Authentication system, authentication method, and computer program product

Abstract

An input information acquisition unit (101, 201) of an authentication system (S) acquires input information attached to a card held by a user and input from a user terminal using a reading unit (33A) or a photographing unit (36). An identification information acquisition unit (102, 202) acquires identification information capable of identifying the card. A registration information acquisition unit (105, 203) acquires registration information attached to the card, which is pre-registered in a server in association with the identification information. The authentication unit (103) performs authentication based on the input information and the registration information.

Description

Technical Field

[0001] The present disclosure relates to an authentication system, an authentication method, and a computer program product. Background Art

[0002] Conventional technologies related to card ownership authentication, designed to prevent illegal activities by malicious third parties, are known. For example, Patent Document 1 describes a technology that performs authentication by determining whether the coupon information obtained from an image of the card surface matches the card information obtained from the card's magnetic or electrical circuits. This technology converts coupon information, such as graphics or holograms, that cannot be directly compared with the card information into information that can be compared with the card information.

[0003] Prior art literature

[0004] Patent Literature

[0005] Patent Document 1: Japanese Patent Application Laid-Open No. 2019-071006 Summary of the Invention

[0006] Problems to be solved by the invention

[0007] However, the technology in Patent Document 1 performs authentication by comparing two pieces of information obtained from the card. Therefore, authentication is accomplished solely based on the information contained on the card. Therefore, if a malicious third party forges a card by printing illegally obtained card information on the ticket surface and then embedding this card information in the magnetic portion or electrical circuitry of the forged card, authentication can be accomplished solely based on the forged card information, making it impossible to detect the illegal activity. Therefore, the technology in Patent Document 1 does not fully enhance the security of possession authentication.

[0008] One of the purposes of the present disclosure is to improve security in possession authentication.

[0009] Means for solving problems

[0010] An authentication system according to one embodiment of the present disclosure includes: an input information acquisition unit for acquiring input information input from a user terminal using a reading unit or a photographing unit and attached to a card held by a user; an identification information acquisition unit for acquiring identification information capable of identifying the card; a registration information acquisition unit for acquiring registration information attached to the card that is pre-registered in a server in association with the identification information; and an authentication unit for performing authentication based on the input information and the registration information.

[0011] Effects of the Invention

[0012] According to the present disclosure, security in possession authentication is improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0013] Figure 1 This is a diagram showing an example of the overall configuration of an authentication system.

[0014] Figure 2 This is a diagram showing an example of the process of registering a card in an application.

[0015] Figure 3 This is a diagram showing an example of how the IC chip of a card is read by the NFC unit.

[0016] Figure 4 This is a diagram showing an example of the image authentication process.

[0017] Figure 5 This is a diagram showing an example of a captured image of a presentation card.

[0018] Figure 6 This is a functional block diagram showing an example of functions implemented by the authentication system according to the first embodiment.

[0019] Figure 7 This is a diagram showing an example of data storage in a user database.

[0020] Figure 8 This is a diagram showing an example of data storage in a card database.

[0021] Figure 9 This is a flowchart showing an example of processing executed in the first embodiment.

[0022] Figure 10 This is a functional block diagram of the second embodiment.

[0023] Figure 11 This is a flowchart showing an example of processing executed in the second embodiment.

[0024] Figure 12 This is a functional block diagram in a modified example. DETAILED DESCRIPTION

[0025] [1. First embodiment]

[0026] The following describes an example of a first embodiment of the authentication system involved in the present disclosure. In the authentication system, possession authentication is performed. Possession authentication is authentication using an object that is only held by a legitimate person. The objects used for possession authentication are not limited to tangible objects, but can also be intangible objects such as electronic data. In the first embodiment, an example of possession authentication using an IC card (hereinafter simply referred to as a card) in a transportation system is given. Hereinafter, possession authentication may sometimes be simply recorded as authentication.

[0027] [1-1. Overall structure of the authentication system]

[0028] Figure 1This is a diagram showing an example of the overall structure of the authentication system. Figure 1 As shown, the authentication system S includes: an operator server 10, an issuer server 20, and a user terminal 30. Each of the operator server 10, the issuer server 20, and the user terminal 30 can be connected to a network N such as the Internet. Figure 1 In FIG. 1 , the operator server 10 , the issuer server 20 , and the user terminal 30 are each shown as one, but they may be multiple.

[0029] The operator server 10 is a server computer corresponding to the operator that provides card-based services. Operators are companies that provide services to users. In the first embodiment, the example of card-based transportation system services is given, and the operators are railway companies, bus companies, etc.

[0030] The operator server 10 includes a control unit 11, a storage unit 12, and a communication unit 13. The control unit 11 includes at least one processor. The storage unit 12 includes volatile memory such as RAM and non-volatile memory such as a hard disk. The communication unit 13 includes at least one of a communication interface for wired communication and a communication interface for wireless communication.

[0031] The issuer server 20 is a server computer corresponding to the card issuer. The issuer is the company that provides cards to users. In the first embodiment, the issuer and the operator are identical, but they can also be different. The issuer server 20 includes a control unit 21, a storage unit 22, and a communication unit 23. The physical structures of the control unit 21, storage unit 22, and communication unit 23 are identical to those of the control unit 11, storage unit 12, and communication unit 13, respectively.

[0032] User terminal 30 is a computer operated by the user. For example, user terminal 30 is a smartphone, tablet terminal, wearable terminal, or personal computer. User terminal 30 includes a control unit 31, a storage unit 32, a communication unit 33, an operation unit 34, a display unit 35, a camera unit 36, and an IC chip 37. The physical structures of control unit 31 and storage unit 32 are identical to those of control unit 11 and storage unit 12, respectively.

[0033] The communication unit 33 includes at least one of a communication interface for wired communication and a communication interface for wireless communication. These communication interfaces are used to connect to the network N. The communication unit 33 of the first embodiment also includes an NFC unit 33A. The NFC unit 33A includes a communication interface for NFC (Near Field Communication).

[0034] NFC itself can utilize various standards, such as international standards such as ISO / IEC 18092 or ISO / IEC 21481. NFC unit 33A includes hardware such as an antenna that complies with the standards, and can implement functions such as reader / writer, peer-to-peer, card emulation, wireless charging, or a combination thereof.

[0035] The operating unit 34 is an input device such as a touch panel. The display unit 35 is a liquid crystal display or an organic EL display. The imaging unit 36 ​​includes at least one camera. The IC chip 37 is a chip compatible with NFC. IC chip 37 can be a chip of any standard, such as a FeliCa (registered trademark) chip or a chip of the so-called Type A or Type B contactless standards. IC chip 37 includes hardware such as an antenna corresponding to the standard, and stores, for example, information required for services utilized by the user.

[0036] Furthermore, at least one of the programs and data stored in the storage units 12, 22, and 32 may be supplied via the network N. Furthermore, each of the operator server 10, the issuer server 20, and the user terminal 30 may include at least one of a reader for reading computer-readable information storage media (e.g., an optical drive, a memory card slot), and an input / output unit for inputting and outputting data to and from an external device (e.g., a USB port). For example, at least one of the programs and data stored in the information storage medium may be supplied via at least one of the reader and the input / output unit.

[0037] [1-2. Overview of First Embodiment]

[0038] In the first embodiment, the processing of the authentication system S will be described using an example in which a user registers a card in an application program (hereinafter simply referred to as an application) of a transportation system. The application in the first embodiment is a program for utilizing transportation system services using a user terminal 30. The application is pre-downloaded and installed on the user terminal 30.

[0039] Registering a card in an application enables the use of services equivalent to those available using the card. For example, this is equivalent to enabling the use of card information in the application, associating card information with the application, associating card information with the user account, and registering the card in the application. Furthermore, for example, registering card information in the operator server 10 or IC chip 37 is equivalent to registering the card in the application.

[0040] Card information is information that identifies a card. It includes at least the card number, which uniquely identifies the card. Card information may also include supplementary information included with the card. Supplementary information is information beyond the card number, such as the card's expiration date, the user's name, the card's issuance date, or an ID that identifies the IC chip contained in the card. If a card can be used to access multiple services, the ID used by each service also constitutes supplementary information.

[0041] For example, after a user completes registration for an application, a user account and other information are issued. The user then performs a card registration operation from the application menu, etc., to register the card in the application. This operation displays a card input screen on the display unit 35 for inputting card information for the card to be registered in the application.

[0042] Figure 2 This is a diagram showing an example of the process of registering a card in an application. Figure 2 As shown, an input form F10 for inputting a card number and an input form F11 for inputting an expiration date are displayed on the input screen G1. The user confirms the card number and expiration date of the card registered in the application and inputs them into the input forms F10 and F11.

[0043] In the first embodiment, card registration authentication includes two types: NFC authentication using NFC and image authentication using an image. NFC authentication is performed by the NFC unit 33A reading the information stored on the card's IC chip. Image authentication is performed by the camera unit 36 ​​capturing an image of the card. Hereinafter, when not distinguishing between NFC authentication and image authentication, they will be referred to simply as "authentication."

