Server device, method for controlling server device, and program

Abstract

To provide a server device that allows a third person such as a relative of a user who has lost their capability of judgement to access information on the user.SOLUTION: A server device comprises storage means and authentication control means. The storage means stores, for at least one or more account holders, biological information of the account holders and biological information of access permitted persons who are permitted to access accounts of the account holders, in association with each other. The authentication control means receives the two biological information of the account holder and a user who attempts to log in to the account of the account holder as the access permitted person, from the terminal of the user. When the authentication control means is successful in biometric authentication using the received two biological information of the account holder and the user, and stored biological information of the account holder and the access permitted person, the authentication control means permits the user's log-in.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to a server device, a control method for a server device, and a program. [Background technology]

[0002] Biometric authentication technology exists.

[0003] For example, Patent Document 1 describes that high security performance for secret information is ensured by protecting and guarding secret information using personal authentication based on biometric information that cannot be stolen or imitated. The portable electronic device of Patent Document 1 compares matching biometric feature information and reference biometric feature information by a matching unit. When the matching biometric feature information compared by the matching unit is recognized as that of the owner, a display control unit of the portable electronic device reads out the secret information from a storage unit and controls the display unit to display the secret information. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] JP 2001-236324 A Summary of the Invention [Problem to be solved by the invention]

[0005] There are various IDs used to provide services to users. For example, IDs (identification information) managed by public institutions include insured person numbers, passport numbers, My Numbers, driver's license numbers, etc. Also, IDs managed by private companies include bank account numbers, credit card numbers, membership numbers, SNS (Social Networking Service) service IDs, etc.

[0006] The enjoyment of services using IDs managed by public institutions or private businesses is premised on the user being in good health. In other words, the premise is that the user is able to properly manage and use these IDs. However, as users grow older or become ill, they may lose their ability to make normal decisions. It is virtually impossible for a user who has lost their ability to make normal decisions to properly manage or remember their own ID. In addition, family members of users often do not know the IDs of family members who have lost their ability to make decisions, which creates the problem of various procedures related to users who have lost their ability to make decisions not proceeding smoothly.

[0007] The above problems cannot be solved even if the technology disclosed in Patent Document 1 is applied. The terminal in Patent Document 1 merely discloses secret information to users who have been successfully authenticated using biometric information.

[0008] The main object of the present invention is to provide a server device, a method of controlling a server device, and a program that contribute to enabling third parties such as relatives to access information about a user who has lost the ability to make decisions. [Means for solving the problem]

[0009] According to a first aspect of the present invention, there is provided a server device comprising: a storage means for storing, for at least one or more account holders, biometric information of the account holder and biometric information of an access permission holder who is permitted to access the account of the account holder in association with each other; and an authentication control means for receiving two pieces of biometric information from a terminal of a user who attempts to log in to the account holder's account as the access permission holder, and allowing the user to log in if biometric authentication using the received two pieces of biometric information and the stored biometric information of the account holder and the access permission holder is successful.

[0010] According to a second aspect of the present invention, there is provided a control method for a server device, comprising: a storage step of storing, for at least one or more account holders, biometric information of the account holder and biometric information of an access permission holder who is permitted to access the account of the account holder in association with each other; and an authentication control step of receiving two pieces of biometric information from a terminal of a user who attempts to log in to the account holder's account as the access permission holder, and allowing the user to log in if biometric authentication using the received two pieces of biometric information and the stored biometric information of the account holder and the access permission holder is successful.

[0011] According to a third aspect of the present invention, there is provided a program for causing a computer mounted on a server device to execute a storage process for storing, for at least one or more account holders, biometric information of the account holder and biometric information of an access permission holder who is permitted to access the account of the account holder in association with each other, and an authentication control process for receiving two pieces of biometric information from a terminal of a user who is attempting to log in to the account holder's account as the access permission holder, and allowing the user to log in if biometric authentication using the received two pieces of biometric information and the stored biometric information of the account holder and the access permission holder is successful. Effect of the Invention

[0012] According to each aspect of the present invention, a server device, a control method for a server device, and a program are provided that contribute to enabling a third party such as a relative to access information of a user who has lost the ability to make decisions. Note that the effects of the present invention are not limited to the above. The present invention may achieve other effects instead of or in addition to the above effects. [Brief description of the drawings]

[0013] [Figure 1] FIG. 1 is a diagram for explaining an overview of an embodiment. [Diagram 2] FIG. 2 is a flowchart for explaining an outline of the operation of one embodiment. [Diagram 3] FIG. 3 is a diagram illustrating an example of a schematic configuration of an information processing system according to an embodiment of the present disclosure. [Figure 4] FIG. 4 is a diagram illustrating an example of a display of a terminal according to an embodiment of the present disclosure. [Diagram 5] FIG. 5 is a diagram for explaining the operation of the information processing system according to the embodiment of the present disclosure. [Figure 6] FIG. 6 is a diagram illustrating an example of a processing configuration of a server device according to an embodiment of the present disclosure. [Figure 7] FIG. 7 is a diagram illustrating an example of a user management database according to an embodiment of the present disclosure. [Figure 8] FIG. 8 is a flowchart illustrating an example of the operation of the authentication control unit according to an embodiment of the present disclosure. [Figure 9] FIG. 9 is a diagram illustrating an example of a display of a terminal according to an embodiment of the present disclosure. [Figure 10] FIG. 10 is a diagram illustrating an example of a display of a terminal according to an embodiment of the present disclosure. [Figure 11] FIG. 11 is a diagram for explaining the operation of an information processing system according to a modified example of the embodiment of the present disclosure. [Figure 12] FIG. 12 is a diagram illustrating an example of a hardware configuration of a server device according to the present disclosure. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0014] First, an outline of one embodiment will be described. The reference numerals in the drawings are added to each element for convenience as an example to aid in understanding, and the description of the outline is not intended to be limiting. Furthermore, unless otherwise specified, the blocks shown in each drawing represent functional units rather than hardware units. The connection lines between the blocks in each drawing include both bidirectional and unidirectional. The unidirectional arrows are used to diagrammatically indicate the flow of the main signal (data) and do not exclude bidirectionality. In this specification and the drawings, elements that can be similarly described may be given the same reference numerals to avoid redundant description.

