Information processing system and information processing program

Abstract

To provide an information processing system and an information processing program which prevent illegal registration in user authentication registration using public personal authentication service, and can simply and suitably acquire information on an electronic certificate required for the user authentication registration and personal information.SOLUTION: When a personal identification number input by a user is accepted and authenticated by a first authentication information acceptance unit 42A, a first electronic certificate information acquisition part 42B acquires information on an electronic certificate for user certificate, and a personal information acquisition unit 42C acquires personal information through a ticket surface item input auxiliary application. Subsequently, first authentication units 12 and 42D of an authentication server 10 or a user terminal 40 authenticate the information on the electronic certificate for user certificate and the personal information, and a first user authentication registration unit 42E performs first user authentication registration related to the user.SELECTED DRAWING: Figure 3

Description

[Technical field]

[0001] The present invention relates to an information processing system and an information processing program for performing user authentication and registration using a public personal authentication service. [Background technology]

[0002] The My Number Card, which began to be issued in 2016, is an IC card that can be used as a document certifying one's personal number or as an official identification document for identity verification, and can be used to receive various government services. The My Number Card has a My Number (personal number) printed on its face, which is legally limited to certain administrative uses, and is also equipped with an electronic certificate that can be used widely, including by private businesses, and free space on the IC chip. By using the electronic certificate, private businesses can use the Public Personal Authentication Service (JPKI), a public service for online identity verification.

[0003] Here, there is a technology in which an electronic certificate is read by a card reader from the personal identification number card issued to a user by a government agency, and then transmitted to a first external device that provides a signature verification service, where verification is performed, and information regarding the verification results is provided to a second external device that is the recipient of information regarding the user (Patent Document 1). There is also a technology that has a first contract function where a user not registered in the management server makes a contract based on a My Number card, and a second contract function where a user registered in the management server makes a contract, where the user goes to a convenience store or the like where a reading terminal is installed, specifies the contract on the reading terminal, enters a PIN code, and makes the reading terminal read the My Number card to make the contract (Patent Document 2). In the technology of Patent Document 2, unlike the first contract function, the second contract function does not use a reading terminal, and the user can make a contract just by operating a client terminal (such as a smartphone). [Prior art documents] [Patent documents]

[0004] [Patent Document 1] JP 2019-62284 A [Patent Document 2] Patent No. 6795952 Summary of the Invention [Problem to be solved by the invention]

[0005] However, the techniques described in the above Patent Documents 1 and 2 do not describe the registration of a new user who uses both an electronic certificate that can be used in a public personal authentication service and a predetermined application provided by a public institution.

[0006] The present invention has been made in consideration of the above circumstances, and aims to provide an information processing system and an information processing program that can prevent fraudulent registration in user authentication registration using a public personal authentication service, and can easily and conveniently obtain electronic certificate information and personal information required for user authentication registration. [Means for solving the problem]

[0007] In order to solve the above problem, the information processing system of the present invention is characterized in comprising a first authentication information receiving unit that receives first authentication information by inputting the first authentication information from a user to a user terminal; a first electronic certificate information acquisition unit that acquires information of a first electronic certificate that can be used in a public personal authentication service and does not include personal information of the user when the first authentication information accepted by the first authentication information receiving unit is authenticated; a personal information acquisition unit that acquires the personal information through a predetermined application provided by a public institution when the first authentication information accepted by the first authentication information receiving unit is authenticated; a first authentication unit that authenticates the information of the first electronic certificate acquired by the first electronic certificate information acquisition unit and the personal information acquired by the personal information acquisition unit; and a first user authentication registration unit that performs a first user authentication registration for the user when the information of the first electronic certificate and the personal information are authenticated by the first authentication unit.

[0008] In addition, in order to solve the above problem, the information processing system of the present invention is characterized in that it further includes a second authentication information receiving unit that receives second authentication information by inputting the second authentication information from the user to the user terminal, a second electronic certificate information acquisition unit that acquires information of a second electronic certificate that is usable in the public personal authentication service and includes the personal information when the second authentication information accepted by the second authentication information receiving unit is authenticated, a second authentication unit that authenticates the information of the second electronic certificate acquired by the second electronic certificate information acquisition unit, and a second user authentication registration unit that performs second user authentication registration for the user when the information of the second electronic certificate is authenticated by the second authentication unit.

[0009] Furthermore, in order to solve the above problem, an information processing program according to the present invention is characterized in that it causes a computer to function as a first authentication information receiving unit that receives first authentication information by inputting the first authentication information from a user to a user terminal; a first electronic certificate information acquisition unit that acquires information of a first electronic certificate that can be used in a public personal authentication service and does not contain personal information of the user when the first authentication information accepted by the first authentication information accepting unit is authenticated; a personal information acquisition unit that acquires the personal information through a predetermined application provided by a public institution when the first authentication information accepted by the first authentication information accepting unit is authenticated; an information transmission unit that transmits the information of the first electronic certificate and the personal information to an authentication device that authenticates the information of the first electronic certificate acquired by the first electronic certificate information acquisition unit and the personal information acquired by the personal information acquisition unit; and a first user authentication registration unit that performs first user authentication registration for the user when the information of the first electronic certificate and the personal information are authenticated by the authentication device.

[0010] Furthermore, in order to solve the above problem, an information processing program according to the present invention causes a computer to function as a first authentication information receiving unit that receives first authentication information by inputting the first authentication information from a user to a user terminal; a first electronic certificate information acquisition unit that acquires information of a first electronic certificate that can be used in a public personal authentication service and does not contain personal information of the user when the first authentication information accepted by the first authentication information accepting unit is authenticated; a personal information acquisition unit that acquires the personal information through a predetermined application provided by a public institution when the first authentication information accepted by the first authentication information accepting unit is authenticated; a first authentication unit that authenticates the information of the first electronic certificate acquired by the first electronic certificate information acquisition unit and the personal information acquired by the personal information acquisition unit; and a first user authentication registration unit that performs a first user authentication registration for the user when the information of the first electronic certificate and the personal information are authenticated by the first authentication unit. Effect of the Invention

[0011] According to the present invention, in user authentication and registration using a public personal authentication service, it is possible to prevent fraudulent registration and to easily and conveniently obtain electronic certificate information and personal information required for user authentication and registration. [Brief description of the drawings]