[0044] Figure 2 The process is the NFC authentication process. When the user selects button B12 on input screen G1, NFC unit 33A is activated, and a reading screen G2 for reading information stored in the card's IC chip is displayed on display unit 35 via NFC unit 33A. Reading screen G2 can also be displayed as part of the application registration process. When reading screen G2 is displayed, the user brings the card close to user terminal 30.

[0045] Figure 3 3A is a diagram showing an example of how the IC chip of the card is read by the NFC unit 33A. Figure 3 As shown, when the user brings the user terminal 30 close to the IC chip cp of the card C, the NFC unit 33A reads the information recorded in the IC chip cp. The NFC unit 33A can read any information in the IC chip cp, but in the first embodiment, the case where the NFC unit 33A reads the ID number recorded in the IC chip cp is described.

[0046] The ID number is information used to access a specified service using the card C. The service accessed using the ID number can be the same as the service accessed using the card number, but in the first embodiment, a case where the service is different from the service accessed using the card number is described. Therefore, the ID number is a number used to access a service different from the transportation system service.

[0047] In the first embodiment, a fitness service is used as an example of a service utilizing an ID number. A user is a gym member and places a card C on a reader terminal installed at the gym to enter the gym. The ID number recorded on the IC chip cp of the card C is sent to the reader terminal, and the gym's computer performs authentication upon entry. Therefore, the ID number is equivalent to the gym's membership number.

[0048] A user can use two services, transportation and fitness, with one card. A single card can also provide three or more services. In this case, some information about each service is recorded in the IC chip cp of the card C.

[0049] When the user terminal 30 reads the ID number via the NFC unit 33A, it transmits the ID number to the operator server 10. Since the ID number is input from the user terminal 30 to the operator server 10, it is hereinafter referred to as inputting the ID number. Input in the first embodiment means transmitting data.

[0050] In the first embodiment, the ID number included in the issued card C is registered with the issuer server 20. Hereinafter, this ID number will be referred to as the registered ID number. If the user is the legitimate holder of the card C, the registered ID number identical to the input ID number will be registered with the issuer server 20. In the following description, when there is no distinction between the input ID number and the registered ID number, the ID number may be simply referred to as the ID number.

[0051] When the operator server 10 receives the input ID number from the user terminal 30 , it forwards it to the issuer server 20 . The issuer server 20 determines whether the forwarded input ID number matches the registered ID number and sends the determination result to the operator server 10 .

[0052] When the operator server 10 receives the result of the ID number matching, it determines that the user is a legitimate holder and the authentication is successful. Figure 2 As shown, a success screen G3 indicating that the authentication is successful and the registration is complete is displayed on the user terminal 30. Thereafter, the user can use the same services as when using the physical card C from the application.

[0053] On the other hand, when the operator server 10 receives the result of the determination that the ID number is inconsistent, it determines that the user is not a legitimate holder and the authentication fails. Figure 2 As shown, a failure screen G4 indicating that the authentication failed and the registration is not completed is displayed on the user terminal 30. The user returns to the reading screen G2 and reads the card C again or makes an inquiry to the call center.

[0054] Next, the image authentication process will be described. Figure 4 This is a diagram showing an example of the image authentication process. Figure 4 As shown, when the user selects button B13 on input screen G1, imaging unit 36 ​​is activated and imaging screen G5 for imaging card C is displayed on display unit 35. Incidentally, imaging screen G5 may be displayed as part of the application registration process.

[0055] The image capture screen G5 displays images continuously captured by the image capture unit 36. A guide g50 is displayed on the captured images to indicate the positional relationship between the image capture unit 36 ​​and the card. In the first embodiment, the card C is required to be captured from the front with a predetermined size. For example, the user places the card C on a table and captures it so that the edge of the card C aligns with the guide g50. The user can also capture the card C by holding the user terminal 30 sideways.

[0056] Figure 5 FIG. 1 is a diagram showing an example of a captured image of a card C. Figure 5 As shown, in the first embodiment, a user photographs the back of a card C. The captured image I shows various information on the back of the card C. This information includes an ID number located in the lower right corner of the back of the card C. The user terminal 30 performs optical character recognition on the captured image I to obtain the ID number. After the operator server 10 receives the ID number, the process is similar to NFC authentication. Alternatively, optical character recognition can be performed by the operator server 10 or the issuer server 20.

[0057] As described above, authentication system S performs authentication based on the input ID number acquired by the NFC unit 33A or the imaging unit 36 ​​and the registration ID number registered on the issuer server 20. Even if a malicious third party attempts to register illegally obtained card information into an application, authentication will fail because the input ID number cannot be acquired using the NFC unit 33A or the imaging unit 36, or information about different services cannot be initially acquired. In the first embodiment, the unique nature of acquiring input ID numbers for different services using the NFC unit 33A or the imaging unit 36 ​​is utilized to enhance security during possession authentication. This technology is described in detail below.

[0058] [1-3. Functions Implemented in the First Embodiment]

[0059] Figure 6 This is a functional block diagram showing an example of functions implemented by the authentication system S according to the first embodiment. Here, the functions implemented by the operator server 10, the issuer server 20, and the user terminal 30 are described.

[0060] [1-3-1. Functions implemented in the operator's server]

[0061] like Figure 6 As shown, the operator server 10 includes a data storage unit 100, an input information acquisition unit 101, an identification information acquisition unit 102, an authentication unit 103, and a registration unit 104. The data storage unit 100 is mainly implemented by the storage unit 12. The other functions are mainly implemented by the control unit 11.

[0062] [Data storage unit]

[0063] The data storage unit 100 stores data required for authentication. For example, the user database DB1 will be described as the data storage unit 100 .

[0064] Figure 7 : is a diagram showing an example of data storage in the user database DB1. Figure 7 As shown, user database DB1 stores user-related information. For example, user database DB1 stores user accounts, passwords, names, and card information. When a user registers for a service, a user account is issued and a new record is created in user database DB1. This record stores the password and name specified during registration.

[0065] In the first embodiment, the card information is registered after the service registration is completed. However, the card information can also be registered during the service registration. The card information stored in the user database DB1 is the card information of the card C registered in the application. The number of cards C that can be registered in the application is not limited to one; multiple cards can be registered.

[0066] The card information stored in the user database DB1 only needs to include the minimum information for providing services. That is, not all the accompanying information of the card C must be stored in the user database DB1. The card information stored in the user database DB1 can be only the card number or can include Figure 7 Information other than the information shown (security code, password in so-called 3D Secure authentication (3D Secure), etc.). Figure 7 In the example, the content of the card information is shown as it is, but the card information may be stored in the user database DB1 in a hashed state.

[0067] [Input information acquisition unit]

[0068] The input information acquisition unit 101 acquires the input ID number input from the user terminal 30 using the NFC unit 33A or the imaging unit 36. The NFC unit 33A is an example of a reader. The reader is a reader that reads information recorded on an external information storage medium. The reader may not be a reader that reads information using wireless communication as in the first embodiment, but may be a reader that reads information optically or magnetically. When wireless communication is used, other standards such as RFID may be used instead of NFC. The reader only needs to have a reader function and may not have a writer function.

[0069] In the first embodiment, since the operator server 10 and the user terminal 30 communicate directly, the input information acquisition unit 101 directly acquires the input ID number from the user terminal 30. If a computer mediates communication between the operator server 10 and the user terminal 30, the input information acquisition unit 101 can simply acquire the input ID number forwarded by the computer. In other words, the input information acquisition unit 101 can also acquire the input ID number indirectly from the user terminal 30.

[0070] The input ID number is an example of input information. Therefore, the position recorded as the input ID number in the first embodiment can be replaced by input information. Input information is information input during authentication. Input information is equivalent to the query during authentication. Input information is not limited to the input ID number and can also be in any form. For example, the input information can be text, numbers, or a combination thereof. In addition, for example, a captured image is equivalent to input information.

[0071] The input information is the supplementary information attached to the card C held by the user. In addition to the examples above, the supplementary information can be any information associated with the card number. The supplementary information can be any information detectable by the NFC unit 33A or the imaging unit 36. Information recorded on the IC chip of the card C or information formed on the surface of the card C is supplementary information. Formation refers to information not limited to printing images such as text but also includes embossing to create concave and convex shapes.

[0072] In the first embodiment, the input information acquisition unit 101 acquires, as input information, an input ID number used by a user to access a first service using a card C. The first service is different from the second service. In the first embodiment, a fitness service corresponds to the first service. The input ID number is used as authentication information for the first service.

