicant can enter the casino facility (determination of whether or not admission is possible; step S106).

The admission confirmation processing unit 403 determines that the person who wishes to enter the casino facility can enter the casino facility when the identity verification is successful and the casino facility is available.

The admission confirmation processing unit 403 determines that the user cannot enter the casino facility if the user's identity verification fails or the casino facility cannot be used.

The admission confirmation processing unit 403 transmits a response (confirmation result) to the admission confirmation request to the admission terminal 20 (step S107).

Specifically, when it is determined that the person who wishes to enter is permitted to enter the casino facility, the admission confirmation processing unit 403 transmits a positive response to that effect to the admission terminal 20 .

At that time, the admission confirmation processing unit 403 searches the user information database using the user ID stored in association with the inquiry ID as a key to identify the corresponding entry. The admission confirmation processing unit 403 sets a flag in the applicant field of the specified entry (see, for example, the first line in FIG. 15).

If it is determined that the person who wishes to enter is not allowed to enter the casino facility, the admission confirmation processing unit 403 transmits a negative response to that effect to the admission terminal 20.

The entry notification unit 404 is means for notifying the management server 50 of the fact that a user (a person who wishes to enter the casino facility) has entered the casino facility. The admission notification unit 404 processes the “casino admission notice” transmitted by the admission terminal 20 .

Upon receiving a casino admission notice from the admission terminal 20, the admission notification unit 404 identifies entries with a flag set in the applicant field among the entries contained in the user information database. The admission notification unit 404 transmits to the management server 50 a “user admission notice” including the date and time when the user passed through the gate, the identification items of the specified entry, and the visitor ID.

In the example shown in FIG. 15, a user entry notification containing "NM01" as the name and "female" as the gender is sent to the management server 50. The date and time when the user passes through the gate can be the date and time when the notification of admission to the casino is received. The visitor ID is an ID stored in association with the inquiry ID.

After transmitting the user admission notice, the admission notification unit 404 clears the flag set in the field of applicants for admission. In addition, the entry notification unit 404 clears the flag when a predetermined period of time has elapsed since the flag was set in the field of applicants for admission.

The storage unit 405 is means for storing information necessary for the operation of the casino server 30.

[First PF server]
The first PF server 40 is a server that processes personal identification requests sent from the casino server 30 . The first PF server 40 requests the certificate authority server 70 to verify the electronic certificate (signature electronic certificate, user proof electronic certificate) resulting from the first personal identification and the second and subsequent personal identification. . Furthermore, the first PF server 40 controls the ID of the user to be verified (user ID).

FIG. 17 is a diagram showing an example of the processing configuration (processing modules) of the first PF server 40 according to the first embodiment. Referring to FIG. 17, the first PF server 40 includes a communication control unit 501, a verification control unit 502, and a storage unit 503.

The communication control unit 501 is means for controlling communication with other devices. For example, the communication control section 501 receives data (packets) from the casino server 30 . Also, the communication control unit 501 transmits data to the casino server 30 . The communication control unit 501 passes data received from other devices to other processing modules. The communication control unit 501 transmits data acquired from other processing modules to other devices. In this manner, other processing modules transmit and receive data to and from other devices via the communication control unit 501 . The communication control unit 501 has a function as a receiving unit that receives data from another device and a function as a transmitting unit that transmits data to the other device.

The verification control unit 502 is means for controlling the validity verification of electronic certificates. The verification control unit 502 processes an identity verification request received from the casino server 30 .

An electronic certificate for signature is included in the identity verification request for the first identity verification. The verification control unit 502 extracts the issue number from the signature electronic certificate and transmits a verification request including the extracted issue number to the certificate authority server 70 .

The verification control unit 502 receives a response (positive response, negative response) to the verification request from the certificate authority server 70 .

When receiving a negative response (the electronic certificate for signature is invalid), the verification control unit 502 notifies the casino server 30 that the identity verification has failed. Verification control unit 502 transmits a negative response to that effect to casino server 30 .

When a positive response (signature electronic certificate is valid) is received, the verification control unit 502 creates a corresponding user account.

Specifically, the verification control unit 502 generates the user ID of the person who wishes to enter as a processing target. Also, the verification control unit 502 extracts the issue number of the user-certifying electronic certificate from the affirmative response received from the certificate authority server 70 . Further, the verification control unit 502 acquires the personal identification data from the signature electronic certificate determined to be valid.

The verification control unit 502 stores the generated user ID, personal identification information, signature electronic certificate issue number, and user certification electronic certificate issue number in the user management database (see FIG. 18). Note that the user management database shown in FIG. 18 is an example, and is not meant to limit the items to be stored.

After creating the account of the person to be processed, the verification control unit 502 notifies the casino server 30 that the identity verification has been successful. At that time, the verification control unit 502 notifies the casino server 30 of the generated user ID and the corresponding personal identification information together. Specifically, the verification control unit 502 transmits to the casino server 30 an acknowledgment including the user ID and personal identification information.

An electronic certificate for user verification is included in the identity verification request for identity verification when the user enters the casino facility (identity verification request for identity verification from the second time onwards). The verification control unit 502 extracts the issue number from the electronic certificate for user certification.

