Authentication system and authentication method

Abstract

To reduce a user's distrust of or sense of unfairness to future agreement.SOLUTION: An authentication system authenticates a user regarding entry into a specific area or utilization of specific services provided in the specific area, and includes one or multiple storage devices for storing a user's agreement situation with an agreement items required in the specific area or when utilizing the specific services, one or multiple processors, and a communication terminal. The one or multiple processors are configured so as to execute agreement confirmation processing for receiving a user's agreement via the communication terminal, update processing for updating an agreement situation according to presence or absence of agreement, and authentication processing for permitting entry into a specific area or utilization of specific services on condition of agreement. The agreement confirmation processing includes: detection processing for detecting a user's departure from a specific area; and withdrawal confirmation processing for receiving withdrawal of agreement from a user via the communication terminal at the time of departure.SELECTED DRAWING: Figure 4

Description

[Technical field]

[0001] The present disclosure relates to a technique for authenticating a user with respect to entering a specific area or using a service provided in a specific area. [Background technology]

[0002] Patent Document 1 discloses an information processing device. The information processing device acquires permission information indicating the presence or absence of permission for information acquisition from each service included in a predetermined linked service composed of multiple services. Then, before executing the linked service, the information processing device performs a process of presenting a screen for setting consent for information acquisition from each service collectively using the acquired permission information. More specifically, when executing a linked service that has been executed once for the second or subsequent time, the information processing device acquires information from each service according to the settings at the time of the first execution of the linked service without presenting the above screen. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Patent Publication No. 2021-124775 Summary of the Invention [Problem to be solved by the invention]

[0004] When entering a specific area or using a service provided in a specific area, the user may be required by the authentication system to agree to terms and conditions required within the specific area or when using a specific service. However, the contents of the terms and conditions may not always be the same and may change after the user leaves the specific area. As a result, the terms and conditions that the user recognizes may differ from the terms and conditions that the user actually recognizes. If the user later realizes that a different agreement was made without his or her knowledge, the user may feel distrustful or unfair about future agreements.

[0005] The present disclosure has been made in consideration of the above-mentioned problems, and aims to provide an authentication system and authentication method that can reduce a user's distrust or sense of unfairness regarding future consent. [Means for solving the problem]

[0006] The authentication system according to the present disclosure is configured to authenticate a user with respect to entering a specific area or using a specific service provided in the specific area. The authentication system includes one or more storage devices, one or more processors, and a communication terminal. The one or more storage devices store a user's consent status for consent items required in the specific area or when using the specific service. The communication terminal is operated by the user. The one or more processors are configured to execute a consent confirmation process for receiving consent from the user via the communication terminal, an update process for updating the consent status depending on the presence or absence of consent, and an authentication process for permitting entry into the specific area or use of the specific service on the condition that consent is present. The consent confirmation process includes a detection process for detecting the user's exit from the specific area, and a withdrawal confirmation process for accepting withdrawal of consent from the user via the communication terminal upon exit.

[0007] The authentication method according to the present disclosure uses a computer to authenticate a user with respect to entry into a specific area or use of a specific service provided in the specific area. The computer is configured to be able to access one or more storage devices that store the user's consent status for consent items required in the specific area or when using the specific service. The authentication method includes executing, by the computer, a consent confirmation process that accepts consent from the user via a communication terminal operated by the user, an update process that updates the consent status depending on the presence or absence of consent, and an authentication process that permits entry into the specific area or use of the specific service on the condition that consent is given. The consent confirmation process includes a detection process that detects the user's exit from the specific area, and a withdrawal confirmation process that accepts withdrawal of consent from the user via the communication terminal upon exit. Effect of the Invention

[0008] According to the present disclosure, when a user leaves a specific area, the user can be asked to confirm that the consent continues, which can reduce the user's distrust or sense of unfairness regarding future consent. [Brief description of the drawings]

[0009] [Figure 1] 1 is a diagram illustrating an example of a configuration of an authentication system according to an embodiment. [Diagram 2] 2 is a diagram for explaining a specific area where user authentication is performed by the authentication system shown in FIG. 1. FIG. [Diagram 3] 11 is a flowchart showing an example of a basic process flow regarding user authentication according to the embodiment. [Figure 4] 13 is a flowchart showing an example of the flow of consent confirmation processing PR1 executed when exiting a specific area. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0010] An authentication system 1 and an authentication method according to an embodiment of the present disclosure will be described with reference to the accompanying drawings.

