Image registration system, image registration method, server, and program

Abstract

To provide an image registration system, or the like, capable of guaranteeing the identity of a face image to be registered.SOLUTION: A photographing apparatus 2 includes registration request receiving means 41 which receives a request from a registrant to register an image by reading information on an individual number card of the registrant, photographing the face of the registrant, and transmitting the information on the individual number card and the captured face image of the registrant to a server 3. The server 3 includes: certificate confirmation means 51 which cooperates with an authentication server 4 to confirm whether an electronic certificate of the individual number card received from the photographing apparatus 2 is valid or not; face authentication means 52 which performs face authentication between the captured face image received from the photographing apparatus 2 and a card face image on the individual number card; and registration request means 53 which transmits, when the certificate confirmation means 51 determines that the electronic certificate is valid and the face authentication means 52 determines that the registrant has been identified, the captured face image to a government server 5 to request registration of the captured face image.SELECTED DRAWING: Figure 5

Description

[Technical Field]

[0001] The present invention relates to an image registration system or the like that registers face images taken by a photographing device for use in administrative services. [Background technology]

[0002] One method of applying for a My Number card is to apply using a photo booth in town (see Non-Patent Document 1). For example, the photo booth described in Patent Document 1 performs strict identity verification, thereby preventing fraudulent applications in the same way as in-person application procedures.

[0003] To improve convenience for citizens through the use of My Number cards, the government operates an online service called My Number Portal (registered trademark), which has online application and reference functions. The functions provided by this online service can be used not only by government agencies but also by private organizations such as companies and civic groups via the My Number Portal API (Application Programming Interface) (see Non-Patent Document 2). As of June 2023, APIs available include those for applications for incorporation procedures, etc., social insurance and tax procedures, residence procedures, electronic applications, and health insurance card registration.

[0004] Incidentally, the current procedure for renewing a driver's license is as follows. Using the example of Person A, who lives in Tokyo, we will list the required time as well. 1. Go to the designated location, such as the testing center, renewal center, or designated police station (120 minutes round trip). 2. Fill out the registration and renewal application documents (20 minutes). 3. Take the vision test (20 minutes). 4. Enter the PIN to be registered (5 minutes). 5. Have a photograph of the person renewing their license taken (15 minutes). 6. Take the training course (15 minutes wait + 30 minutes for the training course). 7. Receive the license (20 minutes). As you can see, the total time required is over four hours, and there are only about three renewal locations on Sundays within Tokyo, which is inconvenient.

[0005] If driver's licenses could be renewed online using the My Number Card, the ideal process would be as follows: 1. Do it at home without going to a designated location (0 minutes). 2. Apply for registration and renewal online and authenticate with the My Number Card (5 minutes). 3. Link with a system that stores past health checkups to obtain the results of the vision test (0 minutes). 4. Enter the PIN number to be registered online (2 minutes). 5. Link with a system that stores ID photo data to obtain a facial image of the person renewing (0 minutes). 6. Watch a training video online (30 minutes). 7. Receive the license via personal delivery mail (2 minutes). In this way, if an ideal system could be created using the My Number Card, the total time required could be reduced to less than one hour, and the process could be carried out anytime, anywhere. [Prior art documents] [Patent documents]

[0006] [Patent Document 1] Japanese Patent Publication No. 2022-115797 [Non-patent literature]

[0007] [Non-Patent Document 1] Local Government Information Systems Agency, "How to apply using a photo booth in the city," [online], searched June 5, 2023, Internet,<URL: https: / / www.kojinbango-card.go.jp / apprec / apply / photobooth_apply / > [Non-patent document 2] Digital Agency, "My Number Portal API Specification Public Site", [online], searched June 5, 2023, Internet,<URL: https: / / myna.go.jp / html / api / index.html> Summary of the Invention [Problem to be solved by the invention]

[0008] However, the driver's license renewal procedure is a government service, and changing the rules and systemizing the entire process would be difficult for private companies alone. Meanwhile, systemizing the entire driver's license renewal process through government agencies alone would incur enormous costs and increase the burden on citizens. Therefore, it would be desirable for private companies to provide the parts of the process that are difficult for government agencies to systemize as private services. In particular, while photographs must be prepared for driver's license renewal, it would be inefficient for government agencies to continue providing the equipment needed to take photographs just for one procedure. Therefore, it would be desirable for private companies to provide a system that makes photo-taking procedures easier as a private service.

[0009] However, it is difficult to take photos under appropriate conditions using personal digital cameras or cameras such as smartphones, and it is also difficult to prevent fraudulent activities such as falsifying the date and time of the photo or impersonating someone. Therefore, it is recommended to use photo booths in town, which have a proven track record as a method for applying for My Number cards.

[0010] Furthermore, not only for driver's license renewal procedures, but also for other administrative procedures, facial images of the applicant are often required. The My Number Card can be widely used, including in the private sector, and the government is promoting the "realization of a digital society" that simplifies administrative procedures and makes it easier to obtain necessary information, based on My Number Portal and My Number Portal API. Therefore, it is desirable to have a system that allows for the general use of photographed facial images of applicants for all administrative services. To achieve this, a system is needed that can guarantee that the facial image is unmistakably that of the applicant, even when using passport photo booths in the city.

[0011] The present invention has been made in consideration of the above-mentioned problems, and its purpose is to provide an image registration system etc. that can guarantee that the registered facial image is definitely that of the person in question. [Means for solving the problem]

[0012] To achieve the above-mentioned object, a first invention provides an image registration system including a photographing device for taking a photograph of a registrant's face and a server connected to the photographing device via a network. The photographing device includes a registration request receiving unit for receiving an image registration request from the registrant by reading information from the registrant's Individual Number Card, taking a photograph of the registrant's face, and transmitting the Individual Number Card information and the photographed facial image of the registrant to the server. The server cooperates with an authentication server providing a public personal authentication service and includes a certificate verification unit for verifying whether an electronic certificate for the Individual Number Card received from the photographing device is valid, a face authentication unit for performing face authentication between the photographed facial image received from the photographing device and the card face image of the Individual Number Card received from the photographing device, and a registration request unit for requesting registration of the photographed facial image by transmitting the photographed facial image to an administrative server providing administrative services if the certificate verification unit determines that the electronic certificate is valid and the face authentication unit determines that the registrant is the person in question. The image registration system of the first invention ensures that the facial image to be registered is the person in question.

[0013] It is desirable that the registration request receiving means in the first aspect of the present invention transmits the date and time of photographing of the photographed face image to the server, and the registration request means transmits the date and time of photographing to the administrative server and requests that the date and time of photographing be linked to the photographed face image and registered. This makes it possible to check whether the usage period is being observed when the photographed face image is used in an administrative service.

[0014] Furthermore, the server in the first invention further includes an image storage means for storing the photographed face image as a registered face image when the registration request means transmits the photographed face image to the administrative server, and the face authentication means preferably performs face authentication between the photographed face image and the card face image, as well as between the photographed face image and the previously stored registered face image. This prevents failure of identity verification due to the face photo data (=card face image) stored in the My Number card being out of date.

