Visitor eligibility verification system, facility equipment for visitor eligibility verification, program for visitor eligibility verification

Abstract

The facility will appropriately verify whether the person visiting the facility is a person with legitimate qualifications to visit, and will also appropriately provide residents with any information they need to confirm regarding that person. [Solution] The entrance terminal 3 provides the user terminal 1 with an approved qualification list information which lists the qualification certificate types of persons whose visits have been approved in advance by the resident. The entrance terminal 3 obtains from the user terminal the qualification certificate type of the person matching the approved qualification list information and the identifier of the person's digital qualification certificate. The entrance terminal 3 provides the authentication authority server 6 with the verification requirements associated with the person's qualification certificate type and the identifier of the person's digital qualification certificate. The authentication authority server 6 obtains from the authentication authority server the result of the qualification verification based on the identifier of the person's digital qualification certificate and information regarding the verification requirements for the person. If the qualification verification is successful, the entrance terminal 4 displays a visitor verification screen on the indoor terminal 4 which presents the resident with information regarding the verification requirements for the person.

Description

Technical Field

[0001] The present invention relates to a visitor qualification verification system that verifies whether a subject who has visited a facility is a person with legitimate qualification to visit the facility, a facility device for visitor qualification verification, and a program for visitor qualification verification.

Background Art

[0002] In visiting services such as home-visit care services, home-visit nursing services, and pharmacist visiting services, as well as home delivery services, service workers (care workers, nurses, pharmacists, delivery personnel, etc.) visit residences to provide services. When receiving such services, it is necessary to take care not to admit persons impersonating service workers who plan fraud or crimes into the residence. Accordingly, there is a demand for technology that assists residents so that the residents can appropriately confirm that a visitor is an acceptable person with no problems.

[0003] In relation to such demands, there is conventionally known a technology for verifying whether a person is scheduled to visit a residence or is a trusted person who has visited the residence in the past by collating information collected from the visitor with pre-registered information (see Patent Document 1).

Prior Art Literature

Patent Literature

[0004]

Patent Document 1

Summary of the Invention

Problem to be Solved by the Invention

[0005] Conventional technologies allow for proper verification of whether a person is safe to enter a home by pre-storing information about them in a local system installed in the home. On the other hand, if information that residents need to verify about a visitor is presented to the resident when the visitor arrives, residents can properly verify that the visitor is safe to enter the home, thereby improving resident convenience. Therefore, there is a need for technology that can present residents with information that they need to verify about visitors.

[0006] Therefore, the main objective of the present invention is to provide a visitor qualification verification system, a facility device for visitor qualification verification, and a program for visitor qualification verification that can appropriately verify whether a person visiting a facility is a person who has the legitimate qualifications to visit the facility, and can appropriately present to residents information that residents need to confirm regarding the person. [Means for solving the problem]

[0007] The visitor qualification verification system of the present invention is a visitor qualification verification system that verifies whether a person who has come to a facility is a person who is legitimately qualified to visit the facility, and comprises a person device that holds the person's digital qualification certificate, a verification device that performs qualification verification to verify whether the digital qualification certificate stored in the person device is valid, and a facility device installed in the facility that mediates between the person device and the verification device, wherein the facility device obtains the identifier of the person's digital qualification certificate from the person device, and if the person's qualification certificate type matches the qualification certificate type of the person in the approved qualification list information which lists the qualification certificate types of persons whose visit has been approved in advance by the facility manager, it provides the verification device with the verification requirement items associated with the person's qualification certificate type and the identifier of the person's digital qualification certificate, obtains the result of the qualification verification based on the identifier of the person's digital qualification certificate and information regarding the person's verification requirement items from the verification device, and if the qualification verification is successful, performs predetermined processing based on the verification result of the qualification verification and the information regarding the person's verification requirement items.

[0008] Furthermore, the facility device for verifying visitor qualifications of the present invention is installed in a facility and verifies whether a person visiting the facility is a person who has the legitimate qualifications to visit the facility. The device obtains the identifier of the person's digital qualification certificate from the person device, and if the person's qualification certificate type matches the approved qualification list information which lists the qualification certificate types of persons whose visits have been approved in advance by the facility manager, it provides the verification device with the verification requirements items associated with the person's qualification certificate type and the identifier of the person's digital qualification certificate, and obtains the result of the qualification verification, which verifies whether the digital qualification certificate is valid based on the identifier of the person's digital qualification certificate, and information regarding the verification requirements items for the person, from the verification device. If the qualification verification is successful, it performs predetermined processing based on the verification result of the qualification verification and the information regarding the verification requirements items for the person.

[0009] Furthermore, the present invention provides a visitor qualification verification program that causes an information processing device to execute a visitor qualification verification process to verify whether a person visiting a facility is a person who is legitimately qualified to visit the facility. The program obtains the identifier of the person's digital qualification certificate from the person's device, and if the person's qualification certificate type matches the qualification certificate type of the person in the approved qualification list information which lists the qualification certificate types of persons whose visits have been approved in advance by the facility manager, it provides the verification device with the verification requirements items associated with the person's qualification certificate type and the identifier of the person's digital qualification certificate, and obtains the result of the qualification verification, which verifies whether the digital qualification certificate is valid based on the identifier of the person's digital qualification certificate, and information regarding the verification requirements items for the person, from the verification device. If the qualification verification is successful, it performs a predetermined process based on the verification result of the qualification verification and the information regarding the verification requirements items for the person. [Effects of the Invention]

[0010] According to the present invention, it is possible to appropriately verify whether a person visiting a facility is a person who has the legitimate qualifications to visit the facility, and to appropriately present to the facility manager (such as a resident) information that the facility manager needs to confirm regarding the person. [Brief explanation of the drawing]

[0011] [Figure 1] Overall configuration diagram of the visitor qualification verification system according to the first embodiment. [Figure 2] A block diagram showing an overview of the process performed when an employee visits a residence in the visitor qualification verification system according to the first embodiment. [Figure 3] Block diagram showing the schematic configuration of the user terminal, entrance terminal, indoor terminal, and authentication authority server according to the first embodiment. [Figure 4] This diagram illustrates an example of information created by pre-configuration in an indoor terminal according to the first embodiment. [Figure 5] An explanatory diagram showing an example of information included in the response regarding the presentation of the type of qualification certificate according to the first embodiment. [Figure 6] This diagram illustrates an example of information included in a request for information provision regarding required verification items transmitted from the entrance terminal to the authentication authority server according to the first embodiment, and an example of information included in a response for information provision regarding required verification items transmitted from the authentication authority server to the entrance terminal. [Figure 7] Diagram illustrating the digital credentials screen displayed on the user terminal according to the first embodiment. [Figure 8] An explanatory diagram showing the visitor confirmation screen displayed on the indoor terminal according to the first embodiment. [Figure 9] A sequence diagram showing the procedure for the process performed when a digital certificate is issued in the visitor qualification verification system according to the first embodiment. [Figure 10] Sequence diagram showing the pre-configuration procedure performed on the indoor terminal according to the first embodiment. [Figure 11] A sequence diagram showing the procedure for processing performed when an employee visits a residence in the visitor qualification verification system according to the first embodiment. [Figure 12] A sequence diagram showing the procedure for processing performed when an employee visits a residence in the visitor qualification verification system according to the first embodiment. [Figure 13]Block diagram showing an outline of processing performed when a worker visits a residence in the visitor qualification verification system according to the second embodiment [Figure 14] Sequence diagram showing a procedure of processing performed when a worker visits a residence in the visitor qualification verification system according to the second embodiment [Figure 15] Sequence diagram showing a procedure of processing performed when a worker visits a residence in the visitor qualification verification system according to a modification of the second embodiment [Figure 16] Explanatory diagram showing an example of visitor history information stored in an indoor terminal in the visitor qualification verification system according to the third embodiment [Figure 17] Sequence diagram showing a procedure for setting a worker as a target of simple verification in the visitor qualification verification system according to the third embodiment [Figure 18] Sequence diagram showing a procedure after setting a worker as a target of simple verification in the visitor qualification verification system according to the third embodiment [Figure 19] Overall configuration diagram of the visitor qualification verification system according to the fourth embodiment [Figure 20] Overall configuration diagram of the visitor qualification verification system according to a modification of the fourth embodiment [Figure 21] Overall configuration diagram of the visitor qualification verification system according to the fifth embodiment [Figure 22] Explanatory diagram showing information created by pre-setting in an authentication terminal according to the fifth embodiment [Figure 23] Explanatory diagram showing a digital qualification certificate screen displayed on a user terminal according to the fifth embodiment DETAILED DESCRIPTION OF THE INVENTION

[0012] The first invention made to solve the aforementioned problems is a visitor qualification verification system for verifying whether a person visiting a facility is a person with the legitimate qualifications to visit the facility, comprising: a person device that holds the person's digital qualification certificate; a verification device that performs qualification verification to verify whether the digital qualification certificate stored in the person device is valid; and a facility device installed in the facility that mediates between the person device and the verification device, wherein the facility device obtains the identifier of the person's digital qualification certificate from the person device, and if the person's qualification certificate type matches the qualification certificate type of the person in the approved qualification list information which lists the qualification certificate types of persons whose visit has been approved in advance by the facility manager, it provides the verification device with the verification requirements items associated with the person's qualification certificate type and the identifier of the person's digital qualification certificate, obtains the result of the qualification verification based on the identifier of the person's digital qualification certificate and information regarding the person's verification requirements from the verification device, and if the qualification verification is successful, performs predetermined processing based on the verification result of the qualification verification and the information regarding the person's verification requirements.

[0013] According to this, it is possible to appropriately verify whether the person visiting the facility is a person who has the legitimate qualifications to visit the facility, and to appropriately provide facility managers (residents, etc.) with information that they need to confirm regarding the person.

[0014] Furthermore, the second invention is configured such that the facility device provides the approved qualification list information to the target person device and obtains the qualification certificate type of the target person that matches the approved qualification list information from the target person device.

[0015] According to this, if a person possesses multiple digital qualification certificates, they do not need to present any certificates unrelated to the facility they are visiting to the facility's equipment.

[0016] Furthermore, the third invention is configured such that the facility device obtains the type of qualification certificate of the subject from the subject device and searches for the type of qualification certificate of the subject that matches the approved qualification list information.

[0017] According to this, processing speed can be increased.

[0018] Furthermore, the fourth invention is configured such that the facility device, as a predetermined process, presents the facility manager with information regarding the items necessary for the identification of the subject.

[0019] According to this, facility managers can appropriately and easily determine whether a person visiting the facility is a suitable person to be welcomed into their home.

[0020] Furthermore, the fifth invention is configured such that the facility device controls an entrance device installed at the entrance of the facility as the predetermined process.

[0021] According to this, for example, the entrance device can be controlled to unlock the facility's entrance door or open the entrance gate, allowing the person in question to enter the facility.

[0022] Furthermore, the sixth invention is configured such that the verification device provides information regarding the items necessary for the verification of the subject to the facility device only when the subject has given consent to provide the information to the subject device.

[0023] According to this, it is possible to avoid disclosing the information of individuals to facility managers without their consent.