[0011] 1. Authentication system configuration Fig. 1 is a diagram illustrating an example of a configuration of an authentication system 1 according to an embodiment. Fig. 2 is a diagram illustrating a specific area 100 in which user authentication is performed by the authentication system 1 illustrated in Fig. 1.

[0012] The authentication system 1 is configured to perform user authentication regarding entry into a specific area 100 or use of a specific service S provided in the specific area 100. The specific area 100 is, for example, an event venue, an art gallery, a museum, a specific region, or a city. The city is, for example, a smart city. The specific service S is, for example, operation of an exhibit, an activity, or trying on clothes.

[0013] The authentication system 1 includes, for example, a server 10, a communication terminal 20, a user position detection device 30, and an authentication device 40.

[0014] The server 10 is a computer including one or more processors 12 (hereinafter simply referred to as processor 12) and one or more storage devices 14 (hereinafter simply referred to as storage devices 14), and is constructed, for example, on the Internet. The server 10 is connected to each of the communication terminal 20, the user position detection device 30, and the authentication device 40 via a communication network 3. Therefore, the server 10 can transmit information to and from each of the user position detection device 30 and the authentication device 40.

[0015] The processor 12 executes various processes related to user authentication, which will be described later. The storage device 14 stores various information related to the various processes. The various information includes a computer program executed by the processor 12. The processor 12 executes the computer program, thereby realizing various processes by the processor 12. The various information also includes a database of information related to authentication of each user (e.g., user 2). The information in the database includes personal information identifying each user who uses the specific area 100, and the "consent status CS" of each user. The consent status CS is information indicating the status of consent (presence or absence of consent) of a user to the "consent items CM" described later that are required within the specific area 100 or when using the specific service S. More specifically, the consent status CS is stored for each user in association with personal information identifying each user.

[0016] The communication terminal 20 is operated by the user 2. The communication terminal 20 is, for example, a mobile terminal such as a smartphone carried by the user 2. A predetermined application related to user authentication according to this embodiment is installed in the communication terminal 20. Alternatively, the communication terminal 20 may be, for example, a fixed terminal installed at an entrance / exit 102 of the specific area 100 or a location where a specific service S is provided (for example, provision locations 104 and 106).

[0017] More specifically, communication terminal 20 includes an input unit that accepts operations of user 2, and an output unit (display unit) that displays information to user 2. The operations of user 2 accepted by the input unit include operations of user 2 to indicate whether or not the user agrees to the consent items CM.

[0018] The user position detection device 30 is a device that detects the position of the user 2, and includes, for example, a Global Navigation Satellite System (GNSS) receiver. With the user position detection device 30, it is possible to detect at least the position of the user 2 relative to the specific area 100.

[0019] The authentication device 40 operates according to instructions from the server 10 (processor 12) that executes the "authentication process PR3" described below, and acquires user information Iu that identifies the user 2 to be authenticated. The authentication device 40 includes equipment necessary for authentication using a predetermined authentication method. Examples of the predetermined authentication method are authentication of the fingerprint or face of the user 2, or authentication of an IC (Integrated Circuit) card held by the user 2. As shown in FIG. 2, the authentication device 40 is installed at an entrance / exit 102 of the specific area 100. In addition, the authentication device 40 is installed at each of the locations 104 and 106 where a specific service S is provided within the specific area 100.

