WO2024075173A1

WO2024075173A1 - System and method

Info

Publication number: WO2024075173A1
Application number: PCT/JP2022/037037
Authority: WO
Inventors: 裕之岡田
Original assignee: 日本電気株式会社
Priority date: 2022-10-03
Filing date: 2022-10-03
Publication date: 2024-04-11

Abstract

Provided is a system that reduces the burden on a user of a facility such as a casino. This system includes a reception terminal, an admission terminal, and a server device. The reception terminal, in response to an operation by an applicant for admission who desires to enter a given facility, writes an ID identifying the applicant for admission to a medium in which is stored an electronic certificate of the applicant for admission. The reception terminal transmits an admission permit holder notification, including the ID and face information, to the server device. The server device stores the ID and face information in an admission permit holder list. The admission terminal transmits an authentication request, including an ID and face information for a person to be authenticated, to the server device. The server device uses the ID to identify the person to be authenticated and performs one-to-one authentication using the face information for the identified person to be authenticated, which is included in the admission permit holder list, and the face information included in the authentication request. If one-to-one authentication is successful, the server device permits entry by the authenticated person.

Description

Systems and methods

The present invention relates to a system and a method.

There are admission control systems that manage the entry and exit to entertainment facilities such as casinos.

Patent Document 1 states that the objective of the invention is to provide a gaming system, gaming facility management device, and usage restriction method that can efficiently prevent players from becoming addicted to casino games when multiple domestic casinos that offer casino games using cash are established in Japan.

There is also technology that improves the throughput of gate devices installed at facility entrances and exits. For example, Patent Document 2 describes how it is possible to improve the throughput of passing through a gate by eliminating the need for tickets, etc.

JP 2017-184866 A International Publication No. 2018/181968

Identification is required when entering facilities such as casinos. Specifically, identity verification using a medium such as a My Number card is required. In Patent Document 1, after registering a user's name and identification in the system, a card medium unique to the system is issued to the casino user (see paragraph [0021]). The card medium is used to identify the user when the user enters the casino (paragraphs [0024]-[0025]).

In Patent Document 1, in order to enter a casino, a user must carry an ID card for identity verification and a card medium for entering the casino. However, carrying multiple media places a large burden on the user in terms of management, etc.

The main objective of the present invention is to provide a system and method that contributes to reducing the burden on users of facilities such as casinos.

According to a first aspect of the present invention, a system is provided that includes a reception terminal, an entrance terminal that restricts the entrance of an authenticated person who is attempting to enter a specified facility, and a server device, in which the reception terminal, in response to an operation by an authenticated person who wishes to enter the specified facility, writes an ID that identifies the authenticated person to a medium storing an electronic certificate of the authenticated person, and transmits an authorized person notification including the ID and facial information of the authenticated person to the server device, the server device stores the ID and facial information included in the authorized person notification in an authorized person list, the entrance terminal reads the ID from the medium held by the authenticated person on which the ID is written, photographs the authenticated person to obtain facial information, and transmits an authentication request including the ID and the facial information to the server device, the server device identifies the authenticated person using the ID included in the authentication request and the ID included in the authorized person list, performs one-to-one authentication using the facial information of the identified authenticated person included in the authorized person list and the facial information included in the authentication request, and if the one-to-one authentication is successful, notifies the entrance terminal that the authenticated person is allowed to enter the specified facility.

In accordance with a second aspect of the present invention, a system including a reception terminal, an entrance terminal that restricts the entrance of an authenticated person who is attempting to enter a specified facility, and a server device, provides a method for writing an ID that identifies the authenticated person to a medium storing an electronic certificate of the authenticated person in response to an operation of the authenticated person who wishes to enter the specified facility, transmitting an authorized person notification including the ID and facial information of the authenticated person to the server device, storing the ID and facial information included in the authorized person notification in an authorized person list, reading the ID from the medium held by the authenticated person on which the ID is written, photographing the authenticated person to obtain facial information, transmitting an authentication request including the ID and the facial information to the server device, identifying the authenticated person using the ID included in the authentication request and the ID included in the authorized person list, performing one-to-one authentication using the facial information of the identified authenticated person included in the authorized person list and the facial information included in the authentication request, and notifying the entrance terminal that the authenticated person is allowed to enter the specified facility if the one-to-one authentication is successful.

In accordance with each aspect of the present invention, a system and method are provided that contribute to reducing the burden on users of facilities such as casinos. Note that the effects of the present invention are not limited to those described above. The present invention may achieve other effects instead of or in addition to the effects described above.

FIG. 1 is a diagram for explaining an overview of an embodiment. FIG. 2 is a flowchart for explaining the operation of one embodiment. FIG. 3 is a diagram showing an example of a schematic configuration of the entrance management system according to the first embodiment. FIG. 4 is a diagram for explaining the operation of the entrance management system according to the first embodiment. FIG. 5 is a diagram for explaining the operation of the entrance management system according to the first embodiment. FIG. 6 is a diagram for explaining the operation of the entrance management system according to the first embodiment. FIG. 7 is a diagram for explaining the operation of the entrance management system according to the first embodiment. FIG. 8 is a diagram illustrating an example of a processing configuration of the reception terminal according to the first embodiment. FIG. 9 is a diagram illustrating an example of a display of the reception terminal according to the first embodiment. FIG. 10 is a flowchart illustrating an example of the operation of the admission confirmation control unit according to the first embodiment. FIG. 11 is a diagram illustrating an example of a display of the reception terminal according to the first embodiment. FIG. 12 is a diagram illustrating an example of a display of the reception terminal according to the first embodiment. FIG. 13 is a flowchart illustrating an example of the operation of the admission confirmation control unit according to the first embodiment. FIG. 14 is a diagram illustrating an example of a display of the reception terminal according to the first embodiment. FIG. 15 is a diagram illustrating an example of a processing configuration of an entrance terminal according to the first embodiment. FIG. 16 is a flowchart illustrating an example of the operation of the authentication control unit according to the first embodiment. FIG. 17 is a diagram illustrating an example of a processing configuration of the casino server according to the first embodiment. FIG. 18 is a diagram illustrating an example of a user information database according to the first embodiment. FIG. 19 is a flowchart illustrating an example of the operation of the admission confirmation processing unit according to the first embodiment. FIG. 20 is a diagram illustrating an example of a processing configuration of the first PF server according to the first embodiment. FIG. 21 is a diagram illustrating an example of a user management database according to the first embodiment. FIG. 22 is a diagram illustrating an example of a processing configuration of the management server according to the first embodiment. FIG. 23 is a diagram showing an example of the visitor information database according to the first embodiment. FIG. 24 is a diagram illustrating an example of a processing configuration of the second PF server according to the first embodiment. FIG. 25 is a diagram showing an example of the attendee management database according to the first embodiment. FIG. 26 is a diagram illustrating an example of a processing configuration of the certificate authority server according to the first embodiment. FIG. 27 is a diagram illustrating an example of a processing configuration of the admission control server according to the first embodiment. FIG. 28 is a diagram showing an example of the admission permitted person list according to the first embodiment. FIG. 29 is a sequence diagram showing an example of the operation of the entrance management system according to the first embodiment. FIG. 30 is a sequence diagram showing an example of the operation of the entrance management system according to the first embodiment. FIG. 31 is a diagram illustrating an example of a hardware configuration of a reception terminal according to the present disclosure.

First, an overview of one embodiment will be described. Note that the reference numerals in the drawings attached to this overview are added to each element for convenience as an example to aid understanding, and the description of this overview is not intended to be limiting in any way. Furthermore, unless otherwise specified, the blocks illustrated in each drawing represent a functional configuration, not a hardware configuration. The connection lines between blocks in each drawing include both bidirectional and unidirectional. Unidirectional arrows are used to diagrammatically indicate the flow of the main signal (data), and do not exclude bidirectionality. Note that in this specification and drawings, elements that can be described in the same way may be labeled with the same numerals to avoid duplicated explanations.

A system according to one embodiment includes a reception terminal 101, an entrance terminal 102 that restricts the entrance of an authenticated person who is attempting to enter a specified facility, and a server device 103 (see FIG. 1). In response to an operation by an applicant who wishes to enter a specified facility, the reception terminal 101 writes an ID that identifies the applicant to a medium storing the applicant's electronic certificate (step S1 in FIG. 2). The reception terminal 101 transmits an admission permission notice including the ID and facial information of the applicant to the server device 103 (step S2). The server device 103 stores the ID and facial information included in the admission permission notice in a list of admitted persons (step S3). The entrance terminal 102 reads the ID held by the person to be authenticated from the medium on which the ID is written, photographs the person to be authenticated to obtain facial information, and transmits an authentication request including the ID and facial information to the server device 103 (step S4). The server device 103 identifies the person to be authenticated using the ID included in the authentication request and the ID included in the admission permission list (step S5). The server device 103 performs one-to-one authentication using the facial information included in the list of people allowed to enter the identified person to be authenticated and the facial information included in the authentication request (step S6). If the one-to-one authentication is successful, the server device 103 notifies the entrance terminal 102 that the person to be authenticated is allowed to enter the specified facility (notification of admission; step S7).

The reception terminal 101 writes an ID that identifies the person who wishes to enter the facility into a medium (e.g., a My Number card) in which the electronic certificate is stored, in response to an operation by the person who wishes to enter the facility (e.g., an operation related to identity verification or number of visits verification). The person who wishes to enter the facility presents the medium in which the ID is written to the entrance terminal 102. The entrance terminal 102 transmits an authentication request to the server device 103, including the ID acquired from the presented medium and face information of the person to be authenticated. The server device 103 identifies the person to be authenticated using the ID and verifies by one-to-one authentication that the person to be authenticated is not using the medium (My Number card) fraudulently. With this system configuration, the user does not need to manage the medium in which the electronic certificate is stored and the medium in which the ID is stored, reducing the management burden on the user. In addition, the server device 103 identifies the person to be authenticated who arrives at the entrance terminal 102 by authentication using the ID rather than one-to-N authentication (N is a positive integer), thereby realizing more accurate authentication.

Specific embodiments are described in more detail below with reference to the drawings.

[First embodiment]
The first embodiment will be described in more detail with reference to the drawings.

[System Configuration]
Fig. 3 is a diagram showing an example of a schematic configuration of an admission management system (information processing system) according to the first embodiment. The admission management system according to the first embodiment performs admission management for facilities in an integrated resort (IR). As shown in Fig. 3, the admission management system includes multiple server devices.