[0012] [Figure 1] 1 is a configuration diagram of an information processing system according to an embodiment of the present invention. [Diagram 2] 2 is a configuration diagram of an authentication server in the information processing system according to an embodiment of the present invention. FIG. [Diagram 3] FIG. 2 is a configuration diagram of a user terminal in an information processing system according to an embodiment of the present invention. [Figure 4] 11 is a flowchart for explaining an onboarding start process in user authentication registration using a public personal authentication service by an information processing system according to an embodiment of the present invention. [Diagram 5] 11 is a diagram for explaining an example of a processing screen by an authentication API displayed on a user terminal of an information processing system according to an embodiment of the present invention. FIG. [Figure 6] 11 is a flowchart for explaining a user authentication registration process using a public personal authentication service that uses a first electronic certificate in an information processing system according to an embodiment of the present invention. [Figure 7] 10 is a flowchart for explaining a user authentication registration process using a public personal authentication service that uses a second electronic certificate in an information processing system 1 according to an embodiment of the present invention. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0013] An information processing system according to an embodiment of the present invention and its operation will be described below with reference to the drawings. Fig. 1 is a configuration diagram of an information processing system 1 according to an embodiment of the present invention. As shown in Fig. 1, the information processing system 1 according to this embodiment is composed of an authentication server 10 of a platform operator, a certificate validation server 20 of the Japan Agency for Local Government Information Systems (J-LIS), a management server 30 of a service provider operator, and a user terminal 40 of an individual user, each of which is connected via a known network 50 such as the Internet or a dedicated line network.

[0014] In the following embodiment, when a user who wishes to receive a service (such as a digital ID app) provided by a private service provider is requested to perform personal authentication by the service provider, the user installs an information processing program including an authentication API (Application Programming Interface) provided by the platform provider on the user's own user terminal 40, and performs personal authentication through a public personal authentication service provided by the platform provider via the authentication API. The public personal authentication service refers to a public service that uses electronic certificates to ensure the prevention of spoofing, tampering, and transmission repudiation, and enables identity verification and electronic application on the Internet.

[0015] The platform operator who operates the authentication server 10 is a private operator who has been certified by the competent minister as meeting certain standards regarding information security, etc., and can be entrusted with signature verification work for the public personal authentication service by other private operators who operate the management server 30. In this embodiment, the platform operator provides a platform that can utilize the My Number card as an online identity verification means to service provider operators, etc. Note that the authentication server 10 performs personal authentication by accessing the certificate verification server 20 of the certification authority J-LIS. In addition, the IC chip of the My Number card is equipped with two electronic certificates by the public personal authentication service as standard: a user authentication electronic certificate (first electronic certificate) and a signature electronic certificate (second electronic certificate). The user authentication electronic certificate can be used to prove that the user operating the card is the person in question, such as when logging in to My Number Portal or using convenience store issuance of a public certificate. In addition, the signature electronic certificate contains four pieces of information, name, address, date of birth, and gender, and can be used when applying an electronic signature to an electronic document or the like and sending it. Furthermore, from January 2016, these two electronic certificates can also be used by private businesses approved by the Minister for Internal Affairs and Communications (such as the platform businesses in this embodiment).

[0016] The service provider that operates the management server 30 is a business that shares information with the platform operator, utilizes a platform that can utilize the platform operator's My Number card as a means of online identity verification, and uses the My Number card to authenticate individual users as a means of online identity verification to provide various services to users. The user terminal 40 is a terminal device used by an individual user who uses various services of a service provider to perform personal authentication, and has a function for reading information from an IC chip of a My Number card, a function for inputting information such as a PIN number by the user, a function for displaying various information such as text and images on a screen, etc. The user terminal 40 may be, for example, a mobile phone such as a smartphone, a tablet, a notebook PC, or a multifunction printer.

[0017] 2 is a configuration diagram of an authentication server 10 in an information processing system 1 according to an embodiment of the present invention. The authentication server 10 includes a communication unit 11 for transmitting and receiving various information to and from a certificate validation server 20, a management server 30, and a user terminal 40, a first authentication unit 12 for authenticating information on a first electronic certificate and personal information, which will be described later, a second authentication unit 13 for authenticating information on a second electronic certificate, which will be described later, a storage unit 14 for storing information in authentication processing and the like, and a user ID issuing unit 15 for issuing one user ID to one user.

[0018] 3 is a configuration diagram of a user terminal 40 in an information processing system 1 according to an embodiment of the present invention. As shown in FIG. 3, the user terminal 40 according to this embodiment includes a communication unit 41, a first user authentication registration function unit 42, a second user authentication registration function unit 43, a display unit 44, and an onboarding start function unit 45. The communication unit 41 includes a communication unit 41 for transmitting and receiving various information to and from the authentication server 10 and the management server 30 via a network 50, a first user authentication registration function unit 42 for performing a first user authentication registration described later, a second user authentication registration function unit 43 for performing a second user authentication registration described later, a display unit 44 for displaying various information, and an onboarding start function unit 45 for performing an interactive process with a user for performing the first and second user authentication registrations from the start of use of the authentication API.

[0019] The first user authentication registration function unit 42 also includes a first authentication information accepting unit 42A that accepts first authentication information input by the user from the user terminal 40, a first electronic certificate information acquisition unit 42B that acquires information of a first electronic certificate (e.g., an electronic certificate for user authentication) when the first authentication information is authenticated, a personal information acquisition unit 42C that acquires personal information when the first authentication information is authenticated, a first user authentication registration unit 42E that performs first user authentication registration for the user when the information of the first electronic certificate and the personal information are authenticated by the authentication server 10, and a first login processing unit 42F that performs a first login process when the information of the first electronic certificate and the personal information are authenticated by the authentication server 10 and the first user authentication registration has already been performed by the first user authentication registration unit 42E. In this embodiment, the information of the first electronic certificate and the personal information acquired by the personal information acquisition unit 42C are authenticated in the first authentication unit 12 of the authentication server 10, but this function may be made one function of the first user authentication registration function unit 42 of the user terminal 40.

[0020] Furthermore, the second user authentication registration function unit 43 includes a second authentication information receiving unit 43A that receives second authentication information input by the user from the user terminal 40, a second electronic certificate information acquisition unit 43B that acquires information of a second electronic certificate (e.g., a signature electronic certificate) when the second authentication information is authenticated, a second user authentication registration unit 43E that performs second user authentication registration for the user when the information of the second electronic certificate is authenticated by the authentication server 10, and a second login processing unit 43F that performs a second login process when the information of the second electronic certificate is authenticated by the authentication server 10 and the second user authentication registration has already been performed by the second user authentication registration unit 43E. In this embodiment, authentication of the information in the second electronic certificate is performed in the second authentication unit 13 of the authentication server 10, but this function may be made one function of the second user authentication registration function unit 43 of the user terminal 40.