[0073] [Identification Information Acquisition Unit]

[0074] The identification information acquisition unit 102 acquires the card number of the card C to be registered. The card number is an example of identification information. Therefore, the portion described as the card number in the first embodiment can be replaced with identification information. Identification information is information that can identify card C. Identification information is not limited to the card number, as long as it uniquely identifies card C. A combination of multiple pieces of information such as the card number, expiration date, and name can also constitute identification information. Furthermore, for example, identification information can also be equivalent to an ID number that corresponds one-to-one with card C. Furthermore, this ID number simply identifies card C and is different from the input ID number.

[0075] In the first embodiment, the user enters the card number into the input form F10, so the identification information acquisition unit 102 acquires the card number entered by the user. Alternatively, the card number can be acquired using a predetermined method, eliminating the need for manual user input. For example, the identification information acquisition unit 102 may acquire the card number by performing optical character recognition on an image of the surface of the card C. Furthermore, if the card number is stored in the user terminal 30, the identification information acquisition unit 102 may acquire the card number stored therein.

[0076] The identification information acquisition unit 102 acquires, as identification information, a card number used by a user to access a second service, different from the first service, using card C. In the first embodiment, the transportation system service corresponds to the second service. The second service can be any service different from the first service and is not limited to the example in the first embodiment. The card number is used as authentication information in the second service.

[0077] [Certification Department]

[0078] The authentication unit 103 performs authentication based on the input ID number and the registered ID number. In the first embodiment, the authentication unit 103 performs authentication based on the result of comparing the input ID number with the registered ID number. This comparison result determines whether the ID numbers match. The determination result indicates either a first value indicating a match or a second value indicating a match. While the first embodiment requires complete match, authentication may succeed even with partial match.

[0079] In the first embodiment, the comparison between the input ID number and the registered ID number is performed not by the authentication unit 103 of the operator server 10 but by the comparison unit 204 of the issuer server 20. The authentication unit 103 obtains the comparison result of the comparison unit 204 from the issuer server 20 to perform authentication. If the input ID number matches the registered ID number, authentication succeeds. If the input ID number does not match the registered ID number, authentication fails.

[0080] [Registration Department]

[0081] Based on the authentication result of the authentication unit 103, the registration unit 104 performs registration processing for the card C corresponding to the card number. Registration processing is used to enable the use of the registered card C. In the first embodiment, registering the card C in the application corresponds to the registration processing. In particular, when the application is not used, the registration processing can simply mean recording the card information in any computer, such as the operator server 10.

[0082] The card C to be registered is the card C registered through the registration process. The card C to be registered is identified by its card number. In the first embodiment, the card C including the input ID number corresponds to the card C to be registered. In the first embodiment, the card number of the card C to be registered is input by the user. However, as described in the processing of the identification information acquisition unit 102, the card number can be acquired by any method.

[0083] If authentication is successful, the registration unit 104 performs the registration process. If authentication fails, the registration process is not performed. In other words, the success or failure of authentication determines whether or not the registration process is performed. If authentication is successful for a particular user, the registration unit 104 performs the registration process by storing the card information of the card C to be registered in the record corresponding to the user account in the user database DB1. The user account is entered during login. The card information of the card C to be registered is obtained from the issuer server 20.

[0084] [1-3-2. Functions implemented on the issuer's server]

[0085] like Figure 6 As shown, the issuer server 20 implements a data storage unit 200, an input information acquisition unit 201, an identification information acquisition unit 202, a registration information acquisition unit 203, and a comparison unit 204. The data storage unit 200 is mainly implemented by the storage unit 22. The other functions are mainly implemented by the control unit 21.

[0086] [Data storage unit]

[0087] The data storage unit 200 stores data required for authentication. As an example, the data storage unit 200 will be described with respect to the card database DB2.

[0088] Figure 8 1 is a diagram showing an example of data storage in the card database DB2. Figure 8 As shown, the card database DB2 is a database that stores card information for issued cards C. For example, the card number, expiration date, name, and registration ID number are stored in the card database DB2. When a new card C is issued, a new record is created in the card database DB2 and the card information for that card C is stored.

[0089] In addition, the card information stored in the card database DB2 may be only the card number or may include Figure 8 Information other than the information shown (security code, password for so-called 3D Secure authentication, etc.). When card C is registered in the application, all or part of the card information of card C stored in card database DB2 is stored in user database DB1. When card C is issued, the ID number is registered by the issuer.

[0090] [Input information acquisition unit]

[0091] The input information acquisition unit 201 acquires the input ID number input from the user terminal 30. In the first embodiment, the input information acquisition unit 201 acquires the input ID number forwarded from the operator server 10. That is, the input information acquisition unit 201 indirectly acquires the input ID number input from the user terminal 30. Alternatively, the input ID number may be directly input from the user terminal 30 to the issuer server 20. In this case, the input information acquisition unit 201 directly acquires the input ID number input from the user terminal 30.

[0092] [Identification Information Acquisition Unit]

[0093] The identification information acquisition unit 202 acquires the card number of the card C to be registered. In the first embodiment, the identification information acquisition unit 202 acquires the card number forwarded from the operator server 10. That is, the identification information acquisition unit 202 indirectly acquires the card number input from the user terminal 30. Alternatively, the card number may be directly input from the user terminal 30 to the issuer server 20. In this case, the identification information acquisition unit 202 directly acquires the card number input from the user terminal 30.

[0094] [Registration Information Acquisition Department]

[0095] The registration information acquisition unit 203 acquires the registration ID number registered in association with the card number acquired by the identification information acquisition unit 202. In the first embodiment, since the registration ID number is stored in the card database DB2, the registration information acquisition unit 203 acquires the registration ID number from the card database DB2. The registration information acquisition unit 203 acquires the registration ID number stored in the same record as the card number acquired by the identification information acquisition unit 202. Alternatively, if the registration ID number is stored in an external computer or external information storage medium, the registration information acquisition unit 203 may simply acquire the registration ID number from the external computer or external information storage medium.

[0096] The registration ID number is an example of registration information. The location described as the registration ID number in the first embodiment can be referred to as registration information instead. Registration information is information attached to the card C that is pre-associated with the card number and registered in the issuer's server 20. Registration information is information that serves as the correct answer during authentication. Registration information is information that acts as an index during authentication. Registration information is not limited to an ID format and can be in any format. For example, registration information can be an image, text, numbers, or a combination thereof. Registration information can also be information that can be compared with input information. Registration information can be in the same format as the input information or in a different format.

[0097] For example, the registration information acquisition unit 203 acquires, as registration information, the registration ID number used by the user to access the first service using card C. In the first embodiment, the fitness service corresponds to the first service. If the user is a legitimate user, the registration ID number is the same as the input ID number and is therefore used as authentication information for the first service.

[0098] [Comparison Department]

[0099] Comparison unit 204 compares the input ID number with the registered ID number. Comparison unit 204 determines whether the ID numbers match. As previously mentioned, in the first embodiment, complete match is required, but partial match may also be considered. Comparison unit 204 transmits the comparison result between the input ID number and the registered ID number to the operator server 10.

[0100] [1-3-3. Functions implemented in user terminals]

[0101] like Figure 6 As shown, in the user terminal 30, a data storage unit 300, a display control unit 301, and a receiving unit 302 are implemented. The data storage unit 300 is implemented by the storage unit 32. The display control unit 301 and the receiving unit 302 are each implemented by the control unit 31. The data storage unit 300 stores data required for the processing described in the first embodiment. For example, the data storage unit 300 stores applications for the traffic system. The display control unit 301 uses the application to make the data storage unit 300 display the data required for the processing described in the first embodiment. Figure 2 as well as Figure 4 Each screen described in is displayed on the display unit 35. The receiving unit 302 receives the user's operation on each screen.

[0102] [1-4. Processing Executed in First Embodiment]

[0103] Figure 9 This is a flowchart showing an example of the processing performed in the first embodiment. The control units 11, 21, and 31 respectively operate according to the programs stored in the storage units 12, 22, and 32. Figure 9 The processing is shown. Figure 6 This is an example of the processing executed by the functional modules shown. This processing is executed when an application of the user terminal 30 is activated and an operation for registering a card C is performed from a predetermined menu.

[0104] like Figure 9 As shown, the user terminal 30 displays an input screen G1 for inputting a card number and expiration date on the display unit 35 (S100). The user terminal 30 determines the user's operation based on the detection signal of the operation unit 34 (S101). In S101, input operations are performed on the input tables F10 and F11, and selection operations are performed on buttons B12 and B13. If button B14 is selected, this process ends.

[0105] When an input operation is performed on the input tables F10 and F11 (S101: input operation), the user terminal 30 receives the card number and expiration date of the card C to be registered (S102) and returns to the process of S101. In S102, the card number and expiration date entered by the user are displayed on the input tables F10 and F11.

[0106] When button B12 is selected (S101, B12), user terminal 30 activates NFC unit 33A, causing reading screen G2 to be displayed on display unit 35 (S103). User terminal 30 uses NFC unit 33A to obtain the input ID number from IC chip cp of card C (S104), and transmits the card number and expiration date entered into input tables F10 and F11, along with the input ID number obtained from card C, to operator server 10 (S105). Furthermore, if the user has already logged in to the app, their user account is also transmitted to operator server 10.