[0015] A server device 100 according to an embodiment includes a storage means 101 and an authentication control means 102 (see FIG. 1). The storage means 101 stores, for at least one account holder, biometric information of the account holder and biometric information of an access permission holder who is permitted to access the account of the account holder in association with each other (step S1 in FIG. 2). The authentication control means 102 receives two pieces of biometric information from a terminal of a user who is attempting to log in to the account of the account holder as an access permission holder (step S2). If the authentication control means 102 is successful in biometric authentication using the received two pieces of biometric information and the stored biometric information of the account holder and the access permission holder, it allows the user to log in (step S3).

[0016] The server device 100 acquires two pieces of biometric information from a user (an account holder who has an account with the service provider, and an access permission holder who is attempting to log in to the account of the account holder). The server device 100 executes an authentication process using the two pieces of biometric information to determine whether the user requesting login is an access permission holder who has been previously authorized by the account holder. If the login requester is an access permission holder who has been previously authorized, the server device 100 allows the login requester to log in to the account of the access holder. If the authentication using the two pieces of biometric information is successful, the server device 100 gives the access permission holder the same authority as the account holder. As a result, a third party such as a relative can access information of a user who has lost his or her ability to make decisions. Elderly people and the like can enjoy digital ID services (services using digital IDs) with peace of mind by setting a trusted relative or the like as an access permission holder before they lose their ability to make decisions.

[0017] Specific embodiments will be described in more detail below with reference to the drawings.

[0018] [First embodiment] The first embodiment will be described in more detail with reference to the drawings.

[0019] [System configuration] 3 is a diagram showing an example of a schematic configuration of an information processing system according to an embodiment of the present disclosure. The information processing system according to the first embodiment includes a plurality of server devices 10.

[0020] The server device 10 is managed and operated by a business operator (hereinafter, referred to as a service provider) that provides various services to users. The service provider may be a private company or a public institution such as a local government. For example, banks, securities companies, credit card companies, EC (Electronic Commerce) businesses, health centers, and local governments that manage My Number cards, etc., correspond to service providers.

[0021] A user carries a terminal 20. The user operates the terminal 20 to perform online shopping, etc.

[0022] 3 are connected to a network. Specifically, the server device 10 and the terminal 20 are connected to the network by wired or wireless communication means.

[0023] The configuration of the information processing system shown in Fig. 3 is an example, and is not intended to be limiting. For example, although three server devices 10 are illustrated in Fig. 3, the system may include at least one server device 10 (service provider).

[0024] [General operation] Next, an outline of the operation of the information processing system according to the first embodiment will be described.

[0025] <Create an account> By creating an account with a service provider, a user can receive various services from the service provider.

[0026] In order to create an account, the user operates the terminal 20 owned by the user to access the server device 10. In response to the access from the terminal 20, the server device 10 displays a web page or the like for creating an account.

[0027] The user creates an account on the web page. At that time, the server device 10 acquires information necessary for the user to create an account. Specifically, the server device 10 acquires login information (ID, password), name, date of birth, contact information, account information, biometric information, etc.

[0028] Examples of biometric information include data (feature amounts) calculated from physical characteristics unique to an individual, such as a face, fingerprint, voiceprint, veins, retina, and iris pattern. Alternatively, the biometric information may be image data such as a face image or fingerprint image. The biometric information may include information on an individual's physical characteristics. In the present disclosure, the biometric information is a person's face image or feature amounts generated from a face image.

[0029] When the login information, biometric information, name, and the like are acquired, the server device 10 generates a user ID (identifier) ​​for uniquely identifying the user.

[0030] The server device 10 stores the generated user ID, login information, name, date of birth, contact information, biometric information, etc. in association with each other. The server device 10 stores this information in a user management database. The user management database will be described in detail later.

[0031] By creating an account in the server device 10, the user can receive services provided by the service provider.

[0032] For example, a user accesses a server device 10 provided by a credit card company and changes (sets) a monthly credit limit. Alternatively, the user checks a usage history (transaction history) in an account with the credit card company. Alternatively, the user can apply for various administrative procedures online in an account for performing administrative procedures.

[0033] <Access permission settings> A user selects a person who can access his / her account before he / she loses his / her ability to make normal decisions. The selected person can access the user's account after the user loses his / her ability to make normal decisions. For example, an elderly person selects a relative (e.g., a child) as the person who can access the account (hereinafter, referred to as an access permission holder).

[0034] The user operates the terminal 20 to log in to the account of the service for which the user wishes to set an access permission holder. The user registers information about the access permission holder (e.g., name, biometric information, contact information, etc.) in the logged-in account. As a result, information about the account holder and information about the access permission holder are registered in the user's account.

[0035] <Login by authorized user> When an account holder (eg, an elderly person) loses the ability to make decisions, an access permission holder operates a terminal 20 that the access permission holder possesses to log in to the account of the account holder.

[0036] Here, the server device 10 provides the user with an interface for normal login (for example, an interface for login using an ID and password) and an interface for an access-authorized person to log in (see FIG. 4). In the example of FIG. 4, when the "Authorized Person Login" button is pressed, the server device 10 executes authentication processing for the access-authorized person.