[0021] Here, "user authentication registration" means registering that the user is a user who uses at least a part of this information processing system 1 or a service related to this system, after the various pieces of information in question (information on the first electronic certificate, personal information obtained through a specified application, and information on the second electronic certificate) have been authenticated by authentication server 10 (after authentication has been given by JPKI). In addition, a "user registration" that does not involve official personal authentication may be performed separately from the user authentication registration. For example, the user may be registered by registering only a telephone number and an email address, and then the user authentication registration may be performed. Furthermore, the onboarding start function unit 45 includes a restriction information display unit 45A that displays restriction information for a specific user on the display unit 44 of the user terminal 40, and a first user authentication registration promotion information display unit 45B that displays information for promoting first user authentication registration for the specific user on the display unit 44 of the user terminal 40.

[0022] The functions of each of the above-mentioned parts of the user terminal 40 are configured by the hardware and software that make up the user terminal 40, such as a CPU, a ROM storing programs, a RAM, etc., and are designed to perform various processes according to the programs stored in the ROM.

[0023] The following describes the procedure for user registration using the public personal authentication service in the information processing system 1 having the configurations of Figures 1, 2, and 3 described above, with reference to the drawings. Note that an information processing program (hereinafter, a digital ID card application will be taken as an example) including an authentication API provided by a platform operator that provides the public personal authentication service is installed in the user's own user terminal 40, and the user operates the user terminal 40 to receive the personal authentication service.

[0024] 4 is a flowchart for explaining an onboarding start process in user authentication registration using a public personal authentication service by the information processing system 1 according to an embodiment of the present invention. When a user starts a digital identification card application installed in the user terminal 40, an explanation of the application is displayed on the display unit 44 of the user terminal 40 (step S11). On the explanation screen of the application, for example, an explanation of situations in which the digital identification card can be used, how to use it, and an explanation of the advantages of using the application are displayed on the screen.

[0025] As the user continues to read the explanatory screen of the app, the app screen then displays the terms of use and privacy policy of the app (step S12). As the user continues to read the explanatory text on the screen, the app screen then displays confirmation items before registration (for example, a notice that the user should have their My Number card ready) (step S13). At this time, an explanatory text may be displayed to the effect that the information input by the user will be handled securely, to inform the user that the My Number itself will not be obtained and that the input PIN will not be stored at all on the information processing system 1.

[0026] Next, the user uses either the PIN number of the user authentication electronic certificate (first electronic certificate) or the PIN number of the signature electronic certificate (second electronic certificate) to perform user authentication via the public personal authentication service, and selects whether to perform user authentication registration in the service operated by the management server 30 of the service provider (step S14). Note that instead of the PIN number of the user authentication electronic certificate and the PIN number of the signature electronic certificate, other authentication information such as biometric authentication for identifying an individual may be used. Note that the information of the second electronic certificate has a certain restriction (e.g., age restriction) on acquisition or use in the public personal authentication service, and the information of the first electronic certificate has no certain restriction on acquisition or use in the public personal authentication service.

[0027] The method of selecting whether to receive the public personal authentication service using the first electronic certificate or the second electronic certificate may be such that the user is allowed to select using a selection button on the screen, or the public personal authentication service using one of the electronic certificates may be received by default, and if the service cannot be received from that screen, the screen may transition to a screen for receiving the public personal authentication service using the other electronic certificate. In this embodiment, the default process is to transition to a screen for receiving the public personal authentication service using the signature electronic certificate, which is the second electronic certificate, and a user who cannot receive the service is guided to a screen for receiving the public personal authentication service using the user certification electronic certificate, which is the first electronic certificate, and the card information input assistance application.

[0028] That is, at the branch of step S14, the screen transitions to a screen for receiving a public personal authentication service using the electronic signature certificate by default. Then, on the screen of the user terminal 40, the restriction information display unit 45A displays information (restriction information) on caution to the effect that users who have forgotten the PIN for the electronic signature certificate or users of a certain age (e.g., under 15 years old) cannot obtain or use the electronic signature certificate because of the age limit imposed on the use of the service (step S15).

[0029] In addition, the user terminal 40 displays information (first user authentication registration promotion information) promoting first user authentication registration (user authentication registration using the PIN number of the user authentication electronic certificate and a PIN number for assisting in entering details on the card) to a user who has forgotten the PIN number of the signature electronic certificate or a user who has not reached a certain age and is not permitted to use the electronic certificate due to age restrictions (e.g., a user under 15 years old) by the first user authentication registration promotion information display unit 45B (step S16).

[0030] FIG. 5 is a diagram for explaining an example of a processing screen by an information processing program including an authentication API displayed on a user terminal 40 of an information processing system 1 according to an embodiment of the present invention. In FIG. 5(a), an example of a screen of a signature electronic certificate (second electronic certificate) displayed by default on a user terminal 40 of the information processing system 1 according to the present embodiment is displayed on a button 441 on the screen as first user authentication registration promotion information, and a sentence "For those who have forgotten their PIN number and are under 15 years old" is displayed on the button 441 on the screen, and the first user authentication registration is promoted. On the other hand, a user who has memorized the PIN number of the signature electronic certificate and can use the certificate clicks and selects the button 442 to proceed to user authentication and registration processing using the signature electronic certificate, which will be described later. When a user clicks and selects the button 441, the screen transitions to a screen for user authentication and registration processing using a user authentication electronic certificate and a card information input assistance application shown in FIG. 5(b).

[0031] Fig. 6 is a flowchart for explaining a user authentication registration process using a public personal authentication service that uses a first electronic certificate in an information processing system 1 according to an embodiment of the present invention. When the screen shown in Fig. 5(b) is displayed on the user terminal 40, if the user remembers the four-digit PIN code for the "user-certificate electronic certificate" that is the first electronic certificate, the user can click and select button 443 to move to a screen for inputting the PIN code for the user-certificate electronic certificate shown in Fig. 5(c) (step S21).

[0032] Here, when the user inputs a four-digit PIN (first authentication information) for the user authentication electronic certificate and the card information input assistance application from the screen shown in Fig. 5(c) displayed on the user terminal 40, the first authentication information is accepted by the first authentication information accepting unit 42A (step S22). Note that, in addition to a four-digit PIN, the first authentication information may be a password that combines English letters or the like, biometric authentication for identifying an individual, or the like.