[0107] Upon receiving the card number, expiration date, and input ID number from the user terminal 30 (S106), the operator server 10 forwards the card number, expiration date, and input ID number to the issuer server 20 (S107). Upon receiving the card number, expiration date, and input ID number from the operator server 10 (S108), the issuer server 20 references the card database DB2 and retrieves the registration ID number associated with the received card number and expiration date (S109). If, in S108, there is no record in the card database DB2 that matches the card number and expiration date, an error occurs, terminating the process. In this case, registration is not performed because at least one of the card number and expiration date is missing.

[0108] The issuer server 20 compares the input ID number received in S108 with the registered ID number obtained in S109 (S110) and sends the comparison result to the operator server 10 (S111). In S110, the issuer server 20 determines whether the input ID number and the registered ID number are consistent. In S111, the issuer server 20 sends the determination result in S110 as the comparison result. This comparison result includes the card number received in S108.

[0109] Upon receiving the comparison result from the issuer server 20 ( S112 ), the operator server 10 performs authentication ( S113 ) by referring to the comparison result. If the comparison result indicates a match and authentication is successful ( S113 : Success), the operator server 10 performs registration processing for the card C to be registered ( S114 ), terminating the process. In S114 , the operator server 10 associates the card information of the card to be registered with the user's account and registers it in the user database DB1 . The operator server 10 transmits display data for the success screen G3 to the user terminal 30 , causing the success screen G3 to be displayed.

[0110] On the other hand, if the comparison result does not indicate a match and authentication fails (S113: Failed), S114 is not executed, and the process ends. In this case, the card information of the registration target card C is not registered in the user database DB1. The operator server 10 transmits the display data of the failure screen G4 to the user terminal 30, and the failure screen G4 is displayed.

[0111] When the button B13 is selected in S101 (S101; B13), the user terminal 30 starts the shooting unit 36 ​​so that the images continuously shot by the shooting unit 36 ​​are displayed on the shooting screen G5 (S115). When the user touches the shooting screen G5, etc., the user terminal 30 causes the shooting unit 36 ​​to shoot the card C to generate a shot image (S116). The user terminal 30 performs optical character recognition on the shot image to obtain the input ID number (S117) and moves to the processing of S105. If the input ID number is not obtained, an error occurs and this processing ends. In addition, optical character recognition can also be performed by the operator server 10 or the issuer server 20.

[0112] The authentication system S of the first embodiment performs authentication based on the input ID number acquired by the NFC unit 33A or the imaging unit 36 ​​and the registered ID number associated with the card number of the card C being registered, thereby improving security in possession authentication using the card C. Furthermore, when the imaging unit 36 ​​is used, a malicious third party may, for some reason, not like their face to be reflected in a photo. Therefore, by requesting the photo of the card C, a psychological barrier can be formed. Furthermore, card information such as card numbers is sometimes registered on various servers, making it relatively easy for malicious third parties to obtain. On the other hand, since there are relatively few servers where ID numbers are registered, third parties are generally unable to obtain them. Therefore, even if a third party illegally obtains card information, they cannot, in principle, determine the ID number unless they have seized the card C itself. Therefore, by performing authentication using the ID number, unauthorized registration by third parties who have illegally obtained card information can be prevented. For example, authentication by inputting the security code of the card C is generally referred to as possession authentication. However, the possession authentication of the first embodiment requires knowledge of information such as the security code to succeed, resulting in a secure and reliable possession authentication.

[0113] Furthermore, the authentication system S utilizes the input ID number and the registration ID number for utilizing the fitness service different from the transportation system service, thereby preventing authentication based on information that is less accessible to a third party, thereby improving security.

[0114] Furthermore, in the authentication system S, the issuer server 20 compares the input ID number with the registered ID number, and the operator server 10 receives the comparison result from the issuer server 20 to perform authentication. This eliminates the need to manage the registered ID number on the operator server 10 or transmit it over the network N. Consequently, the registered ID number, which is confidential information, is less likely to be leaked, effectively improving security. Furthermore, by sharing the processing required for authentication between the operator server 10 and the issuer server 20, the processing load during authentication can be dispersed.

[0115] Furthermore, in the authentication system S, the registration process for the card C corresponding to the card number is executed based on the authentication result, thereby improving security during card registration. In other words, it is possible to prevent illegal registration by a third party who illegally obtains card information.

[0116] [2. Second embodiment]

[0117] Next, a second embodiment of the authentication system S will be described. In the second embodiment, the comparison between the input ID number and the registered ID number is performed by the operator server 10, not by the issuer server 20. As in the first embodiment, the registered ID number is registered in the issuer server 20. Details similar to those in the first embodiment will be omitted below.

[0118] Figure 10 This is a functional block diagram of the second embodiment. Figure 10 As shown, the operator server 10 includes: a data storage unit 100, an input information acquisition unit 101, an identification information acquisition unit 102, an authentication unit 103, a registration unit 104, and a registration information acquisition unit 105. The registration information acquisition unit 105 is mainly implemented by the control unit 11. In addition, the function of the comparison unit 204 described in the first embodiment is incorporated into the authentication unit 103, so in Figure 10 The comparison unit 204 is not shown in FIG. In addition, the input information acquisition unit 201 may be omitted.

[0119] The data storage unit 100 of the second embodiment stores a registration information database DB3. The registration information database DB3 is a database that stores at least the card number and registration ID number pairs in the card database DB2 described in the first embodiment. Figure 8 The card number and registration ID number in the card database DB2 are omitted in the figure. In addition, the card number can also be hashed.

[0120] The registration information acquisition unit 105 performs substantially the same processing as the registration information acquisition unit 203 of the first embodiment, but acquires the registration ID number from the issuer server 20. For example, the registration information acquisition unit 105 stores the registration ID number acquired from the issuer server 20 in the registration information database DB3.

[0121] Each time a card C is issued, the issuer server 20 sends the card number and registration ID number to the operator server 10. Upon receiving the card number and registration ID number, the operator server 10 stores the pair in the registration information database DB3. The registration information database DB3 may store all or a portion of the card numbers and registration ID numbers in the card database DB2.

[0122] Alternatively, the registration information acquisition unit 105 can acquire the registration ID number during authentication, rather than pre-storing it in the registration information database DB3. For example, if the identification information acquisition unit 102 acquires a card number, the registration information acquisition unit 105 can request the registration ID number of the card C represented by that card number from the issuer server 20. The issuer server 20 acquires the registration ID number from the card database DB2 and transmits it to the operator server 10. The registration information acquisition unit 105 acquires the registration ID number transmitted by the issuer server 20. By dynamically acquiring the registration ID number during authentication, the operator server 10 eliminates the need to store the registration ID number in the registration information database DB3.

[0123] Figure 11 FIG. 1 is a flowchart showing an example of the processing performed in the second embodiment. Figure 11 As shown, when the issuer server 20 issues a new card C, it sends a pair of the card number and the registration ID number to the operator server 10 (S200). Upon receiving the pair (S201), the operator server 10 stores the received pair in the registration information database DB3 (S202). The subsequent processing from S203 to S209 is the same as that from S100 to S106.

[0124] The operator server 10 references the registration information database DB3 and obtains the registration ID number associated with the card number received in S209 (S210). The registration information database DB3 also stores the expiration date. In S210, the operator server 10 can also determine whether a record matching the card number and expiration date exists in the registration information database DB3. If no record exists, an error occurs, and the process ends. In this case, since at least one of the card number and expiration date is missing, the registration process is not performed.

[0125] The operator server 10 performs authentication by comparing the input ID number with the registered ID number (S211). The process of S211 is the same as the process of S110, which is performed by the operator server 10. The subsequent process of S212 is the same as that of S114. Furthermore, the processes of S213 to S215 are the same as those of S115 to S117.

[0126] According to the second embodiment, the operator server 10 performs authentication by comparing the input ID number with the registered ID number. This eliminates the need for communication between the operator server 10 and the issuer server 20 after the input ID number is entered, thus speeding up authentication. Furthermore, since the issuer server 20 does not compare the input ID number with the registered ID number, the processing load on the issuer server 20 can be reduced.

[0127] [3. Modifications]

[0128] The present disclosure is not limited to the above-described embodiments, and can be modified appropriately without departing from the spirit of the present disclosure.

[0129] Figure 12 This is a functional block diagram in a modified example. Figure 12 As shown, in the modified example described below, in addition to the functions described in the embodiment, an illegality calculation unit 106, a first determination unit 107, a second determination unit 108, a third determination unit 109, a fourth determination unit 110, a fifth determination unit 111 and a confirmation unit 112 are also implemented. These functions are mainly implemented by the control unit 11. Figure 12 In the embodiment, each function is added to the functional block of the first embodiment, but each function may be added to the functional block of the second embodiment.