[0037] Server device 10 instructs the login requester to obtain biometric information of the two subjects.

[0038] The first person to be authenticated is a user (account holder) who has an account with the service (service provider) to be logged in. For example, a person who has lost the ability to make decisions due to illness or the like corresponds to the first person to be authenticated.

[0039] The second authenticated person is a user who attempts to log in to another person's account as an access permission grantor. That is, the second authenticated person is a user who attempts to log in to the account of the account holder as an access permission grantor. For example, the above-mentioned elderly relative who has lost the ability to make decisions corresponds to the second authenticated person.

[0040] Server device 10 instructs the second person to be authenticated (login requester) to acquire biometric information of the account holder who is the target of logging in and the login requester himself / herself. In response to the instruction from server device 10, the login requester (second person to be authenticated) acquires biometric information of the account holder (first person to be authenticated) and himself / herself.

[0041] Terminal 20 of the person to be authenticated transmits the two pieces of acquired biometric information (biometric information of two people) to server device 10 (see FIG. 5).

[0042] The server device 10 performs authentication using two pieces of biometric information. Specifically, the server device 10 executes biometric authentication using the biometric information of the first person to be authenticated acquired from the terminal 20 and the biometric information of the account holder stored in the user management database.

[0043] If the biometric authentication of the first person to be authenticated (account holder) is successful, the server device 10 performs biometric authentication using the biometric information of the second person to be authenticated obtained from the terminal 20 and the biometric information of the access-granted person stored in the user management database.

[0044] If the two authentications are successful, the server device 10 grants all authority related to the account of the account holder (first person to be authenticated; for example, an elderly person) to the access permission holder (second person to be authenticated; for example, a relative). The access permission holder obtains necessary applications and necessary information from the account of the account holder.

[0045] Next, each device included in the information processing system according to the first embodiment will be described in detail.

[0046] [Server device] 6 is a diagram illustrating an example of a processing configuration (processing module) of the server device 10 according to the embodiment of the present disclosure. Referring to FIG. 6, the server device 10 includes a communication control unit 201, an account generation unit 202, an authorizer setting unit 203, an authentication control unit 204, a service providing unit 205, and a storage unit 206.

[0047] The communication control unit 201 is a means for controlling communication with other devices. For example, the communication control unit 201 receives data (packets) from the terminal 20. The communication control unit 201 also transmits data to the terminal 20. The communication control unit 201 passes the data received from the other devices to the other processing modules. The communication control unit 201 transmits the data acquired from the other processing modules to the other devices. In this way, the other processing modules transmit and receive data to and from the other devices via the communication control unit 201. The communication control unit 201 has a function as a receiving unit that receives data from the other devices and a function as a transmitting unit that transmits data to the other devices.

[0048] The account generation unit 202 is a means for generating an account for a user. The account generation unit 202 acquires login information (e.g., ID, password), biometric information (e.g., face image), name, date of birth, contact information, etc. from the user's terminal 20 using a GUI (Graphical User Interface) or the like.

[0049] When the account generation unit 202 acquires a facial image of the user, it generates a feature amount from the acquired facial image.

[0050] Since existing technology can be used for the process of generating features by the account generation unit 202, detailed description thereof will be omitted. For example, the account generation unit 202 extracts the eyes, nose, mouth, etc. as feature points from a face image. After that, the account generation unit 202 calculates the position of each feature point and the distance between each feature point as feature amounts (generates a feature vector consisting of multiple feature amounts).

[0051] Furthermore, the account generation unit 202 generates a user ID for identifying the user. For example, the account generation unit 202 assigns a unique value each time a user registers in the system, and uses the assigned value as the user ID.

[0052] The account generation unit 202 stores the user ID, login information, biometric information (feature amount), name, date of birth, etc. in the user management database (see FIG. 7). As shown in FIG. 7, the account generation unit 202 stores the information of the account holder in the user management database as "account holder information."

[0053] 7 is merely an example, and is not intended to limit the items to be stored, etc. For example, a "face image" may be registered in the user management database as biometric information.

[0054] The authorizer setting unit 203 is a means for controlling the setting of an access permission authority. When a user who has logged in to an account performs a predetermined operation (for example, pressing an access permission setting button), the authorizer setting unit 203 obtains information about the access permission authority.

[0055] Specifically, the authorizer setting unit 203 acquires the biometric information (for example, face image), name, date of birth, contact information, etc. of the access authorizer from the terminal 20 of the account holder using a GUI (Graphical User Interface) or the like.

[0056] For example, the account holder (e.g., an elderly person) operates the terminal 20 to photograph an access permission holder (e.g., a relative) and obtain a facial image. The account holder inputs the obtained facial image and the name of the access permission holder, etc., to the server device 10.

[0057] When the authorizer setting unit 203 acquires a facial image of an access permitted person, it generates feature amounts from the acquired facial image. The authorizer setting unit 203 stores the biometric information, name, date of birth, contact information, etc. of the access permitted person in the entry of the account holder. As shown in Fig. 7, the authorizer setting unit 203 stores the information of the access permitted person as "access permitted person information" in the user management database.

[0058] Note that no access permission authority may be set for an account holder. Alternatively, multiple access permission authorities may be set for one account holder. In the example of Fig. 7, no access permission authority is set for the account holder with user ID "ID02", and two access permission authorities are set for the account holder with user ID "ID03".

[0059] The authentication control unit 204 is a means for controlling authentication of a user. The authentication control unit 204 authenticates a user (account holder, access permitted person) who attempts to log in to an account.

[0060] When the terminal 20 accesses a predetermined web page (login page), the authentication control unit 204 displays a GUI such as that shown in FIG.