[0020] The above-mentioned communication terminal 20, user position detection device 30, and authentication device 40 may be configured as follows, for example. That is, the user position detection device 30 may be configured integrally with the communication terminal 20, and therefore the server 10 may obtain the position information of the user 2 from the communication terminal 20. In addition, in an example in which the communication terminal 20 is a fixed terminal, the communication terminal 20 may be configured integrally with the authentication device 40. Furthermore, the authentication device 40 may be configured integrally with a device (e.g., a bar 102a installed at the entrance / exit 102) that operates depending on whether the user 2 can enter the specific area 100. Similarly, the authentication device 40 may be configured integrally with a device (e.g., a device that turns on and off a service providing device) that operates depending on whether the user 2 can use the specific service S.

[0021] 2.Various processes related to user authentication The user 2 is asked to agree to certain "consent items CM" when in the specific area 100 or when using the specific service S. The consent items CM relate to, for example, data collection, use of collected data, prohibition on photography, prohibition on touching exhibits, compliance with rules (e.g., Food Sanitation Law), and understanding of policies (e.g., the purpose of the event).

[0022] The various processes executed by the processor 12 in the authentication system 1 include an "agreement confirmation process PR1", an "update process PR2", and an "authentication process PR3".

[0023] In a consent confirmation process PR1, the processor 12 accepts consent to the consent items CM from the user 2 via the communication terminal 20. In an update process PR2, the processor 12 updates the consent status CS depending on the presence or absence of consent from the user 2. In an authentication process PR3, the processor 12 permits the user 2 to enter the specific area 100 or to use the specific service S, on the condition that consent is given.

[0024] The contents of the agreement terms CM are not always the same, and may change after the user 2 leaves the specific area 100. As a result, the actual agreement terms CM may differ from the agreement terms CM recognized by the user 2. For example, if the specific area 100 is a space where the user 2 lives all the time, such as a city, it is expected that the actual agreement terms CM will gradually differ from the user 2's recognition. If the user later realizes that an agreement different from his / her recognition was made without his / her knowledge, the user may feel distrustful or unfair about future agreements.

[0025] In view of the above-mentioned problems, the consent confirmation process PR1 of this embodiment includes the following "detection process PR11" and "withdrawal confirmation process PR12." In the detection process PR11, the processor 12 detects the exit of the user 2 from the specific area 100. In the withdrawal confirmation process PR12, the processor 12 accepts withdrawal of consent from the user 2 via the communication terminal 20 at the time of the exit.

[0026] 3 is a flowchart showing an example of a basic process flow for user authentication according to an embodiment. For example, when the user position detection device 30 detects that the user 2 is at the entrance / exit 102 of the specific area 100 or at a location where a specific service S is provided within the specific area 100, the processor 12 executes the process of this flowchart. Alternatively, the process of this flowchart may be executed, for example, when the server 10 receives a request from the user 2 to enter the specific area 100 or to use the specific service S via the communication terminal 20 or the authentication device 40.

[0027] In step S100 (consent confirmation processing PR1), the processor 12 notifies the communication terminal 20 that consent to the consent items CM is required to enter the specific area 100 or to use the specific service S. Then, the processor 12 accepts consent from the user 2 via the communication terminal 20. The processor 12 also uses the authentication device 40 to identify the user 2 to be authenticated.

[0028] The communication terminal 20 displays the notification received from the server 10 on an output unit. When the user 2 operates the communication terminal 20 regarding the presence or absence of consent, the communication terminal 20 transmits information Ic indicating the presence or absence of consent to the server 10. When the server 10 receives the information Ic from the communication terminal 20 and also receives user information Iu identifying the user 2 from the authentication device 40, the process proceeds to step S102.

[0029] In step S102, the processor 12 determines whether or not the identified user 2 has given consent based on the above information Ic and user information Iu. If the identified user 2 has given consent (step S102; Yes), the process proceeds to step S104. On the other hand, if the identified user 2 has not given consent (step S102; No), the process proceeds to step S108.

