Authentication device, program and authentication method

Abstract

To provide, in a virtual space known as a metaverse, which can be shared by a plurality of users or at which they can interact each other, an authentication device for authenticating users who wish to use services provided internally.SOLUTION: In a metaverse management system, a management server, which is an authentication device, acquires motion information indicating motions of a first character, which is a virtual character that moves within a virtual space in response to operation of a first user, and authenticates the first user using motion characteristics of the first character indicated by the acquired motion information. A service providing server determines to start authentication processing of the first user, and executes information management processing when the server determines to start the authentication processing of the first user.SELECTED DRAWING: Figure 2

Description

[Technical field]

[0001] The present invention relates to an authentication device, a program, and an authentication method. [Background technology]

[0002] Patent Document 1 discloses that a user or a terminal using a virtual space is authenticated by using authentication information in which a user ID or a terminal ID is linked to a password. Non-Patent Document 1 discloses that a virtual lounge has been opened in the metaverse. Non-Patent Document 2 discloses a system that implements a biometric authentication function on the metaverse. (Prior art document) (Patent Documents) (Patent Document 1) Patent No. 7043567 (Non-Patent Literature) (Non-Patent Document 1) Bloomberg, "JP Morgan opens lounge in metaverse - Dimon's portrait greets", [online], [searched March 22, 2023], Internet,<URL: https: / / www.bloomberg.co.jp / news / articles / 2022-02-16 / R7D6BOT1UM0W01> (Non-Patent Document 2) bp-Affairs, "Realizing Next-Generation Virtual Spaces and Using Metaverse with Biometric Authentication," [online], [searched March 22, 2023], Internet,<https: / / bp-affairs.com / news / 2022 / 07 / 20220729-11722.html> Summary of the Invention [Means for solving the problem]

[0003] In a first aspect of the present invention, an authentication device is provided. The authentication device authenticates, for example, a first user who wishes to use a service provided in a virtual space that can be shared or interacted with by multiple users. The authentication device includes, for example, a motion information acquisition unit that acquires motion information indicating a motion of a first character, which is a virtual character that moves in response to an operation by the first user in the virtual space. The authentication device includes, for example, an authentication unit that authenticates the first user using a feature of the motion of the first character indicated by the motion information acquired by the motion information acquisition unit.

[0004] The authentication device may include a start determination unit that determines to start authentication processing of the first user in the authentication unit. The authentication device may include an information management unit that executes information management processing, which is (i) processing for concealing an action of the first character based on an operation of the first user from a second user who is different from the first user, or (ii) processing for making it difficult for the second user to recognize the action of the first character based on an operation of the first user, when the start determination unit determines to start authentication processing of the first user.

[0005] In the above authentication device, the information management process may include a procedure for transmitting at least one of (i) a first request signal, (ii) a second request signal, (iii) a third request signal, and (iv) a fourth request signal to (a) a user terminal that is an information processing device used by the first user to use the virtual space or service, or (b) a virtual space construction device that is an information processing device that constructs and / or operates the virtual space. (i) The first request signal may be a signal requesting construction of a virtual object capable of blocking at least a part of the first character around the first character. (ii) The second request signal may be a signal requesting movement of at least a part of the first character into an authentication space that is a virtual space constructed within the virtual space and whose interior is not presented to the second user. (iii) The third request signal may be a signal requesting replacement of at least a part of an image of the first character presented to the second user with another image. (iv) The fourth request signal may be a signal requesting not to present at least a part of an image of the first character to the second user.

[0006] In the above authentication device, the information management process may include a procedure for transmitting a first request signal, a second request signal, a third request signal, and / or a fourth request signal to a user terminal. In the above authentication device, each of the first request signal, the second request signal, the third request signal, and the fourth request signal may include an instruction to a computer of the user terminal, the instruction including an instruction to access the virtual space construction device and cause the virtual space construction device to change a position or a setting of the first character.

[0007] In the above authentication device, the authentication unit may include a motion detection unit that detects motion characteristics of the first character. The authentication unit may include an appearance detection unit that detects appearance characteristics of the first character. The authentication unit may include a determination unit that determines that the first user is a valid user or the person in question when (a) the motion characteristics detected by the motion detection unit match or are similar to pre-registered motion characteristics, and (b) the appearance characteristics detected by the appearance detection unit match or are similar to pre-registered appearance characteristics.

[0008] In the above authentication device, the authentication unit may include a motion detection unit that detects motion characteristics of the first character. The authentication unit may include an object detection unit that detects a virtual object that is a virtual item worn, held, and / or used by the first character. The authentication unit may include a determination unit that determines that the first user is a valid user or the person in question when (a) the motion characteristics detected by the motion detection unit match or are similar to pre-registered motion characteristics, and (c) the type of the virtual object detected by the object detection unit match or are similar to the type of the pre-registered virtual object.

[0009] In a second aspect of the present invention, an authentication method is provided. The authentication method is, for example, a method for authenticating a first user who wishes to use a service provided in a virtual space that can be shared or interacted with by a plurality of users using a computer. The authentication method includes, for example, a motion information acquisition step in which the computer acquires motion information indicating a motion of a first character, which is a virtual character that moves in the virtual space by an operation of the first user. The authentication method includes, for example, an authentication step in which the computer authenticates the first user using a feature of the motion of the first character indicated by the motion information acquired in the motion information acquisition step.

[0010] In a third aspect of the present invention, a program is provided. A computer-readable medium storing the above program may be provided. The computer-readable medium may be a non-transitory computer-readable medium or a computer-readable recording medium. The above program may be a program for causing a computer to function as the authentication device according to the first aspect. The above program may be a program for causing a computer to execute the authentication method according to the second aspect.

[0011] The above summary of the invention does not list all of the necessary features of the present invention. Also, subcombinations of these features may also be inventions. [Brief description of the drawings]

[0012] [Figure 1] 1 illustrates an example of a system configuration of a metaverse management system 100. [Diagram 2] 1 illustrates an example of information processing in a metaverse management system 100. [Diagram 3] 1 illustrates an example of a preparation process for service authentication. [Figure 4] 13 illustrates an example of a process for concealing a character's action. [Diagram 5] 2 illustrates an example of the internal configuration of a management server 110. [Figure 6] 2 illustrates an example of an internal configuration of the service providing server 120. [Figure 7] 6 shows an example of the internal configuration of the personal identification unit 650. [Figure 8] 2 shows an example of an internal configuration of a communication terminal 130. [Figure 9] An example of the system configuration of a computer 3000 is shown in schematic form. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0013] The present invention will be described below through the embodiments of the invention, but the following embodiments do not limit the invention according to the claims. In addition, not all of the combinations of features described in the embodiments are necessarily essential to the solution of the invention. In the drawings, the same reference numbers are used for the same or similar parts, and duplicate explanations may be omitted.