[0015] Furthermore, it is desirable that the face authentication means in the first invention suspends identity verification of the registrant when the value obtained by subtracting the similarity between the photographed face image and the registered face image from the similarity between the photographed face image and the card face image is equal to or greater than a predetermined value. This makes it possible to prevent the registration of fraudulent images by impersonation even if the My Number card is stolen and the personal identification number of the electronic certificate is leaked.

[0016] A second invention is an image registration system comprising a photographing device that takes a photograph of a registrant's face and a server connected to the photographing device via a network, wherein the photographing device comprises registration request receiving means that reads the registrant's Individual Number Card information, takes a photograph of the registrant's face, and transmits the Individual Number Card information and the photographed facial image of the registrant to the server to receive an image registration request from the registrant, and the server cooperates with an authentication server that provides a public personal authentication service and comprises certificate verification means that verifies whether an electronic certificate of the Individual Number Card received from the photographing device is valid, face authentication means that performs face authentication between the photographed facial image received from the photographing device and the card face image of the Individual Number Card received from the photographing device, and image storage means that stores the photographed facial image as a registered facial image if the certificate verification means determines that the electronic certificate is valid and the face authentication means determines that the registrant is the person in question.The image registration system of the second invention can ensure that the facial image to be registered is the person in question.

[0017] A third invention is an image registration method executed by a photographing device that photographs the face of a registrant and a server connected to the photographing device via a network, the image registration method comprising: a request receiving step in which the photographing device reads information on the registrant's Individual Number card, photographs the registrant's face, and transmits the information on the Individual Number card and the photographed facial image of the registrant to the server, thereby receiving a request for image registration from the registrant; a certificate verification step in which the server cooperates with an authentication server that provides a public personal authentication service and confirms whether the electronic certificate of the Individual Number card received from the photographing device is valid; a face authentication step in which the server performs face authentication between the photographed facial image received from the photographing device and the card face image of the Individual Number card received from the photographing device; and a registration request step in which, if the server determines that the electronic certificate is valid in the certificate verification step and determines that the registrant is the person in question in the face authentication step, the server requests registration of the photographed facial image by transmitting the photographed facial image to an administrative server that provides administrative services. By carrying out the image registration method of the third invention, it is possible to ensure that the face image to be registered is definitely that of the person in question.

[0018] A fourth invention is an image registration method executed by a photographing device that takes a photograph of a registrant's face and a server connected to the photographing device via a network, the image registration method comprising: a request receiving step in which the photographing device reads information from the registrant's Individual Number Card, takes a photograph of the registrant's face, and transmits the Individual Number Card information and the photographed facial image of the registrant to the server to receive an image registration request from the registrant; a certificate verification step in which the server, in cooperation with an authentication server that provides a public personal authentication service, verifies whether an electronic certificate of the Individual Number Card received from the photographing device is valid; a face authentication step in which the server performs face authentication between the photographed facial image received from the photographing device and the card face image of the Individual Number Card received from the photographing device; and an image storage step in which the server stores the photographed facial image as a registered facial image if the server determines that the electronic certificate is valid in the certificate verification step and that the registrant is the person in question in the face authentication step. Executing the image registration method of the fourth invention ensures that the facial image to be registered is the person in question.

[0019] A fifth invention is a server connected via a network to a photographing device that photographs the face of a registrant, the server cooperating with an authentication server that provides a public personal authentication service and comprising: a certificate verification means that verifies whether an electronic certificate of the registrant's Individual Number Card received from the photographing device is valid; a face authentication means that performs face authentication between the photographed face image of the registrant received from the photographing device and the card face image of the Individual Number Card received from the photographing device; and a registration request means that, if the certificate verification means determines that the electronic certificate is valid and the face authentication means determines that the registrant is the person in question, requests registration of the photographed face image by transmitting the photographed face image to an administrative server that provides administrative services. An image registration system equipped with the server of the fifth invention can ensure that the face image to be registered is the person in question.

[0020] A sixth invention is a server connected via a network to a photographing device that photographs the face of a registrant, the server cooperating with an authentication server that provides a public personal authentication service and comprising: a certificate verification means for verifying whether an electronic certificate of the registrant's Individual Number Card received from the photographing device is valid; a face authentication means for performing face authentication between the photographed face image of the registrant received from the photographing device and the card face image of the Individual Number Card received from the photographing device; and an image storage means for storing the photographed face image as a registered face image when the certificate verification means determines that the electronic certificate is valid and the face authentication means determines that the registrant is the person in question. An image registration system comprising the server of the sixth invention can ensure that the registered face image is definitely the person in question.

[0021] A seventh invention is a program for causing a computer to function as a server connected via a network to a photographing device that photographs the face of a registrant, the program causing the computer to function as: certificate verification means that cooperates with an authentication server that provides a public personal authentication service and verifies whether the electronic certificate of the registrant's Individual Number Card received from the photographing device is valid; face authentication means that performs face authentication between the photographed facial image of the registrant received from the photographing device and the card face image of the Individual Number Card received from the photographing device; and registration request means that, if the certificate verification means determines that the electronic certificate is valid and the face authentication means determines that the registrant is the person in question, requests registration of the photographed facial image by transmitting the photographed facial image to an administrative server that provides administrative services. By installing the program of the seventh invention on a general-purpose computer, the server of the fifth invention can be constructed.

[0022] An eighth invention is a program for causing a computer to function as a server connected via a network to a photographing device that photographs the face of a registrant, the program causing the computer to function as: certificate verification means that cooperates with an authentication server that provides a public personal authentication service and verifies whether the electronic certificate of the registrant's Individual Number Card received from the photographing device is valid; face authentication means that performs face authentication between the photographed facial image of the registrant received from the photographing device and the card face image of the Individual Number Card received from the photographing device; and image storage means that stores the photographed facial image as a registered facial image when the certificate verification means determines that the electronic certificate is valid and the face authentication means determines that the registrant is the person in question. By installing the program of the eighth invention on a general-purpose computer, the server of the sixth invention can be constructed. [Effects of the Invention]

[0023] The present invention can provide an image registration system or the like that can guarantee that the face image to be registered is the person in question. [Brief explanation of the drawings]

[0024] [Figure 1] Diagram showing an overview of the image registration system 1 [Figure 2] FIG. 1 is a diagram showing the external configuration of a photographing device 2. [Figure 3] FIG. 1 is a block diagram showing the hardware configuration of the photographing device 2. [Figure 4] Block diagram showing the hardware configuration of Server 3 [Figure 5] FIG. 1 is a block diagram showing the functional configuration of an image registration system 1 according to a first embodiment. [Figure 6] 1 is a flowchart showing the flow of image registration processing in the first embodiment; [Figure 7] FIG. 10 is a diagram illustrating a modified example of the face authentication means. [Figure 8] Example of use of image registration system 1 according to the first embodiment [Figure 9]FIG. 10 is a block diagram showing the functional configuration of an image registration system 1a according to a second embodiment. [Figure 10] 10 is a flowchart showing the flow of image registration processing in the second embodiment. [Figure 11] 10 is a flowchart showing the flow of image provision processing in the second embodiment. [Figure 12] Example of use of image registration system 1a in the second embodiment DETAILED DESCRIPTION OF THE INVENTION

[0025] The preferred embodiments of the present invention will be described in detail below with reference to the accompanying drawings. The photographing device according to the present invention includes a stationary type ID photo machine installed in a storefront, a station, a street, etc., as well as a stationary type photo machine used for taking photographs for purposes other than ID photos.