[0130] (1) For example, the card C may include a first storage area that requires a key for reading by the reader, and a second storage area that does not require a key for reading by the reader.

[0131] The first storage area is an area in the first address band within the memory unit of the IC chip cp of the card C. Accessing the first storage area requires a key. The key can be stored in the user terminal 30 or in a server computer accessible by the user terminal 30. The IC chip cp stores a key used for authentication to access the first storage area. The CPU within the IC chip cp performs authentication based on the key within the IC chip cp and the key received from the NFC unit 33A of the user terminal 30. If authentication is successful, access to the first storage area becomes possible.

[0132] The second storage area is an area in the second address band in the storage unit included in the IC chip cp of the card C. A key is not required to access the second storage area. Therefore, in particular, access to the second storage area does not require authentication.

[0133] The first storage area and the second storage area can each store arbitrary information. For example, an ID number can be recorded in both the first storage area and the second storage area. In addition, for example, there may be information stored in the first storage area but not in the second storage area. For example, an ID that can identify an IC chip cp can be stored only in the first storage area. Conversely, there may be information stored in the second storage area but not in the first storage area. For example, an ID not stored in the first storage area may also be stored in the second storage area.

[0134] The authentication system S of modification (1) includes an illegality calculation unit 106 and a first determination unit 107. The illegality calculation unit 106 calculates the illegality of the user based on the user's actions. The illegality is information indicating the degree of illegality or information indicating the height of suspicion of illegality. In modification (1), the illegality is described as being expressed by a score, but the illegality can be expressed by other indicators. For example, the illegality can also be expressed by words such as S grade, A grade, and B grade.

[0135] For example, the illegality calculation unit 106 calculates the illegality using a learning model. A learning model utilizes machine learning (artificial intelligence). Machine learning itself can utilize various well-known methods, such as neural networks or deep learning. The learning model learns the relationship between user actions and the outcome of determining whether an action is illegal. Alternatively, the learning model can utilize an unsupervised machine learning model.

[0136] Actions are information that indicates how users use services. Actions can also be referred to as the content of service usage or the actions taken when using a service. For example, the IP address of the user terminal 30, the URLs accessed by the user terminal 30, the location of the user terminal 30, and the time of access represent user actions. Furthermore, information such as the frequency of user service usage and the amount of money spent also represents user actions.

[0137] Data representing the user's actions is stored in the data storage unit 100. This data is updated each time the user uses the service. The illegality calculation unit 106 digitizes the user's actions up to the point where the input screen G1 is displayed, inputs the digitized data into the learning model, and obtains the illegality output from the learning model. The learning model calculates the feature value of the input action and outputs the illegality corresponding to the feature value. The illegality calculation unit 106 obtains the illegality output from the learning model.

[0138] For example, the illegality calculation unit 106 calculates the illegality such that the greater the variance in the IP address, the higher the illegality. Alternatively, the illegality calculation unit 106 calculates the illegality such that the greater the variance in the URL accessed by the user, the higher the illegality. Alternatively, the illegality calculation unit 106 calculates the illegality such that the farther the access location is from the central location or the more variance in the access location, the higher the illegality.

[0139] Alternatively, for example, the illegality calculation unit 106 calculates the illegality such that the more the access time deviates from the average access time or the greater the access time deviation, the higher the illegality. Alternatively, for example, the illegality calculation unit 106 calculates the illegality such that the more the access frequency deviates from the average access frequency or the greater the access frequency deviation, the higher the illegality.

[0140] Furthermore, the illegality level can be calculated based on a predetermined method and is not limited to the example of using a learning model. For example, the illegality level calculation unit 106 can calculate the illegality level of a user by using a rule that defines the relationship between the user's actions and the illegality level, rather than using a learning model. In this case, the illegality level calculation unit 106 determines whether the user's actions are consistent with the rule. If they are consistent with the rule, the illegality level is associated with the rule. Alternatively, the illegality level calculation unit 106 can calculate the illegality level by quantifying the user's actions and applying them to a predetermined calculation formula.

[0141] Based on the degree of illegitimacy, the first determination unit 107 determines which storage area to use for authentication, from the first storage area and the second storage area. For example, if the degree of illegitimacy is greater than a threshold, the first determination unit 107 determines to use the first storage area. Alternatively, if the degree of illegitimacy is less than the threshold, the first determination unit 107 determines to use the second storage area. Furthermore, if the degree of illegitimacy is greater than the threshold, the first determination unit 107 may determine to use both the first and second storage areas.

[0142] The first determination unit 107 transmits information identifying the storage area used for authentication to the user terminal 30 .

[0143] The user terminal 30 reads the storage area determined by the first determination unit 107. For example, if the first storage area is to be read, the user terminal 30 uses the key to read the first storage area. If the user terminal 30 stores the key, the user terminal 30 uses the key to read the first storage area. If the server computer stores the key, the user terminal 30 logs in to the server computer to obtain the key.

[0144] Furthermore, for example, if the user terminal 30 receives the above information and decides to read the second storage area, it reads the second storage area without using a key. For example, if the first storage area and the second storage area each store an ID number, the user terminal 30 can simply send the ID number contained in the storage area to be read from the first storage area or the second storage area to the operator server 10. In this case, the user terminal 30 adds information identifying the storage area from which the information was read.

[0145] When the first storage area is determined to be used, the input information acquisition unit of Modification (1) acquires the first input information input from the user terminal using NFC unit 33A and stored in the first storage area. When the second storage area is determined to be used, the input information acquisition unit acquires the second input information input from the user terminal using NFC unit 33A and stored in the second storage area. The process after obtaining the ID number is the same as that described in the first and second embodiments.

[0146] Here, it is assumed that both the first input information and the second input information are ID numbers. The authentication unit 103 also uses the ID number read from the storage area determined by the first determination unit 107 as a condition for successful authentication. Therefore, regardless of the ID number entered, if it is not an ID number read from the storage area determined by the first determination unit 107, authentication fails. This determination can be made based on the above information received from the user terminal 30.

[0147] Furthermore, the first input information read from the first storage area and the second input information read from the second storage area can be of different types. For example, the ID identifying the IC chip cp itself can be read from the first storage area, while the gym's ID number can be read from the second storage area. In this case, the authentication unit 103 also conditions successful authentication by inputting information of the type corresponding to the storage area determined by the first determination unit 107. Therefore, regardless of the information input, if it is not of the type corresponding to the storage area determined by the first determination unit 107, authentication fails.

[0148] According to modification (1), since the storage area used for authentication is determined from the first storage area and the second storage area of ​​card C based on the user's illegitimate degree, security corresponding to the user's illegitimate degree can be ensured. For example, if the user's illegitimate degree is high, even if it takes some time, authentication is performed with higher accuracy using the first storage area, which would not be successful without a key. If the user's illegitimate degree is low, authentication is performed quickly using the second storage area for authentication without a key. As a result, security can be improved and user convenience can be enhanced. In addition, by dynamically adjusting authentication based on the user's illegitimate degree, the processing load of the entire system can be reduced.

[0149] (2) In addition, for example, the unit used for authentication can be determined from the NFC unit 33A and the imaging unit 36 ​​based on the user's illegality. The authentication system S of modification (2) includes the illegality calculation unit 106 and the second determination unit 108 similar to those of modification (1). The second determination unit 108 determines the unit used for authentication from the NFC unit 33A and the imaging unit 36 ​​based on the illegality. The unit used for authentication can be either the NFC unit 33A or the imaging unit 36, or both the NFC unit 33A and the imaging unit 36.

[0150] For example, when the degree of illicitness is greater than a threshold, the second determination unit 108 determines to use the NFC unit 33A, and when the degree of illicitness is less than the threshold, determines to use the imaging unit 36. Conversely, when the degree of illicitness is greater than the threshold, the second determination unit 108 may determine to use the imaging unit 36, and when the degree of illicitness is less than the threshold, determines to use the NFC unit 33A. Furthermore, for example, when the degree of illicitness is greater than a threshold, the second determination unit 108 may determine to use both the NFC unit 33A and the imaging unit 36, and when the degree of illicitness is less than the threshold, determines to use either the NFC unit 33A or the imaging unit 36. The second determination unit 108 transmits information identifying the NFC unit 33A or the imaging unit 36 ​​to be used for authentication.

[0151] Upon receiving this information, the user terminal 30 acquires the ID number using either the NFC unit 33A or the imaging unit 36, as determined by the second determination unit 108. The method for acquiring the ID number itself is the same as that described in the first and second embodiments. However, the user cannot freely choose whether to use the NFC unit 33A or the imaging unit 36; the second determination unit 108 ultimately determines which is used. The user terminal 30 adds information identifying whether the ID number was acquired using the NFC unit 33A or the imaging unit 36, and transmits the ID number to the operator server 10.