[0014] (Overview of Metaverse Management System 100) FIG. 1 shows an example of a system configuration of the metaverse management system 100. In this embodiment, the metaverse management system 100 provides a virtual space that can be shared by multiple users (sometimes referred to as players). The multiple users can interact with each other within the virtual space. The virtual space is constructed by a computer system that constitutes at least a part of the metaverse management system 100. The virtual space may be a two-dimensional virtual space or a three-dimensional virtual space. The virtual space or a service that provides the virtual space to users is called, for example, a metaverse.

[0015] In this embodiment, the metaverse management system 100 includes a management server 110 and a service providing server 120. In this embodiment, for the purpose of making the metaverse management system 100 easy to understand, the details of the metaverse management system 100 will be described using as an example a case in which multiple players including a first player 32 and a second player 34 use their respective communication terminals 130 to access the management server 110 via a communication network 10.

[0016] Each player who uses the metaverse is assigned an account for using the metaverse, for example, by the operator of the metaverse management system 100. When a player wishes to use the metaverse, for example, the management server 110 executes an authentication process (sometimes called metaverse authentication) to enable the player to use the metaverse. When the metaverse authentication is successfully completed, each player can operate a virtual character (sometimes called an avatar) assigned to each player to move within the virtual space, converse with other players, and share various experiences with other players.

[0017] Each player can access the management server 110 using the communication terminal 130 to change the settings related to his / her character. This allows each player to change the appearance of his / her character and the virtual objects (sometimes called items) that his / her character wears, possesses and / or uses.

[0018] Examples of the character's appearance include (i) the character's physical characteristics, and (ii) the number of characters in the case where character avatars can be created. Examples of the character's physical characteristics include the character's face, hairstyle, body shape, color, pattern, and the like. The character may have an appearance that imitates a human, a non-human animal, a fantasy creature, or an anthropomorphized object (sometimes referred to as a non-human animal, etc.). Examples of non-human animals include butterflies, insects, octopuses, and squids. When the character's appearance is that of a non-human animal, etc., identity authentication may be performed using the movement of wings, the movement of five or more limbs, etc. in the motion authentication described below.

[0019] Examples of items worn by a character include clothing, hats, and accessories. There is no particular limit to the items possessed by a character, and the character can possess any type of item. There is no particular limit to the items used by a character, and the character can use any type of item.

[0020] In recent years, it has been considered to provide various services (sometimes referred to as internal services) to players of the metaverse within the metaverse. By using the internal services, players of the metaverse can (i) acquire or purchase real-world products or services, (ii) acquire or purchase various contents such as videos, music, and games, (iii) acquire or purchase items that can be used within the metaverse, (iv) participate in events such as concerts and exhibitions held within the metaverse, and (v) acquire various advertisements.

[0021] Conventionally, when a service is provided within the metaverse, each player is identified in the service by an account for using the metaverse. Therefore, according to the conventional method, if the authentication information used for the above-mentioned metaverse authentication is leaked, it is difficult to prevent the unauthorized use of the internal service. In particular, when the internal service involves the transfer of monetary value, such as the trading of goods or services, financial transactions, etc., it is desirable to develop a technology for preventing the unauthorized use of the internal service.

[0022] Therefore, according to the metaverse management system 100 of this embodiment, when a specific player desires to use an internal service, prior to the player's use of the internal service, an authentication process (sometimes referred to as service authentication) is executed to enable the player to use the internal service. Also, in this embodiment, the authentication information used for the service authentication of the player is different from the authentication information used for the metaverse authentication of the player. This makes it possible to prevent unauthorized use of the internal service even in the unlikely event that the authentication information used for the metaverse authentication is leaked.

[0023] Possible technologies for authenticating a user include (i) a technology that uses a combination of an ID and a password as authentication information (sometimes referred to as password authentication), (ii) a technology that uses biometric information unique to the user, such as face authentication, fingerprint authentication, vein authentication, iris authentication, voiceprint authentication, or gait authentication, as authentication information (sometimes referred to as biometric authentication), and (iii) a technology that uses a movement that the user can consciously change as authentication information (sometimes referred to as gesture authentication or motion authentication). Password authentication, biometric authentication, motion authentication, and combinations of these may be adopted for service authentication.

[0024] In the service authentication according to the present embodiment, it is preferable to adopt (i) motion authentication or (ii) a combination of motion authentication and password authentication or biometric authentication, which enables authentication based on the characteristics of a character in the metaverse.

[0025] Characters in the metaverse can act without being bound by various constraints in the real world. For example, a player can change the appearance of a character, have the character carry any item, or create an alter ego for the character. Therefore, when authenticating a player using the characteristics of the character, the player can be authenticated by a combination of more conditions than password authentication or biometric authentication. In addition, a player can easily change authentication information compared to when biometric authentication is used alone.

[0026] (Overview of each part related to the Metaverse Management System 100) In this embodiment, the communication network 10 transmits information between multiple devices. The communication network 10 may be a transmission path for wired communication, a transmission path for wireless communication, or a combination thereof. The communication network 10 may be the Internet, a dedicated line, a wireless communication network, or a combination thereof. The communication network 10 may include a P2P network such as an ad-hoc network.

[0027] The communication method in the wireless communication network may be a mobile communication method or a wireless data communication method. Examples of the mobile communication method include the 3G method, the LTE method, the 4G method, and the 5G method. Examples of the wireless data communication method include the wireless PAN method, the wireless LAN method, the wireless MAN method, and the wireless WAN method. The communication method in the wireless communication network may be various short-distance wireless communication methods.

[0028] In this embodiment, the player can use the communication terminal 130 to operate his / her own character in the metaverse. The player can operate his / her own character to make the character express his / her intention or execute any action. For example, if the communication terminal 130 is equipped with a controller capable of detecting changes in position and posture, the player can use the communication terminal 130 to make the character execute actions that mimic the player's movements. For example, the player can move the character to any position in the metaverse by making the character execute a walking action, driving a moving object, or the like.

[0029] Specifically, the communication terminal 130 first detects the operation of the player. For example, the communication terminal 130 accepts an input from the player, which is related to the operation of a character. Next, the communication terminal 130 transmits information for operating the character (sometimes referred to as operation data) to the management server 110. The operation data may include various instructions (sometimes referred to as commands) for the management server 110. The operation data includes, for example, at least one of a command for causing the character to express an intention and a command for causing the character to execute an action that mimics the movement of the player.

[0030] In this embodiment, the player can change various settings related to his / her own character in the metaverse using the communication terminal 130. Examples of settings related to the character include settings related to the character's appearance, settings related to the character's position, settings related to the character's display, and the like.

[0031] By changing settings related to the character's appearance, the player can change the character's appearance and change the items that the character is allowed to wear, possess, and / or use.