[0033] After the first authentication information is accepted by the first authentication information acceptance unit 42A, when the user holds the My Number card over the user terminal 40, authentication is performed on the condition that the input PIN is correct. For example, the authentication process here is performed by transmitting the first authentication information (information related to the PIN) from the user terminal 40 (smartphone, etc.) to the IC chip of the My Number card by, for example, NFC communication. Then, the first electronic certificate information acquisition unit 42B acquires a first electronic certificate (electronic certificate for user authentication) that is usable in the public personal authentication service stored in the IC of the My Number card and does not contain personal information via the public personal authentication application (JPKI-AP) of the My Number card (step S23). Note that, when the smartphone (user terminal 40) is equipped with the function of the electronic certificate of the public personal authentication service, which is a function of the My Number card, the acquisition process of the first electronic certificate may be performed using the smartphone JPKI, and in this case, the first electronic certificate can be acquired from the smartphone JPKI.

[0034] Furthermore, when the first authentication information is accepted by the first authentication information accepting unit 42A and then authenticated by the above process, the personal information acquiring unit 42C acquires personal information including the four pieces of information, that is, name, address, date of birth, and gender, through a predetermined application (for example, a card details input assistance application) provided by a public institution such as a national government, a local government, an independent administrative institution, or a special corporation (step S24). The personal information may be only these four pieces of information, or may be information other than these four pieces of information. Furthermore, the predetermined application may be a card details input assistance application, a resident registration application, or the like, in addition to the card details input assistance application. Furthermore, "provided by a public institution" may mean a case where the information is provided directly by a public institution, or a case where the information is provided indirectly via a private company, etc.

[0035] Next, the information of the first electronic certificate acquired by the first electronic certificate information acquisition unit 42B and the personal information acquired by the personal information acquisition unit 42C are transmitted from the user terminal 40 to the authentication server 10 (the information transmission unit (not shown) of the user terminal 40 may transmit the information), and the first authentication unit 12 of the authentication server 10 authenticates the transmitted information of the first electronic certificate and the personal information (step S25). Here, the first authentication unit 12 acquires information (revocation information) required for verification from a public institution or a corporation managed by a public institution using an authentication device (authentication server 10), performs authenticity judgment on the information of the first electronic certificate acquired by the first electronic certificate information acquisition unit 42B and the personal information acquired by the personal information acquisition unit 42C, and performs authentication if there is no fraud (it is genuine). Note that the function of the first authentication unit 12 may be provided in the first user authentication registration function unit 42 of the user terminal 40 on the client side, not on the authentication server 10 side (for example, the first authentication unit 42D).

[0036] Then, when the first authentication unit 12 authenticates the information of the first electronic certificate and the personal information, the first user authentication registration unit 42E performs the first user authentication registration for the user, and the user ID issuing unit 15 issues a user ID to the user (step S26). By performing the user authentication registration using such a public personal authentication service, the information processing system 1 can prevent unauthorized registration and easily and suitably obtain the information of the electronic certificate and the personal information required for the first user authentication registration. In addition, in the user authentication registration, for example, the user's personal information (name, address, date of birth, sex, etc.), the information of the user authentication electronic certificate (including the user authentication electronic certificate itself, information recorded in the user authentication electronic certificate, etc.), and the information of the signature electronic certificate (including the signature electronic certificate itself, information recorded in the signature electronic certificate, etc.) may be registered (stored). The information recorded in the user authentication electronic certificate may be registered as information separated from the user authentication electronic certificate, and the information recorded in the signature electronic certificate may be registered as information separated from the signature electronic certificate. Furthermore, the user ID issuing unit 15 can issue only one user ID to one user. That is, each user can obtain only one user ID in his / her lifetime. The user ID issued in step S26 is stored in association with the information of the first electronic certificate.

[0037] Then, when the first authentication unit 12 authenticates the information and personal information of the first electronic certificate and the first user authentication registration unit 42E has already performed the first user authentication registration, the first login processing unit 42F performs the first login processing (step S27). That is, this is a pattern (pattern 1) in which a login is performed because a new first user authentication registration is attempted but the first user authentication has already been performed, and the login processing performed by authenticating the information of the first electronic certificate is the first login processing. The user authentication registration processing using the information processing system 1 is performed up to the above-mentioned step S26, but in this system, the user login can be further performed on the same processing flow as the user authentication registration. For example, when a user attempts to perform the first user authentication registration, if the first user authentication registration has already been performed, the first login processing is performed. In other words, if the first user authentication registration has already been performed and each flow of the first user authentication registration (steps S21 to S25 (excluding step S26)) is executed, the first login process is performed instead of the first user authentication registration (step S27).

[0038] In the information processing system 1 according to the present embodiment, when the first authentication unit 42D authenticates the first electronic certificate information and the first user authentication registration unit 42E has already performed the first user authentication registration, the first login processing unit 42F may perform the first login process, i.e., the normal first login process (a login process dedicated to login, different from the first user authentication registration). In this normal first login process, the first electronic certificate information is acquired, and personal information is not acquired through a predetermined application provided by a public institution. In other words, only the first electronic certificate information is acquired.

[0039] Furthermore, in the information processing system 1 according to the present embodiment, when the first authentication unit 12 authenticates the information and personal information of the first electronic certificate, and the second user authentication registration has already been performed by the second user authentication registration unit 43E as described later, the first login processing unit 42F may perform the first login processing. That is, in a pattern (pattern 2) in which a user attempts to newly perform the first user authentication registration but is logged in because the second user authentication registration has already been performed, and even if the second user authentication registration has already been performed by the second user authentication registration unit 43E, the first authentication unit 12 may authenticate the information and personal information of the first electronic certificate, thereby enabling login (the first login processing is performed by the first login processing unit 42F). That is, in pattern 2, a user attempts to newly perform the first user authentication registration, but the second user authentication registration has already been performed, so that the first login processing is performed.

[0040] Furthermore, in the information processing system 1 according to the present embodiment, when the first authentication unit 12 authenticates the information of the first electronic certificate and the first user authentication registration has already been performed by the first user authentication registration unit 42E, or when the first authentication unit 12 authenticates the information of the first electronic certificate and the second user authentication registration has already been performed by the second user authentication registration unit 43E as described later, the first login processing unit 42F may perform the first login processing. That is, there is a pattern (pattern 3) in which the normal first login is performed and a pattern (pattern 4) in which the first login is performed when the second user authentication registration has been performed. Here, in the normal first login processing, authentication of personal information acquired through a predetermined application may not be necessary. Also, even if the second user authentication registration has already been performed by the second user authentication registration unit 43E, the first authentication unit 12 may authenticate the information of the first electronic certificate, thereby enabling login (the first login processing unit 42F may perform the first login processing).

[0041] Furthermore, in addition to the function of the above-mentioned first authentication unit 42D (first authentication unit 12), the functions of the "first authentication information receiving unit 42A", the "first electronic certificate information acquiring unit 42B", the "personal information acquiring unit 42C" and the "first user authentication registration unit 42E" may be provided on the server side (authentication server 10) in addition to being provided on the client side user terminal 40. All of these functions may be provided on the server side, all may be provided on the client side, or only some of the functions may be provided on one side.