[0024] Furthermore, the seventh invention is configured such that, if the qualification verification is successful, the facility device stores information about the person whose qualification verification was successful as visitor history information in a storage unit with a defined validity period, and then performs a simplified verification to confirm whether the person who subsequently visits the facility is a person registered in the visitor history information, and if the simplified verification is successful, it performs the predetermined processing.

[0025] According to this, if a simplified verification based on visitor history information is successful, the cumbersome verification based on a digital certificate can be omitted. In this case, the visitor history information may be deleted when the validity period expires. Furthermore, even if the verification fails, information about the person in question may be stored in the memory unit as visitor history information along with the result of the verification (success or failure of the verification).

[0026] Furthermore, the eighth invention is configured such that, if the qualification verification is successful, the facility device stores the subject's facial image as visitor history information in the storage unit, and performs facial matching as a simplified verification by comparing the facial image of the subject with the facial image registered in the visitor history information.

[0027] According to this, simple verification can be appropriately performed through facial recognition. Furthermore, the facial images of the subjects may be those taken by cameras in the facility.

[0028] Furthermore, the ninth invention is configured such that, if the qualification verification is successful, the facility device stores information regarding the items that need to be confirmed for the subject as visitor history information in the storage unit, and if the simplified verification is successful, it presents the information regarding the items that need to be confirmed for the subject to the facility manager.

[0029] According to this, facility managers can appropriately and easily determine whether a person visiting the facility is a suitable person to be welcomed into their home.

[0030] Furthermore, the tenth invention is a visitor qualification verification system for verifying whether a person visiting a facility is a person who is legitimately qualified to visit the facility, comprising: a person device that holds the person's digital qualification certificate; and a facility device installed in the facility that performs qualification verification to verify whether the digital qualification certificate stored in the person device is valid, wherein the facility device acquires certification information of the person's digital qualification certificate from the person device, and if the person's qualification certificate type matches the approved qualification list information which lists the qualification certificate types of persons whose visit has been approved in advance by the facility manager, it performs the qualification verification based on the certification information of the person's digital qualification certificate, and if the qualification verification is successful, it provides the person device with the necessary items to be verified associated with the person's qualification certificate type, acquires information regarding the person's necessary items to be verified from the person device, and performs predetermined processing using the information regarding the person's necessary items to be verified.

[0031] According to this, similar to the first invention, it is possible to appropriately verify whether a person visiting the facility is a person who has the legitimate qualifications to visit the facility, and to appropriately present to the facility manager (resident, etc.) any information that the facility manager needs to confirm regarding the person.

[0032] Furthermore, the 11th invention is a facility device for visitor qualification verification, which is installed in a facility to verify whether a person visiting the facility is a person who is legitimately qualified to visit the facility. The device obtains the identifier of the person's digital qualification card from the person device, and if the person's qualification card type matches the qualification card type of the person in the approved qualification list information which lists the qualification card types of persons whose visit has been approved in advance by the facility manager, it provides the verification device with the verification requirements items associated with the person's qualification card type and the identifier of the person's digital qualification card, and obtains the result of the qualification verification, which verifies whether the digital qualification card is valid based on the identifier of the person's digital qualification card, and information regarding the verification requirements items for the person, from the verification device, and if the qualification verification is successful, it performs predetermined processing based on the verification result of the qualification verification and the information regarding the verification requirements items for the person.

[0033] According to this, similar to the first invention, it is possible to appropriately verify whether a person visiting the facility is a person who has the legitimate qualifications to visit the facility, and to appropriately present to the facility manager (resident, etc.) any information that the facility manager needs to confirm regarding the person.

[0034] Furthermore, the twelfth invention is a facility device for visitor qualification verification, which is installed in a facility to verify whether a person visiting the facility is a person who is legitimately qualified to visit the facility. The device obtains the certification information of the person's digital qualification card from the person device, and if the person's qualification card type matches the approved qualification list information which lists the qualification card types of persons whose visits have been approved in advance by the facility manager, it performs qualification verification to verify whether the digital qualification card is valid based on the certification information of the person's digital qualification card. If the qualification verification is successful, it provides the person device with the necessary items to be verified that are associated with the person's qualification card type, obtains information regarding the necessary items to be verified for the person from the person device, and performs predetermined processing using the information regarding the necessary items to be verified for the person.

[0035] According to this, similar to the first invention, it is possible to appropriately verify whether a person visiting the facility is a person who has the legitimate qualifications to visit the facility, and to appropriately present to the facility manager (resident, etc.) any information that the facility manager needs to confirm regarding the person.

[0036] Furthermore, the 13th invention is a program that causes an information processing device to execute a process for verifying visitor qualifications to verify whether a person visiting a facility is a person who is legitimately qualified to visit the facility, and the program obtains the identifier of the person's digital qualification certificate from the person's device, and if the person's qualification certificate type matches the qualification certificate type of the person in the approved qualification list information which lists the qualification certificate types of persons whose visit has been approved in advance by the facility manager, the program provides the verification device with the verification requirements items associated with the person's qualification certificate type and the identifier of the person's digital qualification certificate, and obtains the result of the qualification verification, which verifies whether the digital qualification certificate is valid based on the identifier of the person's digital qualification certificate, and information regarding the verification requirements items for the person, from the verification device, and if the qualification verification is successful, it performs a predetermined process based on the verification result of the qualification verification and the information regarding the verification requirements items for the person.

[0037] According to this, similar to the first invention, it is possible to appropriately verify whether a person visiting the facility is a person who has the legitimate qualifications to visit the facility, and to appropriately present to the facility manager (resident, etc.) any information that the facility manager needs to confirm regarding the person.

[0038] Furthermore, the 14th invention is a program that causes an information processing device to execute a visitor qualification verification process to verify whether a person visiting a facility is a person who is legitimately qualified to visit the facility. The program obtains the certification information of the person's digital qualification certificate from the person's device, and if the person's qualification certificate type matches the approved qualification list information which lists the qualification certificate types of persons whose visits have been approved in advance by the facility manager, it performs a qualification verification to verify whether the digital qualification certificate is valid based on the certification information of the person's digital qualification certificate. If the qualification verification is successful, it provides the person's device with the necessary items to be verified that are associated with the person's qualification certificate type, obtains information regarding the necessary items to be verified for the person from the person's device, and performs a predetermined process using the information regarding the necessary items to be verified for the person.

[0039] According to this, similar to the first invention, it is possible to appropriately verify whether a person visiting the facility is a person who has the legitimate qualifications to visit the facility, and to appropriately present to the facility manager (resident, etc.) any information that the facility manager needs to confirm regarding the person.

[0040] Hereinafter, embodiments of the present invention will be described with reference to the drawings.

[0041] (First Embodiment) Figure 1 is an overall diagram of the visitor qualification verification system according to the first embodiment.

[0042] This system verifies whether visitors (caregivers, nurses, pharmacists, delivery personnel, etc.) are legally qualified to visit a residence (facility) when providing services such as home care, home nursing, pharmacist visits, and housekeeping, as well as delivery services. It also assists residents (facility managers) in appropriately confirming that visitors are suitable to be welcomed into their homes. In this embodiment, service providers such as those providing home care and delivery services visit residences, but the facilities visited by the service providers are not limited to residences.

[0043] This system comprises a user terminal 1 (target device), a door phone system 2 (facility device, information processing device) consisting of an entrance terminal 3 and an indoor terminal 4, an issuing authority server 5, and an authentication authority server 6 (verification device). User terminal 1 and entrance terminal 3 can communicate via secure short-range wireless communication, such as NFC (Near Field Communication) or Bluetooth (registered trademark). User terminal 1 can communicate with the issuing authority server 5 and the authentication authority server 6 via the network. Entrance terminal 3 can communicate with the authentication authority server 6 via the network. Entrance terminal 3 and indoor terminal 4 can communicate via wired or wireless connection. The authentication authority server 6 may consist of a single information processing device or multiple information processing devices.

[0044] User terminal 1 is owned by a service provider. User terminal 1 is a general-purpose mobile device (such as a smartphone), and has an application installed on it for securely managing credit cards, certificates, qualifications, etc., a so-called wallet application (electronic wallet application). In this embodiment, the digital qualification held by the service provider is registered in the wallet application. Alternatively, the digital qualification may be registered in a dedicated application. Furthermore, the wallet application may be built into the OS or it may be downloaded and installed.

[0045] The entrance terminal 3 is installed at the entrance of the house. A person visiting the house (hereinafter referred to as the "person") can use the entrance terminal 3 to make a call. The indoor terminal 4 may be a fixed unit installed inside the house, or it may be a movable unit. Residents can view the screen displayed on the indoor terminal 4 and perform necessary operations. The person and the resident can communicate via the entrance terminal 3 and indoor terminal 4. In addition, the entrance terminal 3 and indoor terminal 4 act as intermediaries between the user terminal 1 and the authentication authority server 6 to verify whether the visitor is a person with the legitimate qualifications to visit the house.

[0046] The issuing authority server 5 issues a digital certificate to the service provider, which is signed by the certification authority server 6. The issued digital certificate is stored in the user terminal 1.

[0047] The authentication authority server 6 performs credential verification to confirm whether the digital certificate presented by the visitor is valid (authentic). The authentication authority server 6 also maintains employee information for each item, and if credential verification is successful, provides the employee information for the requested verification items to the entrance terminal 3. The provided employee information for the verification items is then presented to the resident via the indoor terminal 4. Note that the authentication authority server 6 may also function as the issuing authority server 5.

[0048] When a visitor initiates a call using the entrance terminal 3, the indoor terminal 4 displays a screen notifying the resident that a visitor has arrived. The indoor terminal 4 also displays a screen for the resident to confirm that the visitor is a person who can be safely welcomed into the residence. This screen displays the results of the visitor's eligibility verification performed by the authentication authority server 6, as well as the employee's information regarding the items that need to be verified.

[0049] Next, we will describe the overview of the process performed when an employee visits a residence in the visitor qualification verification system according to the first embodiment. Figure 2 is a block diagram illustrating the overview of the process performed when an employee visits a residence.

[0050] First, (1) when a person (the subject) who has come to the house operates the call button on the entrance terminal 3, (2) a visitor notification is sent from the entrance terminal 3 to the indoor terminal 4, and (3) a visitor notification screen is displayed on the indoor terminal 4. At this time, the camera installed on the entrance terminal 3 takes a picture of the subject, and the image of the subject is displayed on the visitor notification screen.

[0051] Next, (4) a list of qualification certificate types of the workers whose visits have been approved by the resident in advance (approved qualification list information) (see Figure 4), along with the necessary items for verification for each qualification certificate type, is transmitted from the indoor terminal 4 to the entrance terminal 3. Note that the approved qualification list information is created and stored in the indoor terminal 4 in advance.

[0052] Next, (5) a request for presentation of the qualification certificate type is sent from the entrance terminal 3 to the user terminal 1. The request for presentation of the qualification certificate type includes approved qualification list information. Next, the user terminal 1 extracts the qualification certificate type of the person matching the approved qualification list information, and (6) a response for presentation of the qualification certificate type is sent from the user terminal 1 to the entrance terminal 3. The response for presentation of the qualification certificate type includes the person's qualification certificate type and the identifier of the person's digital qualification certificate.