[0152] When the NFC unit 33A is used, the input information acquisition unit 101 of the modification (2) acquires the input ID number input from the user terminal 30 using the NFC unit 33A. When the imaging unit 36 ​​is used, the input information acquisition unit 101 acquires the input ID number input from the user terminal 30 using the imaging unit 36. The process after acquiring the ID number is the same as that described in the first and second embodiments.

[0153] The authentication unit 103 also uses the ID number obtained by the one of the NFC unit 33A and the imaging unit 36 ​​determined by the second determination unit 108 as a condition for successful authentication. Therefore, regardless of the input ID number, if it is not the ID number read by the one determined by the second determination unit 108, the authentication is unsuccessful. This determination can be made based on the above information received from the user terminal 30.

[0154] According to modification (2), since the authentication method used by the NFC unit 33A and the imaging unit 36 ​​is determined based on the user's illegitimate degree, security can be determined according to the user's illegitimate degree. For example, if the user's illegitimate degree is high, the more secure NFC authentication can be used, while if the user's illegitimate degree is low, the simpler image authentication can be used. As a result, security can be improved and user convenience can be enhanced. In addition, by dynamically adjusting the authentication method based on the user's illegitimate degree, the processing load of the entire system can be reduced.

[0155] (3) Alternatively, for example, when the card C includes multiple types of incidental information, the incidental information used for authentication may be determined based on the user's degree of illegitimacy. The authentication system S of modification (3) includes the same illegitimacy calculation unit 106 and third determination unit 109 as in modification (1). The third determination unit 109 determines the incidental information used for authentication based on the degree of illegitimacy.

[0156] For example, the third decision unit 109 determines the supplementary information used for authentication so that the higher the degree of illegitimacy, the more supplementary information is used for authentication. Alternatively, the third decision unit 109 determines the supplementary information used for authentication so that the lower the degree of illegitimacy, the less supplementary information is used for authentication. Furthermore, for example, if the degree of illegitimacy is above a threshold, the third decision unit 109 determines to use the first supplementary information with a larger amount of information. If the degree of illegitimacy is below the threshold, the third decision unit 109 determines to use the second supplementary information with a smaller amount of information. The third decision unit 109 transmits information identifying the supplementary information used for authentication.

[0157] Upon receiving the above information, the user terminal 30 uses the NFC unit 33A or the camera unit 36 ​​to obtain the accompanying information indicated by the information from the card C. For example, if the accompanying information used for authentication is only the ID number, the user terminal 30 obtains the ID number in the same manner as in the first and second embodiments. Alternatively, if other information is also included as accompanying information for authentication, the user terminal 30 also obtains the other information from the card C. The user terminal 30 transmits the accompanying information determined by the third determination unit 109 as input information to the operator server 10.

[0158] The input information acquisition unit 101 of modification (3) acquires the supplementary information determined by the third determination unit 109 as input information. The process after acquiring the supplementary information is the same as that described in the first and second embodiments. The authentication unit 103 performs authentication based on the supplementary information determined by the third determination unit 109. In this case, the supplementary information is pre-stored as registration information in the user database DB1, the card database DB2, or the registration information database DB3. If the supplementary information acquired as input information matches the supplementary information pre-registered as registration information, authentication succeeds. If they do not match, authentication fails.

[0159] According to modification (3), since the additional information used for authentication is determined based on the user's illegitimacy, security corresponding to the user's illegitimacy can be ensured. For example, if the user's illegitimacy is high, more additional information can be used in authentication to further improve security. If the user's illegitimacy is low, less additional information can be used for faster and simpler authentication. As a result, security can be improved and user convenience can be enhanced. In addition, by dynamically adjusting authentication based on the user's illegitimacy, the processing load of the entire system can be reduced.

[0160] (4) In addition, for example, when the card C includes multiple types of accompanying information, the accompanying information used for authentication may be determined based on the one specified by the user from the NFC unit 33A and the imaging unit 36. The authentication system of modification (4) includes a fourth determination unit 110. The receiving unit receives the user's designation from the NFC unit 33A and the imaging unit 36. The selection operation of buttons B12 and B13 is an example of the designation. The designation may be any operation. The user may specify at least one of the NFC unit 33A and the imaging unit 36, or may specify both.

[0161] The fourth determination unit 110 determines the additional information used for authentication based on the user's designation. For example, if the NFC unit 33A is designated, the fourth determination unit 110 determines the additional information used for authentication so that more additional information is used for authentication than if the image capture unit 36 ​​is designated. Conversely, if the image capture unit 36 ​​is designated, the fourth determination unit 110 determines the additional information used for authentication so that more additional information is used for authentication than if the NFC unit 33A is designated.

[0162] Furthermore, for example, when the NFC unit 33A is specified, the fourth determination unit 110 determines the supplementary information used for authentication so as to utilize the first supplementary information that was not utilized when the imaging unit 36 ​​was specified. Conversely, when the imaging unit 36 ​​is specified, the fourth determination unit 110 determines the supplementary information used for authentication so as to utilize the first supplementary information that was not utilized when the NFC unit 33A was specified. The fourth determination unit 110 transmits information identifying the supplementary information used for authentication.

[0163] Upon receiving the above information, the user terminal 30 uses the NFC unit 33A or the imaging unit 36 ​​to obtain the accompanying information indicated by the information from the card C. This process itself is the same as that of the modification (3). The user terminal 30 sends the accompanying information determined by the fourth determination unit 110 as input information to the operator server 10.

[0164] The input information acquisition unit 101 acquires the determined supplementary information as input information. The process after acquiring the supplementary information is the same as that described in the first and second embodiments. The authentication unit 103 performs authentication based on the supplementary information determined by the fourth determination unit 110. If the supplementary information acquired as input information matches the supplementary information pre-registered as registration information, authentication succeeds. If they do not match, authentication fails. This is the same as in modification (3).

[0165] According to modification (4), since the additional information used for authentication is determined based on the user's designation of either the NFC unit 33A or the imaging unit 36, security corresponding to the user's designation can be ensured. For example, if the user designates the relatively simple imaging unit 36, more additional information can be used for authentication to further improve security. If the user designates the more secure NFC unit 33A, less additional information can be used for faster and simpler authentication. As a result, security can be improved and user convenience can be enhanced.

[0166] (5) Furthermore, for example, if a user holds any of multiple types of cards C, each of the multiple types of cards C contains at least one of multiple types of accompanying information. In other words, the type of accompanying information contained therein varies depending on the type of card C. In this case, the accompanying information used for authentication may also be determined based on the type of card C held by the user.

[0167] The authentication system S of modification (5) includes a fifth determination unit 111. The fifth determination unit 111 determines the supplementary information used for authentication based on the type of card C held by the user. For example, if the type of card C held by the user is the first type, the fifth determination unit 111 determines that the supplementary information used for authentication is not used in the second type. The relationship between the type and the supplementary information is previously defined using data in a table format, etc. The fifth determination unit 111 determines the supplementary information associated with the type of card C held by the user as the supplementary information used for authentication. The fourth determination unit 110 transmits information identifying the supplementary information used for authentication.

[0168] Upon receiving the above information, the user terminal 30 uses the NFC unit 33A or the imaging unit 36 ​​to obtain the accompanying information indicated by the information from the card C. This process itself is the same as that of the modifications (3) and (4). The user terminal 30 transmits the accompanying information determined by the fourth determination unit 110 as input information to the operator server 10.

[0169] The input information acquisition unit 101 acquires the determined incidental information as input information. The process after acquiring the incidental information is as described in the first embodiment and the second embodiment. The process after acquiring the incidental information is as described in the first embodiment and the second embodiment. The authentication unit 103 performs authentication based on the incidental information determined by the fifth determination unit 111. If the incidental information acquired as input information is consistent with the incidental information pre-registered as registration information, the authentication is successful. If they are inconsistent, the authentication fails. This is the same as in modifications (3) and (4).

[0170] According to modification (5), since the additional information used for authentication is determined based on the type of card held by the user, security appropriate to the type of card can be ensured. For example, authentication can be performed using the additional information reliably contained in the card held by the user. In addition, for example, if the same type of card as the user's card has been used for repeated fraudulent activities, the use of more additional information for authentication can further enhance security.

[0171] (6) In addition, for example, instead of performing authentication based solely on the received ID number, the operator server 10 may also confirm whether the ID number is obtained using either the NFC unit 33A or the imaging unit 36 ​​of the user terminal 30. The authentication system of modification (6) includes a confirmation unit 112. The confirmation unit 112 confirms whether the input information is input using either the NFC unit 33A or the imaging unit 36 ​​of the user terminal 30.

[0172] For example, if the user terminal 30 acquires the ID number of the card C using either the NFC unit 33A or the camera unit 36, the user terminal 30 adds information identifying whether the ID number was acquired using the NFC unit 33A or the camera unit 36, and transmits the ID number to the operator server 10. The confirmation unit 112 performs confirmation by referring to this information. If the confirmation unit 112 does not receive this information, it determines that the ID number was illegally input without using either the NFC unit 33A or the camera unit 36 ​​of the user terminal 30. If the confirmation unit 112 does not receive this information, it determines that the ID number was legally input using either the NFC unit 33A or the camera unit 36 ​​of the user terminal 30.