[0030] In step S104 (update process PR2), the processor 12 updates the consent status CS to indicate a state of "consented". The updated consent status CS is stored in the storage device 14. Note that the update here includes maintaining the state of "consented" based on the past update. Next, in step S106, the processor 12 permits the user 2 to enter the specific area 100 or to use the specific service S by the user 2, which is the subject of the current consent (authentication process PR3). As a result, for example, the entrance / exit 102 of the specific area 100 is opened.

[0031] In step S108 (update process PR2), the processor 12 updates the consent status CS to indicate the "no consent" state. The updated consent status CS is stored in the storage device 14. Note that the update here includes maintaining the "no consent" state based on the past update. Next, in step S110, the processor 12 does not permit the user 2 to enter the specific area 100 or to use the specific service S by the user 2, which is the subject of the current consent (authentication process PR3). As a result, for example, the entrance / exit 102 is not opened.

[0032] If the consent in the consent confirmation process PR1 previously performed for the same user 2 is valid (i.e., if the user 2 has not previously withdrawn consent (see FIG. 4) when exiting the specific area 100), the process of step S100 may be simplified as follows. That is, only the process of identifying the user 2 using the authentication device 40 may be executed.

[0033] 4 is a flowchart showing an example of the flow of the consent confirmation process PR1 executed when exiting the specific area 100. The process of this flowchart is executed in parallel with the process shown in FIG.

[0034] In step S200 (detection process PR11), the processor 12 determines whether or not the user 2, who is the subject of the process shown in FIG. 3, has left the specific area 100. Specifically, in the detection process PR11, the processor 12 detects that the user 2 has left the specific area 100 by, for example, confirming that the user 2 has moved outside the specific area 100 based on information from the user position detection device 30. However, in the detection process PR11, instead of the user 2 having left the specific area 100, the processor 12 may detect that the user 2 is about to leave the specific area 100 while in the specific area 100. For example, the processor 12 may confirm that the user 2 is near the entrance / exit 102 based on information from the user position detection device 30 or information from the authentication device 40 installed at the entrance / exit 102, and may detect the exit upon receiving a request for exit from the user 2 via the communication terminal 20 or the authentication device 40.

[0035] If there is no exit from the specific area 100 (step S200; No), the process proceeds to the end. On the other hand, if there is an exit from the specific area 100 (step S200; Yes), the process proceeds to step S202 (withdrawal confirmation process PR12). As a result, when the user 2 exits, the processor 12 transmits a notification to the communication terminal 20 to confirm whether or not consent has been withdrawn. Then, the processor 12 accepts the withdrawal of consent from the user 2 via the communication terminal 20. The processor 12 also uses the authentication device 40 to identify the user 2 who is the subject of authentication at the time of exit. In addition, if the user 2 has given multiple consents through entering the specific area 100 and using the specific service S, the processes from step S202 onwards regarding the withdrawal of consent may be performed for each individual consent, or may be performed collectively for all consents.

[0036] When the user 2 operates the communication terminal 20 to determine whether or not to withdraw consent, the communication terminal 20 transmits information Iw indicating whether or not the consent has been withdrawn to the server 10. When the server 10 receives the information Iw from the communication terminal 20 and also receives user information Iu that identifies the user 2 from the authentication device 40, the process proceeds to step S204.

[0037] In step S204, the processor 12 determines whether the specified user 2 has withdrawn consent based on the above information Iw and user information Iu. If the consent has not been withdrawn (step S204; No), the process proceeds to the end. On the other hand, if the consent has been taken up (step S204; Yes), the process proceeds to step S206.

[0038] In step S206 (update process PR2), the processor 12 updates the consent status CS for the consent to be withdrawn to indicate the state of “no consent” in response to the withdrawal request from the user 2. The updated consent status CS is stored in the storage device 14.