[0042] Fig. 7 is a flowchart for explaining a user authentication registration process using a public personal authentication service that uses a second electronic certificate in the information processing system 1 according to an embodiment of the present invention. After the first user authentication registration prompting information display unit 45B displays the first user authentication registration prompting information (displayed on the button 441) shown in Fig. 5(a) in step S16 of the onboarding start process described above, a user who has access to a signature electronic certificate can click and select the button 442 to transition to a screen for inputting, for example, a 6- to 16-digit alphanumeric password (second authentication information) for the signature electronic certificate shown in Fig. 5(d) (step S31).

[0043] Here, when the user inputs a 6- to 16-digit alphanumeric PIN (second authentication information) for the signature electronic certificate from the screen shown in Figure 5 (d) displayed on the user terminal 40, the second authentication information is accepted by the second authentication information accepting unit 43A (step S32).

[0044] After the second authentication information is accepted by the second authentication information accepting unit 43A, when the user holds the My Number card over the user terminal 40, authentication is performed on the condition that the entered PIN is correct. If the authentication is successful, the second electronic certificate information acquiring unit 43B acquires information on the second electronic certificate that can be used in the public personal authentication service and includes personal information (step S33). Note that the authentication process and the contents of the personal information are the same as those in the case of the first electronic certificate by the above-mentioned NFC communication, and therefore will not be described here.

[0045] Next, the information (including personal information) of the second electronic certificate acquired by the second electronic certificate information acquisition unit 43B is authenticated by the second authentication unit 13 of the authentication server 10 (step S34). Here, the second authentication unit 13 acquires information (revocation information) required for verification from a public institution or a corporation managed by a public institution using an authentication device (authentication server 10), performs authenticity determination on the information of the second electronic certificate including the personal information acquired by the second electronic certificate information acquisition unit 43B, and performs authentication if there is no fraud (it is genuine). Note that the function of the second authentication unit 13 may be provided in the second user authentication registration function unit 43 of the user terminal 40 on the client side, rather than on the authentication server 10 side (for example, the second authentication unit 43D).

[0046] Then, after the second authentication unit 13 authenticates the information of the second electronic certificate including the personal information, when the first user authentication registration is performed by the first user authentication registration unit 42E or when the second user authentication registration is performed by the second user authentication registration unit 43E, the user ID issuing unit 15 issues a user ID to the user (step S35). Here, the contents of the user authentication registration are the same as the first user authentication registration described above, so detailed description is omitted. By performing such processing in the information processing system 1, it is possible to prevent unauthorized registration in the user authentication registration using the public personal authentication service and to easily and suitably obtain information on the electronic certificate for signature required for the second user authentication registration. The user ID issuing unit 15 can issue only one user ID to one user, as in the processing in step S26, and the user ID issued in this step S35 is stored in association with information on the second electronic certificate. In addition, the information on the first electronic certificate and the information on the second electronic certificate may be associated with each other.

[0047] In this embodiment, the information on the signature electronic certificate and the information on the user-certificate electronic certificate are linked, the information on the latest signature electronic certificate and the information on past signature electronic certificates are linked, and the information on the latest user-certificate electronic certificate and the information on past user-certificate electronic certificates are linked, and may be stored in the storage unit 14 or the certificate validation server 20. Note that the signature electronic certificate or the user-certificate electronic certificate may become invalid due to a user's relocation or the like, and after the expiration, a new signature electronic certificate or user-certificate electronic certificate is reissued upon an application from the user or the like. The information on the latest electronic certificate and the information on the past electronic certificates (the information on the latest signature electronic certificate and the information on past signature electronic certificates, and the information on the latest user-certificate electronic certificate and the information on past user-certificate electronic certificates) are linked and stored in a database held by J-LIS.

[0048] Then, when the second authentication unit 13 (or the second authentication unit 43D) authenticates the information (including personal information) of the second electronic certificate and the second user authentication registration has already been performed by the second user authentication registration unit 43E, or when the second authentication unit 13 (or the second authentication unit 43D) authenticates the information of the second electronic certificate and the first user authentication registration has already been performed by the first user authentication registration unit 42E, the second login processing unit 43F performs the second login processing (step S36). That is, there are a pattern in which a user tries to newly register a second user authentication and is logged in because the second user authentication and registration has already been performed (Pattern 5), a pattern in which a normal second login is performed (Pattern 6), a pattern in which a user tries to newly register a second user authentication and registration but is logged in because the first user authentication and registration has already been performed (Pattern 7), and a pattern in which a second login is performed when the first user authentication and registration has already been performed (Pattern 8). The login process performed by authenticating the information of the second electronic certificate is defined as the second login process. For example, when the second user authentication and registration has already been performed and each flow (steps S31 to S34 (excluding step S35)) of the second user authentication and registration is performed, the second login process is performed instead of the second user authentication and registration. In addition, in the information processing system 1 according to the present embodiment, a normal second login process (a login-only login process different from the second user authentication and registration) may be performed. Furthermore, even when performing the normal second login process, the second login process may be performed by executing the same flow as the second user authentication registration flow (steps S31 to S34 (excluding step S35)).

[0049] In addition, in the case of pattern 7, even if the first user authentication registration has already been performed by the first user authentication registration unit 42E, the second authentication unit 13 (or the second authentication unit 43D) may authenticate the second electronic certificate to enable login (the second login processing unit 43F may perform the second login processing). For example, when a user attempts to newly perform the second user authentication registration, the second login processing may be performed even though the first user authentication registration has already been performed. Furthermore, in the case of pattern 8, even if the first user authentication registration has already been performed by the first user authentication registration unit 42E, login may be possible by authenticating the information of the second electronic certificate by the second authentication unit 13 (or the second authentication unit 43D) (the second login processing is performed by the second login processing unit 43F).

[0050] Furthermore, in the information processing system 1 according to the present embodiment, when the first user authentication registration is performed by the first user authentication registration unit 42E, or when the second user authentication registration is performed by the second user authentication registration unit 43E, the user ID issuing unit 15 issues a user ID to the user. Here, the user ID issuing unit 15 can issue only one user ID to one user. Note that the information of the signature electronic certificate and the information of the user authentication electronic certificate may be linked, the information of the latest signature electronic certificate and the information of the past signature electronic certificates, and the information of the latest user authentication electronic certificate and the information of the past user authentication electronic certificates may be linked, and may be stored in the storage unit 14 or the certificate validation server 20. Also, the signature electronic certificate or the user authentication electronic certificate may be invalidated due to the user moving, etc., and after the expiration, a new signature electronic certificate or a user authentication electronic certificate may be reissued upon application, etc., from the user. Furthermore, the latest electronic certificate information and past electronic certificate information (the latest signature electronic certificate information and past signature electronic certificate information, and the latest user authentication electronic certificate information and past user authentication electronic certificate information) are linked and stored in a database held by J-LIS.