[0032] A player can change the position of a character in the metaverse by changing the settings related to the character's position. A player may also change the position of a part of the character's body in the metaverse by changing the settings related to the character's position. In this way, a player can teleport a part or all of the character to any position or space.

[0033] By changing the settings related to the display of the character, the player can change the state of his / her own character displayed on the screen of the communication terminal 130 used by the other players. For example, the player can (i) construct a virtual object (sometimes called a shield) around his / her own character to block the line of sight of the other players, (ii) replace at least a part of the image of his / her own character with another image on the screen of the other players, or (iii) prevent his / her own character from being displayed on the screen of the other players.

[0034] This allows the player to conceal the actions of his / her character. In this embodiment, the distribution of images to each player is managed by the management server 110. Therefore, for example, even if the other player switches the viewpoint in the metaverse or obtains an image from the viewpoint of an object such as a camera or a non-player character installed in the metaverse, the actions of the character of the player can be prevented from being presented to the other players.

[0035] For example, an image of the character of the first player 32 is replaced with a background image, so that the character of the first player 32 is no longer displayed on the screen of the second player 34. For example, an image of a part of the body of the character of the first player 32 is replaced with a background image, so that the part of the body of the character of the first player 32 is no longer displayed on the screen of the second player 34. For example, a moving image of the character of the first player 32 is replaced with another moving image of the character, so that the character of the first player 32 moves in a manner different from that operated by the first player 32 on the screen of the second player 34.

[0036] Specifically, the communication terminal 130 first detects an instruction from the player. For example, the communication terminal 130 accepts an input from the player, which is related to the character settings. Next, the communication terminal 130 transmits information (sometimes referred to as setting change data) for changing the character settings (e.g., settings related to display) to the management server 110. The setting change data may include various instructions (sometimes referred to as commands) for the management server 110. The setting change data includes, for example, at least one of a command for changing settings related to the character's appearance, a command for changing settings related to the character's position, and a command for changing settings related to the character's display.

[0037] In this embodiment, the management server 110 builds and / or operates the metaverse. Details of the management server 110 will be described later.

[0038] In this embodiment, the service providing server 120 provides internal services. The service providing server 120 may build and / or operate non-player characters (sometimes referred to as NPCs) for providing internal services to characters in the metaverse. The service providing server 120 executes the above-mentioned service authentication for players who wish to use the internal services. Details of the service providing server 120 will be described later.

[0039] In this embodiment, the communication terminal 130 may be any device capable of transmitting and receiving information to and from other information processing devices, and the details thereof are not particularly limited. The communication terminal 130 may support a plurality of communication methods. For example, the communication terminal supports both a mobile communication method such as a 3G method, an LTE method, a 4G method, and a 5G method, and a wireless communication method such as a wireless LAN method and a wireless MAN method. The communication terminal 130 may be a mobile terminal. Examples of the mobile terminal include a mobile phone, a smartphone, a PDA (registered trademark), a tablet, a notebook computer or a laptop computer, and a wearable computer. The details of the communication terminal 130 will be described later.

[0040] (Specific configuration of each part of the metaverse management system 100) Each part of the metaverse management system 100 may be realized by hardware, software, or both. At least a part of each part of the metaverse management system 100 may be realized by a personal computer or a mobile terminal. For example, a personal computer or a mobile terminal may be used as a user interface of the metaverse management system 100. Examples of the mobile terminal include a mobile phone, a smartphone, a PDA, a tablet, a notebook computer or a laptop computer, and a wearable computer.

[0041] When at least some of the components constituting the metaverse management system 100 are realized by software, the components realized by the software may be realized by starting a program that specifies the operation of the components in an information processing device of a general configuration. The above information processing device includes, for example, (i) a data processing device having various processors (examples of the processor include a CPU, a GPU, etc.), a ROM, a RAM, a communication interface, etc., and (ii) a storage device such as a memory or a HDD (including an external storage device). The above information processing device may include (iii) input devices such as a keyboard, a touch panel, a camera, a microphone, various sensors, a GPS receiver, etc., and (iv) output devices such as a display device, a speaker, a vibration device, etc.

[0042] In the above information processing device, the above data processing device or storage device may store a program. For example, when the program is read into a computer, the information processing described in the above program functions as a specific means in which software related to the program and various hardware resources constituting at least a part of the metaverse management system 100 work together. The specific means then realizes the calculation or processing of information according to the intended use of the computer in this embodiment, thereby constructing the metaverse management system 100 or a part thereof according to the intended use.

[0043] The above program may be stored in a computer-readable medium. The above program may be stored in a non-transitory computer-readable recording medium. The above program may be stored in a computer-readable medium such as a CD-ROM, a DVD-ROM, a memory, or a hard disk, or may be stored in a storage device connected to a network. The above program may be installed in a computer constituting at least a part of the metaverse management system 100 from a computer-readable medium or a storage device connected to a network.

[0044] By executing the above program, the computer may function as at least a part of each unit of the metaverse management system 100. By executing the above program, the computer may execute an information processing method in at least a part of the metaverse management system 100.

[0045] A program for causing a computer to function as at least a part of the metaverse management system 100 includes, for example, a module that defines at least a part of the operation of the metaverse management system 100. When the above program or module is executed, the above program or module acts on a data processing device, an input device, an output device, a storage device, etc. to cause the computer to function as at least a part of the metaverse management system 100 or to execute an information processing method in at least a part of the metaverse management system 100.

[0046] The information processing method is exemplified by, for example, an authentication method. The authentication method is used, for example, to authenticate a first user who wishes to use a service provided in a virtual space that can be shared or interacted with by multiple users. The authentication method includes, for example, a motion information acquisition step of acquiring motion information indicating a motion of a first character, which is a virtual character that moves in the virtual space by an operation of the first user. The authentication method includes, for example, an authentication step of authenticating the first user using a feature of the motion of the first character indicated by the motion information acquired in the motion information acquisition step. In the authentication method, the subject of the operation in each step may be a computer.

[0047] The multiple players may be an example of multiple users. The metaverse may be an example of a virtual space. The item may be an example of a virtual object. The first player 32 may be an example of a user or a first user. The character of the first player 32 may be an example of a first character. The second player 34 may be an example of a user or a second user. The metaverse management system 100 may be an example of an authentication device or a virtual space construction device. The management server 110 may be an example of a virtual space construction device. The service providing server 120 may be an example of a user or an authentication device. The communication terminal 130 may be an example of a user terminal.

[0048] (An example of another embodiment) In this embodiment, the metaverse management system 100 has been described in detail using as an example a case in which a player (e.g., player A) changes settings related to the display of his / her character to conceal the actions of his / her character (i.e., player A's character) from other players (e.g., player B). However, the metaverse management system 100 is not limited to this embodiment.