[0173] The authentication unit 103 of the modification (6) also performs authentication based on the confirmation result of the confirmation unit 112. The authentication unit 103 also uses confirmation of whether the input information is input by the NFC unit 33A of the user terminal 30 or the imaging unit 36 ​​as a condition for successful authentication. Therefore, regardless of any ID number input, if it is not an ID number read by either the NFC unit 33A of the user terminal 30 or the imaging unit 36, the authentication is unsuccessful.

[0174] According to modification (6), by confirming which of the NFC unit 33A or the imaging unit 36 ​​of the user terminal 30 is used to input the ID number, it is possible to detect whether the ID number is illegally input by a malicious third party without using the NFC unit 33A or the imaging unit 36, thereby improving security.

[0175] (7) In addition, for example, the case where the authentication system S is applied to transportation system services has been described. However, the authentication system S may also be applied to electronic settlement services, e-commerce services, electronic ticketing services, registration services, financial services, communication services, or SNS services. In this modified example, the case where the authentication system S is applied to electronic settlement services will be described.

[0176] In this variation, a credit card is described as an example of card C. Card C is not limited to a credit card; any card C that can be used in electronic settlement services may be used. For example, card C may be a cash card, debit card, points card, electronic money card, or other electronic value card.

[0177] In this variation, the operator is a company that provides electronic settlement services. The issuer is a company that issues credit cards. Therefore, in this variation, the operator and the issuer are distinct. The operator and the issuer are interconnected, enabling the transmission of arbitrary data between the operator server 10 and the issuer server 20. The operator and the issuer may also be part of the same corporate group.

[0178] The card database DB2 on the issuer's server 20 stores card information for issued credit cards. For example, card information includes the credit card number, expiration date, name, and security code. Registration information appears on at least one of the front and back of the credit card. Each time the issuer issues a credit card, the card's ID number is stored in the card database DB2 as the registration ID number, associated with the card information.

[0179] The card information of the credit card registered in the application is stored in the user database DB1 of the operator server 10. The application of this variant is an electronic settlement application. The electronic settlement application can perform electronic settlement through various methods. For example, the user selects the credit card to be used in the settlement, displays the barcode or QR code on the user terminal 30, and reads it through the reader of the store, thereby executing the settlement using the credit card. In addition, for example, when the barcode or QR code of the store is read by the shooting unit 36 ​​of the user terminal 30, the settlement is executed using the credit card selected by the user. As long as the electronic settlement application can execute the settlement using the registered credit card, the settlement method itself is not limited to these examples. For example, in particular, it is also possible to execute the settlement using the registered credit card without using a code.

[0180] Taking the same example as the first embodiment, a user launches an electronic payment application installed on user terminal 30 and enters a credit card number and expiration date on input screen G1. User terminal 30 uses NFC unit 33A or camera unit 36 ​​to obtain the input ID number from the credit card. User terminal 30 transmits the credit card number, expiration date, and input ID number to operator server 10. Operator server 10 forwards this information to issuer server 20.

[0181] The issuer server 20 references the card database DB2 and retrieves the registered ID number associated with the received credit card number and expiration date. The issuer server 20 compares the input ID number with the registered ID number and sends the comparison result to the operator server 10. The operator server 10 performs authentication based on the comparison result. If authentication is successful, the operator server 10 registers the credit card number and other information in the user database DB1.

[0182] Even in this variation, registration processing can be performed using the same process as in the second embodiment. In this case, the operator server 10 stores a pair of credit card numbers and registration ID numbers in the registration information database DB3, and may also store the expiration date. Upon receiving the credit card number, expiration date, and input ID number, the operator server 10 references the registration information database DB3 to obtain the registration ID number associated with the credit card number and expiration date. The operator server 10 performs authentication by comparing the input ID number with the registration ID number. If authentication is successful, the operator server 10 registers the credit card number and other information in the user database DB1.

[0183] According to modification (7), security is improved when registering a credit card in an electronic settlement service.

[0184] (8) In addition, for example, the modified examples described above may be combined.

[0185] Alternatively, for example, the authentication system S can utilize a portion of the card information as supplementary information and compare the card information obtained from the card C (e.g., expiration date and name) with the card information stored in the card database DB2 (e.g., expiration date and name) to perform authentication. If they match, authentication succeeds. If they do not match, authentication fails. This comparison can be performed by the operator server 20 as in the first embodiment, or by the operator server 10 as in the second embodiment.

[0186] Alternatively, for example, card C can be an insurance card, driver's license, membership card, or student ID card. Card C used for possession authentication may not be a physical card C, but rather an electronic card C (virtual card C). Furthermore, for example, an administrator can manually determine if authentication fails. Furthermore, if authentication for a certain card number fails a specified number of times, restrictions can be placed on that card number, preventing further authentication attempts. In this case, the card number is restricted from being registered in the application without the administrator's permission.

[0187] In addition, for example, an example of authentication in the case of registering card C in an application is given, but the authentication system S can be applied to authentication in various scenarios. For example, the authentication system S can also be applied to a scenario where settlement is performed using card C. In this case, in a scenario where settlement is required in an e-commerce service, the NFC unit 33A or the imaging unit 36 ​​is used to obtain the ID number from the card C used for settlement. The authentication system S performs authentication in the same manner as in the first or second embodiment. If the authentication is successful, settlement using card C can be performed, and if the authentication fails, settlement using card C is not performed. In addition, for example, the authentication system S can also be applied in a scenario where the holder of card C, which is equivalent to a certificate such as an ID card, is authenticated. The authentication system S can also be applied in a scenario where the holder of card C, which is equivalent to an admission ticket in an online exam, is authenticated.

[0188] Furthermore, for example, while the description above illustrates a case where the main functions are shared between the operator server 10 and the issuer server 20, each function may also be implemented by a single computer. Furthermore, for example, a function described as being implemented by the operator server 10 may also be implemented by the issuer server 20. Conversely, a function described as being implemented by the issuer server 20 may also be implemented by the operator server 10. Furthermore, for example, each function may also be shared by three or more computers.

Claims

1. An authentication system comprising: an input information acquisition unit for acquiring input information attached to a card held by a user and input from a user terminal using a reading unit or a photographing unit; an identification information acquiring unit, for acquiring identification information capable of identifying the card; a registration information acquisition unit for acquiring registration information attached to the card, which is pre-registered in the server in association with the identification information; as well as an authentication unit that performs authentication based on the input information and the registration information, The card includes a first storage area that requires a key for reading by the reading unit, and a second storage area that does not require the key for reading by the reading unit. The authentication system further comprises: an illegality calculation unit that calculates the illegality of the user based on the user's actions; and A first determination unit determines a storage area used for the authentication from the first storage area and the second storage area based on the illegality. When it is determined to use the first storage area, the input information acquisition unit acquires the first input information input from the user terminal using the reading unit and stored in the first storage area. When it is determined to use the second storage area, the input information acquisition unit acquires second input information input from the user terminal by the reading unit and stored in the second storage area.

2. The authentication system according to claim 1, wherein: The input information acquisition unit acquires information for the user to use the card and utilize the first service as the input information, The identification information acquisition unit acquires, as the identification information, information used by the user to use the card and utilize a second service different from the first service. The registration information acquisition unit acquires information for the user to use the card and utilize the first service as the registration information.

3. The authentication system according to claim 1 or 2, wherein: The card includes multiple types of accompanying information, The authentication system further comprises: an accepting unit that accepts the user's designation from the reading unit and the photographing unit; and a fourth determination unit that determines the additional information used for the authentication based on the user's designation result, The input information acquisition unit acquires the determined incidental information as the input information.

4. The authentication system according to claim 1 or 2, wherein: The user holds any one of a plurality of types of cards, Each of the plurality of types of cards includes at least one of a plurality of types of accompanying information, The authentication system further includes a fifth determination unit configured to determine the supplementary information used for the authentication based on the type of the card held by the user. The input information acquisition unit acquires the determined incidental information as the input information.

5. The authentication system according to claim 1 or 2, wherein: The authentication system further includes a confirmation unit configured to confirm whether the input information is input by using any one of the reading unit and the photographing unit of the user terminal. The authentication unit further performs the authentication based on a confirmation result of the confirmation unit.

6. The authentication system according to claim 1 or 2, wherein: The authentication system includes: an operator server corresponding to an operator providing a service using the card, and an issuer server corresponding to an issuer that issues the card. The operator server includes the authentication unit, The issuer server further includes the input information acquisition unit, the identification information acquisition unit, the registration information acquisition unit, and a comparison unit for comparing the input information with the registration information. The authentication unit of the operator server acquires the comparison result of the comparison unit from the operator server to perform the authentication.