[0026] First Embodiment Fig. 1 is a diagram showing an overview of an image registration system 1. The image registration system 1 includes a photographing device 2 that takes a photograph of the face of a registrant, and a server 3 connected to the photographing device 2 via a network 6, and is a system that registers facial images taken by the photographing device 2 for use in administrative services. The server 3 is a server that manages the photographing device 2, and is connected via the network 6 to an external server that is not included in the image registration system 1. Specifically, the server 3 is connected via the network 6 to an authentication server 4 that provides public personal authentication services and an administrative server 5 that provides administrative services.

[0027] The Japanese Public Key Infrastructure (JPKI) is a public service that uses digital certificates to ensure the prevention of spoofing, tampering, and transmission repudiation, and enables identity verification and electronic applications over the Internet. Digital certificates are issued based on the resident registration card managed by the city, town, or village, after strict face-to-face identity verification by the city, town, or village. The authentication server 4 is, for example, the Japan Agency for Local Authority Information Systems (J-LIS). This is a server operated by Yahoo! Information Systems.

[0028] There are two types of electronic certificates stored in the My Number Card: a signature electronic certificate that can be used to verify whether a document has been tampered with when sending an electronic document over the Internet, and a user authentication electronic certificate that only certifies the identity of the user when browsing the Internet. In an embodiment of the present invention, the My Number Card's user authentication electronic certificate is used to verify that the facial image is definitely that of the registrant. Hereinafter, when simply referring to the "My Number Card's electronic certificate," this refers to the user authentication electronic certificate.

[0029] Administrative services are services provided by administrative agencies such as the national government and local governments. The administrative server 5 is, for example, a server that manages My Number Portal (registered trademark). My Number Portal is an online service operated by the national government, and provides a personal website where users can search for administrative procedures, such as those related to childcare and elderly care, apply online, and receive notifications from administrative agencies.

[0030] The network 6 includes a LAN (Local Area Network), a WAN (Wide Area Network) that connects over a wider area, public communication lines such as the Internet, base stations, etc. The network 6 may be wired or wireless. Note that the network 6 may use a secure communication line such as a dedicated line or a virtual private network (VPN) as needed.

[0031] FIG. 2 is a diagram showing the external configuration of the photographing device 2. As shown in FIG. 2, the photographing device 2 is a box-type device or the like that allows a person to enter the housing, which serves as a photographing room, to take photographs and operate it. The photographing device 2 is not limited to a box-type device, but may also be an open-type or stand-type device. The photographing device 2 has a function for taking a photograph of a person in the photographing room as a subject, generating and printing an ID photo appropriate for the purpose from the image (ID photo menu), and a function for printing an image received from a terminal such as a user's smartphone, or downloading and printing an image previously uploaded by the user to the server 3 from the terminal (image print menu). The photographing device 2 also has an application menu for applying for a driver's license, My Number card, residence card, special permanent resident card, passport, etc. Furthermore, in this embodiment of the present invention, the photographing device 2 has an image registration menu for registering a facial image. The user can select and use one of the ID photo menu, image print menu, application menu, image registration menu, and other menus.

[0032] The photographing device 2 shown in the example of Fig. 2 is a box type with an open side, and the outside is separated from the inside (photography room) by a curtain 28. The front panel of the photography room is provided with an operation panel 21, a coin mechanism 22, a camera 23, a lighting unit 24, an audio output unit 27, a subject sensor 29, a My Number card reader 31, a document scanner 34, a code reader 35, etc. The housing of the photographing device 2 also contains a control device 10, a printer 25, etc., and printed materials printed by the printer 25 are discharged from a printed material outlet 26 provided in an outer wall panel of the photographing device 2.

[0033] Fig. 3 is a block diagram showing the hardware configuration of the photographic device 2. As shown in Fig. 3, the control device 10 of the photographic device 2 is connected via a bus to the lighting unit 24, the camera 23, the object sensor 29, the audio output unit 27, the operation panel 21, the coin mechanism 22, the printer 25, the reading device 31, the document scanner 34, the code reader 35, etc., and the control device 10 controls each unit.

[0034] The control device 10 includes a control unit (CPU; Central Processing Unit) 101, an I / O (Input / Output) control 102, an I / F (Interface) 103, a ROM (Read Only Memory), and a The control device 10 has a memory (RAM) 104, a random access memory (RAM) 105, a storage unit 106, a communication unit 107, etc. The control device 10 is connected to an operation panel 21 and an audio output unit 27 via an I / O control 102. The control device 10 is also connected to a coin mechanism 22, a printer 25, a reading device 31, a document scanner 34, and a code reader 35 via an I / F 103.

[0035] The control unit 101 is a CPU and centrally controls each unit of the photography device 2. The control unit 101 loads programs stored in the storage unit 106, ROM 104, etc. into a work area on the RAM 105 and executes them. The ROM 104 is a non-volatile memory that permanently stores programs such as a boot program and BIOS, data, etc. The RAM 105 is a volatile memory that temporarily stores programs and data loaded from the storage unit 106, ROM 104, etc., and also has a work area that the control unit 101 uses to perform various processes.

[0036] The storage unit 106 is a hard disk drive, solid state drive, flash memory, or the like, and stores programs to be executed by the control unit 101 in the processes described below, data necessary for executing the programs, an OS, etc. These programs and data are read and executed by the control unit 101 as needed.

[0037] The I / O control 102 is an interface for inputting and outputting various information to and from the operation panel 21, the audio output unit 27, etc. The I / F 103 is an interface for inputting and outputting various information to and from the coin mechanism 22, the printer 25, the reading device 31, the document scanner 34, and the code reader 35.

[0038] The communication unit 107 includes a communication control device and a communication interface that control communication of the photography device 2. The photography device 2 is equipped with a wireless LAN such as Wi-Fi (registered trademark) or a short-range wireless communication such as Bluetooth (registered trademark), and is communicatively connected to the server 3 via the network 6.

[0039] The illumination unit 24 is a surface light source located in front of or behind the subject. The illumination unit 24 is connected to a light source (strobe) 241, and the timing and amount of light emission are controlled according to a control signal input from the control unit 101.