[0053] Next, (7) a request for consent to provide information is sent from the entrance terminal 3 to the user terminal 1. Then, when the subject performs an operation on the user terminal 1 to select whether or not to consent to the provision of information, (8) a response regarding consent to provide information is sent from the user terminal 1 to the entrance terminal 3. The response regarding consent to provide information includes information on whether or not the subject has consented to the provision of information.

[0054] Next, if the subject consents to providing information, a request for (9) eligibility verification (verification of digital certificate) and provision of information on items requiring verification is sent from the entrance terminal 3 to the certification authority server 6. The request for eligibility verification and provision of information on items requiring verification includes the identifier of the subject's digital certificate and the items requiring verification for the subject. The certification authority server 6 performs eligibility verification based on the identifier of the subject's digital certificate to verify whether the digital certificate is valid (authentic). If the eligibility verification is successful, the latest worker information regarding the items requiring verification for the subject is extracted based on the identifier of the subject's digital certificate, and a response for (10) eligibility verification and provision of information on items requiring verification is sent from the certification authority server 6 to the entrance terminal 3. The response for eligibility verification and provision of information on items requiring verification includes the verification result of the eligibility verification and the worker information regarding the items requiring verification for the subject.

[0055] Next, (11) a notification regarding the server processing result is sent from the entrance terminal 3 to the indoor terminal 4. The notification regarding the server processing result includes the verification result of the qualification verification by the certification authority server 6 and the personnel information regarding the items that need to be confirmed for the person. Next, (12) the visitor confirmation screen 81 (see Figure 8) is displayed on the indoor terminal 4. The visitor confirmation screen 81 displays the qualification type of the person and the personnel information regarding the items that need to be confirmed for the person. The visitor confirmation screen 81 also allows the resident to choose whether or not to answer the person. When the resident chooses whether or not to answer the person, (13) a notification of whether or not to answer is sent from the indoor terminal 4 to the entrance terminal 3, and the entrance terminal 3 presents the person with the decision of whether or not the resident should answer them.

[0056] Furthermore, the certification authority server 6 stores information on each item related to an employee, associating it with the identifier of that employee's digital qualification certificate. This allows the server to extract employee information related to the items that need to be verified for the target individual based on the identifier of the employee's digital qualification certificate.

[0057] Next, the schematic configuration of the user terminal 1, entrance terminal 3, and indoor terminal 4 according to the first embodiment will be described. Figure 3 is a block diagram showing the schematic configuration of the user terminal 1, entrance terminal 3, indoor terminal 4, and authentication authority server 6.

[0058] User terminal 1 includes a display unit 11, an input unit 12, a camera 13, a sensor 14, a communication unit 15, a storage unit 16, and a processor 17.

[0059] The display unit 11 displays a screen for presenting a digital certificate, etc. The input unit 12, together with the display unit 11, constitutes a touch panel display. The camera 13 photographs the subject for facial recognition. The sensor 14 is used to read the My Number Card. The communication unit 15 performs short-range wireless communication with the entrance terminal 3. The storage unit 16 stores the program executed by the processor 17, and the data of the digital certificate, etc. The processor 17 controls the display unit 11, the input unit 12, the camera 13, the sensor 14, and the communication unit 15. The processor 17 also performs processing such as facial recognition using the subject's facial image captured by the camera 13. The user terminal 1 may also be equipped with sensors for biometric authentication such as fingerprint authentication.

[0060] The entrance terminal 3 includes a display unit 31, an input unit 32, a camera 33, a speaker 34, a microphone 35, a communication unit 36, a storage unit 37, and a processor 38.

[0061] The display unit 31 displays a screen that notifies the person (target) who has come to the residence of the necessary information. The input unit 32 consists of operation buttons such as a call button that the target operates to summon the resident. The input unit 32, together with the display unit 31, constitutes a touch panel display. The camera 33 photographs the target. The speaker 34 outputs the resident's spoken voice transmitted from the indoor terminal 4. The microphone 35 picks up the target's spoken voice. The communication unit 36 ​​performs short-range wireless communication with the user terminal 1. The communication unit 36 ​​also communicates with the indoor terminal 4. The communication unit 36 ​​also communicates with the issuing authority server 5 and the certification authority server 6 via the network. The storage unit 37 stores programs and other data executed by the processor 38. The processor 38 controls the display unit 31, input unit 32, camera 33, speaker 34, microphone 35, and communication unit 36. Furthermore, the processor 38 performs processes such as reading the two-dimensional code 76 using an image obtained by taking a picture of the two-dimensional code 76 displayed on the screen of the user terminal 1 with the camera 33.

[0062] The indoor terminal 4 includes a display unit 41, an input unit 42, a speaker 43, a microphone 44, a communication unit 45, a storage unit 46, and a processor 47.

[0063] The display unit 41 displays screens that notify residents when a person (target) has arrived at the facility, and screens that allow residents to confirm the target. The input unit 42 consists of operation buttons, such as a call button, which residents use to communicate with the target. The input unit 42, together with the display unit 41, constitutes a touch panel display. The speaker 43 outputs the target's spoken voice transmitted from the entrance terminal 3. The microphone 44 picks up the resident's spoken voice. The communication unit 45 communicates with the entrance terminal 3. The storage unit 46 stores programs executed by the processor 47 and pre-configured information. The processor 47 controls the display unit 41, input unit 42, speaker 43, microphone 44, and communication unit 45.

[0064] The certification authority server 6 comprises a communication unit 61, a storage unit 62, and a processor 63.

[0065] The communication unit 61 communicates with the entrance terminal 3 via the network. The storage unit 62 stores programs executed by the processor 63 and information about pre-registered personnel. The processor 63 performs qualification verification to confirm whether the person visiting the facility (the subject) is a person with the legitimate qualifications to visit the facility.

[0066] In this embodiment, the entrance terminal 3 is configured as the master unit, the indoor terminal 4 is configured as the slave unit, and the processor 38 provided in the entrance terminal 3 functions as the main control unit of the doorphone system 2. However, it is also possible to reverse the roles of the master and slave units, that is, the entrance terminal 3 is configured as the slave unit, the indoor terminal 4 is configured as the master unit, and the processor 47 provided in the indoor terminal 4 functions as the main control unit of the doorphone system 2.

[0067] Next, we will explain the information created by pre-configuration in the indoor terminal 4 according to the first embodiment. Figure 4 is an explanatory diagram showing an example of the information created by pre-configuration.

[0068] In the indoor terminal 4, a list of the types of digital qualification certificates (qualification certificate types) held by personnel whose visits have been approved by the resident is pre-created and stored (approved qualification list information). The approved qualification list information is created for each residence (resident) in response to the resident's specified operation, and its contents differ depending on the residence (resident).

[0069] Furthermore, each qualification certificate type (digital qualification certificate type) is assigned an ID (qualification identifier), and the necessary verification items for each qualification certificate type are registered in association with that ID. In addition, IDs may be assigned using criteria different from those for general qualifications such as national or private qualifications, which allows for the classification of job roles of business personnel in diverse industries into qualifications based on a variety of criteria.

[0070] Furthermore, in the indoor terminal 4, items of employee information that the resident needs to confirm when welcoming a visiting employee are set according to the type of qualification certificate (items to be confirmed). The items to be confirmed are created for each residence (resident) according to the resident's specified operation, and their content differs depending on the residence (resident).

[0071] In the pharmacist home visit service, the digital qualification certificate held by the pharmacist will be for pharmacists. In this case, the items that need to be verified are set as follows: the pharmacist's (the pharmacist's) affiliation, specifically the name of the pharmacist home visit service provider (company name), the name of the business (pharmacy) to which the pharmacist belongs, the pharmacist's name, and a facial image. By presenting this information about the pharmacist to the resident, the resident can confirm that the person in question is a trustworthy pharmacist.

[0072] In delivery services, the type of digital qualification certificate held by employees is "delivery person." In this case, the required verification items are set as follows: the name of the delivery person's affiliation, specifically the name of the delivery service provider (company name), the name of the branch office to which the delivery person belongs, the delivery person's name, the name of the area the delivery person is responsible for, and a facial image. By presenting this employee information to residents, residents can verify that the person in question is a trustworthy delivery person.

[0073] In home care services, the type of digital qualification certificate held by the caregiver will be "care staff." In this case, the required items for verification will be the care staff's affiliation, specifically the name of the home care service provider (company name), the name of the care facility to which the care staff belongs, the care staff's name, and a facial image. Furthermore, if it is desired to verify the presence or absence of national or private qualifications held by the care staff, the required items for verification will be whether or not the qualification exists, the name of the qualification, and the qualification registration number. By presenting this information about the caregiver to the resident, the resident can confirm that the person in question is a trustworthy care staff member.

[0074] Furthermore, for various types of visiting services (e.g., door-to-door sales), the type of digital qualification certificate held by the employee will be that of a service provider (e.g., a real estate service provider). In this case, the required items for verification will be the employee's affiliation, specifically the name of the real estate business (real estate company name), the name of the office to which the employee belongs, the employee's name, and a facial image. Additionally, if it is necessary to verify the national or private qualifications held by the employee, the presence or absence of the qualification, the name of the qualification, and the qualification registration number will be set as required items for verification. By presenting this employee information to residents, they can confirm that the person in question is a trustworthy service provider.

[0075] Next, we will describe the response regarding the presentation of the qualification certificate type transmitted from the user terminal 1 to the entrance terminal 3 according to the first embodiment. Figure 5 is an explanatory diagram showing an example of the information included in the response regarding the presentation of the qualification certificate type.

[0076] When user terminal 1 receives a request from entrance terminal 3 to display the type of qualification certificate of the employee, that is, the type of digital qualification certificate held by the employee, user terminal 1 sends a response regarding the display of the qualification certificate type to entrance terminal 3 (see Figure 2(6)).

[0077] The response regarding the presentation of the qualification certificate type includes the identifier of the digital qualification certificate held by the employee and the type of digital qualification certificate held by the employee (qualification certificate type).

[0078] In the example shown in Figure 5, employee information is listed, but the information other than that included in the response regarding the presentation of the qualification certificate type is information stored on the digital My Number Card or information stored on the certification authority server 6 when the digital qualification certificate is issued.

[0079] Next, we will explain the request for information on items required for verification that is sent from the entrance terminal 3 to the authentication authority server 6 according to the first embodiment, and the response for information on items required for verification that is sent from the authentication authority server 6 to the entrance terminal 3. Figure 6(A) is an explanatory diagram showing an example of the information included in the request for information on items required for verification. Figure 6(B) is an explanatory diagram showing an example of the information included in the response for information on items required for verification.

[0080] The entrance terminal 3 sends a request to the certification authority server 6 for information on items that the resident needs to verify when welcoming a visiting employee (items that need to be verified) (see Figure 2(9)). At the same time, the entrance terminal 3 also sends a request to the certification authority server 6 for eligibility verification (verification of the digital certificate) instructing the server 6 to perform eligibility verification.