Integrated resorts include international conference centers, exhibition facilities, hotels, commercial facilities, restaurants, theaters, movie theaters, amusement parks, sports facilities, hot springs, casino areas, etc.

In the first embodiment, the facility that users enter will be described as a "casino area." However, it goes without saying that the facility that users enter may be another facility.

　Users entering a casino activity area (hereinafter simply referred to as casino facility or casino) for the first time must undergo identity verification in advance. Specifically, users (those wishing to enter) undergo identity verification using a reception terminal 10 (kiosk terminal) installed in a corner of the integrated resort facility. Note that the initial identity verification must be completed before entering the casino facility.

Identity verification is performed using an identification card issued by a public institution. Specifically, an IC (Integrated Circuit) card that stores an electronic certificate is used for identity verification. In this disclosure, an explanation will be given using the My Number Card as an example of an IC card (identification card) that stores an electronic certificate.

The user performs the initial identity verification procedure by operating the reception terminal 10 or a smartphone or other device that the user possesses. Note that the following explanation assumes that identity verification is performed at the reception terminal 10. Once the initial identity verification is complete, the user can enter the casino facility by passing through the entrance terminal 20. The entrance terminal 20 is a terminal (device) that restricts the entry of authenticated persons attempting to enter a designated facility such as a casino.

When entering the casino for the second or subsequent time, the user must also have their identity verified at the reception terminal 10. In addition, when entering the casino for the second or subsequent time, the user must have the number of visits verified at the reception terminal 10. However, foreigners who do not have a residence in Japan are not required to have their identity verified or the number of visits verified.

The number of times check is to check whether the entry limit to a casino facility set by law, etc. has been exceeded. For example, a short-term limit such as "entry is limited to three times in seven consecutive days" or a long-term limit such as "entry is limited to ten times in 28 consecutive days" is a number of times check to check whether the entry limit has been exceeded.

　Users who have successfully passed the identity verification and number of visits verification can enter the casino facility through the entrance terminal 20. In order to enter the casino facility, in addition to the identity verification and number of visits verification, a "pledge" and "payment of the entrance fee" are required. However, as the pledge and payment of the entrance fee are outside the scope of the present disclosure, an explanation of these procedures will be omitted.

As shown in FIG. 3, the admission management system includes multiple server devices. Specifically, the admission management system includes a casino server 30, a first platform (PF; Platform) server 40, a management server 50, a second platform server 60, an authentication authority server 70, and an admission control server 80.

The casino server 30 is a server device managed by a casino operator or the like. The casino server 30 manages casino users, etc. The casino server 30 controls users' entry into the casino facility.

The first PF server 40 is a server device managed by an authentication business that performs electronic certificate authentication operations. The first PF server 40 performs authentication procedures using the electronic certificate stored in the identification card. More specifically, the first PF server 40 is a device that performs electronic certificate authentication operations requested by the casino operator.

The management server 50 is a server device managed by the Casino Management Committee (an administrative body that creates rules regarding casino use and manages casino business activities by casino operators). The management server 50 manages the usage status of casino facilities. More specifically, the management server 50 checks the number of times casino users visit and manages (stores) the identities of casino users. Note that the management server 50 does not manage the usage status of a single casino facility, but rather manages the usage status of each casino facility (multiple casino facilities) that conducts business activities within the country. In other words, the management server 50 checks the number of times not only for the casino facility that the user is about to enter, but also for other casino facilities existing within the country (performing the short-term and long-term number checks described above).

The second PF server 60 is a server device managed by an authentication business that performs electronic certificate authentication operations. The second PF server 60 performs authentication procedures using the electronic certificate stored in the identification card. More specifically, the second PF server 60 is a device that performs electronic certificate authentication operations requested by the Casino Management Committee.

The certification authority server 70 is a server device managed by a corporation jointly operated by the national and local governments called J-LIS (Japan Agency for Local Authority Information Systems). The certification authority server 70 verifies the validity of electronic certificates. More specifically, the certification authority server 70 is a device that provides personal authentication services using electronic certificates.

The entrance control server 80 is a server device that controls users' entrance into the casino facility. The entrance control server 80 authenticates users (authenticated persons) who attempt to enter the casino facility through the entrance terminal 20.

[Outline of operation]
Next, the general operation of the entrance management system according to the first embodiment will be described.

<First identity verification>
The outline of the operation of the admission control system for initial identity verification will be described with reference to FIG.

A user entering a casino facility for the first time undergoes initial identity verification at the reception terminal 10. In this case, the reception terminal 10 obtains a signature electronic certificate from the My Number card held by the user. Specifically, the reception terminal 10 obtains from the user a password for reading the signature electronic certificate, and obtains the electronic certificate from the My Number card. The reception terminal 10 sends an identity verification request including the obtained signature electronic certificate to the casino server 30 (step S01). The reception terminal 10 requests the casino server 30 to verify the user's identity using the electronic certificate.

The electronic signature certificate is an electronic certificate used to sign documents to be submitted to public institutions, etc., and contains the personal information of the user (a resident who has been issued a My Number card) (the so-called four basic pieces of information: name, date of birth, gender, and address).

The casino server 30 requests the first PF server 40 to verify the identity of the user. Specifically, the casino server 30 sends an identity verification request including the signature electronic certificate acquired from the reception terminal 10 to the first PF server 40 (step S02).

In response to receiving the identity verification request, the first PF server 40 requests the certificate authority server 70 to verify the validity of the signature electronic certificate. Specifically, the first PF server 40 sends a verification request including the issue number of the signature electronic certificate to the certificate authority server 70 (step S03).

The certificate authority server 70 verifies the signature electronic certificate. The certificate authority server 70 transmits the verification result of the signature electronic certificate (signature electronic certificate is valid, signature electronic certificate is invalid) to the first PF server 40 (step S04). At that time, if the verification of the signature electronic certificate is successful, the certificate authority server 70 also transmits the issue number of the user authentication electronic certificate linked to the signature electronic certificate to the first PF server 40.

If the signature electronic certificate is valid, the first PF server 40 creates an account for the user (a user entering a casino facility for the first time). In the account, the first PF server 40 stores an ID that identifies the user (hereinafter referred to as a user ID), the issue number of the signature electronic certificate, the issue number of the user authentication electronic certificate, and personal identification information in association with each other.

Note that personal identification information is information consisting of at least one of name, date of birth, gender, and address, or a combination of these. For example, a name or a combination of a name and date of birth corresponds to personal identification information. Of course, a combination of a name, date of birth, gender, and address may also be personal identification information.

Then, the first PF server 40 transmits the result of the identity verification request (identity verification successful, identity verification failed) to the casino server 30 (step S05). If identity verification is successful, the first PF server 40 also transmits the user ID and identity information to the casino server 30.

Depending on the confirmation result received from the first PF server 40, the casino server 30 sends a response to the identity confirmation request (identity confirmation successful, identity confirmation failed) to the reception terminal 10 (step S06). If identity confirmation is successful, the casino server 30 notifies the reception terminal 10 and the management server 50 of the user ID and identity specification information. The casino server 30 also stores the user ID etc. received from the first PF server 40.

Once identity verification using the electronic certificate (digital signature certificate) is complete, the reception terminal 10 performs identity verification using facial information. Specifically, the reception terminal 10 performs identity verification using the facial information printed on the face of the My Number card and facial information obtained by photographing the user in front of the user.

In the following explanation, the operation of the system will be explained using a "face image" as an example of face information. However, the face information is not limited to face images, and the face information may be a feature generated from a face image.

If the reception terminal 10 determines that the two facial images are facial images of the same person, it determines that identity verification has been successful. If the reception terminal 10 determines that the two facial images are not facial images of the same person, it determines that identity verification has failed.

If both identity verifications are successful, the reception terminal 10 notifies the user that they can enter the casino.

Furthermore, the reception terminal 10 (kiosk terminal) issues a casino user ID to a user who has completed the initial identity verification (a user who is eligible to enter the casino facility). If the reception terminal 10 is successful in identity verification using an electronic certificate and a facial image, it issues a casino user ID for that user. For example, the reception terminal 10 issues the user ID received from the casino server 30 as the casino user ID.

The reception terminal 10 stores (records) the casino user ID (user ID) in the My Number card presented by the user. Specifically, the reception terminal 10 writes the casino user ID in the app installation area of the My Number card.

Furthermore, the reception terminal 10 transmits an "admission permitted person notification" including the face image and casino user ID of the user whose identity has been verified to the admission control server 80 (step S07). The admission control server 80 manages the users who have completed identity verification and are permitted to enter the casino facility in an admission permitted person list. The admission control server 80 stores the casino user ID and face image acquired from the reception terminal 10 in the admission permitted person list.

<Identity verification and number of times verification will be performed from the second time onwards when entering casino facilities>
As described above, in order to enter the casino facility for the second or subsequent time, the user's identity and the number of times of entry are required to be verified. The identity and number of times of entry are verified via the reception terminal 10.

In this case, the reception terminal 10 obtains the casino user ID and user authentication electronic certificate from the My Number card held by the user. Specifically, the reception terminal 10 obtains a password for reading the user certificate electronic certificate from the user, and obtains the electronic certificate from the My Number card. The reception terminal 10 sends an entry confirmation request including the obtained casino user ID and user authentication electronic certificate to the casino server 30 (step S11 in FIG. 5). The reception terminal 10 requests the casino server 30 to verify the user's identity and number of visits using the electronic certificate.

The user electronic certificate is an electronic certificate used as a means of authenticating a person's identity, and does not include personal information (the so-called four basic pieces of information: name, date of birth, gender, and address) of the user (a resident who has been issued a My Number card).

The admission control system performs identity verification and count verification. These identity verification and count verification are performed in parallel, but for convenience, they will be explained separately.

First, we will explain the general operation of the admission management system regarding identity verification when entering a casino facility, with reference to the identity verification flow shown in the lower part of Figure 6.

When the casino server 30 obtains the user authentication electronic certificate from the reception terminal 10, it requests the first PF server 40 to verify the identity of the person wishing to enter. Specifically, the casino server 30 sends an identity verification request including the user authentication electronic certificate obtained from the reception terminal 10 to the first PF server 40 (step S21).

The first PF server 40 determines whether or not the initial identity verification has been completed for a person who wishes to enter a casino facility. Specifically, the first PF server 40 uses the issue number of the user authentication electronic certificate to determine whether or not an account has been created for the person who wishes to enter.