[0049] In another embodiment, player A may change the settings related to the display of his / her character to make it difficult for other player B to recognize the movement of the character of player A. For example, player A may change the settings related to the display of his / her character to make the character of player A or a part of the character translucent, to reduce the size of the character of player A or a part of the character presented on the screen of other player B, to increase the size of the character of player A or a part of the character presented on the screen of other player B, to increase the size of the character of player A or a part of the character presented on the screen of other player B, to make the character of player A or a part of the character presented on the screen of other player B swing or move at high speed, or to make the character of player A presented on the screen of other player B perform a high-speed movement. An example of a part of a character is a body part used for gesture authentication. This makes it difficult for other player B to recognize the movement of the character of player A.

[0050] In the other embodiment described above, the player A may be an example of a first user. The other player B may be an example of a second user. The process according to the other embodiment described above may be an example of a process for making it difficult for the second user to recognize the action of the first character based on the operation of the first user. The above process may be an example of an information management process.

[0051] 2 is a schematic diagram illustrating an example of information processing in the metaverse management system 100. In this embodiment, the details of service authentication by the metaverse management system 100 will be described using an example in which the first player 32 desires to use an internal service provided by the service provider 20.

[0052] In this embodiment, the second player 34 is a player different from the first player 32. The second player 34 is one or more players different from the service provider 20 or the service providing server 120. The second player may be one or more players who operate a character located near the character of the first player 32 in the metaverse. The second player may be one or more players who can view the character of the first player 32 in the metaverse via the communication terminal 130 used by the second player.

[0053] According to this embodiment, first, in step 222 (step may be abbreviated as S), the first player 32 operates his / her own character in the metaverse using the communication terminal 130. As described above, the first player 32 can operate his / her own character to express an intention or execute an arbitrary action.

[0054] Specifically, first, the communication terminal 130 used by the first player 32 accepts an input related to the operation of the character of the first player 32 from the first player 32. The communication terminal 130 transmits operation data related to the character of the first player 32 to the management server 110. As a result, the operation of the character by the first player 32 is detected.

[0055] Next, in S224, the image of the character of the first player 32 is updated. Specifically, first, the management server 110 calculates the position and posture of the character of the first player 32 in the metaverse based on the operation data received from the communication terminal 130 of the first player 32. Next, the management server 110 generates image data (sometimes referred to as image data) to be transmitted to the communication terminals 130 used by the first player 32 and one or more second players 34, and the service providing server 120.

[0056] For example, the management server 110 generates image data to be transmitted to the communication terminal 130 of the first player 32, taking into consideration the position and posture of the character of the first player 32 and the position and posture of the viewpoint of the first player 32. The management server 110 generates image data to be transmitted to the communication terminal 130 of the second player 34, taking into consideration the position and posture of the character of the first player 32 and the position and posture of the viewpoint of the second player 34. The management server 110 generates image data to be transmitted to the service providing server 120, taking into consideration the position and posture of the character of the first player 32 and the position and posture of the viewpoint of the service provider 20. The viewpoint of the service provider 20 may be the viewpoint of an NPC or a virtual camera located in a virtual store (sometimes referred to as the store of the service provider 20) where the service provider 20 provides a service.

[0057] The management server 110 transmits, for example, each image data to the communication terminal 130 used by the first player 32, the communication terminal 130 used by each of the one or more second players 34, and the service providing server 120. As a result, the image of the character of the first player 32 output from each of the above-mentioned devices is updated. The management server 110 may transmit each image data and information for identifying a player corresponding to each of the one or more characters included in the image represented by the image data (sometimes referred to as a player ID) to at least one of the communication terminal 130 used by the first player 32, the communication terminal 130 used by each of the one or more second players 34, and the service providing server 120. As the player ID, information for identifying an account assigned to each player (sometimes referred to as an account ID) is exemplified.

[0058] Next, in S232, the service providing server 120 detects the entry of the character of the first player 32 into the store. Any known method may be adopted as the method of detecting the entry. In one embodiment, the service providing server 120 acquires image data of the inside or outside of the store of the service provider 20 from the management server 110. The service providing server 120 analyzes the image data transmitted from the management server 110 to detect that the character of the first player 32 has entered the store of the service provider 20. In another embodiment, the service providing server 120 receives a signal from the management server 110 indicating that the character of the first player 32 has entered the store of the service provider 20. In this way, the service providing server 120 can detect the entry of the character of the first player 32 into the store.

[0059] (Getting Player ID) The service providing server 120 may acquire the player ID of the first player 32. The service providing server 120 may acquire the player ID of the first player 32 who has entered the store of the service provider 20. The service providing server 120 may acquire the player ID of a player corresponding to a character whose distance from the store of the service provider 20 is shorter than a predetermined value.

[0060] The service providing server 120 acquires the player ID of the first player 32 from, for example, the management server 110. The service providing server 120 may request the management server 110 to transmit the player ID of the player corresponding to the character who entered the store of the service provider 20. The service providing server 120 may request the management server 110 to transmit the player ID of the player corresponding to the character whose distance from the store of the service provider 20 is shorter than a predetermined value. The service providing server 120 may execute a process for inquiring about the player ID of the character in the metaverse, thereby executing a process for requesting the management server 110 to transmit the player ID of the player corresponding to the character to the service providing server 120.

[0061] The service providing server 120 may obtain the player ID of the first player 32 according to the following procedure. The service providing server 120 first obtains image data of an image including a character of the first player 32. The service providing server 120 then refers to a database that stores, for each of one or more characters, an image of each character and the player ID of the player corresponding to each character in association with each other, and extracts a player ID corresponding to the image of the character of the first player 32 included in the image. This allows the service providing server 120 to obtain the player ID of the first player 32.

[0062] The service providing server 120 may obtain the player ID of the first player 32 from the first player 32. For example, when the service providing server 120 and the communication terminal 130 used by the first player 32 are configured to be able to transmit and receive information to and from each other via the management server 110 or without the management server 110, the service providing server 120 may request the communication terminal 130 used by the first player 32 to transmit the player ID of the first player 32.

[0063] In one embodiment, when the entry of a specific character into a store is detected, the service providing server 120 acquires a player ID of a player corresponding to the character. In another embodiment, when the service providing server 120 acquires image data of the inside or outside of the store of the service provider 20, it acquires player IDs of players corresponding to each of one or more characters included in the image shown by the image data. When the service providing server 120 acquires image data of the inside or outside of the store of the service provider 20, it may acquire player IDs of players corresponding to characters whose distance from the store of the service provider 20 is shorter than a predetermined value, among one or more characters included in the image shown by the image data.