[0051] As described above, since the user ID issued by the user ID issuing unit 15 is unique identification information for each user, for example, if a user attempts to perform a second user authentication registration after performing a first user authentication registration, the new user authentication registration cannot be performed. In such a case, for example, the first login process may be automatically performed, that is, when a flow of the second user authentication registration (steps S31 to S34 (excluding step S35)) is executed after a certain user has already performed a first user authentication registration. Similarly, when a flow of the first user authentication registration (steps S21 to S25 (excluding step S26)) is executed after a certain user has already performed a second user authentication registration, the second login process may be automatically performed.

[0052] As described above, since the user ID issued by the user ID issuing unit 15 is unique identification information for each user, for example, if a user performs second user authentication registration using information of a second electronic certificate at a certain point in time, and then the second electronic certificate expires, the user cannot obtain or use a new second electronic certificate to perform new second user authentication registration. In such a case, for example, the same automatic login process as described above is performed.

[0053] Further, in addition to the function of the second authentication unit 43D (second authentication unit 13) described above, the functions of the "second authentication information receiving unit 43A", the "second electronic certificate information acquiring unit 43B" and the "second user authentication registration unit 43E" may be provided on the server side (authentication server 10) in addition to being provided on the client side user terminal 40. All of these functions may be provided on the server side, all of them may be provided on the client side, or only some of the functions may be provided on one side.

[0054] As described above, in this embodiment, in order to select either the first user authentication registration or the second user authentication registration in the onboarding start process, the process branches to determine which electronic certificate to use in step S16. In this case, when either the first user authentication registration or the second user authentication registration is performed in one user authentication registration, the other user authentication registration may be disabled, or both the first user authentication registration and the second user authentication registration may be enabled. In addition, the difference between the first electronic certificate and the second electronic certificate described above is that they are used differently depending on whether or not there is an age restriction, but restrictions may also be set based on the user's attributes, career, etc.

[0055] The effects obtained by the first and second user authentication registrations described above are at least partially the same. For example, whether the first user authentication registration or the second user authentication registration is performed, only one user ID is issued to one user by the user ID issuing unit 15 (a user can obtain only one user ID in his / her lifetime). That is, whether the first user authentication registration or the second user authentication registration is performed, the ID issued by the user ID issuing unit 15 is the same. In addition, the service (service to which the user can log in) that the user can use by the first user authentication registration may be the same as the service that the user can use by the second user authentication registration. Specifically, the user may be able to log in to an application in this information processing system 1, log in to an application provided by a service provider company that is in information cooperation with the personal authentication service provided by the platform company, log in to other services, or use other services.

[0056] In addition, the first authentication information mentioned above includes authentication information (such as a PIN) corresponding to the first electronic certificate (electronic certificate for user authentication) and authentication information (such as a PIN) corresponding to a specified application (card information input assistance application).

[0057] Therefore, the first authentication information receiving unit 42A may receive the first authentication information corresponding to the first electronic certificate and the first authentication information corresponding to the predetermined application by inputting the authentication information once. That is, in either case where the authentication information corresponding to the information of the first electronic certificate and the authentication information corresponding to the predetermined application are the same or not the same (including the case where the user mistakenly believes them to be the same), both the authentication information corresponding to the information of the first electronic certificate and the authentication information corresponding to the predetermined application may be received by inputting one authentication information. Specifically, even if the PIN number of the electronic certificate for user authentication and the PIN number of the card-related information input assistance application that the user has set in advance are the same or not the same, the first authentication information receiving unit 42A can receive both the PIN number of the electronic certificate for user authentication and the PIN number of the card-related information input assistance application by inputting the PIN number once. This reduces the user's effort in inputting information by half, shortens the time required for the information input operation and the screen transitions in the information processing system 1, and improves the efficiency of the user authentication and registration process.

[0058] On the other hand, the first authentication information receiving unit 42A may simultaneously receive the authentication information corresponding to the first electronic certificate and the authentication information corresponding to the predetermined application by inputting two pieces of authentication information, that is, the authentication information corresponding to the first electronic certificate and the authentication information corresponding to the predetermined application, from one input screen on the user terminal 40 by the user. That is, whether the authentication information corresponding to the information of the first electronic certificate and the authentication information corresponding to the predetermined application are the same or not (including the case where the user mistakenly believes them to be the same), these two pieces of authentication information may be input from one input screen, and both of these two pieces of authentication information may be simultaneously received. Specifically, on one input screen (meaning an input screen that does not transition to another screen) displayed on the user terminal 40, the PIN number of the user authentication electronic certificate and the PIN number of the card information input assistance application can be input, and the first authentication information receiving unit 42A accepts these two PIN numbers simultaneously. This can reduce the time required for screen transitions for information input operations in the information processing system 1, and improve the efficiency of user authentication and registration processing.

[0059] <Modification> In this embodiment, the input fields for the authentication information of the user-certificate electronic certificate (first electronic certificate) and the authentication information of the signature electronic certificate (second electronic certificate) are displayed on separate input screens, but both of these authentication information input fields may be displayed on one input screen, and either of the input authentication information may be accepted by the first authentication information accepting unit 42A or the second authentication information accepting unit 43A. This allows, for example, a user who possesses a signature electronic certificate to enter a PIN for the signature electronic certificate, and a user who does not possess a signature electronic certificate to enter a PIN for the user-certificate electronic certificate.

[0060] The configuration of the information processing system 1, the authentication server 10, and the user terminal 40 described in this embodiment are merely examples, and may be changed without going beyond the scope of the present invention. The flow of processing in the information processing system 1 is also merely an example, and it is possible to delete unnecessary processing steps, add new processing steps, and replace processing steps without going beyond the scope of the present invention. In this embodiment, information stored in a My Number card is used, but the present invention is not limited to this.