If an account has been created, the first PF server 40 requests the certification authority server 70 to verify the validity of the signature electronic certificate and the user authentication electronic certificate. Specifically, the first PF server 40 sends a verification request including the issue number of the signature electronic certificate and the issue number of the user authentication electronic certificate to the certification authority server 70 (step S22).

The certificate authority server 70 verifies the signature electronic certificate and the user authentication electronic certificate. The certificate authority server 70 sends the verification results of the signature electronic certificate and the user authentication electronic certificate (certificate is valid, certificate is invalid) to the first PF server 40 (step S23).

Depending on the verification result obtained from the authentication authority server 70, the first PF server 40 transmits the verification result (identity verification successful, identity verification failed) for the identity verification request received from the casino server 30 to the casino server 30 (step S24). If identity verification is successful, the first PF server 40 notifies the casino server 30 of the user ID and identity specification information of the person wishing to enter.

The casino server 30 stores the verification result (identity verification successful, identity verification failed) for those who wish to enter the casino facility.

Next, we will explain the general operation of the admission management system regarding the number of times confirmation when entering a casino facility, by referring to the number of times confirmation flow shown in the upper part of Figure 6.

When the casino server 30 obtains the user authentication electronic certificate from the reception terminal 10, it requests the management server 50 to confirm the number of times the person wishing to enter has visited. Specifically, the casino server 30 sends a number confirmation request to the management server 50, which includes the user authentication electronic certificate and the user ID read from the My Number card (step S31).

The management server 50 requests the second PF server 60 to identify the spectator. Specifically, the management server 50 sends a spectator identification request, including the user authentication electronic certificate acquired from the casino server 30, to the second PF server 60 (step S32).

In response to receiving the visitor identification request, the second PF server 60 requests the certification authority server 70 to verify the validity of the user-certified electronic certificate. Specifically, the second PF server 60 sends a verification request including the issue number of the user-certified electronic certificate to the certification authority server 70 (step S33).

The certificate authority server 70 verifies the user-certificate electronic certificate. The certificate authority server 70 transmits the result of the verification of the user-certificate electronic certificate (the user-certificate electronic certificate is valid, the user-certificate electronic certificate is invalid) to the second PF server 60 (step S34).

If the user authentication electronic certificate is valid, the second PF server 60 creates an account for the visitor. The second PF server 60 stores an ID that identifies the visitor (hereinafter referred to as a visitor ID) in association with the issue number of the visitor's user authentication electronic certificate.

The second PF server 60 transmits a response (attendee identified, attendee unidentified) to the attendance request received from the management server 50 to the management server 50 (step S35). If an attendee is identified, the second PF server 60 also transmits the attendee ID of the identified attendee (scheduled attendee) to the management server 50.

The management server 50 checks the number of times the identified user has used the casino facilities. The management server 50 transmits the result of the check (user may use the casino facilities, user may not use the casino facilities) to the casino server 30 (step S36).

The casino server 30 stores the result of the count confirmation.

Once the results of the identity verification and the number of times verification are received, the casino server 30 determines whether the user is permitted to enter the casino facility. The casino server 30 sends a response to the request for confirmation of entry (permitted to enter the casino facility, not permitted to enter the casino facility) to the reception terminal 10 (step S12 in FIG. 5).

If identity verification (identity verification using the user certificate electronic certificate) and number of attempts verification are successful, the reception terminal 10 performs identity verification using the facial image printed on the face of the My Number card and a facial image obtained by photographing the user in front of the card.

If the user's identity and number of visits are successfully verified, the reception terminal 10 notifies the user that he or she may enter the casino.

The reception terminal 10 transmits to the admission control server 80 the face image and casino user ID of the user who has completed the second or subsequent identity verification and number verification, just as it did during the initial identity verification. The admission control server 80 stores the casino user ID and face image acquired from the reception terminal 10 in the admission permitted person list.

<Entry to casino facilities>
When a user who has completed identity verification and the like enters a casino facility, the user presents a medium (such as a My Number Card; MNC) on which a casino user ID is stored to an entrance terminal 20 (see FIG. 7).

The admission terminal 20 reads out the casino user ID from the My Number card presented by the user (a person wishing to enter a casino facility; a person to be authenticated). The admission terminal 20 also photographs the user to obtain a facial image of the person wishing to enter.

The admission terminal 20 sends an authentication request including the acquired face image and casino user ID to the admission control server 80.

The admission control server 80 searches the list of admitted users using the casino user ID as a key, and identifies the corresponding user (a user who has completed identity verification and number of visits verification).

The admission control server 80 performs one-to-one authentication (one-to-one matching) using the face image of the identified user and the face image acquired from the admission terminal 20. If the one-to-one authentication is successful, the admission control server 80 allows the person wishing to enter the casino (the person to be authenticated) to pass through the gate.

If the one-to-one authentication is successful, the admission control server 80 sends a positive response to the admission terminal 20 indicating that the user is permitted to enter the casino. If the casino user ID is not on the list of permitted visitors or if the one-to-one authentication fails, the admission control server 80 sends a negative response to the admission terminal 20 indicating that the user is not permitted to enter the casino.

If a positive response is received, the admission terminal 20 opens the gate and allows the user to enter the casino. If a negative response is received, the admission terminal 20 closes the gate and denies the user entry to the casino.

In this way, the reception terminal 10 controls the identity verification using the electronic certificate of an entry applicant who wishes to enter a specified facility (casino). When the reception terminal 10 succeeds in identity verification using the electronic certificate, it writes an ID (casino user ID) that identifies the entry applicant whose identity has been successfully verified to the medium (My Number card) in which the entry applicant's electronic certificate is stored. The reception terminal 10 transmits an entry permitted person notification including the ID and face information of the entry applicant whose identity has been successfully verified using the electronic certificate to the server device (entrance control server 80). The server device stores the ID and face information included in the entry permitted person notification in an entry permitted person list. The entry terminal 20 reads the ID held by the person to be authenticated from the medium (My Number card) in which the ID is written, and photographs the person to be authenticated to obtain face information. The entry terminal 20 transmits an authentication request including the ID and face information to the server device. The server device identifies the person to be authenticated using the ID included in the authentication request and the ID included in the entry permitted person list. Furthermore, the server device performs one-to-one authentication using the face information included in the entry permitted person list of the identified person to be authenticated and the face information included in the authentication request. If the one-to-one authentication is successful, the server device notifies the admission terminal 20 that the person being authenticated can enter the casino.

The admission control server 80 performs one-to-one authentication to prevent a user who has completed identity verification and number of times from handing over a medium (e.g., a My Number card) on which the casino user ID is stored to another person, thereby preventing that other person from illegally entering the casino.

Next, we will explain the details of each device included in the admission management system according to the first embodiment.

[Reception terminal]
Fig. 8 is a diagram showing an example of a processing configuration (processing module) of the reception terminal 10 according to the first embodiment. Referring to Fig. 8, the reception terminal 10 includes a communication control unit 201, an admission confirmation control unit 202, and a storage unit 203.

The communication control unit 201 is a means for controlling communication with other devices. For example, the communication control unit 201 receives data (packets) from the casino server 30. The communication control unit 201 also transmits data to the casino server 30. The communication control unit 201 passes data received from other devices to other processing modules. The communication control unit 201 transmits data acquired from other processing modules to other devices. In this way, the other processing modules transmit and receive data with other devices via the communication control unit 201. The communication control unit 201 has a function as a receiving unit that receives data from other devices and a function as a transmitting unit that transmits data to other devices.

The admission verification control unit 202 is a means for controlling identity verification and number of admission verification for those who wish to enter a casino facility.

When the entry confirmation control unit 202 acquires the user's intention to enter the casino using a GUI (Graphical User Interface) or the like, it requests the user to present his/her My Number card. For example, the entry confirmation control unit 202 displays a GUI such as that shown in FIG. 9 and recognizes that the My Number card has been inserted into an IC (Integrated Circuit) card reader/writer.

The admission verification control unit 202 controls the IC card reader/writer and attempts to read the casino user ID from the My Number card.

If the entry confirmation control unit 202 cannot read the casino user ID, it determines that the user has never entered the casino (a user who requires initial identity verification).

If the entry verification control unit 202 is able to read the casino user ID, it determines that the user has already entered the casino (a user who requires identity verification from the second time onwards).

First, with reference to FIG. 10, the operation of the admission confirmation control unit 202 for a user who requires initial identity verification will be described.

For a user who requires initial identity verification, the entry verification control unit 202 obtains a signature electronic certificate from the My Number card held by the user (step S101).

At this time, it is necessary to enter a PIN (password) corresponding to the digital signature certificate, so the entrance verification control unit 202 displays a GUI like that shown in FIG. 11 and obtains the PIN (a string of 6 to 16 alphanumeric characters).

The entrance confirmation control unit 202 attempts to read the signature electronic certificate from the My Number card using the acquired PIN. If the correct PIN is entered, the entrance confirmation control unit 202 can read the signature electronic certificate.

The entry verification control unit 202 sends an identity verification request including the read signature electronic certificate to the casino server 30 (step S102).

The entry confirmation control unit 202 receives a response (positive or negative response) to the identity verification request from the casino server 30.

If a negative response (identity verification failed) is received in response to the identity verification request (step S103, No branch), the admission confirmation control unit 202 determines that the user cannot enter the casino (casino entry not permitted; step S104).

If a positive response (identity verification successful) is received in response to the identity verification request (step S103, Yes branch), the admission confirmation control unit 202 performs identity verification using a facial image (step S105). Specifically, the admission confirmation control unit 202 performs identity verification using a facial image obtained by photographing the face of the My Number card and the user in front of the user.

The admission confirmation control unit 202 controls the scanner to obtain the facial image printed on the face of the My Number card. The admission confirmation control unit 202 also controls the camera to photograph the user in front of the admission confirmation control unit 202 and obtains the facial image. The admission confirmation control unit 202 calculates feature amounts from each of the two facial images.

Note that existing technology can be used for the process of generating features, so a detailed description of this will be omitted. For example, the entrance confirmation control unit 202 extracts the eyes, nose, mouth, etc. from the face image as feature points. The entrance confirmation control unit 202 then calculates the position of each feature point and the distance between each feature point as feature amounts (generating a feature vector consisting of multiple feature amounts).