The verification control unit 502 searches the user management database using, as a key, the issue number extracted from the user-certifying electronic certificate included in the identity verification request resulting from the second and subsequent identity verifications performed at the entrance terminal 20. , attempts to identify the corresponding entry.

If the corresponding entry (issuance number) does not exist in the user management database, the verification control unit 502 determines that the applicant has not completed the "initial identity verification (verification of validity of electronic certificate for signature)". and sets the identity verification of the user to failure.

If the corresponding entry (issue number) exists in the user management database, the verification control unit 502 retrieves the issue number of the electronic certificate for user certification and the issue number of the electronic certificate for signature stored in the specified entry. to the certificate authority server 70.

When receiving a negative response (at least one of the electronic certificate for signature and the electronic certificate for user verification is invalid), the verification control unit 502 sets the identity verification of the user to failure.

When a positive response (signature electronic certificate and user proof electronic certificate are valid) is received, the verification control unit 502 sets the user identity verification to success.

The verification control unit 502 notifies the casino server 30 of the result of identity verification (success in identity verification, failure in identity verification).

If the personal identification is successful, the verification control unit 502 sends an affirmative response to that effect to the casino server 30. At that time, the verification control unit 502 transmits to the casino server 30 an affirmative response including the user ID of the user (person subject to identity verification) and the identity identification items.

If the identity verification fails, the verification control unit 502 sends a negative response to that effect to the casino server 30.

The storage unit 503 is means for storing information necessary for the operation of the first PF server 40 .

[Management Server]
FIG. 19 is a diagram showing an example of the processing configuration (processing modules) of the management server 50 according to the first embodiment. Referring to FIG. 19 , the management server 50 includes a communication control unit 601 , a count confirmation processing unit 602 , an entrance/exit control unit 603 and a storage unit 604 .

The communication control unit 601 is means for controlling communication with other devices. For example, the communication control section 601 receives data (packets) from the casino server 30 . Also, the communication control unit 601 transmits data to the casino server 30 . The communication control unit 601 passes data received from another device to another processing module. The communication control unit 601 transmits data acquired from other processing modules to other devices. In this way, other processing modules transmit and receive data to and from other devices via the communication control unit 601 . The communication control unit 601 has a function as a receiving unit that receives data from another device and a function as a transmitting unit that transmits data to another device.

The number-of-times confirmation processing unit 602 is means for processing a number-of-times confirmation request received from the casino server 30 . The number-of-times confirmation processing unit 602 requests the second PF server 60 to identify a visitor (a person who wishes to enter the casino facility).

The number confirmation request includes an inquiry ID and an electronic certificate for user verification. The number-of-times confirmation processing unit 602 transmits to the second PF server 60 a visitor identification request including the electronic certificate for user certification.

The number-of-times confirmation processing unit 602 receives a response (positive response, negative response) to the visitor identification request from the second PF server 60 .

If the visitor is not specified (if a negative response is received), the number-of-times confirmation processing unit 602 notifies the casino server 30 that the number-of-times confirmation has failed. Specifically, the number-of-times confirmation processing unit 602 transmits a negative response to the number-of-times confirmation request (casino facility unavailable) to the casino server 30 . At that time, the number-of-times confirmation processing unit 602 transmits a negative response including the inquiry ID acquired from the casino server 30 to the casino server 30 .

When the visitor is identified (when an affirmative response is received), the number-of-times confirmation processing unit 602 confirms the number of times for the person who wishes to enter. The acknowledgment sent by the second PF server 60 includes the visitor ID of the person who wishes to enter. The number-of-times confirmation processing unit 602 performs the number-of-times confirmation using the visitor ID.

The number of visits is confirmed using the visitor information database. FIG. 20 is a diagram showing an example of a visitor information database according to the first embodiment. As shown in FIG. 20, the visitor information database stores visitor IDs, personal identification items, and casino usage histories (entrance histories, exit histories) in association with each other.

The number-of-times confirmation processing unit 602 searches the visitor information database using the visitor ID obtained from the second PF server 60 as a key to check whether there is a corresponding entry.

If the corresponding entry (visitor ID) does not exist in the visitor information database, the number of times confirmation processing unit 602 creates a new entry and registers the received visitor ID in the visitor information database.

Also, if the corresponding visitor ID does not exist, the frequency confirmation processing unit 602 determines that the applicant is using the casino facility for the first time, and adds "Casino facility available" as a result of the frequency confirmation of the applicant. set.

If there is a corresponding entry (entrance ID), the number of times confirmation processing unit 602 uses the casino usage history of the corresponding person who wishes to enter to confirm the number of times. Specifically, the number-of-times confirmation processing unit 602 determines whether the casino usage history of the person wishing to enter the site is the short-term number of times limit (the number of times of admission is limited to three times in seven consecutive days) or the long-term number of times limit (in 28 consecutive days). up to 10 times).

When the frequency confirmation processing unit 602 determines that the casino facility usage history of the person who wishes to enter conflicts with the frequency limit, it sets "casino facility use not allowed" as the result of frequency confirmation.