[0061] When login by the account holder is selected, for example, the authentication control unit 204 performs password authentication using an ID and a password. The authentication control unit 204 compares the login information stored in the user management database with the login information entered by the user to authenticate the user.

[0062] Alternatively, the authentication control unit 204 may perform authentication using biometric information of the user. In this case, the authentication control unit 204 acquires biometric information of the person to be authenticated via the terminal 20. The authentication control unit 204 executes biometric authentication using the acquired biometric information and the biometric information of the account holder stored in the user management database.

[0063] If the authentication fails, the authentication control unit 204 notifies the user (the person to be authenticated) of that fact. If the authentication is successful, the authentication control unit 204 notifies the service providing unit 205 of the user ID of the authenticated account holder.

[0064] When login of an access permitted person is selected, the authentication control unit 204 performs authentication of both the account holder and the access permitted person.

[0065] The authentication control unit 204 receives two pieces of biometric information (biometric information of the first person to be authenticated and biometric information of the second person to be authenticated) from the terminal of a user who is attempting to log in to the account of the account holder as an access permission holder. If the authentication control unit 204 is successful in biometric authentication using the received two pieces of biometric information and the biometric information of the account holder and the access permission holder stored in the user management database, it permits the user to log in.

[0066] 8 is a flowchart showing an example of the operation of the login control unit 204. The operation of the authentication control unit 204 regarding authentication of an access-authorized person will be described with reference to FIG.

[0067] The authentication control unit 204 acquires biometric information of the first person to be authenticated (acquire first biometric information; step S101). For example, the authentication control unit 204 displays a GUI as shown in Fig. 9 on the terminal 20 of the person requesting the login (second person to be authenticated; e.g., a relative). The authentication control unit 204 instructs the person requesting the login (second person to be authenticated; a relative) to capture a face image of the account holder (first person to be authenticated; e.g., an elderly person who has lost the ability to make decisions) who is the target of the login.

[0068] When biometric information (facial image) is acquired from the terminal 20 (when the decision button shown in FIG. 9 is pressed and the facial image is sent to the server device 10), the authentication control unit 204 performs biometric authentication on the account holder (performs first biometric authentication; step S102).

[0069] Specifically, the authentication control unit 204 generates a feature from the acquired face image. The authentication control unit 204 sets the generated feature as a matching target. Furthermore, the authentication control unit 204 sets the feature (biometric information) of multiple account holders stored in the user management database on the registration side. The authentication control unit 204 performs a matching process (1:N matching; N is a positive integer, the same applies below) between the feature on the matching side and multiple feature on the registration side.

[0070] The authentication control unit 204 calculates the similarity between the feature to be matched and each of the multiple feature on the registration side. The similarity can be calculated using chi-square distance, Euclidean distance, etc. The greater the distance, the lower the similarity, and the closer the distance, the higher the similarity.

[0071] The authentication control unit 204 determines that the matching process has failed if there is no feature that has a similarity with the feature to be matched that is equal to or greater than a predetermined value among the multiple features on the registration side (the features of the account holder). If the matching process has failed, the authentication control unit 204 determines that the first biometric authentication has failed.

[0072] The authentication control unit 204 determines that the matching process is successful if there is a feature that has a similarity with the feature to be matched that is equal to or greater than a predetermined value among the multiple features on the registration side. If the matching process is successful, the authentication control unit 204 determines that the first biometric authentication is successful.

[0073] If the first biometric authentication fails (step S103, No branch), the authentication control unit 204 determines that the authentication of the login requester has failed (setting as authentication failure; step S104). In this case, the authentication control unit 204 may notify the login requester (second person to be authenticated; relative) via the terminal 20 that the login has failed.

[0074] If the first biometric authentication is successful (step S103, Yes branch), the authentication control unit 204 determines whether or not an access permission is set for the account holder identified by the above matching process (determine the presence or absence of an authorized person; step S105).

[0075] If the account holder is not set as an access permission holder (step S106, No branch), the authentication control unit 204 determines that authentication of the login requester has failed (setting as authentication failure; step S104).

[0076] If an access permission is set for the account holder (step S106, Yes branch), the authentication control unit 204 acquires biometric information of the second person to be authenticated (acquire second biometric information; step S107). For example, the authentication control unit 204 displays a GUI as shown in Fig. 10 on the terminal 20 of the login requester (second person to be authenticated; for example, a relative), and instructs the terminal 20 to capture a face image of the login requester (the operator of the terminal 20).

[0077] When the biometric information (face image) is acquired from the terminal 20, the authentication control unit 204 executes biometric authentication for the access-authorized person (executes second biometric authentication; step S108).

[0078] Specifically, the authentication control unit 204 generates features from the acquired face image. The authentication control unit 204 sets the generated features on the verification side and the features of the access permission holder set to the account holder on the registration side, and executes the verification process.

[0079] If an account holder has one access permission holder, one-to-one matching (one-to-one authentication) is performed. If an account holder has multiple access permission holders, one-to-N matching (one-to-N authentication; N is the number of access permission holders) is performed.

[0080] In the example of Fig. 7, consider a case where authentication of the account holder of user ID "ID01" is successful. In this case, since one user is stored as an access permission grantor, it is determined whether the biometric information of the login requester substantially matches the biometric information of the stored access permission grantor.

[0081] Alternatively, consider a case where authentication of the account holder of user ID "ID03" is successful. In this case, since two users are stored as access permission holders, it is determined whether the biometric information of the login requester substantially matches the biometric information of either of the two stored access permission holders.

[0082] As with the first biometric authentication, if the matching process using the biometric information fails, the second biometric authentication is determined to have failed. On the other hand, if the matching process using the biometric information is successful, the second biometric authentication is determined to have been successful.