[0040] Camera 23 is a digital camera configured with an optical lens, an imaging element such as a CCD (Charge Coupled Device) or a CMOS (Complementary Metal-Oxide Semiconductor), an A / D (Analog / Digital) converter, etc. Camera 23 captures moving images or still images in accordance with a control signal input from control unit 101. Camera 23 inputs image data obtained by capturing images to control unit 101. Control unit 101 displays the image data input from camera 23 on the display of operation panel 21.

[0041] The operation panel 21 is an operation means of the photography device 2, and has a display that displays an operation screen showing operation procedures, a preview screen, etc., as well as a touch panel for the user to input operation instructions. The operation panel 21 performs display processing in accordance with a display signal input from the control unit 101. It also sends a control signal to the control unit 101 in accordance with a touch operation on the touch panel.

[0042] The subject sensor 29 is a sensor that detects a person in the photography room. When a person approaches the front panel of the photography device 2, the subject sensor 29 outputs a detection signal to the control unit 101. The subject sensor 29 may be an optical sensor or the like that is made up of a light emitter and a light receiver.

[0043] The audio output unit 27 acquires predetermined audio data (such as operation guidance audio) from the ROM 104 or the storage unit 106 in accordance with a control signal input from the control unit 101, and outputs the audio from a speaker.

[0044] The coin mech 22 is a cash register equipped with a deposit slot for coins and banknotes, a change refund slot, etc., and performs processing for settling the usage fee for the photography device 2. The coin mech 22 outputs information about the amount deposited through the deposit slot to the control unit 101, and discharges coins and banknotes according to the change amount into the refund slot in accordance with a control signal input from the control unit 101. In addition to the coin mech 22, a payment processing unit for IC card payment or smartphone payment may also be provided.

[0045] Printer 25 prints the image data of the photographed photo on a predetermined sheet of paper in accordance with a control signal input from control unit 101. Printer 25 is a high-resolution color printer, and the type of printer 25 does not matter, such as dye-sublimation type or melt type.

[0046] The reading device 31 is a device that reads information from the Individual Number Card. Specifically, the reading device 31 includes a face scanner 32 that performs an image scan to read information on the face (front and back) of the Individual Number Card, and an IC chip reader 33 (such as a contactless / contact IC reader) that reads data recorded on the IC chip inside the Individual Number Card. The face scanner 32 may be a scanner that uses white light as a light source, as in a typical image scanner, or it may include a UV / IR scanner that uses ultraviolet (UV) or infrared (IR) light as a light source. The IC chip of the Individual Number Card has a free area, which is a memory area not protected by a personal identification number, and a locked area, which is a memory area protected by a personal identification number. The reading device 31 can read data from the free area and the locked area. The reading device 31 inputs image data of the face of the Individual Number Card read by the face scanner 32 to the control unit 101. The reading device 31 also inputs data read by the IC chip reader 33 to the control unit 101.

[0047] The document scanner 34 is a scanner that optically reads paper of approximately A4 size (210 mm × 297 mm). The document scanner 34 reads documents used in application procedures and inputs the read document data to the control unit 101. The code reader 35 is a device that reads two-dimensional codes such as QR codes (registered trademark) and bar codes, and inputs the read code information to the control unit 101.

[0048] Fig. 4 is a block diagram showing the hardware configuration of the server 3. As shown in Fig. 4, the server 3 is configured with a control unit 301, a storage unit 302, a communication unit 303, an input unit 304, a display unit 305, a peripheral device I / F unit 306, etc., and these pieces of hardware are connected by a bus 307. However, the configuration of the server 3 is not limited to this, and various other configurations may be used as appropriate.

[0049] The control unit 301 is composed of a CPU (Central Processing Unit), ROM (Read Only Memory), RAM (Random Access Memory), etc. The CPU loads programs stored in the storage unit 302, ROM, recording medium, etc. into a work memory area on the RAM and executes them, driving and controlling each unit connected via the bus 307. The ROM permanently stores programs such as the computer's boot program and BIOS, as well as data. The RAM temporarily stores loaded programs and data, and also has a work area used by the control unit 301 to perform various processes. The control unit 301 functions as each means of the server 3, which will be described later, by reading and executing the programs.

[0050] The storage unit 302 is a storage device such as a hard disk drive, a solid state drive, or a flash memory. The storage unit 302 stores programs executed by the control unit 301, data required for program execution, an operating system, etc. These program codes are read by the control unit 301 as needed and transferred to RAM, and then read and executed by the CPU. The storage unit 302 stores data used in the image registration system 1.

[0051] The communication unit 303 has a communication control device and a communication port, and controls communication with the network 6, etc. The input unit 304 is, for example, a pointing device such as a keyboard or a mouse, or a touch panel integrated with a display, and inputs data to the control unit 301. The display unit 305 is composed of a display device such as a liquid crystal panel and a logic circuit (video adapter, etc.) for executing display processing in cooperation with the display device, and displays display data input under the control of the control unit 301 on the display device. The peripheral device I / F unit 306 is a port for connecting peripheral devices, and transmits and receives data to and from the peripheral devices via the peripheral device I / F unit 306. The connection with the peripheral device may be wired or wireless.

[0052] 5 is a block diagram showing the functional configuration of the image registration system 1 in the first embodiment. The functional configuration of the image registration system 1 is made up of the means provided in the photography device 2 and the means provided in the server 3. Hereinafter, a registrant means a person who registers his or her own face image in the image registration system 1.

[0053] The photographing device 2 includes a registration request receiving means 41. The registration request receiving means 41 reads the information on the My Number card of the registrant, takes a photograph of the registrant's face, and transmits the My Number card information and the photographed facial image of the registrant to the server 3, thereby receiving a request for image registration from the registrant.

[0054] The information on the registrant's My Number card is data recorded on the IC chip inside the My Number card that is read by the IC chip reader 33. The photographed facial image of the registrant is facial image data of the registrant taken by the camera 23 of the photographing device 2. The registration request receiving means 41 may transmit the date and time of the photograph of the photographed facial image to the server 3.

[0055] The IC chip of the My Number Card contains four applications: the "Public Personal Authentication AP," "Card Information Verification AP," "Card Input Assistance AP," and "Resident Registration Network AP," as well as free space for municipal and other government agencies to provide their own services. The Public Personal Authentication AP stores a signature electronic certificate and its PIN, as well as a user electronic certificate and its PIN. The Card Information Verification AP stores image data of the information listed on the card and its verification number. The image data of the information listed on the card consists of image data of the front information (= four pieces of information (address, name, date of birth, gender) and a facial photo) and image data of the back information (= personal number). The Card Information Input Assistance AP stores text data of the information listed on the card, its PIN, and verification number. The text data of the information listed on the card consists of the personal number, the four pieces of information, and their electronic signature data. The Resident Registration Network AP stores the resident registration code and its PIN.