[0064] (Get internal ID) The service providing server 120 may acquire information (sometimes referred to as an internal ID) used to identify the first player 32 in the internal service provided by the service providing server 120. When the internal service is a service related to bank transactions, an example of the internal ID is an identifier (such as a branch number or account number) assigned to a cash card. The service providing server 120 may acquire the internal ID of the first player 32 who has entered a store of the service provider 20. The service providing server 120 may acquire the internal ID of a player corresponding to a character whose distance from the store of the service provider 20 is shorter than a predetermined value.

[0065] The service providing server 120 may store the internal ID and the motion characteristics of the character used for motion authentication described below, for each player or character, in association with each other. This allows for personal authentication by motion authentication, described below. The service providing server 120 may store the internal ID and information indicating that motion authentication has not been completed, in association with each first player 32 who enters the store of the service provider 20.

[0066] In one embodiment, the service providing server 120 may use the player ID acquired by the various procedures described above to acquire the internal ID of the first player 32. The service providing server 120, for example, refers to a database that stores the player ID and internal ID of each of one or more players in association with each other, and acquires the internal ID of the first player 32 that corresponds to the player ID of the first player 32 acquired by the procedures described above.

[0067] In another embodiment, the service providing server 120 acquires the internal ID of the first player 32, for example, according to the following procedure. The service providing server 120 first acquires image data of an image including a character of the first player 32. The service providing server 120 then refers to a database that stores, for each of one or more characters, an image of each character and an internal ID of the player corresponding to each character in association with each other, and extracts an internal ID corresponding to the image of the character of the first player 32 included in the image. In this way, the service providing server 120 can acquire the internal ID of the first player 32.

[0068] In still another embodiment, the service providing server 120 may obtain the internal ID of the first player 32 from the first player 32. For example, when the service providing server 120 and the communication terminal 130 used by the first player 32 are configured to be able to transmit and receive information to and from each other via the management server 110 or without the management server 110, the service providing server 120 may request the communication terminal 130 used by the first player 32 to transmit the internal ID of the first player 32.

[0069] In one embodiment, when the entry of a specific character into a store is detected, the service providing server 120 acquires an internal ID of a player corresponding to the character. In another embodiment, when the service providing server 120 acquires image data of the inside or outside of the store of the service provider 20, it acquires an internal ID of a player corresponding to each of one or more characters included in the image shown by the image data. When the service providing server 120 acquires image data of the inside or outside of the store of the service provider 20, it may acquire an internal ID of a player corresponding to a character whose distance from the store of the service provider 20 is shorter than a predetermined value, among one or more characters included in the image shown by the image data.

[0070] When the entry of the character of the first player 32 into the store is detected, in S234, the service providing server 120 decides to start authentication processing for the first player 32. In addition, the service providing server 120 transmits information indicating the start of authentication processing for the first player 32 (sometimes referred to as a start notification) to the management server 110.

[0071] In the above authentication process, it is confirmed that the first player 32 is a legitimate user of the service provided by the service provider 20, or that the first player 32 is the person in question. As described above, according to the present embodiment, motion authentication using the characteristics of the movements of a character in the metaverse is performed as service authentication. Therefore, in the present embodiment, the movements of the character of the first player 32 are concealed from one or more second players 34 during the period in which the service authentication is being performed.

[0072] Specifically, in S240, as a preparation process for service authentication, a process is executed to conceal the movement of the character of the first player 32 from one or more second players 34. As a result, a part or all of the character of the first player 32 is not displayed on the screen of the communication terminal 130 of one or more second players 34, or the character of the first player 32 is displayed moving in a manner different from the operation of the first player 32 on the screen of the communication terminal 130 of one or more second players 34. Details of the preparation process will be described later.

[0073] Next, in S252, the first player 32 starts an operation for motion authentication. Specifically, first, the communication terminal 130 of the first player 32 accepts an input related to the operation of the character of the first player 32 from the first player 32. The communication terminal 130 transmits operation data related to the character of the first player 32 to the management server 110. As a result, the operation of the character by the first player 32 is detected. In addition, the management server 110 can obtain information indicating the movement of the character of the first player 32.

[0074] In motion authentication, whether or not the first player 32 is a legitimate user of the service provided by the service provider 20, or whether or not the first player 32 is the real person, is determined based on the degree to which the movement characteristics (sometimes referred to as a movement pattern) of the character at the time of authentication match the movement pattern of the character at the time of pre-registration. Then, the first player 32 uses the communication terminal 130 to operate his / her character so that the character exhibits a movement pattern similar to the pre-registered movement pattern.

[0075] Next, in S254, the image of the character of the first player 32 is updated. Specifically, first, the management server 110 calculates the position and posture of the character of the first player 32 in the metaverse based on the operation data received from the communication terminal 130 of the first player 32. Next, the management server 110 generates image data to be transmitted to the communication terminals 130 used by the first player 32 and one or more second players 34, and to the service providing server 120.

[0076] In this embodiment, the management server 110 generates image data to be transmitted to the communication terminal 130 of the first player 32, taking into consideration the position and posture of the character of the first player 32 and the position and posture of the viewpoint of the first player 32. Similarly, the management server 110 generates image data to be transmitted to the service providing server 120, taking into consideration the position and posture of the character of the first player 32 and the position and posture of the viewpoint of the service provider 20.

[0077] On the other hand, as described above, during the period in which the service authentication is being performed, the actions of the character of the first player 32 are concealed from one or more second players 34. Therefore, in this embodiment, the management server 110 generates image data to be transmitted to the communication terminal 130 of the second player 34, based on settings related to the display of the character of the first player 32.

[0078] Next, in S260, the service providing server 120 executes authentication processing for the first player 32. Specifically, the service providing server 120 first acquires image data of the character of the first player 32 that moves based on the operation data from the management server 110. Next, the service providing server 120 analyzes the image data and extracts characteristics of the movement of the character of the first player 32.

[0079] Next, the service providing server 120 authenticates the first player 32 using the movement characteristics of the character of the first player 32. As described above, the service providing server 120 determines whether the first player 32 is a legitimate user of the service provided by the service provider 20 or whether the first player 32 is the real person, based on the degree of agreement between the movement pattern of the character at the time of authentication and the movement pattern of the character at the time of prior registration.

[0080] For example, if it is determined that the degree of match between the character's movement pattern at the time of authentication and the character's movement pattern at the time of prior registration is greater than a predetermined degree, the service providing server 120 determines that the first player 32 is a legitimate user of the service provided by the service provider 20 or that the first player 32 is the real person, and ends the certification process. When the authentication of the first player 32 ends normally, the first player 32 becomes able to use the service provided by the service provider 20.

[0081] On the other hand, for example, if it is determined that the degree of match between the character's movement pattern at the time of authentication and the character's movement pattern at the time of prior registration is less than a predetermined degree, the service providing server 120 determines that authentication of the first player 32 has failed, and ends the certification process. If authentication of the first player 32 has failed, the first player 32 cannot use the service provided by the service provider 20.