[0083] If the second biometric authentication fails (step S109, No branch), the authentication control unit 204 determines that authentication of the login requester has failed (setting as authentication failure; step S104).

[0084] If the second biometric authentication is successful (step S109, Yes branch), the authentication control unit 204 determines that the authentication of the login requester is successful (setting as authentication successful; step S110). That is, if the biometric information of the second person to be authenticated is stored in the user management database as the biometric information of an access permitted person, the authentication control unit 204 accepts the second person to be authenticated as an access permitted person.

[0085] In this manner, the authentication control unit 204 receives the biometric information of the first subject and the biometric information of the second user from the terminal 20. The authentication control unit 204 executes a first biometric authentication using the received biometric information of the first subject and the biometric information of the account holder stored in the user management database. If the first biometric authentication is successful, the authentication control unit 204 executes a second biometric authentication using the biometric information of the second subject received from the terminal 20 and the biometric information of the access permission holder stored in the user management database. If the second biometric authentication is successful, the authentication control unit 204 permits the user to log in. Note that the authentication control unit 204 does not execute the second biometric authentication if the account holder identified by the first biometric authentication is not set as an access permission holder.

[0086] When the login requester has successfully logged in as an access permission grantee, the authentication control unit 204 notifies the service providing unit 205 of the user ID of the account holder corresponding to the access permission grantee (notification of user ID; step S111).

[0087] The service providing unit 205 is a means for providing services to users.

[0088] The service providing unit 205 provides services according to the industry and business type of the service provider. For example, if the service provider is a credit card company, the service providing unit 205 provides information such as the usage history of users who log in to their accounts.

[0089] The service providing unit 205 identifies the user to whom the service is to be provided, using the user ID notified by the authentication control unit 204. When the access permitted person logs in, the user ID of the access holder is notified to the service providing unit 205, so that the service providing unit 205 can provide the access permitted person with the same service as the access holder. In this way, the service providing unit 205 provides the same service as the account holder to the user who logs in to the account of the account holder.

[0090] Note that a detailed description of the service providing unit 205 relating to services provided by each service provider will be omitted, as a detailed description of the provision of individual services is outside the scope of the present disclosure.

[0091] The storage unit 206 is a means for storing information necessary for the operation of the server device 10. The storage unit 206 stores, for at least one or more account holders, biometric information of the account holder and biometric information of an access permission holder who is permitted to access the account of the account holder in association with each other.

[0092] [Device] Examples of the terminal 20 include a smartphone, a mobile phone, a game machine, a mobile terminal device such as a tablet, a computer (personal computer, notebook computer), etc. The terminal 20 can be any equipment or device that can accept user operations and communicate with the server device 10, etc. Also, since the configuration of the terminal 20 is clear to those skilled in the art, detailed explanations will be omitted.

[0093] Next, a modification of the first embodiment will be described.

[0094] <Variation 1> The server device 10 may require the access permitted person to provide information proving that the account holder has lost his / her ability to make decisions when the access permitted person logs in. Specifically, the authentication control unit 204 may require the access permitted person to provide a medical certificate or the like written by a doctor after two biometric authentications are successful.

[0095] The authentication control unit 204 displays a GUI or the like on the terminal 20 and acquires image data or the like showing a medical certificate prepared by a doctor. The authentication control unit 204 determines whether or not the account holder has lost his or her capacity to make decisions based on the medical certificate.

[0096] For example, the authentication control unit 204 acquires the patient name and the disease name from the image data using OCR (Optical Character Recognition) technology, etc. The authentication control unit 204 determines whether the name of the account holder (the name of the account holder identified by the first biometric authentication) matches the patient name obtained from the medical certificate.

[0097] If the account holder's name and the patient's name match and a specific disease name (for example, dementia) is written on the medical certificate, the authentication control unit 204 determines that the account holder has lost the ability to make decisions.

[0098] Alternatively, if the account holder's name and the patient's name match, the authentication control unit 204 may determine whether the account holder has lost their ability to make decisions by inputting information obtained from the medical certificate into a learning model.

[0099] The learning model is obtained by machine learning using a large amount of training data in which labels (presence or absence of judgment ability) are added to data obtained from a diagnosis. Any algorithm such as a support vector machine, boosting, or neural network can be used to generate the learning model. Note that the algorithm such as the support vector machine can use publicly known technology, so the description thereof will be omitted.

[0100] Even if the two biometric authentications are successful, the authentication control unit 204 will reject login for the access permitted individual (set authentication of the access permitted individual as failed) if the account holder has not lost his / her ability to make decisions.

[0101] In this way, the authentication control unit 204 acquires information proving that the first authenticated person has lost his / her ability to make decisions from the user's terminal 20. When the authentication control unit 204 determines based on the acquired information that the account holder identified by the first biometric authentication has lost his / her ability to make decisions, it permits the user to log in. Such an operation of the server device 10 (authentication control unit 204) appropriately protects the privacy, etc., of the account holder who has not lost his / her ability to make decisions.

[0102] <Variation 2> When an access permission is set, the server device 10 may obtain consent for the setting of the access permission. Specifically, when the account holder inputs information about the access permission, the authorizer setting unit 203 transmits an "access permission setting notification" to the contact information of the access permission (for example, an email address that the terminal 20 can receive).

[0103] The terminal 20 that has received the notification acquires the user's intention regarding being registered in the system as an access permission user (agreement to or refusal to register in the system). The terminal 20 transmits the acquired intention of the user (agreement to or refusal to register in the system) to the server device 10.

[0104] When a user (access permission grantor) agrees to system registration, the authorizer setting unit 203 registers the user's biometric information, name, etc. in the user management database, thereby completing the setting and registration of the access permission grantor.