[0056] The server 3 includes a certificate confirmation means 51, a face authentication means 52, and a registration request means 53. The certificate confirmation means 51 cooperates with the authentication server 4 to confirm whether the electronic certificate of the registrant's My Number card received from the photographing device 2 is valid. The face authentication means 52 performs face authentication between the photographed face image received from the photographing device 2 and the card face image stored in the registrant's My Number card received from the photographing device 2. When the certificate confirmation means 51 determines that the electronic certificate is valid and the face authentication means 52 determines that the registrant is the principal, the registration request means 53 requests registration of the photographed face image by transmitting the photographed face image to the administrative server 5.

[0057] The card face image stored in the registrant's My Number card is image data of the face photograph on the front side recorded in the card information confirmation AP in the IC chip of the My Number card. By providing the server 3 with these certificate confirmation means 51, face authentication means 52, and registration request means 53, it is possible to ensure that the face image to be registered is that of the person in question.

[0058] It is desirable that the registration request means 53 transmits the date and time of the photographed facial image to the administrative server 5 and requests that it be registered in association with the photographed facial image. This makes it possible to confirm whether the usage period is being observed when the photographed facial image is used for administrative services. For example, the usage period for identification photos for driver's licenses, passports, and national qualification examinations is to be taken within six months prior to submission, and the usage period for identification photos for residence status applications is to be taken within three months prior to submission.

[0059] The server 3 also includes an image storage means 54. When the registration request means 53 transmits a photographed facial image to the administrative server 5, the image storage means 54 stores the photographed facial image as a registered facial image in the storage unit 302. It is also desirable that the image storage means 54 stores the photographed date and time and the registered facial image in the storage unit 302 in association with each other.

[0060] The registration request receiving means 41 of the photographing device 2 may transmit the My Number card information and the captured facial image at different times, or may transmit them at the same time. For example, the registration request receiving means 41 may first transmit the My Number card information, and after the certificate verification means 51 determines that the My Number card's electronic certificate is valid, the registration request receiving means 41 may transmit the captured image, and the face authentication means 52 may perform face authentication between the captured facial image and the card face image. Alternatively, for example, the registration request receiving means 41 may transmit the My Number card information and the captured facial image, the certificate verification means 51 may verify the validity of the My Number card's electronic certificate, and the face authentication means 52 may perform face authentication between the captured facial image and the card face image. To avoid confusion, the following description will be given assuming that the My Number card information and the captured facial image are transmitted at the same time (i.e., transmitted at the same time).

[0061] 6 is a flowchart showing the flow of image registration processing in the first embodiment. In the first embodiment, the server 3 requests the administrative server 5 to register a captured facial image, and the administrative server 5 stores the captured facial image for use in administrative services.

[0062] The control unit 101 of the photographing device 2 accepts the selection of an image registration menu from the registrant, and when the My Number card is held over the IC chip reader 33, the IC chip reader 33 reads the data recorded on the IC chip inside the My Number card (step S1). Here, the IC chip reader 33 reads image data of the facial photograph (= card facial image) recorded in the card information confirmation AP in the IC chip of the My Number card and inputs it to the control unit 101. The control unit 101 also accepts input of a personal identification number for the user-certificate electronic certificate via the operation panel 21 in order to read information on the user-certificate electronic certificate recorded in the public personal authentication AP in the IC chip of the My Number card. If the personal identification number entered by the registrant matches the information stored in the IC chip of the My Number card, the IC chip reader 33 reads the information on the user-certificate electronic certificate and inputs it to the control unit 101.

[0063] Next, the control unit 101 of the photographing device 2 displays photographing instructions and face positioning operations on the operation panel 21, and outputs guidance audio to the audio output unit 27 to provide guidance for photographing to the registrant. Thereafter, the control unit 101 takes a still image of the registrant's face with the camera 23 (step S2), generates still image data, and stores it as a photographed face image together with the date and time of photographing in a predetermined folder in the RAM 105 or the storage unit 106.

[0064] Next, the control unit 101 of the photographing device 2 transmits the information on the My Number card and the photographed facial image, etc. to the server 3 via the communication unit 107 (step S3). More specifically, the control unit 101 transmits the information on the My Number card (including information for identifying the registrant, the facial image on the card, and information on the electronic certificate for user authentication), the photographed facial image, and the date and time of photographing to the server 3.

[0065] Next, the control unit 301 of the server 3 transmits a query to the authentication server 4 to verify the validity of the information in the digital certificate received from the photographing device 2 (step S4). The authentication server 4 verifies the validity of the digital certificate received from the server 3 (step S5) and transmits the verification result to the server 3 (step S6).

[0066] The user public personal authentication service (JPKI) provided by the authentication server 4 employs a public key cryptosystem. The public key cryptosystem pairs a private key with a public key, and data encrypted with one key can only be decrypted with the other key.

[0067] In steps S3 to S6, the photographing device 2, server 3, and authentication server 4 verify the validity of the user authentication electronic certificate of the registrant's Individual Number Card using a known procedure that uses public key cryptography. The known procedure is as follows: 1. The server 3 generates a random number and sends it to the photographing device 2. 2. The photographing device 2 converts the random number using the private key in the Individual Number Card. 3. The photographing device 2 transmits the random number itself, the converted random number, and the electronic certificate (public key) to the server 3. 4. The server 3 decrypts the converted random number using the electronic certificate (public key). 5. The server 3 compares the decrypted random number with the random number itself to detect whether it has been tampered with. 6. The server 3 inquires about the validity of the electronic certificate from the authentication server 4. 7. The authentication server 4 checks the validity of the electronic certificate and returns the check result to the server 3. Comparing these procedures with steps S3 to S6, the photographing device 2 and server 3 execute procedures 1 to 5 in step 3.

[0068] Next, the control unit 301 of the server 3 checks whether the check result of the validity of the electronic certificate received from the authentication server 4 indicates validity (step S7). If the control unit 301 of the server 3 determines that the check result is invalid (No in step S7), it sends an error notice to the photographing device 2 (step S8). The control unit 101 of the photographing device 2 displays the error notice received from the server 3 on the operation panel 21 (step S9), and either ends the processing or repeats from step S1 according to an instruction from the registrant. On the other hand, if the control unit 301 of the server 3 determines that the check result is valid (Yes in step S7), it proceeds to step S10.

[0069] Next, the control unit 301 of the server 3 executes face authentication processing of the photographed face image and the card face image both received from the photographing device 2 (step S10). The control unit 301 of the server 3 may use a known face authentication technology provided by an API or the like, or may use its own face authentication technology. In either case, the control unit 301 of the server 3 calculates the similarity between the photographed face image and the card face image using the face authentication technology, compares the calculated similarity with a predetermined threshold, and if the similarity exceeds the predetermined threshold, determines that face authentication is successful, i.e., that the registrant is the person in question.

[0070] If the control unit 301 of the server 3 determines that the face authentication is unsuccessful, that is, that the registrant is not the real person (No in step S11), it sends an error notification to the photographing device 2 (step S12). The control unit 101 of the photographing device 2 displays the error notification received from the server 3 on the operation panel 21 (step S13), and either ends the processing or repeats from step S1 according to an instruction from the registrant. On the other hand, if the control unit 301 of the server 3 determines that the face authentication is successful, that is, that the registrant is the real person (Yes in step S11), it proceeds to step S14.