Next, the entrance confirmation control unit 202 executes a matching process (one-to-one matching) using the two generated feature amounts. Specifically, the entrance confirmation control unit 202 calculates the similarity between corresponding face images using the two feature amounts. Based on the result of threshold processing on the calculated similarity, the entrance confirmation control unit 202 determines whether the two images are face images of the same person. Note that the similarity can be calculated using chi-square distance, Euclidean distance, or the like. The greater the distance, the lower the similarity, and the closer the distance, the higher the similarity.

If the similarity is greater than a predetermined value (if the distance is shorter than a predetermined value), the admission confirmation control unit 202 determines that identity verification was successful. If the similarity is equal to or less than the predetermined value, the admission confirmation control unit 202 determines that identity verification was unsuccessful.

If identity verification using a facial image fails (step S106, No branch), the admission verification control unit 202 determines that the user cannot enter the casino (casino admission not permitted; step S104).

If identity verification using a facial image is successful (step S106, Yes branch), the admission verification control unit 202 determines that the user is allowed to enter the casino (casino admission permitted; step S107).

The admission confirmation control unit 202 issues a casino user ID for the user who has completed the initial identity verification. For example, the admission confirmation control unit 202 treats the user ID received from the casino server 30 as the casino user ID. The admission confirmation control unit 202 stores (records) the casino user ID in the My Number card presented by the user (step S108). Specifically, the admission confirmation control unit 202 writes the casino user ID in the app installation area of the My Number card.

Then, the admission confirmation control unit 202 sends an "admission permitted person notification" including a facial image of the user who has completed the initial identity confirmation (the facial image printed on the face of the My Number card or a facial image obtained by photographing) and the casino user ID to the admission control server 80 (step S109).

The admission confirmation control unit 202 notifies the user of the result of the initial identity verification. The admission confirmation control unit 202 notifies the user whether or not he or she is allowed to enter the casino (step S110).

For example, for a user who is allowed to enter the casino, the entry confirmation control unit 202 displays a message as shown in FIG. 12.

Next, referring to FIG. 13, the operation of the admission confirmation control unit 202 for users who require identity confirmation and number of attempts from the second time onwards will be explained.

For users who require identity verification for the second or subsequent times, the entry verification control unit 202 obtains a user authentication electronic certificate from the My Number card held by the user (step S201).

At that time, a PIN number corresponding to the electronic certificate for user authentication or a facial image of the user (person wishing to enter) is required, so the entrance confirmation control unit 202 displays a GUI such as that shown in FIG. 14 and obtains the PIN number (a four-digit number sequence) or the facial image.

When the "photograph button" shown in FIG. 14 is pressed, the admission confirmation control unit 202 controls a camera (not shown) to capture a facial image of the person wishing to enter.

The entrance confirmation control unit 202 attempts to read the user authentication electronic certificate from the My Number card using the acquired PIN. If the correct PIN has been entered, the entrance confirmation control unit 202 can read the user authentication electronic certificate.

Alternatively, if the facial image (facial information) printed on the My Number card substantially matches the facial image (facial information) obtained by photographing the user, the entry confirmation control unit 202 can read out the electronic certificate for user authentication.

The entry confirmation control unit 202 sends an entry confirmation request including the read user electronic certificate and casino user ID (user ID) to the casino server 30 (step S202).

The entry confirmation control unit 202 receives a response (positive or negative response) to the entry confirmation request from the casino server 30.

If a negative response is received in response to the entry confirmation request (step S203, No branch), the entry confirmation control unit 202 determines that the user cannot enter the casino (casino entry not permitted; step S204).

If a positive response is received in response to the entrance confirmation request (step S203, Yes branch), the entrance confirmation control unit 202 performs identity verification using a facial image (step S205).

If identity verification using a facial image fails (step S206, No branch), the admission verification control unit 202 determines that the user cannot enter the casino (casino admission not permitted; step S204).

If identity verification using a facial image is successful (step S206, Yes branch), the admission verification control unit 202 determines that the user is allowed to enter the casino (casino entry permitted; step S207).

The admission confirmation control unit 202 sends an "admission permitted person notification" including the face image and casino user ID of the user who has completed the second or subsequent identity and number confirmations to the admission control server 80 (step S208).

The admission confirmation control unit 202 notifies the user of the results of the identity confirmation and number confirmation from the second time onwards. The admission confirmation control unit 202 notifies the user whether or not he or she is allowed to enter the casino (step S209).

In this way, when a person wishing to enter the casino for the first time, the entry confirmation control unit 202 performs identity confirmation using at least an electronic certificate. Furthermore, when a person wishing to enter the casino wishes to enter for the second or subsequent time, the entry confirmation control unit 202 performs control related to identity confirmation using at least an electronic certificate and confirmation of the number of times the person has entered the casino. More specifically, when the entry confirmation control unit 202 cannot read out a casino user ID from a My Number card in which an electronic certificate is stored, it determines that the person wishing to enter is a user who is attempting to enter the casino for the first time. When the entry confirmation control unit 202 can read out a casino user ID from a My Number card in which an electronic certificate is stored, it determines that the person wishing to enter is a user who wishes to enter the casino for the second or subsequent time.

The memory unit 203 is a means for storing information necessary for the operation of the reception terminal 10.

[Admission terminal]
15 is a diagram showing an example of a processing configuration (processing module) of the entrance terminal 20 according to the first embodiment. Referring to FIG. 15, the entrance terminal 20 includes a communication control unit 301, an authentication control unit 302, a gate control unit 303, and a storage unit 304.

The communication control unit 301 is a means for controlling communication with other devices. For example, the communication control unit 301 receives data (packets) from the casino server 30. The communication control unit 301 also transmits data to the casino server 30. The communication control unit 301 passes data received from other devices to other processing modules. The communication control unit 301 transmits data obtained from other processing modules to other devices. In this way, the other processing modules transmit and receive data with other devices via the communication control unit 301. The communication control unit 301 has a function as a receiving unit that receives data from other devices and a function as a transmitting unit that transmits data to other devices.

The authentication control unit 302 is a means for controlling the authentication of persons (persons to be authenticated) who wish to enter the casino facility.

FIG. 16 is a flowchart showing an example of the operation of the authentication control unit 302 according to the first embodiment.

When the authentication control unit 302 detects a user in front of its device (in front of the entrance terminal 20) using a human presence sensor or the like, it asks the user to present their My Number card.

For example, the authentication control unit 302 prompts the user to touch the My Number card to an IC card reader. The authentication control unit 302 attempts to read the casino user ID from the My Number card (step S301).

If reading of the casino user ID fails (step S302, No branch), the authentication control unit 302 determines that the user cannot enter the casino (casino entry not permitted; step S303).

If the casino user ID is successfully read (step S302, Yes branch), the authentication control unit 302 controls the camera to obtain a facial image of the user (step S304).

The authentication control unit 302 sends an authentication request including the acquired face image and casino user ID to the admission control server 80 (step S305).

The authentication control unit 302 receives the authentication result (authentication successful, authentication failed) from the entrance control server 80.

If authentication fails (negative response) (step S306, No branch), the authentication control unit 302 determines that the user cannot enter the casino (casino entry not permitted; step S303).

If authentication is successful (positive response) (step S306, Yes branch), the authentication control unit 302 determines that the user can enter the casino (casino entry permitted; step S307).

The authentication control unit 302 notifies the user whether or not he or she is permitted to enter the casino (step S308). The authentication control unit 302 also notifies the gate control unit 303 whether or not the user (person to be authenticated) is permitted to enter the casino.

The gate control unit 303 is a means for controlling the gate.

If the user is not permitted to enter the casino facility, the gate control unit 303 closes the gate to deny the user passage.

If the user is permitted to enter the casino facility, the gate control unit 303 opens the gate to allow the user to pass through. At that time, the gate control unit 303 detects the user's passage through the gate using a human presence sensor or the like installed on the admission terminal 20.

If the gate control unit 303 detects a user passing through the gate within a predetermined period of time after the gate is opened, the gate control unit 303 notifies the casino server 30 of this fact. Specifically, the gate control unit 303 sends a "casino entry notification" including the casino user ID (user ID) to the casino server 30.

If the gate control unit 303 does not detect a user passing through the gate within a specified period of time after the gate is opened, the gate control unit 303 closes the gate.

The memory unit 304 is a means for storing information necessary for the operation of the entrance terminal 20.

[Casino Server]
17 is a diagram showing an example of a processing configuration (processing module) of the casino server 30 according to the first embodiment. Referring to FIG. 17, the casino server 30 includes a communication control unit 401, an identity verification processing unit 402, an entry verification processing unit 403, an entry notification unit 404, and a storage unit 405.

The communication control unit 401 is a means for controlling communication with other devices. For example, the communication control unit 401 receives data (packets) from the reception terminal 10. The communication control unit 401 also transmits data to the reception terminal 10. The communication control unit 401 passes the data received from other devices to other processing modules. The communication control unit 401 transmits data acquired from other processing modules to other devices. In this way, the other processing modules transmit and receive data to and from other devices via the communication control unit 401. The communication control unit 401 has a function as a receiving unit that receives data from other devices, and a function as a transmitting unit that transmits data to other devices.

The identity verification processing unit 402 is a means for processing identity verification requests received from the reception terminal 10. The identity verification processing unit 402 requests the first PF server 40 to verify the identity of a person wishing to enter the casino facility. Specifically, the identity verification processing unit 402 extracts the signature electronic certificate included in the identity verification request, and transmits an identity verification request including the signature electronic certificate to the first PF server 40.

The identity verification processing unit 402 receives a response (positive or negative response) to the identity verification request from the first PF server 40.

If identity verification fails (if a negative response is received), the identity verification processing unit 402 notifies the reception terminal 10 that identity verification has failed. Specifically, the identity verification processing unit 402 sends a negative response to the identity verification request to the reception terminal 10.

If identity verification is successful (if a positive response is received), the identity verification processing unit 402 notifies the reception terminal 10 that identity verification was successful. Specifically, the identity verification processing unit 402 sends a positive response to the identity verification request (positive response including the user ID) to the reception terminal 10. Note that, as described above, the user ID and the casino user ID are the same value.

Here, the positive response sent by the first PF server 40 (the response sent when the verification of the digital certificate for signature is successful) includes the user ID and personal identification information. The personal identification processing unit 402 sends the acquired user ID and personal identification information to the management server 50.

The identity verification processing unit 402 associates the user ID and identity information included in the positive response and stores them in a user information database (see FIG. 18). Note that the user information database shown in FIG. 18 is an example and is not intended to limit the items to be stored. For example, the date and time of processing the identity verification request may be registered in the user information database.