When the number-of-times confirmation processing unit 602 determines that the casino facility usage history of the person who wishes to enter does not conflict with the number-of-times limit, it sets the result of number-of-times confirmation to "Casino facility use permitted".

The number-of-times confirmation processing unit 602 notifies the casino server 30 of the number-of-times confirmation result.

If the result of the number of times confirmation is "cannot use the casino facility", the number of times confirmation processing unit 602 sends a negative response to that effect to the casino server 30. At that time, the number-of-times confirmation processing unit 602 transmits a negative response including the inquiry ID acquired from the casino server 30 to the casino server 30 .

If the result of the number of times confirmation is that "casino facility can be used", the number of times confirmation processing unit 602 transmits an affirmative response to that effect to the casino server 30. At that time, the number-of-times confirmation processing unit 602 transmits to the casino server 30 an affirmative response including the inquiry ID obtained from the casino server 30 and the visitor ID of the person who wishes to enter.

The entrance/exit control unit 603 is means for controlling the entrance/exit of users of the casino facility.

Upon receiving a "user admission notice" from the casino server 30, the entrance/exit control unit 603 searches the visitor information database using the visitor ID included in the notice as a key to identify the corresponding entry. The entrance/exit control unit 603 updates the personal identification information field and the entrance history field of the specified entry using the personal identification information and the gate passage date and time included in the user entrance notification.

If information has already been set in the person identification field of the visitor information database, the entrance/exit control unit 603 may or may not update the field.

The entrance/exit control unit 603 also controls when the casino user exits the casino facility. The detailed description of the control for exiting from the casino facility is omitted because it is different from the gist of the disclosure of the present application. The entrance/exit control unit 603 receives the visitor ID and exit history from an exit terminal (not shown in FIG. 3, etc.) installed at the exit of the casino facility, and reflects the exit history in the visitor information database. .

The storage unit 604 is means for storing information necessary for the operation of the management server 50.

[Second PF server]
The second PF server 60 is a server that processes visitor identification requests sent from the management server 50 . The second PF server 60 requests the certificate authority server 70 to verify the electronic certificate for user certification resulting from the user's confirmation of the number of times. Furthermore, the second PF server 60 controls the user ID (visitor ID) to be checked for the number of visits.

FIG. 21 is a diagram showing an example of the processing configuration (processing modules) of the second PF server 60 according to the first embodiment. Referring to FIG. 21, the second PF server 60 includes a communication control section 701, a verification control section 702, and a storage section 703.

The communication control unit 701 is means for controlling communication with other devices. For example, the communication control unit 701 receives data (packets) from the management server 50 . Also, the communication control unit 701 transmits data to the management server 50 . The communication control unit 701 transfers data received from other devices to other processing modules. The communication control unit 701 transmits data acquired from other processing modules to other devices. In this manner, other processing modules transmit and receive data to and from other devices via the communication control unit 701 . The communication control unit 701 has a function as a receiving unit that receives data from another device and a function as a transmitting unit that transmits data to another device.

The verification control unit 702 is means for controlling the validity verification of electronic certificates. The verification control unit 702 processes visitor identification requests received from the management server 50 .

The visitor identification request sent from the management server 50 includes an electronic certificate for user verification. The verification control unit 702 extracts the issue number from the user-certifying electronic certificate, and transmits a verification request including the extracted issue number to the certificate authority server 70 .

The verification control unit 702 receives a response (positive response, negative response) to the verification request from the certificate authority server 70 .

When receiving a negative response (the electronic certificate for user verification is invalid), the verification control unit 702 notifies the management server 50 that the applicant cannot be identified. Specifically, the verification control unit 702 transmits a negative response to that effect to the management server 50 .

Upon receiving a positive response (the electronic certificate for user verification is valid), the verification control unit 702 creates an account for the person who wishes to enter. Upon receiving the affirmative response, the verification control unit 702 searches the visitor management database using the issue number of the electronic certificate for user verification that has been determined to be valid as a key.

The visitor management database is a database that associates and stores the visitor ID and the issue number of the user's electronic certificate (see Fig. 22). Note that the visitor management database shown in FIG. 22 is an example, and is not meant to limit the items to be stored.

If there is an entry corresponding to the issue number of the electronic certificate for user certification, the verification control unit 702 does not perform any particular operation.

If there is no entry corresponding to the issue number of the electronic certificate for user certification, the verification control unit 702 generates the visitor ID of the person who wishes to enter. Further, the verification control unit 702 stores the generated visitor ID and the issue number of the electronic certificate for user certification in the visitor management database.

Furthermore, when a positive response is received, the verification control unit 702 notifies the management server 50 that the applicant has been identified. Specifically, the verification control unit 702 transmits an affirmative response to that effect to the management server 50 . At that time, the verification control unit 702 transmits an affirmative response including the visitor ID of the person who wishes to enter to the management server 50 .

The storage unit 703 is means for storing information necessary for the operation of the second PF server 60 .