7. The authentication system according to claim 1 or 2, wherein: The authentication system includes an operator server corresponding to an operator providing a service using the card, and an issuer server corresponding to an issuer that issues the card. The registration information is registered in the issuer server, The operator server includes the input information acquisition unit, the authentication unit, the identification information acquisition unit, and the registration information acquisition unit. The registration information acquisition unit of the operator server acquires the registration information from the issuer server.

8. The authentication system according to claim 1 or 2, wherein: The authentication system includes a registration unit that performs registration processing related to the card corresponding to the identification information based on a result of the authentication.

9. An authentication system comprising: an input information acquisition unit for acquiring input information attached to a card held by a user and input from a user terminal using a reading unit or a photographing unit; an identification information acquiring unit, for acquiring identification information capable of identifying the card; a registration information acquisition unit for acquiring registration information attached to the card, which is pre-registered in the server in association with the identification information; as well as an authentication unit that performs authentication based on the input information and the registration information, The authentication system further comprises: an illegality calculation unit for calculating the illegality of the user based on the user's actions; as well as A second determination unit determines a unit to be used for the authentication from among the reading unit and the imaging unit based on the illegality. When it is determined that the reading unit is to be used, the input information acquiring unit acquires the input information input from the user terminal using the reading unit. When it is determined to use the imaging unit, the input information acquiring unit acquires the input information input from the user terminal using the imaging unit.

10. The authentication system according to claim 9, wherein: The input information acquisition unit acquires information for the user to use the card and utilize the first service as the input information, The identification information acquisition unit acquires, as the identification information, information used by the user to use the card and utilize a second service different from the first service. The registration information acquisition unit acquires information for the user to use the card and utilize the first service as the registration information.

11. The authentication system according to claim 9 or 10, wherein: The card includes multiple types of accompanying information, The authentication system further comprises: an accepting unit that accepts the user's designation from the reading unit and the photographing unit; and a fourth determination unit that determines the additional information used for the authentication based on the user's designation result, The input information acquisition unit acquires the determined incidental information as the input information.

12. The authentication system according to claim 9 or 10, wherein: The user holds any one of a plurality of types of cards, Each of the plurality of types of cards includes at least one of a plurality of types of accompanying information, The authentication system further includes a fifth determination unit configured to determine the supplementary information used for the authentication based on the type of the card held by the user. The input information acquisition unit acquires the determined incidental information as the input information.

13. The authentication system according to claim 9 or 10, wherein: The authentication system further includes a confirmation unit configured to confirm whether the input information is input by using any one of the reading unit and the photographing unit of the user terminal. The authentication unit further performs the authentication based on a confirmation result of the confirmation unit.

14. The authentication system according to claim 9 or 10, wherein: The authentication system includes: an operator server corresponding to an operator providing a service using the card, and an issuer server corresponding to an issuer that issues the card. The operator server includes the authentication unit, The issuer server further includes the input information acquisition unit, the identification information acquisition unit, the registration information acquisition unit, and a comparison unit for comparing the input information with the registration information. The authentication unit of the operator server acquires the comparison result of the comparison unit from the operator server to perform the authentication.

15. The authentication system according to claim 9 or 10, wherein: The authentication system includes an operator server corresponding to an operator providing a service using the card, and an issuer server corresponding to an issuer that issues the card. The registration information is registered in the issuer server, The operator server includes the input information acquisition unit, the authentication unit, the identification information acquisition unit, and the registration information acquisition unit. The registration information acquisition unit of the operator server acquires the registration information from the issuer server.

16. The authentication system according to claim 9 or 10, wherein: The authentication system includes a registration unit that performs registration processing related to the card corresponding to the identification information based on a result of the authentication.

17. An authentication system comprising: an input information acquisition unit for acquiring input information attached to a card held by a user and input from a user terminal using a reading unit or a photographing unit; an identification information acquiring unit, for acquiring identification information capable of identifying the card; a registration information acquisition unit for acquiring registration information attached to the card, which is pre-registered in the server in association with the identification information; as well as an authentication unit that performs authentication based on the input information and the registration information, The card includes multiple types of accompanying information, The authentication system further comprises: an illegality calculation unit for calculating the illegality of the user based on the user's actions; as well as A third determination unit determines the supplementary information used for the authentication based on the illegality. The input information acquisition unit acquires the determined incidental information as the input information.

18. The authentication system according to claim 17, wherein: The input information acquisition unit acquires information for the user to use the card and utilize the first service as the input information, The identification information acquisition unit acquires, as the identification information, information used by the user to use the card and utilize a second service different from the first service. The registration information acquisition unit acquires information for the user to use the card and utilize the first service as the registration information.

19. The authentication system according to claim 17 or 18, wherein: The card includes multiple types of accompanying information, The authentication system further comprises: an accepting unit that accepts the user's designation from the reading unit and the photographing unit; and a fourth determination unit that determines the additional information used for the authentication based on the user's designation result, The input information acquisition unit acquires the determined incidental information as the input information.

20. The authentication system according to claim 17 or 18, wherein: The user holds any one of a plurality of types of cards, Each of the plurality of types of cards includes at least one of a plurality of types of accompanying information, The authentication system further includes a fifth determination unit configured to determine the supplementary information used for the authentication based on the type of the card held by the user. The input information acquisition unit acquires the determined incidental information as the input information.

21. The authentication system according to claim 17 or 18, wherein: The authentication system further includes a confirmation unit configured to confirm whether the input information is input by using any one of the reading unit and the photographing unit of the user terminal. The authentication unit further performs the authentication based on a confirmation result of the confirmation unit.

22. The authentication system according to claim 17 or 18, wherein: The authentication system includes: an operator server corresponding to an operator providing a service using the card, and an issuer server corresponding to an issuer that issues the card. The operator server includes the authentication unit, The issuer server further includes the input information acquisition unit, the identification information acquisition unit, the registration information acquisition unit, and a comparison unit for comparing the input information with the registration information. The authentication unit of the operator server acquires the comparison result of the comparison unit from the operator server to perform the authentication.

23. The authentication system according to claim 17 or 18, wherein: The authentication system includes an operator server corresponding to an operator providing a service using the card, and an issuer server corresponding to an issuer that issues the card. The registration information is registered in the issuer server, The operator server includes the input information acquisition unit, the authentication unit, the identification information acquisition unit, and the registration information acquisition unit. The registration information acquisition unit of the operator server acquires the registration information from the issuer server.

24. The authentication system according to claim 17 or 18, wherein: The authentication system includes a registration unit that performs registration processing related to the card corresponding to the identification information based on a result of the authentication.

25. An authentication method, comprising: An input information acquisition step of acquiring input information input from a user terminal using a reading unit or a photographing unit and attached to a card held by the user; an identification information acquisition step, acquiring identification information capable of identifying the card; a registration information acquisition step of acquiring registration information attached to the card that is pre-registered in a server in association with the identification information; as well as an authentication step of performing authentication based on the input information and the registered information, The card includes a first storage area that requires a key for reading by the reading unit, and a second storage area that does not require the key for reading by the reading unit. The authentication method further includes: an illegality calculation step of calculating the illegality of the user based on the user's actions; and A first determination step is to determine a storage area used for the authentication from the first storage area and the second storage area based on the illegality. When it is determined to use the first storage area, the input information acquisition step acquires first input information input from the user terminal using the reading unit and stored in the first storage area. When it is determined to use the second storage area, the input information acquisition step acquires second input information input from the user terminal using the reading unit and stored in the second storage area.

26. An authentication method, comprising: An input information acquisition step of acquiring input information input from a user terminal using a reading unit or a photographing unit and attached to a card held by the user; an identification information acquisition step, acquiring identification information capable of identifying the card; a registration information acquisition step of acquiring registration information attached to the card that is pre-registered in a server in association with the identification information; as well as an authentication step of performing authentication based on the input information and the registered information, The authentication method further includes: an illegality calculation step of calculating the illegality of the user based on the user's actions; as well as In the second determination step, a unit to be used for the authentication is determined from among the reading unit and the imaging unit based on the illegality. When it is determined that the reading unit is to be used, the input information acquisition step acquires the input information input from the user terminal using the reading unit. When it is determined to use the imaging unit, the input information acquisition step acquires the input information input from the user terminal using the imaging unit.

27. An authentication method, comprising: An input information acquisition step of acquiring input information input from a user terminal using a reading unit or a photographing unit and attached to a card held by the user; an identification information acquisition step, acquiring identification information capable of identifying the card; a registration information acquisition step of acquiring registration information attached to the card that is pre-registered in a server in association with the identification information; as well as an authentication step of performing authentication based on the input information and the registered information, The card includes multiple types of accompanying information, The authentication method further includes: an illegality calculation step of calculating the illegality of the user based on the user's actions; as well as The third determination step is to determine the supplementary information used for the authentication based on the illegality. The input information acquisition step acquires the determined incidental information as the input information.

28. A computer program product storing a computer program for causing a computer to function as the authentication system according to any one of claims 1 to 24.

Images