The entry confirmation processing unit 403 is a means for processing the entry confirmation request received from the reception terminal 10. The entry confirmation processing unit 403 receives the entry confirmation request including the electronic certificate for user authentication and the casino user ID (user ID) of the person wishing to enter the casino.

The entry confirmation processing unit 403 executes processes related to identity verification and number of visits of a person wishing to enter the casino in parallel in response to receiving an entry confirmation request. The operation of the entry confirmation processing unit 403 will be explained with reference to FIG. 19.

When an admission confirmation request is received, the admission confirmation processing unit 403 generates identification information for managing (identifying) the inquiry corresponding to the admission confirmation request (step S401). Specifically, the admission confirmation processing unit 403 generates an inquiry ID in response to receiving the admission confirmation request. For example, the admission confirmation processing unit 403 generates an inquiry ID (inquiry number) by calculating a hash value of the date and time of receipt of the admission confirmation request, etc.

The admission confirmation processing unit 403 requests the first PF server 40 to confirm the identity of the person who wishes to enter. The admission confirmation processing unit 403 also requests the management server 50 to confirm the number of times the person wishes to enter.

To verify the identity of the person wishing to enter, the entrance verification processing unit 403 sends an identity verification request including the electronic certificate for user authentication acquired from the entrance terminal 20 to the first PF server 40 (step S402).

The admission confirmation processing unit 403 receives a response (positive or negative response) to the identity confirmation request from the first PF server 40. The positive response includes the user ID and identity information of the person wishing to enter.

If identity verification fails (if a negative response is received), the admission confirmation processing unit 403 stores the fact that identity verification of the person wishing to enter has failed. Specifically, the admission confirmation processing unit 403 stores (manages) the inquiry ID and the fact that identity verification has failed in association with each other.

If identity verification is successful (if a positive response is received), the admission confirmation processing unit 403 stores the fact that identity verification of the person wishing to enter was successful. Specifically, the admission confirmation processing unit 403 stores (manages) the inquiry ID, the fact that identity verification was successful, the user ID, and identity specification information in association with each other.

In this way, the admission confirmation processing unit 403 stores the result of identity confirmation in association with the inquiry ID (step S403).

To confirm the number of times that a person wishing to enter has attempted to enter, the entry confirmation processing unit 403 sends a number of times confirmation request to the management server 50, which request includes the inquiry ID, the electronic certificate for user authentication acquired from the reception terminal 10, and the user ID (casino user ID) (step S404).

The admission confirmation processing unit 403 receives a response (positive response, negative response) to the number confirmation request from the management server 50. The response (positive response, negative response) received from the management server 50 includes an inquiry ID. Furthermore, the positive response includes the visitor ID of the person wishing to enter.

If the user is unable to use the casino facilities (if a negative response is received), the admission confirmation processing unit 403 stores the fact that the number of times confirmation for the person wishing to enter has failed. Specifically, the admission confirmation processing unit 403 stores (manages) the inquiry ID and the fact that the number of times confirmation has failed in association with each other.

If the user is allowed to use the casino facilities (if a positive response is received), the admission confirmation processing unit 403 stores the fact that the number of visits confirmation for the person wishing to enter was successful. Specifically, the admission confirmation processing unit 403 stores (manages) the inquiry ID, visitor ID, and the fact that the number of visits confirmation was successful in association with each other.

In this way, the admission confirmation processing unit 403 stores the result of the number confirmation in association with the inquiry ID (step S405).

Once the results of identity verification and number of visits of the person wishing to enter have been received, the entry verification processing unit 403 determines whether or not the person wishing to enter is permitted to enter the casino facility (entry permission determination; step S406).

If identity verification is successful and the casino facility is available for use, the admission confirmation processing unit 403 determines that the person wishing to enter the casino facility can enter the casino facility.

If identity verification fails or the casino facility is not available, the entry verification processing unit 403 determines that the user cannot enter the casino facility.

The admission confirmation processing unit 403 sends a response (confirmation result) to the admission confirmation request to the reception terminal 10 (step S407).

Specifically, if it is determined that the person wishing to enter is permitted to enter the casino facility, the entry confirmation processing unit 403 sends a positive response indicating that to the reception terminal 10.

If it is determined that the person wishing to enter the casino facility is not allowed to enter, the entry confirmation processing unit 403 sends a negative response indicating that to the reception terminal 10.

The entry notification unit 404 is a means for notifying the management server 50 of the fact that a user (a person wishing to enter the casino facility) has entered the casino facility. The entry notification unit 404 processes the "casino entry notification" sent by the entry terminal 20.

When a casino entry notification is received from the entry terminal 20, the entry notification unit 404 searches the user information database using the casino user ID (user ID) as a key to identify the corresponding entry. The entry notification unit 404 sends a "user entry notification" to the management server 50, which includes the date and time the user passed through the gate, the personal information of the identified entry, and the user ID.

In the example shown in FIG. 18, when the user ID is "uID01", a user entry notification including the name "NM01" and the gender "female" is sent to the management server 50. The date and time when the user passed through the gate can be the date and time when the casino entry notification was received.

The memory unit 405 is a means for storing information necessary for the operation of the casino server 30.

[First PF Server]
The first PF server 40 is a server that processes an identity verification request sent from the casino server 30. The first PF server 40 requests the certificate authority server 70 to verify electronic certificates (digital signature certificate, electronic user certificate) resulting from the first identity verification and the second and subsequent identity verifications. Furthermore, the first PF server 40 controls the ID (user ID) of the user who is the subject of identity verification.

FIG. 20 is a diagram showing an example of a processing configuration (processing module) of the first PF server 40 according to the first embodiment. Referring to FIG. 20, the first PF server 40 includes a communication control unit 501, a verification control unit 502, and a storage unit 503.

The communication control unit 501 is a means for controlling communication with other devices. For example, the communication control unit 501 receives data (packets) from the casino server 30. The communication control unit 501 also transmits data to the casino server 30. The communication control unit 501 passes data received from other devices to other processing modules. The communication control unit 501 transmits data obtained from other processing modules to other devices. In this way, the other processing modules transmit and receive data with other devices via the communication control unit 501. The communication control unit 501 has a function as a receiving unit that receives data from other devices and a function as a transmitting unit that transmits data to other devices.

The verification control unit 502 is a means for controlling the verification of the validity of electronic certificates. The verification control unit 502 processes identity verification requests received from the casino server 30.

The identity verification request for the initial identity verification includes the signature electronic certificate. The verification control unit 502 extracts the issue number from the signature electronic certificate and sends a verification request including the extracted issue number to the certification authority server 70.

The verification control unit 502 receives a response (positive or negative response) to the verification request from the certification authority server 70.

If a negative response (the signature electronic certificate is invalid) is received, the verification control unit 502 notifies the casino server 30 that identity verification has failed. The verification control unit 502 sends a negative response indicating that to the casino server 30.

If a positive response is received (the digital signature certificate is valid), the verification control unit 502 creates an account for the corresponding user.

Specifically, the verification control unit 502 generates a user ID for the person who wishes to enter and is the subject of the process. The verification control unit 502 also extracts the issue number of the electronic certificate for user authentication from the positive response received from the certification authority server 70. Furthermore, the verification control unit 502 obtains personal identification information from the electronic signature certificate that has been determined to be valid.

The verification control unit 502 stores the generated user ID, personal identification information, the issue number of the electronic certificate for signature, and the issue number of the electronic certificate for user authentication in the user management database (see FIG. 21). Note that the user management database shown in FIG. 21 is an example, and is not intended to limit the items to be stored.

Once the account for the person being processed is generated, the verification control unit 502 notifies the casino server 30 that identity verification has been successful. At that time, the verification control unit 502 notifies the casino server 30 of the generated user ID and the corresponding identity identification information. Specifically, the verification control unit 502 sends an affirmative response including the user ID and identity identification information to the casino server 30.

The user identification request (the second or subsequent identity verification request) when the user enters a casino facility includes the user identification electronic certificate. The verification control unit 502 extracts the issue number from the user identification electronic certificate.

The verification control unit 502 searches the user management database using the issue number extracted from the user authentication electronic certificate included in the identity verification request resulting from the second or subsequent identity verification performed at the entrance terminal 20 as a key, and attempts to identify the corresponding entry.

If the corresponding entry (issue number) does not exist in the user management database, the verification control unit 502 determines that the person seeking admission has not completed the "initial identity verification (validation of the signature electronic certificate)," and sets the identity verification for that user to failed.

If a corresponding entry (issue number) exists in the user management database, the verification control unit 502 sends a verification request to the certification authority server 70, including the issue number of the user authentication electronic certificate and the issue number of the signature electronic certificate stored in the identified entry.

If a negative response is received (at least one of the signature electronic certificate and the user authentication electronic certificate is invalid), the verification control unit 502 sets the user identity verification to failure.

If a positive response is received (the signature electronic certificate and user authentication electronic certificate are valid), the verification control unit 502 sets the user identity verification to successful.

The verification control unit 502 notifies the casino server 30 of the result of identity verification (identity verification successful, identity verification failed).

If identity verification is successful, the verification control unit 502 sends an affirmative response indicating that to the casino server 30. At that time, the verification control unit 502 sends an affirmative response including the user ID and identity specification information for the user (person subject to identity verification) to the casino server 30.

If identity verification fails, the verification control unit 502 sends a negative response to that effect to the casino server 30.

The memory unit 503 is a means for storing information necessary for the operation of the first PF server 40.

[Administration Server]
Fig. 22 is a diagram showing an example of a processing configuration (processing module) of the management server 50 according to the first embodiment. Referring to Fig. 22, the management server 50 includes a communication control unit 601, a count confirmation control unit 602, an entry/exit control unit 603, and a storage unit 604.

The communication control unit 601 is a means for controlling communication with other devices. For example, the communication control unit 601 receives data (packets) from the casino server 30. The communication control unit 601 also transmits data to the casino server 30. The communication control unit 601 passes data received from other devices to other processing modules. The communication control unit 601 transmits data obtained from other processing modules to other devices. In this way, the other processing modules transmit and receive data with other devices via the communication control unit 601. The communication control unit 601 has a function as a receiving unit that receives data from other devices and a function as a transmitting unit that transmits data to other devices.