[0082] As described above, during the period in which the service authentication is being performed, a process is executed to conceal the actions of the character of the first player 32 from one or more second players 34. Then, in S270, a process to end the service authentication (sometimes referred to as an end process) is executed. Specifically, a process to release the above-mentioned concealment process is executed according to the same procedure as in S234 and S240. As a result, the character of the first player 32 moving based on the operation of the first player 32 is displayed on the screen of one or more second players 34 as well. The details of the end process will be described later together with the details of the preparation process.

[0083] The operation data may be an example of operation information. Image data of the character of the first player 32 operating based on the operation data may be an example of operation information. The concealment process may be an example of information management process. At least a part of the procedures included in S234 may be an example of information management process. At least a part of the procedures included in S240 may be an example of information management process. At least a part of the procedures included in S252 may be an example of information management process. S252 may be an example of a operation information acquisition stage. At least a part of the procedures included in S254 may be an example of information management process. S260 may be an example of a operation information acquisition stage or an authentication stage.

[0084] (An example of another embodiment) The order of each process described with reference to Fig. 2 is not limited to this embodiment. Also, the subject of each process described with reference to Fig. 2 is not limited to this embodiment. In other embodiments, the management server 110, the service providing server 120, and the communication terminal 130 of the first player 32 may cooperate in any manner.

[0085] A part of the information processing in the management server 110 described in relation to Fig. 2 may be executed by the service providing server 120 and / or the communication terminal 130. A part of the information processing in the service providing server 120 described in relation to Fig. 2 may be executed by the management server 110 and / or the communication terminal 130. For example, the step of extracting the characteristics of the movement of the character of the first player 32 in S260 is executed by the management server 110, and the service providing server 120 obtains information indicating the extraction result of the management server 110. A part of the information processing in the communication terminal 130 described in relation to Fig. 2 may be executed by the management server 110 and / or the service providing server 120.

[0086] In the present embodiment, the authentication process of the first player 32 has been described in detail by taking as an example a case in which the service providing server 120 authenticates the first player 32 using the movement characteristics of the character of the first player 32. However, the authentication process of the first player 32 is not limited to this embodiment. In other embodiments, the service providing server 120 may authenticate the first player 32 using (a) the movement characteristics of the character of the first player 32, and (b) (i) the appearance characteristics of the character of the first player 32, and / or (ii) the characteristics of an item worn, held, and / or used by the character of the first player 32.

[0087] Fig. 3 shows an example of a preparation process for service authentication. The process of S240 described in relation to Fig. 2 will be described in detail with reference to Fig. 3. As described above, in S270, the termination process for service authentication is executed in the same procedure as the preparation process for service authentication. Therefore, the details of the termination process for service authentication will be described in conjunction with the details of the preparation process for service authentication with reference to Fig. 3.

[0088] (An example of preparation processing for service authentication) According to this embodiment, first, in S322, the management server 110 acquires a start notification 312 indicating that authentication processing of the first player 32 will start from the service providing server 120. In this embodiment, the start notification 312 includes various commands for changing the character settings. The management server 110 transfers the start notification 312 to the communication terminal 130 of the first player 32.

[0089] Next, in S332, the communication terminal 130 of the first player 32 acquires the start notification 312. The communication terminal 130 analyzes the start notification 312 and executes various commands included in the start notification 312. The various commands for changing the character settings include, for example, instructions for causing the computer of the communication terminal 130 to execute (i) a procedure for accessing the management server 110, and (ii) a procedure for causing the computer of the management server 110 to change various settings related to the character of the first player 32.

[0090] When the above command is executed in S332, in S334, the communication terminal 130 accesses the management server 110. In addition, the communication terminal 130 transmits a first change request 314 to the management server 110 to request that various settings related to the character of the first player 32 be changed.

[0091] In one embodiment, the first change request 314 includes information for requesting a change in settings related to the position of the character of the first player 32. For example, the first change request 314 includes a signal (which may be referred to as a second request signal) for requesting that all or a part of the character of the first player 32 be moved to a space (which may be referred to as an authentication space) that is constructed within the virtual space and whose interior is not presented to one or more second players 34.

[0092] The authentication space may be constructed by the management server 110 or may be constructed by the service providing server 120. A part of the character of the first player 32 may be a body part related to motion authentication, or may be a body part designated by the first player 32.

[0093] In another embodiment, the first change request 314 includes information for requesting a change in settings related to the display of the character of the first player 32. The procedure for requesting a change in the above settings is not particularly limited, but the above settings can be changed, for example, according to the following procedure.

[0094] For example, the first change request 314 includes a signal (sometimes referred to as a first request signal) for requesting to construct a shield capable of shielding all or a part of the character of the first player 32 around the character of the first player 32. The part of the character of the first player 32 may be a part related to motion authentication, or may be a part designated by the first player 32.

[0095] The first change request 314 may include a signal (sometimes referred to as a third request signal) for requesting that all or a part of the image of the character of the first player 32 presented to one or more second players 34 be replaced with another image. The first change request 314 may include a setting related to the other image. Examples of the other image include a background image, a predetermined image, and an image generated by a predetermined algorithm (e.g., mosaic processing). The above image may be a still image or a moving image. The part of the character of the first player 32 may be a part related to motion authentication, or may be a part designated by the first player 32.

[0096] The first change request 314 may include a signal (sometimes referred to as a fourth request signal) for requesting that an image of all or a part of the character of the first player 32 not be presented to one or more second players 34. The part of the character of the first player 32 may be a body part related to motion authentication, or may be a body part designated by the first player 32.

[0097] When the management server 110 stores the player's account ID and information indicating the procedure for changing the settings at the time of service authentication in association with each other, the first change request 314 may include a signal for requesting a change to the settings according to the procedure. The information indicating the procedure may be information indicating the contents of the settings after the change.

[0098] Next, in S340, the management server 110 acquires the first change request 314. The management server 110 changes various settings related to the character of the first player 32 according to the request indicated in the first change request 314. As a result, during the period in which the service authentication is being performed, the actions of the character of the first player 32 are concealed from one or more second players 34. Meanwhile, during the period in which the service authentication is being performed, image data showing the state in which the character of the first player 32 moves in accordance with the operation of the first player 32 is transmitted to the service providing server 120 and the communication terminal 130 of the first player 32. This ends the preparation process for the service authentication.

[0099] (An example of service authentication termination processing) As described above, for example, when the first player 32 desires to use an internal service provided by the service provider 20, motion authentication of the first player 32 is executed as service authentication in S252 to S260. During the period in which the service authentication is being performed, a process for concealing the motion of the character of the first player 32 (sometimes referred to as a concealment process) is executed for one or more second players 34. Thus, when the service authentication in the service providing server 120 ends, a process for terminating the service authentication is executed in S270 to release the above concealment process.