[Certificate authority server]
FIG. 23 is a diagram showing an example of a processing configuration (processing modules) of the certificate authority server 70 according to the first embodiment. Referring to FIG. 23 , the certificate authority server 70 includes a communication control section 801 , a verification section 802 and a storage section 803 .

The communication control unit 801 is means for controlling communication with other devices. For example, the communication control unit 801 receives data (packets) from the first PF server 40 . Also, the communication control unit 801 transmits data to the first PF server 40 . The communication control unit 801 passes data received from other devices to other processing modules. The communication control unit 801 transmits data acquired from other processing modules to other devices. In this way, other processing modules transmit and receive data to and from other devices via the communication control unit 801 . The communication control unit 801 has a function as a receiving unit that receives data from another device and a function as a transmitting unit that transmits data to the other device.

The verification unit 802 is means for verifying the validity of electronic certificates. The verification unit 802 processes verification requests received from the first PF server 40 and the second PF server 60 .

The verification unit 802 refers to a database that stores the issue number of the electronic certificate for signature, the issue number of the electronic certificate for user authentication, the validity period of each certificate, etc. Validate the electronic certificate.

When the verification request is received from the first PF server 40 and the verification request includes the issue number of the signature electronic certificate, the verification unit 802 uses the issue number to issue the signature electronic certificate. Validate the effectiveness of

The verification unit 802 notifies the first PF server 40 of the verification result. If the signature electronic certificate is valid, the verification unit 802 sends an affirmative response to that effect to the first PF server 40 . At that time, the verification unit 802 transmits to the first PF server 40 an affirmative response including the issue number of the electronic certificate for user certification stored in association with the issue number of the electronic certificate for signature.

If the signature electronic certificate is invalid, the verification unit 802 sends a negative response to that effect to the first PF server 40 .

When a verification request is received from the first PF server 40 and the verification request includes the issue number of the electronic certificate for signature and the issue number of the electronic certificate for user certification, the verification unit 802 These issue numbers are used to verify the validity of the two electronic certificates.

If the two electronic certificates (signature electronic certificate and user proof electronic certificate) are both valid, the verification unit 802 notifies the first PF server 40 that the two electronic certificates are valid. do. Specifically, the verification unit 802 transmits to the first PF server 40 an affirmative response indicating that the two electronic certificates are valid.

If at least one of the two electronic certificates (signature electronic certificate, user proof electronic certificate) is invalid, the verification unit 802 notifies the first PF server 40 that the electronic certificate is invalid. do. Specifically, the verification unit 802 transmits to the first PF server 40 a negative response indicating that the electronic certificate is invalid.

When the verification request is received from the second PF server 60, the verification unit 802 verifies the validity of the user-certification electronic certificate using the issue number of the user-certification electronic certificate included in the verification request. conduct.

The verification unit 802 notifies the second PF server 60 of the verification result. If the user-certifying electronic certificate is valid, the verification unit 802 sends an affirmative response to that effect to the second PF server 60 .

If the user-certifying electronic certificate is invalid, the verification unit 802 sends a negative response to that effect to the second PF server 60 .

The storage unit 803 is means for storing information necessary for the operation of the certificate authority server 70 .

[System operation]
Next, operation of the entrance management system according to the first embodiment will be described. 24 is a sequence diagram illustrating an example of the operation of the entrance management system according to the first embodiment; FIG. Referring to FIG. 24, the operation of the entrance management system regarding the first identity verification will be described.

The reception terminal 10 reads out the signature electronic certificate from the user's My Number card, and transmits an identity verification request including the signature electronic certificate to the casino server 30 (step S41).

The casino server 30 requests the first PF server 40 to verify the identity using the signature electronic certificate. The casino server 30 transmits an identity verification request including the signature electronic certificate to the first PF server 40 (step S42).

The first PF server 40 requests the certificate authority server 70 to verify the validity of the signature electronic certificate. The first PF server 40 transmits a verification request including the issue number of the signature electronic certificate to the certificate authority server 70 (step S43).

The certificate authority server 70 verifies the signature electronic certificate (step S44) and transmits the result to the first PF server 40 (step S45). If the electronic certificate for signature is valid, the first PF server 40 is notified of the issue number of the electronic certificate for user certification corresponding to the electronic certificate for signature.

The first PF server 40 transmits the result of personal identification to the casino server 30 (step S46).

The casino server 30 transmits the result of the process related to the personal identification request to the reception terminal 10 (step S47).

The reception terminal 10 notifies the user of the processing result for the identity verification request (notifies the identity verification result; step S48). The reception terminal 10 outputs a message or the like according to the processing result.

Next, with reference to FIG. 25, the operation of the admission management system regarding admission confirmation (personal identification and number of times confirmation from the second time onwards) will be described.

The entrance terminal 20 reads out the user-certifying electronic certificate from the user's My Number card, and transmits an entrance confirmation request including the user-certifying electronic certificate to the casino server 30 (step S51).

The casino server 30 requests the first PF server 40 for identity verification using the electronic certificate for user verification. The casino server 30 transmits an identity verification request including the electronic certificate for user verification to the first PF server 40 (step S52).