[0081] As shown in Figure 6(A), the request for information on the items to be verified includes the identifier of the digital certificate held by the visiting employee, the type of certificate held by the visiting employee, and the items to be verified associated with that type of certificate.

[0082] When the authentication authority server 6 receives a request from the entrance terminal 3 for information on items that need to be verified, it retrieves the employee information related to the items that need to be verified for the subject from the storage unit 62 based on the identifier of the digital qualification certificate held by the subject, and sends a response regarding the provision of information on the items that need to be verified to the entrance terminal 3 (see Figure 2(10)).

[0083] As shown in Figure 6(B), the response regarding the provision of information on items requiring verification includes the identifier of the subject's digital qualification certificate, the type of qualification certificate the subject has, and the subject's employee information related to the items requiring verification (affiliation (company name, etc.), name, facial image, etc.).

[0084] Next, the digital certificate screen 71 displayed on the user terminal 1 according to the first embodiment will be described. Figure 7 is an explanatory diagram showing the digital certificate screen 71. The digital certificate screen 71 is displayed when the wallet application is launched on the user terminal 1.

[0085] User terminal 1 has the digital qualification certificates held by the employees pre-registered. When an employee operates the wallet app on user terminal 1, the digital qualification certificate screen 71 is displayed. This allows the employee to confirm the registered contents of their digital qualification certificate and employee information. In addition to presenting the digital qualification certificate to the entrance terminal 3 via communication, the employee can also present the digital qualification certificate in person to anyone who requests proof of qualification.

[0086] The digital qualification certificate screen 71 is equipped with a qualification certificate type display section 72, a verification required items display section 73, a qualification number display section 74, and a face image display section 75. The qualification certificate type display section 72 displays the type of digital qualification certificate (qualification certificate type) held by the employee. The verification required items display section 73 displays employee information related to the verification required items. The qualification number display section 74 displays the employee's qualification number. The face image display section 75 displays the employee's face image.

[0087] The example shown in Figure 7(A) is for a pharmacist who is a pharmacist providing home visit services. In this case, the qualification certificate type display section 72 displays "Pharmacist," which is the type of digital qualification certificate held by the pharmacist providing home visit services. The items to be confirmed display section 73 displays the pharmacist's (employee's) affiliation, specifically the name of the pharmacist providing home visit services (company name), the name of the business (pharmacy) to which the pharmacist belongs, and the pharmacist's name. The qualification number display section 74 displays the pharmacist registration number (qualification number).

[0088] The example shown in Figure 7(B) is for a delivery person working for a delivery service. In this case, the qualification certificate type display section 72 displays "delivery person," which is the type of digital qualification certificate held by the delivery service worker. The items to be checked display section 73 displays the name of the delivery person's (worker's) affiliation, specifically the name of the delivery service provider (company name), the delivery person's name, and the name of the area the delivery person is responsible for. The qualification number display section 74 displays the employee number (qualification number).

[0089] Furthermore, a two-dimensional code 76 is displayed on the digital certificate screen 71. The two-dimensional code 76 stores information for establishing secure communication between the user terminal 1 and the entrance terminal 3, and does not contain any personal information. The two-dimensional code 76 may have an expiration date and may be updated as needed upon expiration. This prevents unauthorized use through screenshots, etc.

[0090] In addition to the qualification type, required verification items, and qualification number (national qualification registration number, employee number, etc.), the digital qualification certificate screen 71 may also display information such as name and date of birth.

[0091] Next, the visitor confirmation screen 81 displayed on the indoor terminal 4 according to the first embodiment will be described. Figure 8 is an explanatory diagram showing the visitor confirmation screen 81.

[0092] When the indoor terminal 4 receives a notification regarding the server processing result from the entrance terminal 3, the visitor confirmation screen 81 is displayed (see Figures 2(11) and (12)).

[0093] The visitor verification screen 81 is equipped with a qualification certificate type display section 82 and a verification required items display section 83. The qualification certificate type display section 82 displays the type of digital qualification certificate (qualification certificate type) held by the person in question. The verification required items display section 83 displays the person's information related to the verification required items (e.g., affiliation, name, facial image, etc.). This allows residents to confirm that the person in question is a person who can be welcomed into their home without any problems.

[0094] Furthermore, the visitor verification screen 81 is equipped with a face image display unit 84. The face image display unit 84 displays a real-time face image of the person captured by the camera 33 of the entrance terminal 3. Alternatively, the indoor terminal 4 may acquire the face image of the employee included in the digital qualification certificate from the user terminal 1 via the entrance terminal 3 and display that face image on the visitor verification screen 81. This allows the resident to visually compare the face image of the employee included in the digital qualification certificate with the real-time face image of the person, thereby confirming that the digital qualification certificate presented by the person is genuine and belongs to that person.

[0095] Furthermore, the visitor confirmation screen 81 allows residents to choose whether or not to respond to the visitor. Specifically, the visitor confirmation screen 81 displays a "Respond" button 86 and a "Do not respond" button 87. Residents operate the "Respond" button 86 if they wish to respond to the visitor, and the "Do not respond" button 87 if they do not wish to respond.

[0096] Next, we will describe the process performed when a digital certificate is issued in the visitor qualification verification system according to the first embodiment. Figure 9 is a sequence diagram showing the procedure for the process performed when a digital certificate is issued.

[0097] First, at user terminal 1, the user enters the PIN for their My Number Card (IC card) (S101). Next, user terminal 1 reads the My Number Card (S102). That is, it reads the information stored on the IC chip of the My Number Card. At this time, the information read from the IC chip includes basic personal information (name, address, date of birth, and gender) and an electronic certificate.

[0098] Next, user terminal 1 sends a request for verification of the My Number Card to the certification authority server (S103). The request for verification of the My Number Card includes the information read from the My Number Card (basic personal information, electronic certificate). Note that the certification authority server shown in Figure 9 is a server operated by the certification authority for My Number Cards, and is different from the certification authority server 6 for digital certificates shown in Figure 1, etc.

[0099] Next, when the authentication authority server receives the reading information of the My Number Card from user terminal 1, it verifies the My Number Card based on that reading information, that is, it determines whether or not the My Number Card is valid (S104), and sends a response regarding the verification of the My Number Card to user terminal 1 (S105). The response regarding the verification of the My Number Card includes the verification result of the My Number Card.

[0100] Next, user terminal 1 receives a response from the authentication authority server regarding the verification of the My Number Card, and upon obtaining a verification result indicating that the My Number Card verification was successful, stores the verified digital My Number Card in storage unit 16 (S106). If the My Number Card verification fails, user terminal 1 will display a screen prompting the user to re-enter the PIN, or a screen indicating verification failure.

[0101] Next, when the user selects the type of qualification they hold (e.g., pharmacist) and enters their qualification registration number on the user terminal 1 (S107), the user terminal 1 retrieves the verified digital My Number Card from the storage unit 16 (S108) and sends a request for the issuance of a digital qualification certificate to the issuing authority server 5 (S109). The request for the issuance of a digital qualification certificate includes the information of the verified digital My Number Card, the type of qualification held by the user, and their qualification registration number. The issuing authority server 5 is a server operated by the issuing authority of the digital qualification certificate.

[0102] Next, when the issuing authority server 5 receives a request from user terminal 1 for the issuance of a digital qualification certificate, it verifies whether the person with the digital My Number Card possesses a prescribed qualification (for example, a national qualification such as a pharmacist) (S110), and sends a response regarding the issuance of the digital qualification certificate to user terminal 1 (S111). The response regarding the issuance of the digital qualification certificate includes the verification result of whether the person with the digital My Number Card possesses a prescribed qualification.

[0103] Next, if the verification of qualification ownership is successful, the issuing authority server 5 generates a private key and a public key pair, and generates and issues a digital qualification certificate with the public key attached to the electronic certificate contained in the digital qualification certificate (S112), and transmits the data of the digital qualification certificate to the user terminal 1 (S113). Next, the user terminal 1 stores the data of the digital qualification certificate in the storage unit 16 (S114).

[0104] In the case of home visit services provided by individuals holding national qualifications (such as pharmacists), the issuing authority server 5 managed by the administrative agency that oversees national qualifications (such as the Ministry of Health, Labour and Welfare) will issue the digital qualification certificate. In the case of home delivery services, the issuing authority server 5 managed by the service provider or the management company of the residence (such as an apartment building) may issue the digital qualification certificate. In the case of home care services, the issuing authority server 5 managed by the service provider may issue the digital qualification certificate.

[0105] Incidentally, the person in charge of issuing qualifications can also issue digital qualification certificates in person with the service provider. In this case, first, an authentication terminal (not shown) is used to verify the identity of the person whose My Number Card is presented by the employee. Specifically, the surface of the My Number Card presented by the employee is photographed, and OCR processing is performed on the image of the card surface, while the information stored in the IC chip of the My Number Card is read. At this time, the authentication terminal generates a verification number B from the card surface information obtained by the OCR processing (date of birth, expiration date in Western calendar year, and security code), and uses this verification number B as an access key to access the IC chip. Next, facial verification is performed by comparing the facial image of the employee with the facial image contained in the My Number Card. Facial verification may also be performed by the person in charge making a visual judgment.

[0106] Next, the person in charge uses a terminal (e.g., a PC) to request the issuance of a digital qualification certificate from the issuing authority server 5. When the person in charge enters the employee's My Number Card information, the type of qualification and qualification registration number held by the employee, and the employee's email address, a request for the issuance of a digital qualification certificate, including the entered information, is sent from the terminal to the issuing authority server 5.

[0107] Next, the issuing authority server 5 creates a digital qualification certificate based on the employee's My Number Card information, the type of qualification held by the employee, and the qualification registration number. Then, the digital qualification certificate is sent to the user terminal 1 via email. On the user terminal 1, the received digital qualification certificate is stored in the storage unit 16. The issuing authority server 5 also sends an issuance completion notification to the employee's terminal.

[0108] Next, we will describe the pre-configuration performed in the indoor terminal 4 according to the first embodiment. Figure 10 is a sequence diagram showing the pre-configuration procedure.

[0109] First, the indoor terminal 4 displays a pre-configuration screen (S201). On this pre-configuration screen, the resident performs an input operation to select the type of digital qualification certificate (qualification certificate type) held by the service provider who is expected to visit their home. The resident also performs an input operation to specify the items of visitor information (items to be confirmed) that need to be checked when welcoming the visitor, for each selected qualification certificate type.

[0110] Next, the indoor terminal 4, based on the input information obtained in response to the resident's input operation, creates a list of qualification certificate types of employees whose visits the resident has previously approved (approved qualification list information) and corresponding information of the items that need to be checked for each qualification certificate type (see Figure 4), and stores the approved qualification list information and the corresponding information of the items that need to be checked for each qualification certificate type in the storage unit 46 (S202).

[0111] Next, we will describe the procedure for processing performed when an employee visits a residence in the visitor qualification verification system according to the first embodiment. Figures 11 and 12 are sequence diagrams showing the procedure for processing performed when an employee visits a residence.