The number of times confirmation control unit 602 is a means for controlling the confirmation of the number of times a user uses a casino. Note that the number of times confirmation control unit 602 does not manage the usage status of a single casino facility, but rather manages the usage status of each casino facility (multiple casino facilities) conducting business activities within the country. In other words, the number of times confirmation control unit 602 performs the number of times confirmation, etc., not only for the casino facility that the user is about to enter, but also for other casino facilities existing within the country. Note that the Casino Management Committee performs the number of times confirmation using the electronic certificate for user authentication on the My Number card.

When the number of times confirmation control unit 602 receives the user ID and personal identification information from the casino server 30, it adds an entry to the visitor information database described below and stores the user ID and personal identification information. The number of times confirmation control unit 602 also processes the number of times confirmation request received from the casino server 30. The number of times confirmation control unit 602 requests the second PF server 60 to identify the visitor (a person wishing to enter the casino facility).

The number of times confirmation request includes an inquiry ID, an electronic certificate for user authentication, and a user ID. The number of times confirmation control unit 602 uses the user ID to identify the user (entry) stored in the visitor information database. The number of times confirmation control unit 602 also sends a visitor identification request including the electronic certificate for user authentication included in the number of times confirmation request to the second PF server 60.

The number confirmation control unit 602 receives a response (positive response, negative response) to the visitor identification request from the second PF server 60.

If the visitor cannot be identified (if a negative response is received), the number of times confirmation control unit 602 notifies the casino server 30 that the number of times confirmation has failed. Specifically, the number of times confirmation control unit 602 sends a negative response (casino facilities cannot be used) to the casino server 30 in response to the number of times confirmation request. At that time, the number of times confirmation control unit 602 sends a negative response including the inquiry ID acquired from the casino server 30 to the casino server 30.

When an attendee has been identified (when a positive response has been received), the number of visits confirmation control unit 602 performs a number of visits confirmation for the person wishing to enter. The positive response sent by the second PF server 60 includes the attendee ID of the person wishing to enter. The number of visits confirmation control unit 602 writes the acquired attendee ID into the corresponding entry in the attendee information database.

The number of visits is confirmed using a visitor information database. FIG. 23 is a diagram showing an example of a visitor information database according to the first embodiment. As shown in FIG. 23, the visitor information database stores user IDs, visitor IDs, personal identification information, and casino usage history (entry history, exit history) in association with each other.

The number of visits confirmation control unit 602 searches the visitor information database using the visitor ID obtained from the second PF server 60 as a key, and identifies the corresponding entry. The number of visits confirmation control unit 602 performs the number of visits confirmation using the casino usage history of the corresponding entry (visitor wishing to enter). Specifically, the number of visits confirmation control unit 602 determines whether the casino usage history of the visitor wishes to enter violates the short-term number of visits limit (up to three visits in seven consecutive days) or the long-term number of visits limit (up to ten visits in 28 consecutive days).

If the number of times confirmation control unit 602 determines that the casino facility usage history of the person wishing to enter violates the number of times limit, it sets the result of the number of times confirmation to "casino facility usage not permitted."

If the number of visits confirmation control unit 602 determines that the casino facility usage history of the person wishing to enter does not violate the number of visits limit, it sets the result of the number of visits confirmation to "Casino facility usage permitted."

The number of times confirmation control unit 602 notifies the casino server 30 of the result of the number of times confirmation.

If the result of the count confirmation is "casino facilities cannot be used," the count confirmation control unit 602 sends a negative response indicating that to the casino server 30. At that time, the count confirmation control unit 602 sends a negative response to the casino server 30 that includes the inquiry ID acquired from the casino server 30.

If the result of the number of times confirmation is "casino facilities can be used," the number of times confirmation control unit 602 sends an affirmative response indicating that to the casino server 30. At that time, the number of times confirmation control unit 602 sends an affirmative response to the casino server 30 that includes the inquiry ID acquired from the casino server 30 and the visitor ID of the person wishing to enter.

The entry/exit control unit 603 is a means for controlling the entry and exit of users of the casino facility.

When a "user entry notification" is received from the casino server 30, the entry/exit control unit 603 searches the visitor information database using the user ID included in the notification as a key to identify the corresponding entry. The entry/exit control unit 603 updates the user identification information field and the entry history field of the identified entry using the user identification information and gate passing date and time included in the user entry notification.

If information has already been set in the personal identification information field of the visitor information database, the entry/exit control unit 603 may or may not update that field.

The entry/exit control unit 603 also controls when a casino user leaves the casino facility. Control regarding exit from the casino facility is different from the spirit of this disclosure, so a detailed explanation will be omitted. The entry/exit control unit 603 receives a user ID and exit history from an exit terminal (not shown in FIG. 3, etc.) installed at the exit of the casino facility, and reflects the exit history in the visitor information database.

The memory unit 604 is a means for storing information necessary for the operation of the management server 50.

[Second PF Server]
The second PF server 60 is a server that processes a visitor identification request sent from the management server 50. The second PF server 60 requests the certificate authority server 70 to verify a user authentication electronic certificate resulting from the user's number of times confirmation. Furthermore, the second PF server 60 controls the ID (visitor ID) of the user who is the subject of the number of times confirmation.

FIG. 24 is a diagram showing an example of a processing configuration (processing module) of the second PF server 60 according to the first embodiment. Referring to FIG. 24, the second PF server 60 includes a communication control unit 701, a verification control unit 702, and a storage unit 703.

The communication control unit 701 is a means for controlling communication with other devices. For example, the communication control unit 701 receives data (packets) from the management server 50. The communication control unit 701 also transmits data to the management server 50. The communication control unit 701 passes data received from other devices to other processing modules. The communication control unit 701 transmits data acquired from other processing modules to other devices. In this way, the other processing modules transmit and receive data to and from other devices via the communication control unit 701. The communication control unit 701 has a function as a receiving unit that receives data from other devices and a function as a transmitting unit that transmits data to other devices.

The verification control unit 702 is a means for controlling the verification of the validity of electronic certificates. The verification control unit 702 processes visitor identification requests received from the management server 50.

The visitor identification request sent from the management server 50 includes an electronic certificate for user authentication. The verification control unit 702 extracts the issue number from the electronic certificate for user authentication and sends a verification request including the extracted issue number to the certification authority server 70.

The verification control unit 702 receives a response (positive or negative response) to the verification request from the certification authority server 70.

If a negative response is received (the user authentication electronic certificate is invalid), the verification control unit 702 notifies the management server 50 that the person wishing to enter cannot be identified. Specifically, the verification control unit 702 sends a negative response indicating this to the management server 50.

If a positive response is received (the user authentication electronic certificate is valid), the verification control unit 702 creates an account for the person wishing to enter. Upon receiving a positive response, the verification control unit 702 searches the visitor management database using the issue number of the user authentication electronic certificate that was determined to be valid as a key.

The visitor management database is a database that stores visitor IDs and the issue numbers of electronic certificates for user authentication in association with each other (see FIG. 25). Note that the visitor management database shown in FIG. 25 is an example, and is not intended to limit the items to be stored.

If an entry exists that corresponds to the issue number of the user authentication electronic certificate, the verification control unit 702 does not take any special action.

If there is no entry corresponding to the issue number of the electronic certificate for user authentication, the verification control unit 702 generates a visitor ID for the person wishing to enter. Furthermore, the verification control unit 702 stores the generated visitor ID and the issue number of the electronic certificate for user authentication in the visitor management database.

Furthermore, if a positive response is received, the verification control unit 702 notifies the management server 50 that the person wishing to enter has been identified. Specifically, the verification control unit 702 sends a positive response indicating this to the management server 50. At that time, the verification control unit 702 sends the positive response including the visitor ID of the person wishing to enter to the management server 50.

The memory unit 703 is a means for storing information necessary for the operation of the second PF server 60.

[Certification Authority Server]
26 is a diagram showing an example of a processing configuration (processing module) of the certificate authority server 70 according to the first embodiment. Referring to FIG. 26, the certificate authority server 70 includes a communication control unit 801, a verification unit 802, and a storage unit 803.

The communication control unit 801 is a means for controlling communication with other devices. For example, the communication control unit 801 receives data (packets) from the first PF server 40. The communication control unit 801 also transmits data to the first PF server 40. The communication control unit 801 passes data received from other devices to other processing modules. The communication control unit 801 transmits data acquired from other processing modules to other devices. In this way, the other processing modules transmit and receive data to and from other devices via the communication control unit 801. The communication control unit 801 has a function as a receiver that receives data from other devices and a function as a transmitter that transmits data to other devices.

The verification unit 802 is a means for verifying the validity of the electronic certificate. The verification unit 802 processes verification requests received from the first PF server 40 and the second PF server 60.

The verification unit 802 refers to a database that stores the issue number of the signature electronic certificate, the issue number of the user authentication electronic certificate, the validity period of each certificate, etc., and verifies the validity of the signature electronic certificate and the user authentication electronic certificate.

When a verification request is received from the first PF server 40, and the verification request includes the issue number of the electronic signature certificate, the verification unit 802 uses the issue number to verify the validity of the electronic signature certificate.

The verification unit 802 notifies the first PF server 40 of the verification result. If the signature electronic certificate is valid, the verification unit 802 sends an affirmative response to that effect to the first PF server 40. At that time, the verification unit 802 sends an affirmative response to the first PF server 40 that includes the issue number of the user authentication electronic certificate that is stored in correspondence with the issue number of the signature electronic certificate.

If the signing electronic certificate is invalid, the verification unit 802 sends a negative response to that effect to the first PF server 40.

When a verification request is received from the first PF server 40, and the verification request includes the issue number of the signature electronic certificate and the issue number of the user authentication electronic certificate, the verification unit 802 uses these issue numbers to verify the validity of the two electronic certificates.

If both electronic certificates (electronic signature certificate and electronic user authentication certificate) are valid, the verification unit 802 notifies the first PF server 40 that the two electronic certificates are valid. Specifically, the verification unit 802 sends an affirmative response to the first PF server 40 indicating that the two electronic certificates are valid.

If at least one of the two electronic certificates (electronic signature certificate, electronic user authentication certificate) is invalid, the verification unit 802 notifies the first PF server 40 that the electronic certificate is invalid. Specifically, the verification unit 802 sends a negative response to the first PF server 40 indicating that the electronic certificate is invalid.

When a verification request is received from the second PF server 60, the verification unit 802 verifies the validity of the user-certificate electronic certificate using the issue number of the user-certificate electronic certificate included in the verification request.