Around the same time as the transmission of the identity verification request, the casino server 30 transmits a number of times verification request including the electronic certificate for user verification to the management server 50 (step S53).

Upon receiving the identity verification request, the first PF server 40 executes processing related to verification of the electronic certificate (step S54). Specifically, the first PF server 40 transmits to the certification authority server 70 a verification request containing the issue number of each of the two electronic certificates.

The management server 50 executes processing related to identification of visitors in response to the reception of the number-of-times confirmation request (step S55). Specifically, the management server 50 transmits to the second PF server 60 a visitor identification request including an electronic certificate for user authentication.

In response to the response from the certification authority server 70, the first PF server 40 generates a result for the identity verification request and transmits the verification result to the casino server 30 (step S56).

In response to the response from the second PF server 60, the management server 50 generates a result for the count confirmation request and transmits the confirmation result to the casino server 30 (step S57).

When the casino server 30 acquires the result of the identity verification request and the result of the number of times verification, it generates a result of the admission verification request and transmits it to the admission terminal 20 (step S58).

The admission terminal 20 notifies the user of the processing result for the admission confirmation request (step S59). The entrance terminal 20 outputs a message or the like according to the processing result.

In this way, the casino server 30 starts the first personal identification process in response to receiving the signature electronic certificate from the reception terminal 10 installed outside the casino facility. In addition, the casino server 30 starts the second and subsequent identity verification and number of times verification processes in response to receiving the electronic certificate for user verification from the entrance terminal 20 installed at the entrance of the casino facility. When the first PF server 40 succeeds in identity verification and the management server 50 permits the entrance of the visitor who intends to enter the casino facility, the casino server 30 allows the visitor to enter the casino facility. permit any person to enter the casino premises.

As described above, in the entrance management system according to the first embodiment, identity verification and number of times verification are performed in parallel when entering the casino facility. At that time, identity verification and number of times verification are performed using the electronic certificate for user verification obtained from the My Number Card, so the user must enter a complicated PIN (6 to 16 digit PIN) at the entrance terminal. No need to enter 20. The user can enter the casino facility with a simple PIN (4-digit PIN) or face recognition. That is, for the user, the procedure for personal identification is simplified, so the user's convenience is improved. In addition, in the first embodiment, since the system automatically performs the identity verification using the signature electronic certificate in the second and subsequent identity verifications, the strength of the identity verification is not reduced.

Next, we will explain the hardware of each device that makes up the entrance management system. FIG. 26 is a diagram showing an example of the hardware configuration of the casino server 30. As shown in FIG.

The casino server 30 can be configured by an information processing device (so-called computer), and has the configuration illustrated in FIG. For example, the casino server 30 includes a processor 311, a memory 312, an input/output interface 313, a communication interface 314, and the like. Components such as the processor 311 are connected by an internal bus or the like and configured to be able to communicate with each other.

However, the configuration shown in FIG. 26 is not intended to limit the hardware configuration of the casino server 30 . The casino server 30 may include hardware (not shown) and may not have the input/output interface 313 if necessary. Also, the number of processors 311 and the like included in the casino server 30 is not limited to the example shown in FIG.

The processor 311 is, for example, a programmable device such as a CPU (Central Processing Unit), MPU (Micro Processing Unit), DSP (Digital Signal Processor). Alternatively, processor 311 may be a device such as FPGA (Field Programmable Gate Array), ASIC (Application Specific Integrated Circuit), or the like. The processor 311 executes various programs including an operating system (OS).

The memory 312 is RAM (Random Access Memory), ROM (Read Only Memory), HDD (Hard Disk Drive), SSD (Solid State Drive), or the like. The memory 312 stores an OS program, application programs, and various data.

The input/output interface 313 is an interface for a display device and an input device (not shown). The display device is, for example, a liquid crystal display. The input device is, for example, a device such as a keyboard or mouse that receives user operations.

The communication interface 314 is a circuit, module, etc. that communicates with other devices. For example, the communication interface 314 includes a NIC (Network Interface Card) or the like.

The functions of the casino server 30 are realized by various processing modules. The processing module is implemented by the processor 311 executing a program stored in the memory 312, for example. Also, the program can be recorded in a computer-readable storage medium. The storage medium can be non-transitory such as semiconductor memory, hard disk, magnetic recording medium, optical recording medium, and the like. That is, the present invention can also be embodied as a computer program product. Also, the program can be downloaded via a network or updated using a storage medium storing the program. Furthermore, the processing module may be realized by a semiconductor chip.

Note that the first PF server 40, the management server 50, the second PF server 60, the certification authority server 70, etc. can also be configured by information processing devices in the same way as the casino server 30, and their basic hardware configuration is Since there is no difference from the server 30, the explanation is omitted.

The casino server 30, which is an information processing device, is equipped with a computer, and the functions of the casino server 30 can be realized by causing the computer to execute a program. Also, the casino server 30 executes a control method of the casino server 30 by the program.

[Modification]
It should be noted that the configuration, operation, etc. of the entrance management system described in the above embodiment are examples, and are not intended to limit the configuration of the system.