[0112] As shown in Figure 11, first, when the entrance terminal 3 detects that a person (target) has entered the house and pressed the call button (S301), the camera 33 takes a picture of the target (S302), and sends a visitor notification and the video of the target to the indoor terminal 4 (S303).

[0113] Furthermore, user terminal 1 performs login authentication to verify that the person operating it is a legitimate user (S304). Facial recognition may be performed at this time. Other authentication methods, such as FIDO (Fast Identity Online) authentication, may also be used. Next, the employee performs an operation on user terminal 1 to launch the wallet application (S305). Facial recognition may be performed at this time to launch the wallet application.

[0114] Next, when the indoor terminal 4 receives a visitor notification from the entrance terminal 3, it displays a visitor notification screen (S306). The visitor notification screen displays a message informing the resident that a person (the subject) has entered the house, along with a video of the subject. The resident can view the visitor notification screen to confirm that a person has entered the house.

[0115] Next, the indoor terminal 4 transmits to the entrance terminal 3 the information stored in the memory unit 46 in advance (see Figure 4), namely, a list of qualification certificate types of employees whose visits have been approved by the resident in advance (approved qualification list information), and the items that need to be confirmed for each qualification certificate type (S307).

[0116] Next, when the entrance terminal 3 receives the approval qualification list information and the items to be confirmed from the indoor terminal 4, it stores the approval qualification list information and the items to be confirmed in the storage unit 37 (S308). Next, the entrance terminal 3 displays a screen prompting the user to present the 2D code 76 (S309). An audio message prompting the user to present the 2D code 76 may also be output.

[0117] Next, user terminal 1 displays the digital certificate screen 71 (see Figure 7) in response to the user operating the wallet app (S310). At this point, the user holds the two-dimensional code 76 on the digital certificate screen 71 up to the camera 33 of entrance terminal 3.

[0118] Next, the entrance terminal 3 reads the two-dimensional code 76 on the digital credentials screen 71 displayed on the user terminal 1 based on the image captured by the camera 33 (S311). Then, based on the information stored in the two-dimensional code 76, secure communication is initiated between the user terminal 1 and the entrance terminal 3 (S312).

[0119] As shown in Figure 12, the entrance terminal 3 then sends a request to the user terminal 1 regarding the presentation of the qualification certificate type (S401). The request regarding the presentation of the qualification certificate type queries the user terminal 1 for the qualification certificate type of the worker, that is, the type of digital qualification certificate held by the worker. The request regarding the presentation of the qualification certificate type includes approved qualification list information, that is, information listing the qualification certificate types of workers whose visits have been previously approved by the resident (see Figure 4).

[0120] Next, when user terminal 1 receives a request from entrance terminal 3 regarding the presentation of the qualification certificate type, it retrieves the qualification certificate type of the person concerned from storage unit 16 (qualification certificate type retrieval process) (S402). Next, user terminal 1 searches the approved qualification list information included in the received request, that is, the qualification certificate types of employees whose visits have been previously approved by the resident, for any that match the qualification certificate type of the person concerned, and extracts the qualification certificate type that matches the qualification certificate type of the person concerned and the qualification certificate type of an employee whose visit has been previously approved by the resident (qualification certificate type search process) (S403).

[0121] Next, user terminal 1 sends a response regarding the presentation of the qualification certificate type to entrance terminal 3 (S404). The response regarding the presentation of the qualification certificate type includes the qualification certificate type of the person concerned that matches the qualification certificate type of the employee whose visit the resident has previously approved, and the identifier of the digital qualification certificate held by the person concerned. If, in the qualification certificate type search process (S403), there is no qualification certificate type that matches the qualification certificate type of the person concerned among the qualification certificate types of the employees whose visit the resident has previously approved, a notification to that effect is added to the response regarding the presentation of the qualification certificate type.

[0122] Next, when the entrance terminal 3 receives a response from the user terminal 1 regarding the presentation of the qualification certificate type, it retrieves the items that need to be verified for the person, that is, the items that need to be verified associated with the person's qualification certificate type, from the storage unit 37 (extraction of items that need to be verified) (S405). However, there may be cases where there are no items that need to be verified for the person. In this case, the entrance terminal 3 displays an error screen to notify the employee that the extraction of the items that need to be verified has failed.

[0123] Next, the entrance terminal 3 sends a request for consent to provide information to the user terminal 1 (S406). The request for consent to provide information asks the subject whether or not they consent to the provision of employee information regarding the items that need to be confirmed.

[0124] Next, when user terminal 1 receives a request for consent to provide information from entrance terminal 3, it displays an information provision consent screen asking the subject whether or not they consent to the provision of employee information regarding the items that need to be confirmed (S407). If the subject selects whether or not they consent to the provision of information, user terminal 1 sends a response regarding consent to the provision of information to entrance terminal 3 (S408). The response regarding consent to the provision of information includes information on whether or not the subject consents to the provision of information. If the subject does not consent to the provision of information, they can initiate a call with the resident via the door phone (entrance terminal 3, indoor terminal 4).

[0125] Next, the entrance terminal 3 receives a response from the user terminal 1 regarding consent to provide information. If the subject consents to providing information, it sends a request to the certification authority server 6 for qualification verification (verification of the digital qualification certificate) and provision of information on items requiring verification (S409). The request for qualification verification and provision of information on items requiring verification includes the identifier of the subject's digital qualification certificate, the items requiring verification of the subject, and the qualification number (national qualification registration number, employee number, etc.). Note that the identifier of the digital qualification certificate may also be the qualification number.

[0126] Next, when the authentication authority server 6 receives a request from the entrance terminal 3 for information regarding eligibility verification and necessary verification items, it verifies whether the digital certificate is valid (authentic) based on the identifier of the digital certificate of the person concerned (eligibility verification process) (S410).

[0127] Next, if the authentication authority server 6 successfully verifies the identity of the subject (verification of the digital certificate), it retrieves the latest employee information regarding the subject's verification requirements from the storage unit 62 based on the identifier of the subject's digital certificate (verification requirement information extraction process) (S411).

[0128] Next, the certification authority server 6 sends a response to the entrance terminal 3 regarding the provision of information on the required items for eligibility verification (S412). The response regarding the provision of information on the required items for eligibility verification includes the result of eligibility verification and the personnel information (see Figure 5) related to the required items for verification of the subject. Note that there may be cases where the personnel information related to the required items for verification of the subject is not registered, in which case the response regarding the provision of information on the required items for eligibility verification includes an error notification.

[0129] Next, when the entrance terminal 3 receives a response from the certification authority server 6 regarding the provision of information on the required items for eligibility verification, it sends a notification regarding the server processing result to the indoor terminal 4 (S413). The notification regarding the server processing result includes the information contained in the response regarding the provision of information on the required items for eligibility verification, namely the result of eligibility verification by the certification authority server 6 and the personnel information regarding the required items for verification of the subject.

[0130] Next, when the indoor terminal 4 receives a notification from the entrance terminal 3 regarding the server processing results, it displays the visitor verification screen 81 (see Figure 8) (S414). The visitor verification screen 81 displays the visitor's qualification type and the employee information related to the items that need to be verified (e.g., affiliation, name, facial image, etc.). This allows the resident to confirm that the visitor is a trustworthy person with the appropriate qualifications. The visitor verification screen 81 also allows the resident to choose whether or not to respond to the visitor.

[0131] Next, when the resident performs an operation to select whether or not to respond to the person in question, the indoor terminal 4 sends a notification of whether or not they will respond to the person in question to the entrance terminal 3 (S415). The notification of whether or not they will respond to the person in question includes information about whether or not the resident will respond to the person in question.

[0132] Next, when the entrance terminal 3 receives a notification from the indoor terminal 4 regarding whether or not it is possible to respond, it displays the response availability screen (S416). The response availability screen displays information regarding whether or not the resident will respond to the person in question. This allows the person in question to confirm whether or not the resident will respond. In addition, an audio message indicating whether or not the resident will respond to the person in question may be output.

[0133] Furthermore, when the entrance terminal 3 receives a notification from the indoor terminal 4 regarding whether or not it is possible to respond, it sends the same notification to the user terminal 1 (S417). On the user terminal 1, information regarding whether or not the resident will respond to the person in question is displayed, similar to the entrance terminal 3.

[0134] In some cases, the authentication authority server 6 may fail to verify credentials. In this case, the indoor terminal 4 will display a message on the visitor verification screen 81 notifying the resident that the validity of the digital credentials has failed to be verified. The entrance terminal 3 will also display a message notifying the resident that the validity of the digital credentials has failed to be verified.

[0135] (Second Embodiment) Next, a second embodiment will be described. Points not specifically mentioned here are the same as in the previous embodiment. Figure 13 is a block diagram illustrating the overview of the process performed when an employee visits a residence in the visitor qualification verification system according to the second embodiment.

[0136] In the first embodiment, the authentication authority server 6 performs credential verification to confirm whether the digital credential held by the person (subject) visiting the residence is valid (authentic). However, in this embodiment, the credential verification is performed at the entrance terminal 3 (master unit) of the door phone system 2.

[0137] Furthermore, in the first embodiment, information on each item concerning an employee is stored in the certification authority server 6, associated with the identifier of that employee's digital certificate. In other words, information on multiple employees is managed collectively by the certification authority server 6. On the other hand, in this embodiment, information on each item concerning an employee is stored in the user terminal 1. In other words, information on multiple employees is managed individually in each user terminal 1.

[0138] In this embodiment, the process is the same as in the first embodiment (see Figure 2) from (1) when a person (the subject) who has come to the residence operates the call button on the entrance terminal 3 until (5) a request regarding the presentation of the type of qualification certificate is sent from the entrance terminal 3 to the user terminal 1.

[0139] Next, (6) a response regarding the presentation of the qualification certificate type is sent from user terminal 1 to entrance terminal 3. The response regarding the presentation of the qualification certificate type includes the qualification certificate type of the person concerned and the electronic certificate attached to the person concerned's digital qualification certificate. Next, entrance terminal 3 verifies the electronic certificate attached to the person concerned's digital qualification certificate, and if the verification of the electronic certificate is successful, the necessary items for verification associated with the person concerned's qualification certificate type are extracted.

[0140] Next, (7) a request for information on the items that need to be verified is sent from the entrance terminal 3 to the user terminal 1. The request for information on the items that need to be verified includes the items that need to be verified, which are associated with the qualification certificate type of the person concerned. Next, at the user terminal 1, the personnel information related to the items that need to be verified for the person concerned is extracted, and (8) a response regarding the provision of information on the items that need to be verified is sent from the user terminal 1 to the entrance terminal 3. The response regarding the provision of information on the items that need to be verified includes the personnel information related to the items that need to be verified for the person concerned.

[0141] Next, (9) a notification regarding the information of items that need to be confirmed is sent from the entrance terminal 3 to the indoor terminal 4. The notification regarding the information of items that need to be confirmed includes the information of the person concerned regarding the items that need to be confirmed.

[0142] The following (10) and (11) are the same as (12) and (13) in the first embodiment (see Figure 2).