The verification unit 802 notifies the second PF server 60 of the verification result. If the user authentication electronic certificate is valid, the verification unit 802 sends a positive response indicating that to the second PF server 60.

If the user authentication electronic certificate is invalid, the verification unit 802 sends a negative response indicating that to the second PF server 60.

The memory unit 803 is a means for storing information necessary for the operation of the certification authority server 70.

[Admission control server]
Fig. 27 is a diagram showing an example of a processing configuration (processing module) of the admission control server 80 according to the first embodiment. Referring to Fig. 27, the admission control server 80 includes a communication control unit 901, an admission permitted user notification processing unit 902, an authentication request processing unit 903, and a storage unit 904.

The communication control unit 901 is a means for controlling communication with other devices. For example, the communication control unit 901 receives data (packets) from the reception terminal 10. The communication control unit 901 also transmits data to the reception terminal 10. The communication control unit 901 passes data received from other devices to other processing modules. The communication control unit 901 transmits data acquired from other processing modules to other devices. In this way, the other processing modules transmit and receive data to and from other devices via the communication control unit 901. The communication control unit 901 has a function as a receiving unit that receives data from other devices and a function as a transmitting unit that transmits data to other devices.

The admission permitted person notification processing unit 902 is a means for processing the admission permitted person notification received from the reception terminal 10.

When an admission permitted person notification is received, the admission permitted person notification processing unit 902 stores the face image and casino user ID contained in the notification in the admission permitted person list (see FIG. 28).

The authentication request processing unit 903 is a means for processing the authentication request received from the entrance terminal 20.

The authentication request processing unit 903 searches the list of permitted entry users using the casino user ID included in the authentication request as a key, and identifies the corresponding user (entry). The authentication request processing unit 903 performs one-to-one authentication using the face image of the identified user and the face image acquired from the admission terminal 20.

The authentication request processing unit 903 generates features from each of the two facial images, and calculates the similarity between the two generated features. The authentication request processing unit 903 performs threshold processing on the calculated similarity, and determines whether the two facial images are of the same person.

If the one-to-one authentication is successful (if the similarity is equal to or greater than a predetermined value), the authentication request processing unit 903 sends a positive response to the admission terminal 20 indicating that the user is permitted to enter the casino.

If the casino user ID is not on the list of permitted visitors or if one-to-one authentication fails, the authentication request processing unit 903 sends a negative response to the admission terminal 20 indicating that the user is not permitted to enter the casino.

The admission control server 80 maintains and manages the admission permitted person list as necessary. Specifically, the admission control server 80 deletes entries that have been registered in the list for a predetermined period of time. Alternatively, the admission control server 80 deletes entries that have been registered for a predetermined period of time since they were determined to have been authenticated successfully.

[System Operation]
Next, the operation of the admission management system according to the first embodiment will be described. Fig. 29 is a flowchart showing an example of the operation of the admission management system according to the first embodiment. The system operation related to the identity verification of the user will be described with reference to Fig. 29.

The reception terminal 10 performs the first identity verification or the second or subsequent identity verification (step S41).

If identity verification is successful, the reception terminal 10 sends an admission permission notification, including the user's facial image and casino user ID, to the admission control server 80 (step S42).

The admission control server 80 adds the facial image and casino user ID contained in the admission permission notification to the admission permission list (step S43).

In this way, if the reception terminal 10 is successful in verifying the identity of the person using the electronic certificate, it performs identity verification using facial information obtained from the My Number card in which the electronic certificate is stored and facial information obtained by photographing the person wishing to enter. Furthermore, if the reception terminal 10 is successful in verifying the identity of the person using the electronic certificate and the facial information, it writes the casino user ID to the My Number card in which the electronic certificate is stored.

FIG. 30 is a flowchart showing an example of the operation of the admission management system according to the first embodiment. The system operation related to user authentication will be described with reference to FIG. 30.

The admission terminal 20 acquires the casino user ID from the My Number card presented by the user (step S51).

The entrance terminal 20 photographs the user and acquires a facial image (step S52).

The admission terminal 20 sends an authentication request including the face image and casino user ID of the user (person to be authenticated) to the admission control server 80 (step S53).

The admission control server 80 identifies the person to be authenticated using the casino user ID included in the authentication request and the casino user ID listed in the admission permitted person list (step S54).

The admission control server 80 performs one-to-one authentication using the face image of the identified person to be authenticated and the face image included in the authentication request (step S55).

If the one-to-one authentication is successful, the admission control server 80 determines that the authentication is successful. If the casino user ID is not on the admission permitted person list or if the one-to-one authentication fails, the admission control server 80 determines that the authentication is unsuccessful. The admission control server 80 transmits the authentication result to the admission terminal 20 (step S56).

The entrance terminal 20 controls the gate according to the authentication result (step S57).

As described above, in the admission management system according to the first embodiment, the reception terminal 10 issues a casino user ID to a user whose identity has been verified, and writes the issued casino user ID to the My Number card (the My Number card used for identity verification). The casino user ID and face image of the user whose identity has been verified are stored in the admission control server 80's admission permitted person list. A user entering the casino presents the My Number card with the casino user ID written to it to the admission terminal 20. The admission terminal 20 reads out the casino user ID from the presented My Number card, and transmits an authentication request including the face image of the person to be authenticated and the casino user ID to the admission control server 80. The admission control server 80 identifies the person to be authenticated using the casino user ID, and performs one-to-one authentication using the face image of the identified person to be authenticated and the face image captured by the admission terminal 20. If the one-to-one authentication is successful, the person to be authenticated is permitted to enter the casino. Since the casino user ID is written to the My Number card required for admission to the casino, a person wishing to enter the casino does not need to carry multiple media. In addition, the entrance control server 80 performs one-to-one authentication instead of one-to-N authentication for the many users listed on the entrance permitted list. As a result, the system disclosed in the present application can prevent deterioration in authentication accuracy, which can be a problem due to one-to-N authentication.

Next, we will explain the hardware of each device that makes up the admission management system. Figure 31 is a diagram showing an example of the hardware configuration of the reception terminal 10.

The reception terminal 10 can be configured by an information processing device (so-called a computer), and has the configuration shown in FIG. 31. For example, the reception terminal 10 has a processor 311, a memory 312, an input/output interface 313, and a communication interface 314. The components such as the processor 311 are connected by an internal bus or the like, and are configured to be able to communicate with each other.

However, the configuration shown in FIG. 31 is not intended to limit the hardware configuration of the reception terminal 10. The reception terminal 10 may include hardware not shown, and may not include an input/output interface 313 as necessary. Furthermore, the number of processors 311 and the like included in the reception terminal 10 is not intended to be limited to the example shown in FIG. 31, and for example, the reception terminal 10 may include multiple processors 311.

The processor 311 is, for example, a programmable device such as a CPU (Central Processing Unit), an MPU (Micro Processing Unit), or a DSP (Digital Signal Processor). Alternatively, the processor 311 may be a device such as an FPGA (Field Programmable Gate Array) or an ASIC (Application Specific Integrated Circuit). The processor 311 executes various programs including an operating system (OS).

Memory 312 may be a RAM (Random Access Memory), a ROM (Read Only Memory), a HDD (Hard Disk Drive), a SSD (Solid State Drive), etc. Memory 312 stores the OS program, application programs, and various data.

The input/output interface 313 is an interface for a display device and an input device (not shown). The display device is, for example, a liquid crystal display. The input device is, for example, a device that accepts user operations such as a keyboard or a mouse.

The communication interface 314 is a circuit, module, etc. that communicates with other devices. For example, the communication interface 314 includes a NIC (Network Interface Card), etc.

The functions of the reception terminal 10 are realized by various processing modules. The processing modules are realized, for example, by the processor 311 executing a program stored in the memory 312. The program can be recorded on a computer-readable storage medium. The storage medium can be a non-transitory medium such as a semiconductor memory, a hard disk, a magnetic recording medium, or an optical recording medium. In other words, the present invention can also be embodied as a computer program product. The program can be downloaded via a network, or updated using a storage medium that stores the program. The processing modules may also be realized by a semiconductor chip.

In addition, the entrance terminal 20, casino server 30, etc. can also be configured using information processing devices, just like the reception terminal 10, and their basic hardware configuration is no different from that of the reception terminal 10, so a description of them will be omitted.

The reception terminal 10, which is an information processing device, is equipped with a computer, and the functions of the reception terminal 10 can be realized by having the computer execute a program. In addition, the reception terminal 10 executes a control method for the reception terminal 10 by the program.

[Modification]
It should be noted that the configuration, operation, etc. of the admission management system described in the above embodiment are merely examples and are not intended to limit the system configuration, etc.

In the above embodiment, it has been described that the user undergoes initial identity verification using the reception terminal 10. However, the initial identity verification may also be performed by a terminal such as a smartphone carried by the user. The user's terminal may read the signature electronic certificate from the My Number card and send an identity verification request including the read signature electronic certificate to the casino server 30. The user's terminal may write the casino user ID to the My Number card.

In the above embodiment, a case was described in which a user ID (an ID generated by the first PF server 40 on the casino operator side) is used as the casino user ID. However, the casino user ID may be a different ID linked to the user ID (for example, an ID issued by the casino operator).

In the above embodiment, the reception terminal 10 performs identity verification using an electronic certificate and identity verification using a facial image. However, the reception terminal 10 may omit either of the identity verifications. In other words, in a situation where it is determined that one identity verification is sufficient, it is sufficient to perform either of the two identity verifications.

In the above embodiment, a case has been described in which the casino user ID is written to the My Number card. However, the casino user ID may be written to other media. For example, if the electronic certificates (digital signature certificate, electronic user certificate) used to verify the identity of the user are stored in a terminal such as a smartphone, the casino user ID may be written to the smartphone.

In the above embodiment, the initial identity verification is performed at the reception terminal 10. However, as described above, the initial identity verification may be performed at a terminal carried by the user (e.g., a smartphone). In this case, since the reception terminal 10 cannot register the user's face image to the admission control server 80 from the terminal, the reception terminal 10 may register the face image to the admission control server 80 when confirming the number of times. That is, in response to the operation of the person who wishes to enter the casino facility, the reception terminal 10 writes an ID that identifies the person who wishes to enter into a medium (My Number card) in which the electronic certificate of the person who wishes to enter is stored. The reception terminal 10 may transmit an admission permitted person notification including the ID and the face information of the person who wishes to enter to the admission control server 80.