In the above embodiment, the user uses the reception terminal 10 to receive the initial identity verification. However, the initial identity verification may be performed by a terminal such as a smartphone possessed by the user. The user's terminal may read out the signature electronic certificate from the My Number card and transmit to the casino server 30 a personal identification request including the read signature electronic certificate.

In the above embodiment, it was explained that entrance confirmation (identity confirmation and number of times confirmation from the second time onward) when entering the casino facility is performed at the entrance terminal 20. However, the entry confirmation may be performed at the reception terminal 10 installed outside the casino facility. In this case, the entrance terminal 20 may hold the biometric information of the user who is permitted to enter for a predetermined period (for example, 30 minutes), and permit the user who has successfully passed the biometric authentication during the predetermined period to pass through the gate. . The entrance terminal 20 may acquire the biometric information of the user permitted to enter directly from the reception terminal 10 or indirectly via the casino server 30 . With such a response, the user does not need to perform the procedure of having the admission terminal 20 read the electronic certificate for user verification of the My Number card. That is, the entrance terminal 20 acquires biometric information without acquiring an electronic certificate for user authentication from the My Number card, and controls the passage of the user by biometric authentication (one-to-N authentication) using the biometric information. can. In other words, in the disclosure of the present application, even if the reception terminal 10 (kiosk terminal) has a function related to admission confirmation provided by the admission terminal 20, and the admission terminal 20 has a gate function for controlling the passage of the user. good.

The casino server 30 may store biometric information (face images) of users who have successfully completed the first identity verification or the second and subsequent identity verifications. Furthermore, the casino server 30 may store the face image of the user together with the personal identification information (name, date of birth, etc.). The casino server 30 may use the stored biometric information to identify a user who has visited a casino or IR facility, and utilize the information for various services. For example, the casino server 30 may identify the user by biometric authentication at the time of admission confirmation, and output a message regarding the identified user from the entrance terminal 20 . For example, the casino server 30 may output a message welcoming visitors to the casino (for example, a message such as "Thank you for visiting us, Mr. A").

When the admission terminal 20 notifies the user of the permission or denial of admission to the casino, it may also notify the user of the casino usage status. For example, the entrance terminal 20 may notify information such as "how many times you have entered in 7 days" or "how many times you can enter in the next 7 days". Alternatively, when notifying that entry to the casino is not possible, the admission terminal 20 waits until the number of times limit (7 days, 28 days short-term, long-term number limit) is lifted (for example, after 3 days). The period during which re-entry is possible) may be notified to the user. In this case, the management server 50 may generate the casino usage information and notify the entrance terminal 20 of the casino usage information via the casino server 30 .

The casino server 30 and the management server 50 may verify the presence or absence of a written pledge by the user (a written pledge that the user does not belong to anti-social forces, etc.) when determining whether or not to enter the casino facility.

In the above-described embodiment, the first PF server 40 transmits a verification request including the issue number of the electronic certificate for signature and the issue number of the electronic certificate for user verification to the certificate authority server 70 in the personal identification in the entrance confirmation. explained to do. However, even if the first PF server 40 transmits a verification request including the issue number of the signature electronic certificate and a verification request including the issue number of the user certification electronic certificate to the certificate authority server 70, good. The certificate authority server 70 may verify each verification request and transmit the verification result to the first PF server 40 .

Alternatively, the first PF server 40 does not need to request the certificate authority server 70 to verify the validity of the user-certifying electronic certificate at the time of the second and subsequent identity verifications.

In the above embodiment, the case where the inquiry ID is sent to the management server 50 when the casino server 30 requests the management server 50 to confirm the number of times has been described. The casino server 30 may also transmit the inquiry ID to the first PF server 40 when requesting the first PF server 40 for personal identification.

In the above embodiment, it was explained that the casino server 30 sends the electronic certificate to the first PF server 40 and the management server 50 sends the electronic certificate to the second PF server 60 . That is, the casino server 30 and the management server 50 send electronic certificates to different platform servers to request authentication procedures. However, the casino server 30 and management server 50 may request the authentication procedure from the same platform server. In other words, the functions of the first PF server 40 and the second PF server 60 may be integrated so that one platform server provides authentication services.

In the above embodiment, the case where various databases are configured inside each server has been described, but the databases may be configured in an external database server or the like. That is, some functions of each server may be implemented in another server. More specifically, if the above-described "personal identification processing unit (personal identification processing means)", "admission confirmation processing unit (admission confirmation processing means)", etc. are implemented in any device included in the system good.

The form of data transmission/reception between each device (reception terminal 10, entrance terminal 20, casino server 30, etc.) is not particularly limited, but the data transmitted/received between these devices may be encrypted. Electronic certificates and the like are transmitted and received between these devices, and in order to appropriately protect the information of the electronic certificates, it is desirable to transmit and receive encrypted data.

In the flowcharts (flowcharts, sequence diagrams) used in the above explanation, multiple steps (processes) are described in order, but the execution order of the steps executed in the embodiment is not limited to the described order. In the embodiment, the order of the illustrated steps can be changed within a range that does not interfere with the content, such as executing each process in parallel.