[0143] Next, we will describe the procedure for processing performed when an employee visits a residence in the visitor qualification verification system according to the second embodiment. Figure 14 is a sequence diagram showing the procedure for processing performed when an employee visits a residence.

[0144] In this embodiment, the process from when the entrance terminal 3 detects that a person (target) has entered the residence and presses the call button until secure communication is initiated between the user terminal 1 and the entrance terminal 3 is the same as in the first embodiment (see Figure 11). Furthermore, as shown in Figure 14, the process from when the entrance terminal 3 sends a request to the user terminal 1 regarding the presentation of the qualification certificate type (S401) until the user terminal 1 executes the qualification certificate type search process (S403) is the same as in the first embodiment (see Figure 12).

[0145] Next, user terminal 1 sends a response regarding the presentation of the qualification certificate type to entrance terminal 3 (S501). The response regarding the presentation of the qualification certificate type includes the qualification certificate type of the person concerned, which matches the qualification certificate type of the employee whose visit the resident has previously approved, and the electronic certificate (certification information) attached to the digital qualification certificate held by the person concerned.

[0146] Next, when the entrance terminal 3 receives a response from the user terminal 1 regarding the presentation of the qualification certificate type, it verifies the electronic certificate attached to the target person's digital qualification certificate (electronic certificate verification process) (S502). In some cases, the verification of the electronic certificate may fail. In this case, the entrance terminal 3 displays an error screen notifying the target person that the verification of the electronic certificate attached to the digital qualification certificate has failed.

[0147] Next, if the entrance terminal 3 successfully verifies the electronic certificate attached to the digital qualification card, it retrieves the items that need to be verified for the subject, that is, the items that need to be verified corresponding to the type of qualification card the subject has, from the storage unit 37 (extraction of items that need to be verified) (S503).

[0148] Next, the entrance terminal 3 sends a request to the user terminal 1 for information regarding the items that need to be verified (S504). The request for information regarding the items that need to be verified requests the provision of personnel information regarding the items that need to be verified for the subject. The request for information regarding the items that need to be verified includes the items that need to be verified for the subject.

[0149] Next, when user terminal 1 receives a request from entrance terminal 3 for information on items that need to be confirmed, it retrieves the personnel information related to the items that need to be confirmed for the person specified in the request from storage unit 16 (information extraction process for items that need to be confirmed) (S505).

[0150] Next, user terminal 1 displays an information provision consent screen that asks the subject whether or not they consent to the provision of employee information regarding the items that need to be verified (S506). When the subject selects whether or not they consent to the provision of information, a response regarding the provision of information regarding the items that need to be verified is sent to entrance terminal 3 (S507). The response regarding the provision of information regarding the items that need to be verified includes information regarding whether or not consent has been given to the provision of information. In particular, if the employee consents to the provision of information, the response regarding the provision of information regarding the items that need to be verified includes the subject's qualification certificate type and the subject's employee information regarding the items that need to be verified.

[0151] Next, the entrance terminal 3 receives a response from the user terminal 1 regarding the provision of information on items that need to be confirmed. If the employee agrees to provide the information, the entrance terminal 3 sends a notification regarding the information on items that need to be confirmed to the indoor terminal 4 (S508). The notification regarding the information on items that need to be confirmed includes the type of qualification certificate of the person concerned and the employee information related to the items that need to be confirmed for that person concerned.

[0152] Next, when the indoor terminal 4 receives a notification from the entrance terminal 3 regarding the information of items that need to be confirmed, it displays the visitor confirmation screen 81 (see Figure 8) (S509). The visitor confirmation screen 81 displays the qualification type of the person in question and the information of the person responsible for the items that need to be confirmed (e.g., affiliation, name, facial image, etc.). This allows the resident to confirm that the person in question is a trustworthy individual with the appropriate qualifications.

[0153] The following steps (S415-S417) are the same as in the first embodiment (see Figure 12).

[0154] (Modified version of the second embodiment) Next, a modified version of the second embodiment will be described. Points not specifically mentioned here are the same as in the previous embodiment. Figure 15 is a sequence diagram showing the procedure for processing performed when an employee visits a residence.

[0155] In this modified example, similar to the second embodiment (see S401 in Figure 14), the entrance terminal 3 sends a request to the user terminal 1 regarding the presentation of the qualification certificate type (S551). However, unlike the second embodiment, this modified example only requests the presentation of the qualification certificate type and does not include the approved qualification list information.

[0156] When user terminal 1 receives a request from entrance terminal 3 regarding the presentation of the qualification certificate type, it retrieves the qualification certificate type of the target person from storage unit 16, similar to the second embodiment (S402). However, unlike the second embodiment, it does not perform the process of searching for the qualification certificate type of the target person that matches the approved qualification list information (see S403 in Figure 14).

[0157] Next, user terminal 1 transmits a response regarding the presentation of the qualification certificate type to entrance terminal 3 (S552), similar to the second embodiment (see S501 in Figure 14). The response regarding the presentation of the qualification certificate type includes the qualification certificate type of the person concerned and the electronic certificate.

[0158] Next, when the entrance terminal 3 receives a response regarding the presentation of the qualification certificate type, it retrieves the approved qualification list information previously obtained from the indoor terminal 4 and stored in the memory unit 37, and searches for the qualification certificate type of the person matching the approved qualification list information (qualification certificate type search process) (S553). Specifically, it determines whether there is a qualification certificate type that matches the qualification certificate type of the person among the qualification certificate types of the workers whose visits have been previously approved by the resident.

[0159] The process thereafter is the same as in the second embodiment (S502-S509, S415-S417). In the verification item extraction process (S503), if a qualification certificate type for a person matching the approved qualification list information is found in the qualification certificate type search process (S553), the verification item associated with that person's qualification certificate type is retrieved from the storage unit 37.

[0160] In this modified version, the user terminal 1 presents the target person's qualification certificate type to the entrance terminal 3, and the entrance terminal 3 performs a process (S553) to search for the target person's qualification certificate type that matches the approved qualification list information, thus enabling faster processing.

[0161] Furthermore, the first embodiment (see Figure 12) can also be modified in the same way as this modification.

[0162] (Third embodiment) Next, a third embodiment will be described. Points not specifically mentioned here are the same as in the previous embodiment.

[0163] In the first embodiment, each time a service provider visits, their qualifications are verified (digital qualification certificate is verified). In contrast, in this embodiment, qualification verification is omitted for service providers who visit frequently. In delivery services and home care services, service providers (delivery personnel or care staff) may visit multiple times a day, and it would be cumbersome to perform qualification verification each time. Therefore, in this embodiment, qualification verification is omitted if not much time has passed since the previous visit.

[0164] Specifically, if an employee's credentials are successfully verified, that employee will be included in the simplified verification process. At this time, information about the employee is stored as visitor history information. Furthermore, the visitor history information has an expiration period (retention period) set, with the time of successful credentials verification as the start time. If the expiration period expires without further visits, the visitor history information is deleted.

[0165] After setting an employee as subject to simplified verification, when a visitor appears, facial recognition (identity verification) is performed to determine whether the visitor is an employee registered in the visitor history information, i.e., an employee who has visited again within the validity period. If facial recognition is successful, eligibility verification is omitted. On the other hand, for employees not registered in the visitor history information, i.e., employees visiting for the first time or employees visiting after the validity period of the visitor history information has expired, normal eligibility verification is performed.

[0166] Next, we will describe the visitor history information stored in the indoor terminal 4 in the visitor qualification verification system according to the third embodiment. Figure 16 is an explanatory diagram showing an example of visitor history information.

[0167] In the indoor terminal 4, information about individuals who have visited within a predetermined validity period is stored in the storage unit 46 as visitor history information. The visitor history information includes information on each visitor, such as the date and time of visit, verification result, qualification certificate type, facial image, name, and affiliation.

[0168] Here, the time included in the visit date and time represents the time when facial recognition was performed. The recognition result represents the result of facial recognition performed between past visitors registered in the visitor history information and the current visitor. Information on visitors whose recognition failed is also stored. The qualification certificate type represents the type of digital qualification certificate held by the visitor. The facial image is a facial image of the visitor taken at the time of the visit. The affiliation is the name of the company or organization to which the visitor belongs.

[0169] In this embodiment, visitor history information is stored in the indoor terminal 4, but visitor history information may also be stored in the entrance terminal 3.

[0170] Next, the procedure for setting an employee as the subject of simplified verification in the visitor qualification verification system according to the third embodiment will be described. Figure 17 is a sequence diagram showing the procedure for setting an employee as the subject of simplified verification.

[0171] In this embodiment, the process from when the entrance terminal 3 detects that a person (target) has entered the residence and presses the call button until secure communication is initiated between the user terminal 1 and the entrance terminal 3 is the same as in the first embodiment (see Figure 11). Also, as shown in Figure 17, the process from when the entrance terminal 3 sends a request to the user terminal 1 regarding the presentation of the qualification certificate type (S401) until the indoor terminal 4 displays the visitor confirmation screen 81 (S414) is the same as in the first embodiment (see Figure 12). Furthermore, the process from when the resident selects whether or not to respond to the target on the visitor confirmation screen 81, until the indoor terminal 4 sends a notification of whether or not to respond to the visitor (S415), until the entrance terminal 3 sends a notification of whether or not to respond to the visitor (S417) is the same as in the first embodiment (see Figure 12).

[0172] On the other hand, in this embodiment, if the resident agrees to respond to the visitor on the visitor confirmation screen 81, the indoor terminal 4 displays a simplified verification selection screen (S601). The simplified verification selection screen asks the resident whether or not to save the visitor's information as visitor history information and set them as a target for simplified verification, which omits qualification verification (verification of digital qualification card). In addition, the resident may also perform an operation on the visitor confirmation screen 81 (see Figure 8) to select whether or not to set the visitor as a target for simplified verification.

[0173] Here, when a resident performs the operation to set a target person as subject to simplified verification, the indoor terminal 4 sets the target person, i.e., the employee whose qualification verification was successful this time, as subject to simplified verification, and stores the date and time of visit, verification result, qualification certificate type, facial image, name, and affiliation information of the target person in the storage unit 46 as visitor history information (S602). At this time, for example, the time when the qualification verification was successful is recorded as the start time of the validity period.

[0174] Next, the indoor terminal 4 performs processing related to the management of visitor history information already stored in the memory unit 46 (visitor history information management processing) (S603). At this time, the indoor terminal 4 first determines whether the validity period of visitor history information for another employee that has already been stored has expired (validity period determination processing). Then, if there is any visitor history information whose validity period has expired, the indoor terminal 4 deletes the corresponding visitor history information.

[0175] Next, the procedure after setting an employee as the target of simplified verification in the visitor qualification verification system according to the third embodiment will be described. Figure 18 is a sequence diagram showing the procedure after setting an employee as the target of simplified verification.

[0176] In this embodiment, the process is the same as in the first embodiment (see Figure 11) from the moment the entrance terminal 3 detects that a person (target) has entered the house and presses the call button (S301) until the indoor terminal 4 displays the visitor notification screen (S306).