[0061] Below, examples of reference forms are given. 1. A first authentication information receiving unit that receives first authentication information input by a user to a user terminal; a first electronic certificate information acquisition unit that acquires information on a first electronic certificate that can be used in a public personal authentication service and does not include personal information of the user when the first authentication information accepted by the first authentication information acceptance unit is authenticated; a personal information acquiring unit that acquires the personal information through a predetermined application provided by a public institution when the first authentication information accepted by the first authentication information accepting unit is authenticated; a first authentication unit that authenticates information of the first electronic certificate acquired by the first electronic certificate information acquisition unit and the personal information acquired by the personal information acquisition unit; a first user authentication registration unit that performs a first user authentication registration regarding the user when the information of the first electronic certificate and the personal information are authenticated by the first authentication unit; An information processing system comprising: 2. a second authentication information receiving unit that receives second authentication information by inputting the second authentication information from the user to the user terminal; a second electronic certificate information acquisition unit that acquires information of a second electronic certificate that is usable in the public personal authentication service and includes the personal information when the second authentication information accepted by the second authentication information acceptance unit is authenticated; a second authentication unit that authenticates information of the second electronic certificate acquired by the second electronic certificate information acquisition unit; a second user authentication registration unit that performs a second user authentication registration regarding the user when the second authentication unit has authenticated the information of the second electronic certificate; 1. The information processing system according to claim 1, further comprising: 3. The information processing system described in 2., wherein the effects obtained by the first user authentication registration and the effects obtained by the second user authentication registration are at least partially identical. 4. The information in the second electronic certificate has certain restrictions on its acquisition or use in the public personal authentication service; The information of the first electronic certificate does not have the specified restriction on acquisition or use in the public personal authentication service. 2. The information processing system according to claim 2. 5. The information processing system according to claim 4, further comprising a restriction information display unit for displaying restriction information, which is information relating to the specified restriction, on the user terminal. 6. The information processing system described in 4., further comprising a first user authentication registration promotion information display unit that displays first user authentication registration promotion information, which is information promoting the first user authentication registration, on the user terminal for the user who is subject to the specified restriction. 7. The information processing system according to claim 4, wherein the predetermined restriction is an age restriction. 8. The first authentication information includes authentication information corresponding to the first electronic certificate and authentication information corresponding to the predetermined application; The first authentication information receiving unit receives the first authentication information corresponding to the first electronic certificate and the first authentication information corresponding to the predetermined application by inputting one piece of the authentication information. 1. The information processing system according to claim 1. 9. The first authentication information includes authentication information corresponding to the first electronic certificate and authentication information corresponding to the predetermined application; The first authentication information receiving unit simultaneously receives the first authentication information corresponding to the first electronic certificate and the first authentication information corresponding to the predetermined application by inputting two pieces of authentication information, that is, the authentication information corresponding to the first electronic certificate and the authentication information corresponding to the predetermined application, from one input screen on the user terminal from the user. 1. The information processing system according to claim 1. 10. The first electronic certificate is a user authentication electronic certificate; The predetermined application is a card information input assistance application. 1. The information processing system according to claim 1. 11. The first electronic certificate is a user authentication electronic certificate; The predetermined application is a card information input assistance application, The second digital certificate is a signature digital certificate. 2. The information processing system according to claim 1, 12. The information processing system described in 1., further comprising a first login processing unit that performs a first login process when the first authentication unit authenticates the information of the first electronic certificate and the personal information and when the first user authentication registration unit has already performed the first user authentication registration. 13. The information processing system described in 1., further comprising a first login processing unit that performs a first login process when the first authentication unit authenticates the information of the first electronic certificate and the personal information and the second user authentication registration unit has already performed the second user authentication registration. 14. The information processing system described in 2., further comprising a first login processing unit that performs a first login process when the first authentication unit authenticates the information of the first electronic certificate and the first user authentication registration has already been performed by the first user authentication registration unit, or when the first authentication unit authenticates the information of the first electronic certificate and the second user authentication registration has already been performed by the second user authentication registration unit. 15. The information processing system described in 2., further comprising a second login processing unit which performs a second login process when the second authentication unit authenticates the information of the second electronic certificate and the second user authentication registration has already been performed by the second user authentication registration unit, or when the second authentication unit authenticates the information of the second electronic certificate and the first user authentication registration has already been performed by the first user authentication registration unit. 16. The method further includes a user ID issuing unit that issues a user ID to the user when the first user authentication registration is performed by the first user authentication registration unit; The information processing system according to claim 1, wherein the user ID issuing unit is capable of issuing only one user ID to one user. 17. The method further includes a user ID issuing unit that issues a user ID to the user when the first user authentication registration is performed by the first user authentication registration unit or when the second user authentication registration is performed by the second user authentication registration unit; The information processing system according to 2., wherein the user ID issuing unit is capable of issuing only one user ID to one user. 18. Computers, a first authentication information receiving unit that receives first authentication information by inputting the first authentication information from a user to a user terminal; a first electronic certificate information acquisition unit that acquires information on a first electronic certificate that can be used in a public personal authentication service and does not include personal information of a user when the first authentication information accepted by the first authentication information acceptance unit is authenticated; a personal information acquiring unit that acquires the personal information through a predetermined application provided by a public institution when the first authentication information accepted by the first authentication information accepting unit is authenticated; an information transmitting unit that transmits the information on the first electronic certificate acquired by the first electronic certificate information acquiring unit and the personal information acquired by the personal information acquiring unit to an authentication device that authenticates the information on the first electronic certificate acquired by the first electronic certificate information acquiring unit and the personal information acquired by the personal information acquiring unit; a first user authentication registration unit that performs a first user authentication registration for the user when the information of the first electronic certificate and the personal information are authenticated by the authentication device; An information processing program that functions as a 19. Computers, a first authentication information receiving unit that receives first authentication information by inputting the first authentication information from a user to a user terminal; a first electronic certificate information acquisition unit that acquires information on a first electronic certificate that can be used in a public personal authentication service and does not include personal information of the user when the first authentication information accepted by the first authentication information acceptance unit is authenticated; a personal information acquiring unit that acquires the personal information through a predetermined application provided by a public institution when the first authentication information accepted by the first authentication information accepting unit is authenticated; a first authentication unit that authenticates information of the first electronic certificate acquired by the first electronic certificate information acquisition unit and the personal information acquired by the personal information acquisition unit; a first user authentication registration unit that performs a first user authentication registration for the user when the first authentication unit has authenticated the information in the first electronic certificate and the personal information; An information processing program that functions as a [Explanation of symbols]

[0062] 1. Information Processing Systems 10 Authentication Server 12, 42D First Certification Section 13, 43D Second Certification Section 15 User ID Issuance Department 40 User terminal 42 First user authentication registration function unit 42A First authentication information reception section 42B First electronic certificate information acquisition unit 42C Personal Information Acquisition Department 42E First user authentication registration unit 42F 1st login processing section 43 Second user authentication registration function unit 43A Second authentication information reception section 43B Second electronic certificate information acquisition unit 43E Second user authentication registration section 43F 2nd login processing section 45 Onboarding Start Function 45A Restriction information display section 45B First user authentication registration promotion information display section