[0039] Next, in step S208, the processor 12 executes a process for withdrawing the consent to be withdrawn. Specifically, the processor 12 executes a process for invalidating the consent in conjunction with, for example, the exit (in other words, immediately after receiving the exit).

[0040] Alternatively, in step S208, the processor 12 may execute a process of invalidating the consent after a predetermined period T has elapsed since the exit. The predetermined period T here is not particularly limited, and may be set, for example, in units of days, weeks, or months. In addition, whether or not to set the predetermined period T for invalidating the consent, and the length of the predetermined period T may be selectable by the user 2 who wishes to withdraw. The processor 12 may transmit a notification to the communication terminal 20 requesting the user 2 to make the selection. Note that, when the invalidation of the consent is completed, the server 10 may transmit a notification to the communication terminal 20 informing the completion of the invalidation.

[0041] 3.Effects As described above, according to this embodiment, when the user 2 exits the specific area 100, a withdrawal confirmation process PR12 is executed to accept withdrawal of consent from the user 2 via the communication terminal 20. That is, when exiting, the user 2 can be asked to confirm that consent will continue. This makes it possible to reduce the user 2's distrust or sense of unfairness regarding future consent.

[0042] In addition, an example in which a process to quickly invalidate consent when the user exits the device if the user accepts a withdrawal of consent is useful for users who are concerned that consent different from their own understanding may be given without their knowledge.

[0043] In addition, the frequency of use of the specific area 100 itself or the specific service S may differ from user to user. For this reason, a user who plans to return to the specific area 100 in the near future may find it troublesome to be asked for consent every time they use the area. In this regard, in an example in which a process of invalidating consent is executed after a predetermined period T has elapsed since the user left the area, it is possible to reduce the distrust or unfairness of user 2 regarding future consent while taking into consideration the convenience of the user. [Explanation of symbols]

[0044] REFERENCE SIGNS LIST 1 authentication system, 2 user, 3 communication network, 10 server, 12 processor, 14 storage device, 20 communication terminal, 30 user location detection device, 40 authentication device, 100 specific area, 104, 106 location where specific service is provided

Claims

1. An authentication system for authenticating a user with respect to entering a specific area or using a specific service provided in the specific area, comprising: one or more storage devices for storing the consent status of the user with respect to consent items required for use in the specific area or when using the specific service; one or more processors; a communication terminal operated by the user; Equipped with The one or more processors: a consent confirmation process for accepting the consent from the user via the communication terminal; an update process for updating the consent status depending on the presence or absence of the consent; an authentication process for permitting entry into the specific area or use of the specific service on the condition that the consent is given; configured to run The consent confirmation process includes: a detection process for detecting an exit of the user from the specific area; a withdrawal confirmation process of accepting withdrawal of the consent from the user via the communication terminal when the user leaves; Includes 1. An authentication system comprising:

2. When the withdrawal confirmation process accepts the withdrawal, the one or more processors execute a process of invalidating the consent in conjunction with the withdrawal.

2. The authentication system according to claim 1 .

3. When the withdrawal is accepted in the withdrawal confirmation process, the one or more processors execute a process of invalidating the consent after a predetermined period of time has elapsed since the exit.

2. The authentication system according to claim 1 .

4. 1. An authentication method for authenticating a user with respect to entering a specific area or using a specific service provided in the specific area by a computer, comprising: The computer is configured to be able to access one or more storage devices that store the consent status of the user with respect to consent items required for use in the specific area or when using the specific service, The authentication method includes: a consent confirmation process for accepting the consent from the user via a communication terminal operated by the user; an update process for updating the consent status depending on the presence or absence of the consent; an authentication process for permitting entry into the specific area or use of the specific service on the condition that the consent is given; by said computer, The consent confirmation process includes: a detection process for detecting an exit of the user from the specific area; a withdrawal confirmation process of accepting withdrawal of the consent from the user via the communication terminal when the user leaves; Includes 13. An authentication method comprising:

Images