The above embodiments have been described in detail to facilitate understanding of the disclosure of the present application, and are not intended to require all the configurations described above. Also, when a plurality of embodiments are described, each embodiment may be used alone or in combination. For example, it is possible to replace part of the configuration of the embodiment with the configuration of another embodiment, or to add the configuration of another embodiment to the configuration of the embodiment. Furthermore, additions, deletions, and replacements of other configurations are possible for some of the configurations of the embodiments.

From the above description, the industrial applicability of the present invention is clear, and the present invention can be suitably applied to an entrance management system that manages the entry and exit of casino facilities.

Some or all of the above embodiments may also be described in the following additional remarks, but are not limited to the following.
[Appendix 1]
a facility server that performs control for users to enter the facility;
a first platform server that performs an authentication procedure using an electronic certificate stored in an identification card;
including
The facility server is
transmitting a first electronic certificate stored in the identification card to the first platform server at the time of initial identity verification required before the user enters the facility;
transmitting the second electronic certificate stored in the identification card to the first platform server at the time of the second and subsequent identity verifications required when the user enters the facility;
The first platform server,
storing the first identification information of the first electronic certificate and the second identification information of the second electronic certificate in association with each other;
The second identification information is extracted from the second electronic certificate at the time of identity verification for the second and subsequent times, and the first identification information corresponding to at least the extracted second identification information is used. A system that performs processing related to identity verification from the second time onwards.
[Appendix 2]
further comprising a certificate authority server that verifies the validity of the first and second electronic certificates;
The first platform server transmits the first identification information to the certificate authority server;
The certificate authority server verifies the validity of the first electronic certificate based on the first identification information, and if the verification is successful, the second identification corresponding to the first identification information. 10. The system of clause 1, transmitting information to the first platform server.
[Appendix 3]
3. The system according to appendix 1 or 2, wherein the facility server performs processing related to confirmation of the number of times of the facility in parallel with the second and subsequent personal identifications.
[Appendix 4]
a management server that manages the usage status of the facility;
a second platform server that performs an authentication procedure using the electronic certificate stored in the identification card;
The facility server transmits the second electronic certificate to the management server,
The management server requests the second platform server to identify a visitor who intends to enter the facility by sending the second electronic certificate,
the second platform server, when the second electronic certificate is valid, transmits the visitor ID of the visitor to the management server;
Supplementary Note 3: The management server permits the visitor who intends to enter the facility to enter the facility when the usage history corresponding to the visitor ID does not violate the limit on the number of times the facility can be used. The system described in .
[Appendix 5]
The facility server is
A visitor who attempts to enter the facility when the first platform server succeeds in the identity verification and the management server permits the visitor who intends to enter the facility to enter the facility. 5. The system of Clause 4, wherein the system permits to enter the facility.
[Appendix 6]
The facility server, in response to receiving the second electronic certificate from the entrance terminal installed at the entrance of the facility, starts the process of the second and subsequent identity verification and the number of times verification. 6. The system according to 4 or 5.
[Appendix 7]
7. The system according to appendix 6, wherein the admission terminal acquires a personal identification number or biometric information for reading the second electronic certificate.
[Appendix 8]
8. Any one of Supplementary Notes 1 to 7, wherein the facility server initiates the process related to the first personal identification in response to receiving the first electronic certificate from a reception terminal installed outside the facility. The system according to item 1.
[Appendix 9]
9. The system according to appendix 8, wherein the reception terminal acquires a personal identification number for reading the first electronic certificate.
[Appendix 10]
10. The system according to any one of the appendices 1 to 9, wherein the identification is a My Number card.
[Appendix 11]
11. The system according to appendix 10, wherein the first electronic certificate is a signature electronic certificate and the second electronic certificate is a user-certifying electronic certificate.
[Appendix 12]
At the time of initial identity verification required before the user enters the facility, the first electronic certificate stored in the identification card is used for the authentication procedure using the electronic certificate stored in the identification card. an identity verification processor for transmission to the first platform server;
An entrance confirmation processing unit that transmits a second electronic certificate stored in the identification card to the first platform server at the time of the second and subsequent identity confirmations required when the user enters the facility. and,
A server device.
[Appendix 13]
in the server device,
At the time of initial identity verification required before the user enters the facility, the first electronic certificate stored in the identification card is used for the authentication procedure using the electronic certificate stored in the identification card. send to the first platform server;
Controlling a server device that transmits a second electronic certificate stored in the identification card to the first platform server at the time of the second and subsequent identity verifications required when the user enters the facility. Method.
[Appendix 14]
The computer installed in the server device,
At the time of initial identity verification required before the user enters the facility, the first electronic certificate stored in the identification card is used for the authentication procedure using the electronic certificate stored in the identification card. a process of transmitting to the first platform server;
a process of transmitting a second electronic certificate stored in the identification card to the first platform server at the time of the second or later identity verification required when the user enters the facility;
A computer-readable storage medium that stores a program for executing

It should be noted that each disclosure of the above cited prior art documents shall be incorporated into this document by citation. Although the embodiments of the present invention have been described above, the present invention is not limited to these embodiments. Those skilled in the art will appreciate that these embodiments are illustrative only and that various modifications can be made without departing from the scope and spirit of the invention. That is, the present invention naturally includes various variations and modifications that can be made by those skilled in the art according to the entire disclosure including claims and technical ideas.