[0105] <Variation 3> The server device 10 may have a function of notifying other service providers of information about the access permission holder. For example, when the access permission holder A2 is set for the account holder A1 in the server device 10 of the service provider A, the information about the access permission holder A2 may be provided to the server device 10 of the service provider B that provides a service to the account holder A1.

[0106] For example, when an account holder sets an access permission holder, the authorizer setting unit 203 of the server device 10 displays a list of service providers affiliated with the account holder. If the account holder owns an account among the listed service providers and wishes to set the same access permission holder, the account holder selects the service provider.

[0107] The authorizer setting unit 203 transmits information identifying the account holder (e.g., name or a combination of name and date of birth) and information about the access authorizer (name, biometric information, contact information, etc.) to the server device 10 of the selected service provider (see FIG. 11).

[0108] The authorizer setting unit 203 of the server device 10 that has received the above information searches the user management database using the information identifying the account holder as a key to identify a corresponding entry. The authorizer setting unit 203 stores the received information of the access permission holder in the access permission information field of the identified entry.

[0109] When the server device 10 obtains information about an access permission holder from another service provider, the server device 10 may store the information about the access permission holder in the user management database after obtaining the consent of the access permission holder (consent to be registered in the system as an access permission holder).

[0110] As described above, the server device 10 according to the first embodiment acquires biometric information of the account holder and biometric information of the user requesting login from the user's terminal 20. The server device 10 executes authentication processing for each of the account holder and the access permission holder to determine whether or not the user attempting to log in to the account of the account holder is an access permission holder previously authorized by the account holder. If the login requester is an access permission holder previously authorized, the server device 10 allows the login requester to log in to the account of the access holder. The server device 10 gives the access permission holder who successfully logs in the account the same authority (full access) as the account holder. As a result, a third party such as a relative can access information of a user who has lost his or her ability to make decisions. Elderly people and the like can enjoy digital ID services (services using digital IDs) with peace of mind by setting a reliable relative or the like as an access permission holder before they lose their ability to make decisions.

[0111] Next, the hardware of each device constituting the information processing system will be described.

[0112] The server device 10 can be configured by an information processing device (so-called a computer), and has the configuration exemplified in Fig. 12. For example, the server device 10 has a processor 311, a memory 312, an input / output interface 313, and a communication interface 314. The components such as the processor 311 are connected by an internal bus or the like, and are configured to be able to communicate with each other.

[0113] However, the configuration shown in Fig. 12 is not intended to limit the hardware configuration of the server device 10. The server device 10 may include hardware not shown, and may not include the input / output interface 313 as necessary. In addition, the number of processors 311 and the like included in the server device 10 is not intended to be limited to the example shown in Fig. 12, and for example, the server device 10 may include multiple processors 311.

[0114] The processor 311 is, for example, a programmable device such as a central processing unit (CPU), a micro processing unit (MPU), or a digital signal processor (DSP). Alternatively, the processor 311 may be a device such as a field programmable gate array (FPGA), or an application specific integrated circuit (ASIC). The processor 311 executes various programs including an operating system (OS).

[0115] The memory 312 is a random access memory (RAM), a read only memory (ROM), a hard disk drive (HDD), a solid state drive (SSD), etc. The memory 312 stores an OS program, application programs, and various data.

[0116] The input / output interface 313 is an interface for a display device and an input device (not shown). The display device is, for example, a liquid crystal display, etc. The input device is, for example, a keyboard, a mouse, a touch panel, etc. that accepts user operations.

[0117] The communication interface 314 is a circuit, a module, etc. that communicates with other devices. For example, the communication interface 314 includes a network interface card (NIC).

[0118] The functions of the server device 10 are realized by various processing modules. The processing modules are realized, for example, by the processor 311 executing a program stored in the memory 312. The program can be recorded in a computer-readable storage medium. The storage medium can be a non-transitory medium such as a semiconductor memory, a hard disk, a magnetic recording medium, or an optical recording medium. That is, the present invention can also be embodied as a computer program product. The program can be downloaded via a network or updated using a storage medium storing the program. The processing modules may also be realized by a semiconductor chip.

[0119] The terminal 20 can also be configured by an information processing device like the server device 10, and the basic hardware configuration is no different from that of the server device 10, so a description thereof will be omitted.

[0120] The server device 10 is equipped with a computer, and the computer executes a program to realize the functions of the server device 10. The server device 10 also executes a control method for the server device 10 by the program.

[0121] [Variations] The configuration, operation, etc. of the information processing system described in the above embodiment are merely examples, and are not intended to limit the system configuration, etc.

[0122] A user (account holder) may set access permission holders for all service providers from which the user receives services, or may set access permission holders only for some service providers. In other words, the account holder can set whether to allow or not allow others to access his / her account for each account. Furthermore, the account holder may set different people as access permission holders for each service provider (each account). For example, the wife may be set as the access permission holder for service provider A, and the wife and child may be set as the access permission holders for service provider B.

[0123] Furthermore, the server device 10 may allow a setting for an account to be made such that consent from an account authorizer is or is not obtained.

[0124] The terminal 20 of the access permission holder may hold a list of service providers (accounts) through which the owner can log in as an access permission holder. For example, when the terminal 20 receives an access permission holder setting notification and the user agrees to be registered as an access permission holder, the terminal 20 stores information on the service providers (accounts) registered as an access permission holder. In this case, the terminal 20 may display a list of accounts through which the access permission holder can log in in response to an operation by the access permission holder.

[0125] In the above embodiment, the case where the authentication of the access permission holder is performed after the authentication of the account holder is successful has been described. However, the order of the two authentications may be reversed. That is, the authentication of the account holder may be performed after the authentication of the access permission holder is successful.