[0071] Next, the control unit 301 of the server 3 transmits a request to register the photographed facial image to the administrative server 5 (step S14). Here, the control unit 301 of the server 3 transmits the photographed date and time along with the photographed facial image to the administrative server 5, and requests that the photographed facial image be registered in association with the photographed date and time. For example, if the operating body (such as a country) that operates the administrative server 5 has made public an image registration API for registering photographed facial images, the control unit 301 of the server 3 transmits a request to register the photographed facial image to the administrative server 5 using this image registration API.

[0072] Next, the administrative server 5 stores the photographed facial image in association with the photographing date and time (step S15), and transmits the registration result to the server 3 (step S16). Here, the server 3, the administrative server 5, and the authentication server 4 may confirm the validity of the electronic certificate for user authentication of the registrant's My Number card by a known procedure using the above-mentioned public key cryptography, or may omit the confirmation of the validity of the electronic certificate here by receiving the confirmation result of the validity from the server 3.

[0073] If the control unit 301 of the server 3 determines that the registration of the photographed facial image has failed (No in step S17), it transmits an error notification to the photographing device 2 (step S18). The control unit 101 of the photographing device 2 displays the error notification received from the server 3 on the operation panel 21 (step S19), and either ends the process or repeats from step S1 according to an instruction from the registrant. On the other hand, if the control unit 301 of the server 3 determines that the registration of the photographed facial image has been successful (Yes in step S17), it associates the photographed facial image with the registrant's information and the date and time of photographing as a registered facial image and stores it in the storage unit 302 (step S20), and transmits a registration completion notification to the photographing device 2 (step S21). The control unit 101 of the photographing device 2 displays the registration completion notification received from the server 3 on the operation panel 21 (step S22), and terminates the process.

[0074] In step S20, the control unit 301 of the server 3 may delete previously stored registered face images and store only the latest registered face image in the memory unit 302, or may not delete previously stored registered face images, but may add the latest registered face image and store it in the memory unit 302, and manage it as history information.

[0075] The photographed face image registered on the administrative server 5 by the image registration process shown in Fig. 6 is a "certified image" that is authenticated by the public personal authentication service using the My Number card and is guaranteed to be the person in question. This certified image can be used as the face image of the applicant required for various applications for administrative procedures.

[0076] 7A and 7B are diagrams illustrating a modified example of the facial authentication means. FIG. 7A illustrates the process in step S10 described above. As described above, the control unit 301 of the server 3 calculates the similarity between the photographed facial image 61a and the card facial image 62 using facial authentication technology and compares the calculated similarity with a predetermined threshold. In the example of FIG. 7A, since the similarity exceeds the threshold, the control unit 301 of the server 3 determines that the facial authentication is successful, i.e., that the registrant is the person in question.

[0077] The validity period of the My Number Card itself is 10 years for adults. This means that the image data of the facial photograph (= card facial image) recorded in the card information verification AP in the My Number Card's IC chip is a facial photograph from up to 10 years ago. As a result, even if the person is actually the same, there may be cases where the similarity calculated by facial recognition technology does not exceed a predetermined threshold.

[0078] FIG. 7(b) shows a first modified example of the face authentication means 52 for dealing with this case. In the first modified example, the control unit 301 (=face authentication means 52) of the server 3 performs face authentication between the photographed face image 61b and the card face image 62, and also performs face authentication between the photographed face image 61b and the most recently registered face image 63 previously stored in step S20. Then, when either the similarity between the photographed face image 61b and the card face image 62 or the similarity between the photographed face image 61b and the registered face image 63 exceeds a threshold, the control unit 301 of the server 3 determines that face authentication is successful, i.e., that the registrant is the same person. In the example of FIG. 7(b), the similarity between the photographed face image 61b and the card face image 62 is equal to or less than the threshold, but the similarity between the photographed face image 61b and the registered face image 63 exceeds the threshold, so the control unit 301 of the server 3 determines that face authentication is successful, i.e., that the registrant is the same person.

[0079] In addition, although it is a rare case, if a My Number card is stolen and the PIN number of the electronic certificate for user authentication is leaked, there is a risk that an image may be illegally registered. In this case, a fraudulent registrant may use makeup to resemble the facial photograph printed on the front of the My Number card and use the image registration system 1.

[0080] 7(c) shows a second modified example of the face authentication means 52 for dealing with this case. In the second modified example, the control unit 301 (=face authentication means 52) of the server 3 performs face authentication between the photographed face image 61c and the card face image 62, and also performs face authentication between the photographed face image 61c and the registered face image 63 previously stored in step S20. Then, if the value obtained by subtracting the similarity between the photographed face image 61c and the card face image 62 from the similarity between the photographed face image 61c and the card face image 62 is equal to or greater than a predetermined value, that is, if the photographed face image 61c is similar to the card face image 62 but not very similar to the registered face image 63, the control unit 301 of the server 3 suspends identity verification of the registrant. This is because it would be unnatural for the card face image 62 to be similar only to the card face image 62 even though it was photographed earlier than the registered face image 63.

[0081] When the identity verification of the registrant is suspended, the control unit 301 of the server 3 may request that the photograph be taken again or that another identity verification document other than the My Number Card be presented. For example, the control unit 301 of the server 3 may request that another identity verification document with a face photo (such as a driver's license) be presented, scan the face photo on the other identity verification document using the card scanner 32, and perform face authentication with the captured face image 61c.

[0082] FIG. 8 shows an example of use of the image registration system 1 in the first embodiment. First, the image registration procedure will be described. A registrant brings his / her Individual Number Card to the photographing device 2, reads his / her Individual Number Card, enters his / her PIN, takes a photograph of his / her face, and requests image registration (step S101). The server 3 cooperates with the authentication server 4 to check the validity of the electronic certificate of the Individual Number Card (step S102), performs facial authentication between the photographed facial image and the card facial image (step S103), and requests image registration from the administrative server 5 (step S104). The administrative server 5 cooperates with the authentication server 4 to check the validity of the electronic certificate of the Individual Number Card (step S105), and registers the photographed facial image (step S106). The validity of the electronic certificate is checked twice, in steps S102 and S105, but it is also possible to check only one of them.

[0083] Next, the procedure for using the image will be explained. To apply for an administrative procedure that requires a facial photograph, a registrant reads their My Number card using their smartphone 7 or the like and requests application acceptance from the application acceptance server 8 (step S107). The application acceptance server 8 checks the validity of the My Number card's digital certificate in cooperation with the authentication server 4 (step S108), acquires the registrant's photographed facial image from the administrative server 5 (step S109), and uses it to accept the application. For example, if the operating body (such as a government) that operates the administrative server 5 has made public an image acquisition API for acquiring photographed facial images, the application acceptance server 8 uses this image acquisition API to send a request to acquire the photographed facial image to the administrative server 5.