[0177] Next, the indoor terminal 4 retrieves the stored visitor history information (date and time of visit, verification result, qualification certificate type, facial image, name, and affiliation) from the storage unit 46 (S701). If retrieving the visitor history information fails, that is, if there is no visitor history information already stored in the storage unit 46, the indoor terminal 4 transmits the approved qualification list information and the items that need to be verified to the entrance terminal 3, and proceeds to the process of normal qualification verification (verification of digital qualification certificate). The process thereafter is the same as in the first embodiment (see Figure 11).

[0178] On the other hand, if the retrieval of visitor history information is successful, that is, if there is already visitor history information stored in the memory unit 46, processing related to the management of that visitor history information is performed (visitor history information management processing) (S702). At this time, the indoor terminal 4 first determines whether or not the validity period of the visitor history information has expired (validity period determination processing). Then, if there is any visitor history information whose validity period has expired, the indoor terminal 4 deletes the corresponding visitor history information.

[0179] Next, the indoor terminal 4 performs a facial recognition process as a simplified verification process to verify whether the person in question is a person with legitimate qualifications to visit the facility, without relying on a digital qualification card (S703). At this time, the indoor terminal 4 identifies, by facial recognition, which of the employees registered in the visitor history information, i.e., employees who have visited previously (within the validity period). Specifically, the indoor terminal 4 compares the facial image of the employee who has visited previously, as included in the visitor history information, with the facial image of the person taken by the camera 33 of the entrance terminal 3.

[0180] If facial recognition fails, that is, if the person is not one of the employees registered in the visitor history information, the indoor terminal 4 transmits the approved qualification list information and the necessary verification items for each qualification certificate type to the entrance terminal 3 (S307), and proceeds to the normal qualification verification process. The subsequent steps (S308-S312) are the same as in the first embodiment (see Figure 11).

[0181] On the other hand, if facial recognition is successful, that is, if the subject is an employee registered in the visitor history information, the indoor terminal 4 displays the visitor confirmation screen 81 (see Figure 8) (S704). The visitor confirmation screen 81 displays the subject's qualification type and employee information related to the items that need to be confirmed for the subject (e.g., affiliation, name, facial image, etc.). The visitor confirmation screen 81 also displays information regarding the results of the simplified verification process (facial recognition process) (success or failure of verification, verification time, etc.).

[0182] Furthermore, on the visitor verification screen 81, the face image display unit 84 displays a real-time face image of the subject captured by the camera 33 of the entrance terminal 3. In addition to this face image, the face image of the employee registered in the visitor history information may also be displayed. This allows the resident to visually compare the two face images to confirm whether there are any errors in the results of the simplified verification process (face matching process) based on the visitor history information.

[0183] Next, the indoor terminal 4 updates the validity period (storage period) of the visitor history information for the subject (S705). At this time, for example, the time when the simple verification (face matching) was successful is recorded as the start time of the validity period.

[0184] In this embodiment, the validity period of visitor history information is updated each time an employee visits. Furthermore, if an employee visits after the validity period of the visitor history information has expired, the simplified verification (facial recognition) will fail, and the same normal qualification verification (digital qualification card verification) will be performed as for a newly visiting employee.

[0185] In this embodiment, as shown in Figure 17, when the visitor confirmation screen 81 (see Figure 8) is displayed on the indoor terminal 4, the visitor history information management process, that is, the process of deleting visitor history information whose validity period has expired, is executed. Also, as shown in Figure 18, when the visitor notification screen (not shown) is displayed on the indoor terminal 4, the visitor history information management process is executed. However, the visitor history information management process may be executed at only one of these timings.

[0186] (Fourth embodiment) Next, a fourth embodiment will be described. Points not specifically mentioned here are the same as in the previous embodiments. Figure 19 is an overall configuration diagram of the visitor qualification verification system according to the fourth embodiment.

[0187] In the first embodiment, a resident staying at the house greets a visitor (the person) and unlocks the door to let the person in. In contrast, in this embodiment, the resident of the house greets the guest remotely while out and unlocks the door remotely. This allows the person to enter the house even when the resident is not there. For example, in the case of a delivery service, the delivery person can deliver the package inside the house even when the resident is not there.

[0188] In this system, instead of the indoor terminal 4 in the first embodiment (see Figure 1), the resident possesses a resident terminal 7 with equivalent functionality. The resident terminal 7 can be carried by the resident and can communicate with the entrance terminal 3 via a network such as a mobile communication network. Within the house, the resident terminal 7 may be connected to the entrance terminal 3 by wire or wireless connection. The resident terminal 7 is composed of a general-purpose portable device (e.g., a smartphone, tablet PC, etc.) and may have an application installed that performs the same processing as the indoor terminal 4 in the first embodiment.

[0189] Furthermore, a locking device 10 (entrance device) is installed in the house, and the locking and unlocking operation of the locking device 10 is controlled by the entrance terminal 3.

[0190] The resident terminal 7 displays a screen similar to the visitor notification screen (Figure 2(3)) and visitor confirmation screen 81 (see Figure 8) (Figure 2(12)) displayed on the indoor terminal 4 in the first embodiment (see Figure 2). As a result, the necessary information and the image of the person are presented to the resident, similar to the indoor terminal 4 in the first embodiment. The resident views the screen displayed on the resident terminal 7 and, if they determine that the person is a person who can be allowed into the house without any problems, they perform an unlocking operation on the resident terminal 7. This causes the locking device 10 to unlock the door, allowing the person to enter the house.

[0191] Furthermore, in this embodiment, the communication between the entrance terminal 3 and the indoor terminal 4 in the first embodiment, specifically the transmission of visitor notification and video of the person in question (Figure 2(2)), the transmission of approval qualification list information and items requiring confirmation (Figure 2(4)), the transmission of notification regarding server processing results (Figure 2(11)), and the transmission of notification regarding whether or not the person can be answered (Figure 2(13)), is performed between the entrance terminal 3 and the resident terminal 7.

[0192] (Modification of the fourth embodiment) Next, a modified example of the fourth embodiment will be described. Points not specifically mentioned here are the same as in the previous embodiment. Figure 20 is an overall configuration diagram of the visitor qualification verification system according to a modified example of the fourth embodiment.

[0193] In the fourth embodiment, the indoor terminal 4 in the first embodiment is omitted, and instead, a resident terminal 7 is used. However, in this modified example, both the indoor terminal 4 and the resident terminal 7 are used. The processing related to the indoor terminal 4 is the same as in the first embodiment. The processing related to the resident terminal 7 is also the same as in the fourth embodiment.

[0194] (Fifth embodiment) Next, a fifth embodiment will be described. Points not specifically mentioned here are the same as in the previous embodiments. Figure 21 is an overall diagram of the visitor qualification verification system according to the fifth embodiment.

[0195] In the first embodiment, in a typical residence, the system verifies the qualifications of a person (target) who visits the residence and presents the verification results and information about the target to the resident, thereby assisting the resident in appropriately confirming that the target is a person who can be welcomed into the residence without any problems. On the other hand, in this embodiment, guests of a short-term rental facility can complete check-in at an unmanned short-term rental facility without meeting the manager in person, a so-called self-check-in system is realized.

[0196] Furthermore, in this embodiment, the guest possesses a user terminal 8, which has the same functionality as the user terminal 1 in the first embodiment (see Figure 1). Also, an authentication terminal 9 is installed in the short-term rental facility, which has the same functionality as the entrance terminal 3 in the first embodiment. Note that there is no equivalent to the in-room terminal 4 in the first embodiment.

[0197] In this embodiment, a hotel reservation ticket is issued as a digital certificate when a hotel reservation is made. The hotel reservation ticket is stored in the user terminal 8 held by the guest. Also, when a hotel reservation is made, guest information (such as name) is stored in the authentication authority server 6.

[0198] When a guest checks in, the accommodation reservation ticket (digital certificate) stored in the user terminal 8 is presented to the authentication terminal 9. Additionally, guest information stored in the authentication authority server 6 is presented to the authentication terminal 9. The authentication authority server 6 then verifies the guest's eligibility based on the accommodation reservation ticket (digital certificate), that is, it verifies whether the visitor is a guest who has been pre-registered.

[0199] Furthermore, a locking device 10 (entrance device) is installed in the residence, and the locking and unlocking operation of the locking device 10 is controlled by an authentication terminal 9. If the authentication terminal 9 successfully verifies the user's credentials, it instructs the locking device 10 to unlock the door. As a result, the locking device 10 unlocks the door, allowing the guest to enter the short-term rental property.

[0200] Furthermore, the issuing authority server 5 and the certification authority server 6, which issue accommodation reservation tickets as digital certificates, may be managed by the operators of the short-term rental accommodations. Also, from the perspective of reliably preventing others from impersonating guests and gaining access to the short-term rental accommodations, the issuing authority server 5 and the certification authority server 6 may be public entities.

[0201] Furthermore, in this embodiment, similar to the first embodiment, eligibility verification (verification of the digital certificate) is performed on the authentication authority server 6. However, similar to the second embodiment, eligibility verification may also be performed on a local system within the facility, specifically on the authentication terminal 9. In this case, when making a reservation, guest information is stored on the user terminal 8. In addition, guest information regarding items requiring verification (name, length of stay, address of accommodation, etc.) is provided from the user terminal 1 to the authentication terminal 9 along with the accommodation reservation ticket (digital certificate).

[0202] Next, we will describe the information created in the authentication terminal 9 according to the fifth embodiment through pre-configuration. Figure 22 is an explanatory diagram showing the information created through pre-configuration.

[0203] In this embodiment, a digital accommodation reservation ticket is created for each guest. Each guest's accommodation reservation ticket has items of guest information (items requiring verification) that need to be verified before authorizing the guest's use. In the example shown in Figure 22, the guest's name, length of stay, and address of the private lodging facility are set. In addition, other items such as the guest's address, date of birth, nationality, gender, and telephone number may also be set. Information regarding these items can also be obtained by linking it with the digital My Number Card stored in the user terminal 8.

[0204] Incidentally, in the first and second embodiments, employee information regarding items requiring verification (such as affiliation (company name, etc.) and name) is presented to the resident, but in this embodiment, guest information regarding items requiring verification (such as name, length of stay, and address of accommodation) is not presented to the administrator. In this embodiment, the authentication terminal 9 uses the guest information regarding items requiring verification to verify whether the subject is a legitimate guest who made a reservation. Note that verification using guest information may also be performed by the authentication authority server 6.

[0205] Next, the digital certificate screen 71 displayed on the user terminal 8 according to the fifth embodiment will be described. Figure 23 is an explanatory diagram showing the digital certificate screen 71.

[0206] The user terminal 8 has the guest's accommodation reservation ticket (digital certificate) pre-registered. When an employee operates the wallet app on the user terminal 8, the digital certificate screen 71 is displayed. This allows the guest to confirm their accommodation reservation ticket and reservation details. In addition to presenting the accommodation reservation ticket to the authentication terminal 9 via communication, the guest can also present the accommodation reservation ticket in person to anyone requesting proof of their guest status.