[0126] The server device 10 may restrict the authority of the access permission grantor. The server device 10 may restrict functions and information provided to the access permission grantor of the account holder based on the setting by the account holder. Alternatively, the server device 10 may restrict the authority of the access permission grantor according to the characteristics of the company's service. For example, the server device 10 of a financial institution such as a bank may restrict withdrawal by the access permission grantor.

[0127] The server device 10 may perform identity verification of a user when creating an account. For example, the server device 10 acquires biometric information (face image) from an identification card such as a passport held by the user. For example, the server device 10 performs identity verification using biometric information (face image) obtained by photographing the user and biometric information obtained from the identification card. The server device 10 performs identity verification by determining whether or not the two pieces of biometric information substantially match.

[0128] In the above embodiment, the case where the user management database is configured inside the server device 10 has been described, but the database may be constructed in an external database server or the like. That is, some of the functions of the server device 10 may be implemented in another device. More specifically, it is sufficient that the above-described "authentication control unit (authentication control means)" and the like are implemented in any of the devices included in the system.

[0129] Although the form of data transmission between each device (e.g., server device 10, terminal 20) is not particularly limited, the data transmitted between these devices may be encrypted. Biometric information of users and the like is transmitted between these devices, and in order to appropriately protect this information, it is desirable to transmit and receive encrypted data.

[0130] In the flow charts (flow charts, sequence diagrams) used in the above description, multiple steps (processes) are described in order, but the order of execution of the steps executed in the embodiments is not limited to the order described. In the embodiments, the order of the steps shown in the figures can be changed to a degree that does not interfere with the content, such as executing each process in parallel.

[0131] The above-mentioned embodiments have been described in detail to facilitate understanding of the present disclosure, and it is not intended that all of the configurations described above are necessary. In addition, when a plurality of embodiments are described, each embodiment may be used alone or in combination. For example, it is possible to replace a part of the configuration of an embodiment with the configuration of another embodiment, or to add the configuration of another embodiment to the configuration of an embodiment. Furthermore, it is possible to add, delete, or replace a part of the configuration of an embodiment with another configuration.

[0132] From the above explanation, it is clear that the present invention has industrial applicability, and the present invention can be suitably applied to an information processing system including a service provider that provides services to users over a network.

[0133] A part or all of the above-described embodiments may be described as, but is not limited to, the following supplementary notes.

[0134] [Appendix 1] a storage means for storing, for at least one account holder, biometric information of the account holder and biometric information of an access permission holder who is permitted to access the account of the account holder in association with each other; an authentication control means for receiving two pieces of biometric information from a terminal of a user who is attempting to log in to the account of the account holder as the access permission user, and permitting the user to log in if biometric authentication using the received two pieces of biometric information and the stored biometric information of the account holder and the access permission user is successful; A server device comprising: [Appendix 2] The authentication control means receiving biometric information of a first person to be authenticated and biometric information of a second user; A first biometric authentication is performed using the received biometric information of the first person to be authenticated and the stored biometric information of the account holder, and if the first biometric authentication is successful, performing a second biometric authentication using the received biometric information of the second person to be authenticated and the stored biometric information of the access permission person; 2. The server device according to claim 1, wherein if the second biometric authentication is successful, the server device permits the user to log in. [Appendix 3] The server device according to claim 2, wherein the authentication control means performs the second biometric authentication when the account holder identified by the first biometric authentication is set as the access permission holder. [Appendix 4] 4. The server device according to claim 3, further comprising a service providing means for providing a user who logs in to the account of the account holder with the same services as the account holder. [Appendix 5] A server device described in any one of Appendices 2 to 4, wherein the first person to be authenticated is a person who has lost the ability to make judgments, and the second person to be authenticated is a user who is attempting to log in to the account of the account holder as the access permission. [Appendix 6] The server device described in Appendix 5, wherein the authentication control means acquires information from the user's terminal proving that the first authenticated person has lost their ability to make decisions, and if it determines based on the acquired information that the account holder identified by the first biometric authentication has lost their ability to make decisions, allows the user to log in. [Appendix 7] a storage step of storing, for at least one account holder, biometric information of the account holder and biometric information of an access permission holder who is permitted to access the account of the account holder in association with each other; an authentication control process for receiving two pieces of biometric information from a terminal of a user who is attempting to log in to the account of the account holder as the access permission user, and permitting the user to log in if biometric authentication using the received two pieces of biometric information and the stored biometric information of the account holder and the access permission user is successful; A method for controlling a server device comprising: [Appendix 8] The authentication control step includes: receiving biometric information of a first person to be authenticated and biometric information of a second user; A first biometric authentication is performed using the received biometric information of the first person to be authenticated and the stored biometric information of the account holder, and if the first biometric authentication is successful, performing a second biometric authentication using the received biometric information of the second person to be authenticated and the stored biometric information of the access permission person; 7. The method for controlling a server device according to claim 6, further comprising permitting the user to log in if the second biometric authentication is successful. [Appendix 9] The control method for a server device described in Appendix 8, wherein the authentication control process performs the second biometric authentication when the account holder identified by the first biometric authentication is set as the access permission holder. [Appendix 10] The method for controlling a server device according to claim 9, further comprising a service providing step of providing a user who logs in to the account of the account holder with the same service as that of the account holder. [Appendix 11] A method for controlling a server device described in any one of Appendices 8 to 10, wherein the first authenticated person is a person who has lost the ability to make judgments, and the second authenticated person is a user who is attempting to log in to the account of the account holder as the access permission person. [Appendix 12] The control method for a server device described in Appendix 11, wherein the authentication control process acquires information from the user's terminal proving that the first authenticated person has lost the ability to make decisions, and if it is determined based on the acquired information that the account holder identified by the first biometric authentication has lost the ability to make decisions, allows the user to log in. [Appendix 13] A computer installed in the server device a storage process for storing, for at least one account holder, biometric information of the account holder and biometric information of an access permission holder who is permitted to access the account of the account holder in association with each other; an authentication control process for receiving two pieces of biometric information from a terminal of a user who is attempting to log in to the account of the account holder as the access permission user, and permitting the user to log in if biometric authentication using the received two pieces of biometric information and the stored biometric information of the account holder and the access permission user is successful; A program for executing the above. [Appendix 14] The authentication control process includes: receiving biometric information of a first person to be authenticated and biometric information of a second user; A first biometric authentication is performed using the received biometric information of the first person to be authenticated and the stored biometric information of the account holder, and if the first biometric authentication is successful, performing a second biometric authentication using the received biometric information of the second person to be authenticated and the stored biometric information of the access permission person; The program described in Appendix 13, which allows the user to log in if the second biometric authentication is successful. [Appendix 15] The program described in Appendix 14, wherein the authentication control process executes the second biometric authentication when the account holder identified by the first biometric authentication is set as the access permission holder. [Appendix 16] The program described in Appendix 15, further comprising a service providing process for providing the same services to a user who logs in to the account of the account holder as those of the account holder. [Appendix 17] A program described in any one of Appendices 15 to 16, wherein the first authenticated person is a person who has lost the ability to make decisions, and the second authenticated person is a user who is attempting to log in to the account of the account holder as the access permission person. [Appendix 18] The program described in Appendix 17, wherein the authentication control process obtains information from the user's terminal proving that the first authenticated person has lost their ability to make decisions, and if it is determined based on the obtained information that the account holder identified by the first biometric authentication has lost their ability to make decisions, allows the user to log in.