Claims

1. a first authentication information receiving unit that receives first authentication information by inputting the first authentication information from a user to a user terminal; a first electronic certificate information acquisition unit that acquires information of a first electronic certificate that can be used in a public personal authentication service and does not include personal information of the user when the first authentication information accepted by the first authentication information acceptance unit is authenticated; a personal information acquiring unit that acquires the personal information through a predetermined application provided by a public institution when the first authentication information accepted by the first authentication information accepting unit is authenticated; a first authentication unit that authenticates information on the first electronic certificate acquired by the first electronic certificate information acquisition unit and the personal information acquired by the personal information acquisition unit; a first user authentication registration unit that performs a first user authentication registration regarding the user when the information of the first electronic certificate and the personal information are authenticated by the first authentication unit; An information processing system comprising:

2. a second authentication information receiving unit that receives second authentication information by inputting the second authentication information from the user to the user terminal; a second electronic certificate information acquisition unit that acquires information of a second electronic certificate that is usable in the public personal authentication service and includes the personal information when the second authentication information accepted by the second authentication information acceptance unit is authenticated; a second authentication unit that authenticates information of the second electronic certificate acquired by the second electronic certificate information acquisition unit; a second user authentication registration unit that performs a second user authentication registration regarding the user when the second authentication unit has authenticated the information of the second electronic certificate; The information processing system according to claim 1 , further comprising:

3. 3. The information processing system according to claim 2, wherein effects obtained by the first user authentication registration and effects obtained by the second user authentication registration are at least partially the same.

4. the information of the second electronic certificate has a predetermined restriction on acquisition or use in the public personal authentication service; The information of the first electronic certificate does not have the predetermined restriction on acquisition or use in the public personal authentication service.

3. The information processing system according to claim 2.

5. 5. The information processing system according to claim 4, further comprising a restriction information display unit for displaying restriction information, which is information related to the predetermined restriction, on the user terminal.

6. The information processing system according to claim 4, further comprising a first user authentication registration promotion information display unit that displays first user authentication registration promotion information, which is information that promotes the first user authentication registration, for the user who is subject to the specified restriction, on the user terminal.

7. 5. The information processing system according to claim 4, wherein the predetermined restriction is an age restriction.

8. the first authentication information includes authentication information corresponding to the first electronic certificate and authentication information corresponding to the predetermined application; The first authentication information receiving unit receives the first authentication information corresponding to the first electronic certificate and the first authentication information corresponding to the predetermined application by inputting one piece of the authentication information.

2. The information processing system according to claim 1 .

9. the first authentication information includes authentication information corresponding to the first electronic certificate and authentication information corresponding to the predetermined application; The first authentication information receiving unit simultaneously receives the first authentication information corresponding to the first electronic certificate and the first authentication information corresponding to the predetermined application by inputting two pieces of authentication information, that is, the authentication information corresponding to the first electronic certificate and the authentication information corresponding to the predetermined application, from one input screen on the user terminal from the user.

2. The information processing system according to claim 1 .

10. the first electronic certificate is a user-certificate electronic certificate, The predetermined application is a card information input assistance application.

2. The information processing system according to claim 1 .

11. the first electronic certificate is a user-certificate electronic certificate, The predetermined application is a card information input assistance application, The second digital certificate is a signature digital certificate.

3. The information processing system according to claim 2.

12. The information processing system according to claim 1, further comprising a first login processing unit that performs a first login process when the first authentication unit authenticates the information of the first electronic certificate and the personal information and when the first user authentication registration unit has already performed the first user authentication registration.

13. The information processing system according to claim 2, further comprising a first login processing unit that performs a first login process when the first authentication unit authenticates the information of the first electronic certificate and the personal information and when the second user authentication registration unit has already performed the second user authentication registration.

14. The information processing system according to claim 2, further comprising a first login processing unit that performs a first login process when the first authentication unit authenticates the information of the first electronic certificate and the first user authentication registration has already been performed by the first user authentication registration unit, or when the first authentication unit authenticates the information of the first electronic certificate and the second user authentication registration has already been performed by the second user authentication registration unit.

15. The information processing system according to claim 2, further comprising a second login processing unit that performs a second login process when the second authentication unit authenticates the information of the second electronic certificate and the second user authentication registration has already been performed by the second user authentication registration unit, or when the second authentication unit authenticates the information of the second electronic certificate and the first user authentication registration has already been performed by the first user authentication registration unit.

16. a user ID issuing unit that issues a user ID to the user when the first user authentication registration unit has performed the first user authentication registration, 2. The information processing system according to claim 1, wherein the user ID issuing unit is capable of issuing only one user ID to one user.

17. a user ID issuing unit that issues a user ID to the user when the first user authentication registration is performed by the first user authentication registration unit or when the second user authentication registration is performed by the second user authentication registration unit, 3. The information processing system according to claim 2, wherein the user ID issuing unit is capable of issuing only one user ID to one user.

18. Computer, a first authentication information receiving unit that receives first authentication information by inputting the first authentication information from a user to a user terminal; a first electronic certificate information acquisition unit that acquires information of a first electronic certificate that can be used in a public personal authentication service and does not include personal information of the user when the first authentication information accepted by the first authentication information acceptance unit is authenticated; a personal information acquiring unit that acquires the personal information through a predetermined application provided by a public institution when the first authentication information accepted by the first authentication information accepting unit is authenticated; an information transmitting unit that transmits the information on the first electronic certificate and the personal information to an authentication device that authenticates the information on the first electronic certificate acquired by the first electronic certificate information acquiring unit and the personal information acquired by the personal information acquiring unit; a first user authentication registration unit that performs a first user authentication registration for the user when the information of the first electronic certificate and the personal information are authenticated by the authentication device; An information processing program that functions as a

19. Computer, a first authentication information receiving unit that receives first authentication information by inputting the first authentication information from a user to a user terminal; a first electronic certificate information acquisition unit that acquires information of a first electronic certificate that can be used in a public personal authentication service and does not include personal information of the user when the first authentication information accepted by the first authentication information acceptance unit is authenticated; a personal information acquiring unit that acquires the personal information through a predetermined application provided by a public institution when the first authentication information accepted by the first authentication information accepting unit is authenticated; a first authentication unit that authenticates information on the first electronic certificate acquired by the first electronic certificate information acquisition unit and the personal information acquired by the personal information acquisition unit; a first user authentication registration unit that performs a first user authentication registration for the user when the first authentication unit has authenticated the information in the first electronic certificate and the personal information; An information processing program that functions as a

Images