In the above embodiment, various databases are configured within each server, but the databases may be configured in an external database server or the like. In other words, some functions of each server may be implemented in another server. More specifically, the above-described "personal identification processing unit (personal identification processing means)", "entrance confirmation processing unit (entrance confirmation processing means)", etc. may be implemented in any of the devices included in the system.

The form of data transmission and reception between each device (reception terminal 10, admission terminal 20, casino server 30, etc.) is not particularly limited, but data transmitted and received between these devices may be encrypted. Electronic certificates and the like are transmitted and received between these devices, and in order to properly protect the information in the electronic certificates, it is desirable to transmit and receive encrypted data.

In the flow diagrams (flowcharts, sequence diagrams) used in the above explanation, multiple steps (processes) are listed in order, but the order in which the steps are executed in the embodiments is not limited to the order listed. In the embodiments, the order of the steps shown in the diagrams can be changed to the extent that does not interfere with the content, for example by executing each process in parallel.

The above embodiments have been described in detail to facilitate understanding of the present disclosure, and it is not intended that all of the configurations described above are necessary. Furthermore, when multiple embodiments are described, each embodiment may be used alone or in combination. For example, it is possible to replace part of the configuration of an embodiment with the configuration of another embodiment, or to add the configuration of another embodiment to the configuration of an embodiment. Furthermore, it is possible to add, delete, or replace part of the configuration of an embodiment with other configurations.

The above explanation makes it clear that the present invention has industrial applicability, and it is particularly suitable for use in admission management systems that manage entrance and exit to casino facilities.

A part or all of the above-described embodiments can be described as, but is not limited to, the following supplementary notes.
[Appendix 1]
A reception terminal;
an entrance terminal for restricting the entrance of an authenticated person who is attempting to enter a predetermined facility;
A server device;
Including,
the reception terminal, in response to an operation of an entry applicant who wishes to enter the predetermined facility, writes an ID for identifying the entry applicant into a medium in which an electronic certificate of the entry applicant is stored, and transmits an entry permitted person notification including the ID and face information of the entry applicant to the server device;
the server device stores the ID and face information included in the admission permitted person notice in an admission permitted person list;
the entrance terminal reads the ID from a medium in which the ID is written and which is held by the person to be authenticated, photographs the person to be authenticated to obtain face information, and transmits an authentication request including the ID and the face information to the server device;
The server device identifies the person to be authenticated using an ID included in the authentication request and an ID included in the entry permitted person list, performs one-to-one authentication using facial information included in the entry permitted person list of the identified person to be authenticated and facial information included in the authentication request, and if the one-to-one authentication is successful, notifies the entrance terminal that the person to be authenticated is allowed to enter the specified facility.
[Appendix 2]
The system described in Appendix 1, wherein the reception terminal controls identity verification using an electronic certificate of an entry applicant wishing to enter the specified facility, and when identity verification using the electronic certificate is successful, writes the ID to a medium on which the electronic certificate of the entry applicant is stored, and transmits the entry permitted notification to the server device, the notification including the ID and facial information of the entry applicant whose identity verification using the electronic certificate was successful.
[Appendix 3]
The system described in Appendix 2, wherein, if the reception terminal is successful in identity verification using the electronic certificate, it performs identity verification using facial information obtained from the medium in which the electronic certificate is stored and facial information obtained by photographing the person wishing to enter.
[Appendix 4]
The system described in Appendix 3, wherein the reception terminal, upon successful identity verification using the electronic certificate and identity verification using the facial information, writes the ID to a medium on which the electronic certificate is stored.
[Appendix 5]
the reception terminal performs identity verification using at least the electronic certificate when the admission applicant is attempting to enter the predetermined facility for the first time;
The system described in Appendix 4, which, if the person wishing to enter the specified facility wishes to enter the facility for a second or subsequent time, executes control over identity verification using at least the electronic certificate and confirmation of the number of times the person wishes to enter the specified facility.
[Appendix 6]
The reception terminal includes:
If the ID cannot be read from the medium in which the electronic certificate is stored, the entrance applicant is determined to be a user attempting to enter the specified facility for the first time;
The system described in Appendix 5, wherein if the ID can be read from the medium on which the electronic certificate is stored, the person wishing to enter is determined to be a user wishing to enter the specified facility for the second or subsequent time.
[Appendix 7]
The system according to any one of appendix 1 to 6, wherein the medium on which the electronic certificate is stored is a My Number Card.
[Appendix 8]
8. The system of claim 7, wherein the facial information is a facial image.
[Appendix 9]
A reception terminal;
an entrance terminal for restricting the entrance of an authenticated person who is attempting to enter a predetermined facility;
A server device;
In a system comprising:
writing an ID for identifying the entry applicant to a medium storing an electronic certificate of the entry applicant in response to an operation of the entry applicant who wishes to enter the specified facility, and transmitting an entry permitted person notice including the ID and face information of the entry applicant to the server device;
storing the ID and face information included in the admission permitted person notification in an admission permitted person list;
reading out the ID from a medium in which the ID is written and held by the person to be authenticated, photographing the person to be authenticated to obtain face information, and transmitting an authentication request including the ID and the face information to the server device;
The method includes identifying the person to be authenticated using an ID included in the authentication request and an ID included in the entry permitted person list, performing one-to-one authentication using facial information included in the entry permitted person list of the identified person to be authenticated and facial information included in the authentication request, and, if the one-to-one authentication is successful, notifying the entry terminal that the person to be authenticated is allowed to enter the specified facility.

The disclosures of the above cited prior art documents are incorporated herein by reference. Although the embodiments of the present invention have been described above, the present invention is not limited to these embodiments. Those skilled in the art will understand that these embodiments are merely illustrative and that various modifications are possible without departing from the scope and spirit of the present invention. In other words, the present invention naturally includes various modifications and amendments that a person skilled in the art can make in accordance with the entire disclosure, including the scope of the claims, and the technical ideas.

10 Reception terminal 20 Admission terminal 30 Casino server 40 First PF server 50 Management server 60 Second PF server 70 Authentication authority server 80 Admission control server 101 Reception terminal 102 Admission terminal 103 Server device 201 Communication control unit 202 Admission confirmation control unit 203 Storage unit 301 Communication control unit 302 Authentication control unit 303 Gate control unit 304 Storage unit 311 Processor 312 Memory 313 Input/output interface 314 Communication interface 401 Communication control unit 402 Personal identification processing unit 403 Admission confirmation processing unit 404 Admission notification unit 405 Storage unit 501 Communication control unit 502 Verification control unit 503 Storage unit 601 Communication control unit 602 Number of times confirmation control unit 603 Entry/exit control unit 604 Storage unit 701 Communication control unit 702 Verification control unit 703 Storage unit 801 Communication control unit 802 Verification unit 803 Storage unit 901 Communication control unit 902 Admission permitted person notification processing unit 903 Authentication request processing unit 904 Storage unit

Claims

A reception terminal;
an entrance terminal for restricting the entrance of an authenticated person who is attempting to enter a predetermined facility;
A server device;
Including,
the reception terminal, in response to an operation of an entry applicant who wishes to enter the predetermined facility, writes an ID for identifying the entry applicant into a medium in which an electronic certificate of the entry applicant is stored, and transmits an entry permitted person notification including the ID and face information of the entry applicant to the server device;
the server device stores the ID and face information included in the admission permitted person notice in an admission permitted person list;
the entrance terminal reads the ID from a medium in which the ID is written and which is held by the person to be authenticated, photographs the person to be authenticated to obtain face information, and transmits an authentication request including the ID and the face information to the server device;
The server device identifies the person to be authenticated using an ID included in the authentication request and an ID included in the entry permitted person list, performs one-to-one authentication using facial information included in the entry permitted person list of the identified person to be authenticated and facial information included in the authentication request, and if the one-to-one authentication is successful, notifies the entrance terminal that the person to be authenticated is allowed to enter the specified facility.
The system according to claim 1, wherein the reception terminal controls identity verification using an electronic certificate of an applicant who wishes to enter the specified facility, and when identity verification using the electronic certificate is successful, writes the ID to a medium storing the electronic certificate of the applicant, and transmits the admission permission notification including the ID and face information of the applicant who has been successfully identified using the electronic certificate to the server device.
The system of claim 2, wherein, if the reception terminal is successful in identity verification using the electronic certificate, the reception terminal performs identity verification using face information obtained from the medium in which the electronic certificate is stored and face information obtained by photographing the person wishing to enter.
The system of claim 3, wherein the reception terminal writes the ID to a medium on which the electronic certificate is stored if the identity verification using the electronic certificate and the identity verification using the face information are successful.
the reception terminal performs identity verification using at least the electronic certificate when the admission applicant is attempting to enter the predetermined facility for the first time;
The system described in claim 4, wherein, when the person wishing to enter the specified facility wishes to enter the facility for a second or subsequent time, control is executed regarding at least identity verification using the electronic certificate and confirmation of the number of times the person wishes to enter the specified facility.
The reception terminal includes:
If the ID cannot be read from the medium in which the electronic certificate is stored, the entrance applicant is determined to be a user attempting to enter the specified facility for the first time;
The system according to claim 5, wherein if the ID can be read from the medium in which the electronic certificate is stored, the person wishing to enter is determined to be a user wishing to enter the specified facility for the second or subsequent time.
The system according to any one of claims 1 to 6, wherein the medium on which the electronic certificate is stored is a My Number card.
The system of claim 7, wherein the facial information is a facial image.
A reception terminal;
an entrance terminal for restricting the entrance of an authenticated person who is attempting to enter a predetermined facility;
A server device;
In a system comprising:
writing an ID for identifying the entry applicant to a medium storing an electronic certificate of the entry applicant in response to an operation of the entry applicant who wishes to enter the specified facility, and transmitting an entry permitted person notice including the ID and face information of the entry applicant to the server device;
storing the ID and face information included in the admission permitted person notification in an admission permitted person list;
reading out the ID from a medium in which the ID is written and held by the person to be authenticated, photographing the person to be authenticated to obtain face information, and transmitting an authentication request including the ID and the face information to the server device;
The method includes identifying the person to be authenticated using an ID included in the authentication request and an ID included in the entry permitted person list, performing one-to-one authentication using facial information included in the entry permitted person list of the identified person to be authenticated and facial information included in the authentication request, and, if the one-to-one authentication is successful, notifying the entry terminal that the person to be authenticated is allowed to enter the specified facility.