[0084] The application reception server 8 may transmit the photographed facial image obtained from the administrative server 5 to the registrant's smartphone 7 or the like, allowing the registrant to check the photographed facial image on the screen of the smartphone 7 or the like and choose whether or not to use it, or the photographed facial image may not be transmitted to the registrant's smartphone 7 or the like, and may be used as an approval image for application reception without the registrant being aware of it.

[0085] Furthermore, the registrant may use the photographing device 2 instead of his / her own smartphone 7, etc. As mentioned above, the photographing device 2 has an application menu for carrying out application procedures for a driver's license, My Number card, residence card, special permanent resident card, passport, etc. In other words, the registrant can register an image using the image registration menu of the photographing device 2, and then carry out application procedures using the application menu of the photographing device 2 and use the image.

[0086] <Second embodiment> In the second embodiment, the server 3 stores the captured face image for use in administrative services, instead of the administrative server 5. The hardware configuration of the image registration system in the second embodiment is the same as that of the first embodiment shown in Figures 1 to 4, and therefore a description thereof will be omitted.

[0087] 9 is a block diagram showing the functional configuration of an image registration system 1a in the second embodiment. The functional configuration of the image registration system 1a is composed of the various means provided in the photographing device 2 and the various means provided in the server 3a. The registration request receiving means 41 provided in the photographing device 2, and the certificate verification means 51 and face authentication means 52 provided in the server 3a are the same as those in the first embodiment, and therefore description thereof will be omitted.

[0088] The server 3a further includes an image storage means 55 and an image providing means 56. When the certificate verification means 51 determines that the electronic certificate is valid and the face authentication means 52 determines that the registrant is the person in question, the image storage means 55 stores the captured facial image as a registered facial image in the storage unit 302. The image storage means 55 preferably associates the capture date and time with the registered facial image and stores them in the storage unit 302. When the administrative server 5 requests acquisition of an image, the image providing means 56 searches the storage unit 302 and transmits the registered facial image to the administrative server 5. The image providing means 56 preferably receives the expiration date of the image from the administrative server 5 and transmits the registered facial image with the capture date and time that satisfies the expiration date to the administrative server 5.

[0089] Fig. 10 is a flowchart showing the flow of image registration processing in the second embodiment. Steps S31 to S43 shown in Fig. 10 are similar to steps S1 to S13 shown in Fig. 6, and therefore description thereof will be omitted.

[0090] 10, when the control unit 301 of the server 3a determines that the face authentication is successful, that is, that the registrant is the person in question (Yes in step S41), it associates the captured face image with the registrant's information and the date and time of capture as a registered face image and stores it in the storage unit 302 (step S44), and transmits a registration completion notice to the photographing device 2 (step S45). The control unit 101 of the photographing device 2 displays the registration completion notice received from the server 3a on the operation panel 21 (step S46), and ends the process.

[0091] Fig. 11 is a flowchart showing the flow of image provision processing in the second embodiment. As shown in Fig. 11, when the administrative server 5 transmits a request to acquire a registered face image to the server 3a (step S51), the control unit 301 of the server 3a searches the storage unit 302 based on the registrant information included in the request received from the server 3a (step S52), and transmits the registered face image to be acquired to the administrative server 5 (step S53). If the request to acquire a registered face image includes an expiration date for the image, the control unit 301 of the server 3a retrieves from the storage unit 302 the most recent registered face image whose photographing date and time satisfy the expiration date, and transmits the image to the administrative server 5. The administrative server 5 uses the registered face image received from the server 3a in procedures for administrative services (step S54).

[0092] FIG. 12 shows an example of use of the image registration system 1a in the second embodiment. First, the image registration procedure will be described. A registrant brings their My Number card to the photographing device 2, reads their My Number card, enters their PIN, takes a photograph of their face, and requests image registration (step S201). The server 3a cooperates with the authentication server 4 to verify the validity of the My Number card's digital certificate (step S202), performs facial authentication between the photographed facial image and the card facial image (step S203), and stores the photographed facial image (step S204).

[0093] Next, the procedure for using the image will be explained. To apply for an administrative procedure that requires a facial photograph, a registrant reads his / her My Number card using his / her smartphone 7 or the like and requests application acceptance from the application acceptance server 8 (step S205). The application acceptance server 8, in cooperation with the authentication server 4, checks the validity of the My Number card's electronic certificate (step S206) and requests the administrative server 5 to acquire a photographed facial image of the registrant (step S207). The administrative server 5, in cooperation with the authentication server 4, checks the validity of the My Number card's electronic certificate (step S208), acquires the photographed facial image of the registrant from server 3a (step S209), and sends it to the application acceptance server 8 (step S207). The application acceptance server 8 uses the photographed facial image of the registrant to accept the application. The validity of the electronic certificate is checked twice, in steps S206 and S208, but it is also possible to perform only one of them.

[0094] As described above, according to the image registration system 1, 1a in the embodiment of the present invention, the validity of the electronic certificate of the My Number card is confirmed in cooperation with the authentication server 4, and facial authentication is performed with the card face image stored on the My Number card to confirm that the "ID photo of Mr. / Ms. XX" (=certified image) is definitely that of Mr. / Ms. XX, and it can be registered online in advance and used for various government services.

[0095] While it is difficult to completely prevent impersonation simply by reading the My Number card and entering a PIN, the image registration systems 1 and 1a according to the embodiments of the present invention perform unique facial authentication and confirm that the subject photographed by the photographing device 2 matches the facial photograph on the My Number card, thereby ensuring security equivalent to that achieved by human visual identity verification at the counter of a government agency, etc. In particular, since the facial photograph data stored inside the My Number card is used, it can also deal with counterfeit cards where the photograph has been cleverly replaced.

[0096] Furthermore, facial images registered by the image registration system 1 can be used for various administrative services via an administrative server 5 such as My Number Portal. Administrative procedures for which facial images can be used include, for example, driver's license renewal, passport renewal, application for residence status, application for issuance of a medical license certificate, and application for national qualification examinations such as the National Examination for Certified Social Workers and the National Examination for Childcare Workers. Since these procedures require a set expiration date for the use of ID photographs, the facial photograph data stored on the My Number Card is too old to be used. In the image registration systems 1 and 1a according to the embodiments of the present invention, facial images are registered in association with the date and time of their capture, making it possible to check whether the expiration date has been met.

[0097] Furthermore, in the image registration system 1, 1a according to the embodiment of the present invention, facial images captured on the spot are not only authenticated against the facial photograph stored on the My Number card, but also against facial images previously registered using the system. This prevents identity verification failures due to outdated facial photograph data stored on the My Number card. For example, by registering the latest facial image using the image registration system 1, 1a every year, identity verification failures can be reliably prevented, even for young people. Furthermore, if this motivates users to regularly use the image registration system 1, 1a, it will also encourage the use of the photograph device 2.