[0100] For example, the management server 110 first obtains a completion notification indicating that the authentication process of the first player 32 has ended from the service providing server 120. In this embodiment, the completion notification includes various commands for changing the character settings. The management server 110 transfers the completion notification to the communication terminal 130 of the first player 32.

[0101] Next, the communication terminal 130 of the first player 32 acquires the above-mentioned end notification. The communication terminal 130 analyzes the end notification and executes various commands included in the end notification. The various commands for changing the character settings include, for example, instructions for causing the computer of the communication terminal 130 to execute (i) a procedure for accessing the management server 110, and (ii) a procedure for causing the computer of the management server 110 to change various settings related to the character of the first player 32.

[0102] When the communication terminal 130 executes the above command, the communication terminal 130 accesses the management server 110. In addition, the communication terminal 130 transmits a second change request to the management server 110 to request that various settings related to the character of the first player 32 be changed. The second change request includes, for example, a signal (which may be referred to as a return signal) to request that the various settings changed by the first change request 314 be restored to the settings before the first change request 314 was changed.

[0103] Next, the management server 110 acquires the second change request. The management server 110 changes various settings related to the character of the first player 32 according to the request indicated in the second change request. This releases the above-mentioned concealment process.

[0104] (An example of another embodiment) In the present embodiment, the metaverse management system 100 has been described in detail by taking as an example a case in which the management server 110 transfers the start notification 312 from the service providing server 120 to the communication terminal 130, and the communication terminal 130 executes various commands included in the start notification 312. However, the metaverse management system 100 is not limited to the present embodiment. In other embodiments, after the management server 110 receives the start notification 312 from the service providing server 120, the management server 110 may execute various commands included in the start notification 312. The same may be true for processing related to an end notification.

[0105] Fig. 4 shows an example of a process for concealing the character's actions from other players. The process of S254 described in relation to Fig. 2 will be described in detail with reference to Fig. 4. According to this embodiment, the character's actions of the first player 32 are not concealed from the service providing server 120 and the communication terminal 130 of the first player 32. On the other hand, the character's actions of the first player 32 are concealed from the communication terminal 130 of the second player 34.

[0106] According to this embodiment, first, in S420, the management server 110 generates image data 412 to be transmitted to the communication terminal 130 of the first player 32. The management server 110 generates image data 414 to be transmitted to the service providing server 120. In addition, the management server 110 generates image data 416 to be transmitted to each of the communication terminals 130 of one or more second players 34.

[0107] Specifically, the management server 110 generates the image data 412, for example, taking into consideration the position and posture of the character of the first player 32 and the position and posture of the viewpoint of the first player 32. Similarly, the management server 110 generates the image data 414, for example, taking into consideration the position and posture of the character of the first player 32 and the position and posture of the viewpoint of the service provider 20.

[0108] Meanwhile, the management server 110 generates the image data 416 based on settings related to the display of the character of the first player 32. For example, when a setting indicating that a shield capable of shielding all or part of the character of the first player 32 is constructed around the character of the first player 32 is enabled, the management server 110 generates the image data 416 taking into consideration the position and posture of the character of the first player 32, the position and posture of the shield, and the position and posture of the viewpoint of the second player 34.

[0109] For example, when a setting indicating that all or a part of an image of the character of the first player 32 presented to one or more second players 34 is replaced with another image is enabled, the management server 110, for example, first generates an image (sometimes referred to as an original image) that is the basis of an image (sometimes referred to as a distributed image) presented to the second player 34, taking into consideration the position and posture of the character of the first player 32 and the position and posture of the viewpoint of the second player 34. Next, the management server 110 generates the distributed image, for example, by replacing a part of the image that is the basis of the distributed image with the other image. In this way, the image data 416 is generated.

[0110] The method of generating the image data 416 is not limited to the above procedure. The management server 110 may generate the image to be distributed by any method for generating an image. For example, the management server 110 may generate the image to be distributed without generating the original image described above, taking into consideration the position and posture of the character of the first player 32, the position and posture of the viewpoint of the second player 34, and the manner of concealment.

[0111] For example, when a setting is enabled indicating that an image of all or a part of the character of the first player 32 is not to be presented to one or more second players 34, the management server 110 generates, for example, image data 416 in which the character of the first player 32 is not displayed. The image in which the character of the first player 32 is not displayed is generated by any known method.

[0112] Next, the management server 110 transmits image data 412 to the communication terminal 130 of the first player 32. The management server 110 transmits image data 414 to the service providing server 120. In addition, the management server 110 transmits image data 416 to each of the communication terminals 130 of one or more second players 34.

[0113] Next, in S442, the communication terminal 130 of the first player 32 acquires the image data 412. The communication terminal 130 of the first player 32 presents an image represented by the image data 412 to the first player 32. As a result, for example, an image for presenting the actual motion of the first player 32 is displayed on the display device of the communication terminal 130.

[0114] Also, in S444, the service providing server 120 acquires the image data 414. The service providing server 120 analyzes the image represented by the image data 414 and identifies the actual motion of the first player 32. In this case, the service providing server 120 may acquire the player ID of the first player 32 according to the various procedures described above. Similarly, the service providing server 120 may acquire the internal ID of the first player 32 according to the procedures described above.

[0115] As described above, the service providing server 120 may store the above internal ID in association with information indicating that motion authentication has not been completed for each first player 32 who has entered the store of the service provider 20. In this case, the internal ID of the first player 32 who has entered the store of the service provider 20 and has not yet completed motion authentication may be acquired as the internal ID of the first player 32.

[0116] Also, in S446, the communication terminal 130 of the second player 34 acquires the image data 416. The communication terminal 130 of the second player 34 presents an image indicated by the image data 416 to the second player 34. As a result, for example, an image for concealing the real motion of the first player 32 is displayed on the display device of the communication terminal 130.

[0117] 5 shows an example of the internal configuration of the management server 110. In this embodiment, the management server 110 includes a storage unit 520, a communication control unit 530, an entrance / exit management unit 542, a setting management unit 544, an operation data acquisition unit 546, and a display control unit 550. In this embodiment, the storage unit 520 includes a space construction data storage unit 522, a login data storage unit 524, and a setting data storage unit 526. In this embodiment, the display control unit 550 includes a virtual space construction unit 552 and an image data generation unit 554.

[0118] In this embodiment, the storage unit 520 stores various types of data. In one embodiment, the storage unit 520 stores various types of data used in information processing in the management server 110. In another embodiment, the storage unit 520 stores various types of data generated in information processing in the management server 110.

[0119] In this embodiment, the space construction data storage unit 522 stores various data for constructing the metaverse. The space construction data storage unit 522 may store three-dimensional model data of the character of the first player 32. The space construction data storage unit 522 may store three-dimensional model data of the character of the second player 34. The space construction data storage unit 522 may store three-dimensional model data of the shop of the service provider 20. The space construction data storage unit 522 may store three-dimensional model data of the authentication space created by the service providing server 120.