10 reception terminal 20 entrance terminal 30 casino server 40 first PF server 50 management server 60 second PF server 70 certification authority server 101 facility server 102 first platform server 201 communication control unit 202 identity verification control unit 203 storage unit 301 Communication control unit 302 Admission control unit 303 Gate control unit 304 Storage unit 311 Processor 312 Memory 313 Input/output interface 314 Communication interface 401 Communication control unit 402 Identity verification processing unit 403 Admission verification processing unit 404 Admission notification unit 405 Storage unit 501 Communication control unit 502 verification control unit 503 storage unit 601 communication control unit 602 number of times confirmation processing unit 603 entrance/exit control unit 604 storage unit 701 communication control unit 702 verification control unit 703 storage unit 801 communication control unit 802 verification unit 803 storage unit

Claims

a facility server that performs control for users to enter the facility;
a first platform server that performs an authentication procedure using an electronic certificate stored in an identification card;
including
The facility server is
transmitting a first electronic certificate stored in the identification card to the first platform server at the time of initial identity verification required before the user enters the facility;
transmitting the second electronic certificate stored in the identification card to the first platform server at the time of the second and subsequent identity verifications required when the user enters the facility;
The first platform server,
storing the first identification information of the first electronic certificate and the second identification information of the second electronic certificate in association with each other;
The second identification information is extracted from the second electronic certificate at the time of identity verification for the second and subsequent times, and the first identification information corresponding to at least the extracted second identification information is used. A system that performs processing related to identity verification from the second time onwards.
further comprising a certificate authority server that verifies the validity of the first and second electronic certificates;
The first platform server transmits the first identification information to the certificate authority server;
The certificate authority server verifies the validity of the first electronic certificate based on the first identification information, and if the verification is successful, the second identification corresponding to the first identification information. 2. The system of claim 1, transmitting information to the first platform server.
　The system according to claim 1 or 2, wherein the facility server performs processing related to confirmation of the number of times of the facility in parallel with the second and subsequent identity confirmations.
a management server that manages the usage status of the facility;
a second platform server that performs an authentication procedure using the electronic certificate stored in the identification card;
The facility server transmits the second electronic certificate to the management server,
The management server requests the second platform server to identify a visitor who intends to enter the facility by sending the second electronic certificate,
the second platform server, when the second electronic certificate is valid, transmits the visitor ID of the visitor to the management server;
The management server permits a visitor who intends to enter the facility to enter the facility when the usage history corresponding to the visitor ID does not violate a limit on the number of times the facility can be used. 3. The system according to 3.
The facility server is
A visitor who attempts to enter the facility when the first platform server succeeds in the identity verification and the management server permits the visitor who intends to enter the facility to enter the facility. 5. The system of claim 4, wherein the system permits to enter the facility.
wherein the facility server starts the process of the second and subsequent identity verification and the number of times verification in response to receiving the second electronic certificate from the entrance terminal installed at the entrance of the facility; 6. The system according to Item 4 or 5.
The system according to claim 6, wherein the admission terminal acquires a personal identification number or biometric information for reading the second electronic certificate.
8. The facility server according to any one of claims 1 to 7, wherein said facility server initiates said first identity verification process in response to receiving said first electronic certificate from a reception terminal installed outside said facility. or the system according to item 1.
The system according to claim 8, wherein the reception terminal acquires a personal identification number for reading the first electronic certificate.
The system according to any one of claims 1 to 9, wherein the identification card is a My Number card.
The system according to claim 10, wherein the first electronic certificate is a signature electronic certificate, and the second electronic certificate is a user-certifying electronic certificate.
At the time of initial identity verification required before the user enters the facility, the first electronic certificate stored in the identification card is used for the authentication procedure using the electronic certificate stored in the identification card. an identity verification processor for transmission to the first platform server;
An entrance confirmation processing unit that transmits a second electronic certificate stored in the identification card to the first platform server at the time of the second and subsequent identity confirmations required when the user enters the facility. and,
A server device.
in the server device,
At the time of initial identity verification required before the user enters the facility, the first electronic certificate stored in the identification card is used for the authentication procedure using the electronic certificate stored in the identification card. send to the first platform server;
Controlling a server device that transmits a second electronic certificate stored in the identification card to the first platform server at the time of the second and subsequent identity verifications required when the user enters the facility. Method.
The computer installed in the server device,
At the time of initial identity verification required before the user enters the facility, the first electronic certificate stored in the identification card is used for the authentication procedure using the electronic certificate stored in the identification card. a process of transmitting to the first platform server;
a process of transmitting a second electronic certificate stored in the identification card to the first platform server at the time of the second or later identity verification required when the user enters the facility;
A computer-readable storage medium that stores a program for executing