[0098] While the preferred embodiments of the image registration system and the like according to the present invention have been described above with reference to the accompanying drawings, the present invention is not limited to such examples. It is clear that a person skilled in the art can conceive of various modifications or alterations within the scope of the technical ideas disclosed herein, and it is understood that such modifications also fall within the technical scope of the present invention. [Explanation of symbols]

[0099] 1, 1a...Image registration system 2. Photographic equipment 3, 3a...Server 4...Authentication server 5. Administrative server 6. Network 7. Smartphone 8...Application reception server 41...Registration request acceptance means 51...Certificate verification means 52...Facial recognition means 53...Registration request means 54, 55...Image storage means 56……Image provision means

Claims

1. An image registration system comprising: a photographing device for photographing a face of a registrant; and a server connected to the photographing device via a network, The photographing device is a registration request receiving means for receiving a request for image registration from the registrant by reading information on the registrant's My Number card, taking a photograph of the registrant's face, and transmitting the My Number card information and the photographed facial image of the registrant to the server; Equipped with The server, a certificate verification means for verifying whether or not the electronic certificate of the My Number card received from the photographing device is valid, in cooperation with an authentication server that provides a public personal authentication service; A face authentication means for performing face authentication between the photographed face image received from the photographing device and the card face image of the My Number card received from the photographing device; a registration request means for requesting registration of the captured face image by transmitting the captured face image to an administrative server that provides administrative services when the certificate verification means determines that the electronic certificate is valid and the face authentication means determines that the registrant is the person in question; An image registration system comprising:

2. The registration request receiving means transmits a photographing date and time of the photographed face image to the server, The registration request means transmits the photographing date and time to the administrative server, and requests that the photographed face image be linked to and registered.

2. The image registration system according to claim 1.

3. The server, an image storage means for storing the photographed face image as a registered face image when the registration request means transmits the photographed face image to the administrative server; Further comprising: The face authentication means performs face authentication between the photographed face image and the card face image, and also performs face authentication between the photographed face image and the registered face image stored in the past.

3. The image registration system according to claim 1 or 2.

4. The face authentication means reserves the identity verification of the registrant when a value obtained by subtracting a similarity between the photographed face image and the registered face image from a similarity between the photographed face image and the card face image is equal to or greater than a predetermined value.

4. The image registration system according to claim 3.

5. An image registration system comprising: a photographing device for photographing a face of a registrant; and a server connected to the photographing device via a network, The photographing device is a registration request receiving means for receiving a request for image registration from the registrant by reading information on the registrant's My Number card, taking a photograph of the registrant's face, and transmitting the My Number card information and the photographed facial image of the registrant to the server; Equipped with The server, a certificate verification means for verifying whether or not the electronic certificate of the My Number card received from the photographing device is valid, in cooperation with an authentication server that provides a public personal authentication service; A face authentication means for performing face authentication between the photographed face image received from the photographing device and the card face image of the My Number card received from the photographing device; an image storage means for storing the captured face image as a registered face image when the certificate verification means determines that the electronic certificate is valid and the face authentication means determines that the registrant is the person in question; An image registration system comprising:

6. An image registration method executed by a photographing device that takes a photograph of a face of a registrant and a server that is connected to the photographing device via a network, comprising: a request receiving step in which the photographing device reads information on the My Number card of the registrant, takes a photograph of the face of the registrant, and transmits the My Number card information and the photographed face image of the registrant to the server, thereby receiving a request for image registration from the registrant; a certificate verification step in which the server cooperates with an authentication server that provides a public personal authentication service to verify whether or not the electronic certificate of the My Number card received from the photographing device is valid; A face authentication step in which the server performs face authentication between the photographed face image received from the photographing device and the card face image of the My Number card received from the photographing device; a registration request step of requesting registration of the captured face image by transmitting the captured face image to an administrative server that provides an administrative service when the server determines in the certificate verification step that the electronic certificate is valid and determines in the face authentication step that the registrant is the person in question; 2. An image registration method comprising:

7. An image registration method executed by a photographing device that takes a photograph of a face of a registrant and a server that is connected to the photographing device via a network, comprising: a request receiving step in which the photographing device reads information on the My Number card of the registrant, takes a photograph of the face of the registrant, and transmits the My Number card information and the photographed face image of the registrant to the server, thereby receiving a request for image registration from the registrant; a certificate verification step in which the server cooperates with an authentication server that provides a public personal authentication service to verify whether or not the electronic certificate of the My Number card received from the photographing device is valid; A face authentication step in which the server performs face authentication between the photographed face image received from the photographing device and the card face image of the My Number card received from the photographing device; an image storage step of storing the captured face image as a registered face image when the server determines in the certificate verification step that the electronic certificate is valid and determines in the face authentication step that the registrant is the person in question; 2. An image registration method comprising:

8. A server connected via a network to a photographing device that photographs the face of a registrant, a certificate verification means for verifying whether or not the electronic certificate of the My Number card of the registrant received from the photographing device is valid, in cooperation with an authentication server that provides a public personal authentication service; A face authentication means for performing face authentication between the photographed face image of the registrant received from the photographing device and the card face image of the My Number card received from the photographing device; a registration request means for requesting registration of the captured face image by transmitting the captured face image to an administrative server that provides administrative services when the certificate verification means determines that the electronic certificate is valid and the face authentication means determines that the registrant is the person in question; A server comprising:

9. A server connected via a network to a photographing device that photographs the face of a registrant, a certificate verification means for verifying whether or not the electronic certificate of the My Number card of the registrant received from the photographing device is valid, in cooperation with an authentication server that provides a public personal authentication service; A face authentication means for performing face authentication between the photographed face image of the registrant received from the photographing device and the card face image of the My Number card received from the photographing device; an image storage means for storing the captured face image as a registered face image when the certificate verification means determines that the electronic certificate is valid and the face authentication means determines that the registrant is the person in question; A server comprising:

10. A program for causing a computer to function as a server connected via a network to a photographing device that photographs the face of a registrant, The computer, a certificate verification means for verifying whether or not the electronic certificate of the My Number card of the registrant received from the photographing device is valid in cooperation with an authentication server that provides a public personal authentication service; A face authentication means for performing face authentication between the photographed face image of the registrant received from the photographing device and the card face image of the My Number card received from the photographing device; a registration request means for requesting registration of the captured face image by transmitting the captured face image to an administrative server that provides administrative services when the certificate verification means determines that the electronic certificate is valid and the face authentication means determines that the registrant is the person in question; A program to function as a

11. A program for causing a computer to function as a server connected via a network to a photographing device that photographs the face of a registrant, The computer, a certificate verification means for verifying whether or not the electronic certificate of the My Number card of the registrant received from the photographing device is valid in cooperation with an authentication server that provides a public personal authentication service; A face authentication means for performing face authentication between the photographed face image of the registrant received from the photographing device and the card face image of the My Number card received from the photographing device; an image storage means for storing the captured face image as a registered face image when the certificate verification means determines that the electronic certificate is valid and the face authentication means determines that the registrant is the person in question; A program to function as a

Images