[0135] In addition, some or all of the configurations described in Supplementary Notes 2 to 6 that are dependent on Supplementary Note 1 above may also be dependent on Supplementary Note 7 and Supplementary Note 14 in the same dependent relationship as Supplementary Note 2 to Supplementary Note 6. Furthermore, not limited to Supplementary Note 1, Supplementary Note 7, and Supplementary Note 14, various hardware, software, various recording means for recording software, or systems may similarly be made to be dependent on some or all of the configurations described as supplementary notes within the scope of each of the above-mentioned embodiments.

[0136] The disclosures of the above cited prior art documents are incorporated herein by reference. Although the embodiments of the present invention have been described above, the present invention is not limited to these embodiments. It will be understood by those skilled in the art that these embodiments are merely illustrative and that various modifications are possible without departing from the scope and spirit of the present invention. In other words, the present invention naturally includes various modifications and amendments that a person skilled in the art can make in accordance with the entire disclosure, including the scope of the claims, and the technical ideas. [Explanation of symbols]

[0137] 10. Server device 20 Terminals 100 Server device 101 Memory means 102 Authentication Control Measures 201 Communication control section 202 Account Creation Department 203 Permit person setting section 204 Authentication control section 205 Service Provision Department 206 Memory section 311 Processor 312 Memory 313 Input / Output Interface 314 Communication Interface

Claims

1. a storage means for storing, for at least one account holder, biometric information of the account holder and biometric information of an access permission holder who is permitted to access the account of the account holder in association with each other; an authentication control means for receiving biometric information of two people from a terminal of a user who is attempting to log in to the account of the account holder as the access permission user, and permitting the user to log in when biometric authentication using the received biometric information of the two people and the stored biometric information of the account holder and the access permission user is successful; A server device comprising:

2. The authentication control means receiving biometric information of a first person to be authenticated and biometric information of a second user; a first biometric authentication is performed using the received biometric information of the first authenticated person and the stored biometric information of the account holder, and if the first biometric authentication is successful, performing a second biometric authentication using the received biometric information of the second person to be authenticated and the stored biometric information of the access permission person; The server device according to claim 1 , wherein if the second biometric authentication is successful, the user is permitted to log in. 3 .

3. The server device according to claim 2 , wherein the authentication control means executes the second biometric authentication when the account holder identified by the first biometric authentication is set as the access permission holder.

4. The server device according to claim 3 , further comprising a service providing unit that provides a user who logs into the account of the account holder with the same services as the account holder.

5. A server device according to any one of claims 2 to 4, wherein the first person to be authenticated is a person who has lost the ability to make decisions, and the second person to be authenticated is a user who is attempting to log in to the account of the account holder as the access permission user.

6. The server device according to claim 5, wherein the authentication control means acquires information from the user's terminal proving that the first authenticated person has lost their ability to make decisions, and if it determines based on the acquired information that the account holder identified by the first biometric authentication has lost their ability to make decisions, it allows the user to log in.

7. a storage step of storing, for at least one account holder, biometric information of the account holder and biometric information of an access permission holder who is permitted to access the account of the account holder in association with each other; an authentication control process for receiving biometric information of two people from a terminal of a user who is attempting to log in to the account of the account holder as the access permission user, and permitting the user to log in if biometric authentication using the received biometric information of the two people and the stored biometric information of the account holder and the access permission user is successful; A method for controlling a server device comprising:

8. A computer installed in the server device a storage process for storing, for at least one account holder, biometric information of the account holder and biometric information of an access permission holder who is permitted to access the account of the account holder in association with each other; an authentication control process for receiving biometric information of two people from a terminal of a user who is attempting to log in to the account of the account holder as the access permission user, and permitting the user to log in if biometric authentication using the received biometric information of the two people and the stored biometric information of the account holder and the access permission user is successful; A program for executing the above.

Images