[0207] The digital certificate screen 71 displays the certificate type display section 72, the items to be confirmed display section 73, the face image display section 75, and the 2D code 76, similar to the first embodiment (see Figure 7). In this embodiment, the certificate type display section 72 displays "accommodation reservation ticket" as the type of digital certificate. The items to be confirmed display section 73 displays the name of the guest (group representative), the name of the private lodging facility where the guest will stay, the number of guests, and the length of stay.

[0208] Incidentally, in this embodiment, there is no manager permanently stationed at the short-term rental property, and the manager does not respond to visitors (target persons) at the short-term rental property. However, it is also possible to configure the short-term rental property manager to respond to target persons remotely. In this case, the short-term rental property manager, similar to the resident terminal 7 in the fourth embodiment (see Figure 19), uses a manager terminal (such as a smartphone) connected to the entrance terminal 3 of the door phone system 2 to respond to target persons remotely. Once it is confirmed that the target person is a legitimate guest, the manager remotely unlocks the door of the short-term rental property.

[0209] In addition, there are cases where the manager of the short-term rental property is permanently stationed at the property. In this case, it is the same as in the first and second embodiments, and the manager of the short-term rental property should respond to the person using the indoor terminal 4 of the door phone system 2.

[0210] Furthermore, in this embodiment, the visitor eligibility verification system is applied to manage check-in for guests at short-term rental accommodations, but the visitor eligibility verification system can also be applied to manage entry and access to facilities other than short-term rental accommodations.

[0211] For example, a visitor eligibility verification system can be used as an access control system for rooms (facilities) where entry is permitted only to authorized personnel, such as prescription rooms in pharmacies where only pharmacists working in prescription pharmacies are allowed, or storage rooms for poisonous and hazardous substances where entry by outsiders is prohibited. In other words, the system verifies whether the person (target) appearing at the entrance of the room is an authorized person with the right to enter. If this verification is successful, the entrance door is unlocked, and the target person can enter. In addition, visitor eligibility verification systems can also be applied to access control for bank vaults and access control to hazardous areas in facilities such as nuclear power plants.

[0212] In this case, an authentication terminal 9 is installed near the entrance to the room. A digital certificate issued to the employee is stored in the user terminal 1, and when the employee enters the room, the digital certificate is provided from the user terminal 1 to the authentication terminal 9. Also, similar to the first embodiment, employee information regarding the items requiring verification is stored in the authentication authority server 6 and provided to the authentication terminal 9. Alternatively, similar to the second embodiment, employee information regarding the items requiring verification is stored in the user terminal 1 and provided to the authentication terminal 9. Meanwhile, the authentication terminal 9 performs verification based on the employee information regarding the items requiring verification. In this case, the employee information regarding the items requiring verification may be entry permission information such as an ID assigned to the employee who has been granted entry.

[0213] In this case, a one-dimensional code (barcode) containing the qualification registration number (personal identification information) may be displayed on the digital qualification certificate screen 71 (see Figure 7(A)). For example, to manage the pharmacist's prescription work, the qualification registration number can be easily entered by reading the one-dimensional code when the pharmacist makes a prescription.

[0214] As described above, embodiments have been explained as examples of the technology disclosed in this application. However, the technology in this disclosure is not limited to these embodiments and can be applied to embodiments that have been modified, replaced, added, or omitted. Furthermore, it is possible to create new embodiments by combining the components described in the above embodiments. [Industrial applicability]

[0215] The visitor qualification verification system, facility equipment for visitor qualification verification, and program for visitor qualification verification according to the present invention have the effect of appropriately verifying whether a person who has come to a facility is a person who is legitimately qualified to visit the facility, and appropriately presenting to residents information that residents need to confirm regarding the person, and are useful as a visitor qualification verification system, facility equipment for visitor qualification verification, and program for visitor qualification verification for verifying whether a person who has come to a facility is a person who is legitimately qualified to visit the facility. [Explanation of Symbols]

[0216] 1: User terminal (target device) 2: Door phone system (facility equipment, information processing equipment) 3: Entrance terminal 4: Indoor terminals 5: Issuing Authority Server 6: Certification Authority Server (Verification Device) 7: Resident terminal 8: User terminal (device for the target user) 9: Authentication terminal (facility equipment) 10: Locking device (entrance device) 71: Digital Certificate Screen 72: Certificate Type Display Section 73: Items to be confirmed display section 74: Qualification Number Display Section 75: Face image display section 76: 2D code 81: Visitor verification screen 82: Certificate Type Display Section 83: Items to be confirmed display section 84: Face image display section

Claims

1. A visitor qualification verification system that verifies whether a person visiting a facility is a person who has the legitimate qualifications to visit the facility, A device for the person holding the person's digital certificate, A verification device that performs qualification verification to verify whether the digital qualification certificate stored in the aforementioned target device is valid, The facility includes a facility device installed in the facility that mediates between the subject device and the verification device, The aforementioned facility and equipment are The identifier of the subject's digital qualification certificate is obtained from the subject's device. If the qualification certificate type of the person in question matches the qualification certificate type of the person whose visit has been approved in advance by the facility manager, The verification device is provided with the verification items associated with the type of qualification certificate of the subject, and the identifier of the subject's digital qualification certificate, and the verification results based on the identifier of the subject's digital qualification certificate and information regarding the verification items of the subject are obtained from the verification device. A visitor qualification verification system characterized by performing predetermined processing based on the verification results of the qualification verification and information regarding the items that need to be confirmed for the subject, if the qualification verification is successful.

2. The aforementioned facility and equipment are The visitor qualification verification system according to claim 1, characterized in that it provides the aforementioned approved qualification list information to the target person device and obtains the qualification certificate type of a target person that matches the approved qualification list information from the target person device.

3. The aforementioned facility and equipment are The type of qualification certificate of the person concerned is obtained from the aforementioned person's device. The visitor qualification verification system according to claim 1, characterized in that it searches for the type of qualification certificate of the person concerned that matches the aforementioned approved qualification list information.

4. The aforementioned facility and equipment are The visitor qualification verification system according to claim 1, characterized in that, as a predetermined process, it presents information regarding the items necessary for verifying the subject to the facility manager.

5. The aforementioned facility and equipment are The visitor qualification verification system according to claim 1, characterized in that the predetermined process involves controlling an entrance device installed at the entrance of a facility.

6. The verification device is The visitor qualification verification system according to claim 1, characterized in that information regarding the items necessary for verifying the subject is provided to the facility device only when consent for information provision is obtained from the subject in the subject device.

7. The aforementioned facility and equipment are If the aforementioned qualification verification is successful, information regarding the person whose qualification was successfully verified is stored in the memory unit as visitor history information with a defined validity period. The visitor qualification verification system according to claim 1, characterized in that it performs a simple verification to confirm whether the person who subsequently visits the facility is a person registered in the visitor history information, and if the simple verification is successful, it performs the predetermined process.

8. The aforementioned facility and equipment are If the aforementioned qualification verification is successful, the subject's facial image is stored in the storage unit as visitor history information. The visitor qualification verification system according to claim 7, characterized in that, as the aforementioned simplified verification, it performs facial matching by comparing a facial image taken of the subject with a facial image registered in the visitor history information.

9. The aforementioned facility and equipment are If the aforementioned qualification verification is successful, information regarding the items that need to be confirmed for the subject is stored in the memory unit as visitor history information. The visitor qualification verification system according to claim 7, characterized in that, upon success of the aforementioned simplified verification, it presents the facility manager with information regarding the items that need to be verified for the subject.

10. A visitor qualification verification system that verifies whether a person visiting a facility is a person who has the legitimate qualifications to visit the facility, A device for the person holding the person's digital certificate, The facility includes a facility device installed in the facility that performs qualification verification to verify whether the digital qualification certificate stored in the aforementioned user device is valid, The aforementioned facility and equipment are The digital certificate information of the subject is obtained from the subject's device. If the qualification certificate type of the person in question matches the qualification certificate type of the person whose visit has been approved in advance by the facility manager, Based on the certification information of the subject's digital certificate, the qualification verification is performed, and if the qualification verification is successful, the required verification items associated with the subject's certificate type are provided to the subject's device, and information regarding the required verification items for the subject is obtained from the subject's device. A visitor qualification verification system characterized by performing a predetermined process using information regarding the necessary items for verification of the aforementioned target person.

11. A facility device installed in a facility to verify whether a person visiting the facility is a person who has the legitimate right to visit the facility, The identifier of the subject's digital certificate is obtained from the subject's device. If the qualification certificate type of the person in question matches the qualification certificate type of the person whose visit has been approved in advance by the facility manager, The verification device is provided with the verification items associated with the type of qualification certificate of the subject, and the identifier of the subject's digital qualification certificate, and the verification results, which verify whether the digital qualification certificate is valid based on the identifier of the subject's digital qualification certificate, and information regarding the subject's verification items are obtained from the verification device. A facility device characterized in that, if the qualification verification is successful, it performs a predetermined process based on the verification result of the qualification verification and information regarding the items that need to be confirmed for the subject.

12. A facility device installed in a facility to verify whether a person visiting the facility is a person who has the legitimate right to visit the facility, The digital certificate information of the subject is obtained from the subject's device. If the qualification certificate type of the person in question matches the qualification certificate type of the person whose visit has been approved in advance by the facility manager, Based on the certification information of the subject's digital certificate, a qualification verification is performed to confirm whether the digital certificate is valid or not. If the qualification verification is successful, the required verification items associated with the subject's certificate type are provided to the subject's device, and information regarding the required verification items for the subject is obtained from the subject's device. A facility device characterized by performing a predetermined process using information regarding the items necessary for the verification of the aforementioned subject.

13. A program that causes an information processing device to execute a process for verifying visitor qualifications, which verifies whether a person visiting the facility is a person who has the legitimate qualifications to visit the facility. The identifier of the subject's digital certificate is obtained from the subject's device. If the qualification certificate type of the person in question matches the qualification certificate type of the person whose visit has been approved in advance by the facility manager, The verification device is provided with the verification items associated with the type of qualification certificate of the subject, and the identifier of the subject's digital qualification certificate, and the verification results, which verify whether the digital qualification certificate is valid based on the identifier of the subject's digital qualification certificate, and information regarding the subject's verification items are obtained from the verification device. A program characterized in that, if the aforementioned qualification verification is successful, it performs predetermined processing based on the verification result of the qualification verification and information regarding the items that need to be confirmed for the subject.

14. A program that causes an information processing device to execute a process for verifying visitor qualifications, which verifies whether a person visiting the facility is a person who has the legitimate qualifications to visit the facility. The digital certificate information of the subject is obtained from the subject's device. If the qualification certificate type of the person in question matches the qualification certificate type of the person whose visit has been approved in advance by the facility manager, Based on the certification information of the subject's digital certificate, a qualification verification is performed to confirm whether the digital certificate is valid or not. If the qualification verification is successful, the required verification items associated with the subject's certificate type are provided to the subject's device, and information regarding the required verification items for the subject is obtained from the subject's device. A program characterized by performing a predetermined process using information regarding the items that need to be confirmed for the subject.

Images