[0120] In this embodiment, the login data storage unit 524 stores login data for each of one or more players. The login data may be an example of authentication information for each player to use the metaverse. An example of the login data is a combination of an account ID and a password.

[0121] In this embodiment, the setting data storage unit 526 stores information (sometimes referred to as setting data) on various settings for each of one or more players. Examples of the settings include settings on the appearance of each player's character, settings on items that the character is allowed to wear, possess, and / or use, settings on the position of the character, settings on the display of the character, and the like.

[0122] In this embodiment, the communication control unit 530 controls communication between the management server 110 and the service providing server 120 and / or the communication terminal 130. This allows various information to be transmitted and received between the management server 110 and the service providing server 120 and / or the communication terminal 130.

[0123] The communication control unit 530 receives, for example, the above-mentioned start notification 312, end notification, etc. from the service providing server 120. In addition, the communication control unit 530 transmits, for example, image data 414 to the service providing server 120. The communication control unit 530 receives, for example, the above-mentioned operation data, setting change data, first change request 314, second change request, etc. from the communication terminal 130. In addition, the communication control unit 530 transmits image data 412, image data 416, etc. to the communication terminal 130.

[0124] In this embodiment, the entrance / exit management unit 542, for example, manages the entrance / exit of each player to the metaverse. For example, the entrance / exit management unit 542 authenticates each player using the login data stored in the login data storage unit 524 in response to a login request from each player. This allows the entrance / exit management unit 542 to manage the entry of each player to the metaverse. Similarly, the entrance / exit management unit 542 acquires an exit request from each player. This allows the entrance / exit management unit 542 to manage the exit of each user from the metaverse.

[0125] In this embodiment, the setting management unit 544 manages, for example, changes in the settings of each player. For example, the setting management unit 544 acquires setting change data, and changes the contents of the setting data stored in the setting data storage unit 526 based on the setting change data. The setting management unit 544 may acquire the setting change data from the communication terminal 130 used by each player, or may acquire the setting change data from the service providing server 120. The setting management unit 544 may acquire setting change data generated by the communication terminal 130 used by each player, or may acquire setting change data generated by the service providing server 120. The setting change data generated by the service providing server 120 may be acquired via the communication terminal 130 used by each player.

[0126] In this embodiment, the operation data acquisition unit 546 acquires operation data related to the character of each player. This allows the operation data acquisition unit 546 to acquire information indicating the content of the action of the character of each player. The operation data acquisition unit 546 outputs, for example, the operation data related to the character of each player or information indicating the content of the action of the character of each player to the display control unit 550.

[0127] In this embodiment, the display control unit 550 controls image display in the metaverse. For example, the display control unit 550 controls images presented to each player.

[0128] In this embodiment, the virtual space construction unit 552 constructs a virtual space by using the model data stored in the space construction data storage unit 522. The virtual space construction unit 552 constructs, for example, data of a town or stores that constitute the virtual space. The virtual space construction unit 552 changes the position and posture of each character in the virtual space according to, for example, the movement of each player's character indicated by the operation data.

[0129] In this embodiment, the image data generating unit 554 generates image data to be transmitted to the communication terminal 130 used by each player, using the model data of the virtual space constructed by the virtual space constructing unit 552. The image data generating unit 554 may generate image data to be transmitted to the service providing server 120, using the model data of the virtual space constructed by the virtual space constructing unit 552. The image data generating unit 554 may transmit the above image data to the communication terminal 130 used by each player and the service providing server 120, for example. The image data generating unit 554 may transmit player IDs of players corresponding to each of one or more characters included in the above image data to a device to which the above image data is transmitted or a part thereof.

[0130] The operation data acquisition section 546 may be an example of an action information acquisition section. The display control section 550 may be an example of a virtual space construction device.

[0131] 6 shows an example of the internal configuration of the service providing server 120. In this embodiment, the service providing server 120 includes a communication control unit 620, a service providing unit 630, an authentication data registration unit 640, a personal identification unit 650, and a storage unit 660. In this embodiment, the storage unit 660 includes an authentication data storage unit 662 and a space construction data storage unit 664.

[0132] In this embodiment, the communication control unit 620 controls communication between the service providing server 120 and the management server 110 and / or the communication terminal 130. This allows various information to be transmitted and received between the service providing server 120 and the management server 110 and / or the communication terminal 130.

[0133] In this embodiment, the service providing unit 630 provides services to players of the metaverse within the metaverse. The types of the above services are not particularly limited, but examples of the above services include trading or intermediation of products, content, items, or services, financial trading or intermediation, and distribution of advertisements.

[0134] In this embodiment, the authentication data registration unit 640 registers authentication information used for service authentication executed by the identity verification unit 650. As described above, the authentication information of each player indicates the characteristics of the movement of the character of each player. The characteristics of the movement of the character of each player are presented, for example, by each player.

[0135] The process for the authentication data registration unit 640 to acquire the authentication information from each player may be executed inside the metaverse or outside the metaverse. The authentication data registration unit 640 may register the account ID of each player and the authentication information of each player in the authentication data storage unit 662 in association with each other.

[0136] The authentication data registration unit 640 may register a manner of authenticating each player. The manner of authenticating each player is presented, for example, by each player. The authentication data registration unit 640 may store the account ID of each player in association with information indicating the manner of authenticating each player. Examples of the manner of authenticating each player include (i) a manner in which the action of each player's character at the time of authentication is concealed from other players, and (ii) a manner in which the action of each player's character at the time of authentication is made difficult to be recognized by other players.

[0137] In this embodiment, the personal identification unit 650 executes authentication processing for each player. Details of the personal identification unit 650 will be described later.

[0138] In this embodiment, the storage unit 660 stores various types of data. In one embodiment, the storage unit 660 stores various types of data used in information processing in the service providing server 120. In another embodiment, the storage unit 660 stores various types of data generated in information processing in the service providing server 120.

[0139] In this embodiment, the authentication data storage unit 662 stores the account ID of each player in association with authentication information used for service authentication in the service providing server 120. As described above, the account ID of each player is used for authentication performed when each player enters the metaverse. The authentication data storage unit 662 may store the account ID of each player in association with information indicating a manner of authenticating each player.

[0140] As described above, motion authentication is performed in service authentication in the service providing server 120. Examples of authentication information used in service authentication include (i) a character's motion characteristics, (ii) a combination of a character's motion characteristics and a character's appearance characteristics, (iii) a combination of a character's motion characteristics and a characteristic of an item that the character wears, possesses, and / or uses, and (iv) a combination of a character's motion characteristics, a character's appearance characteristics, and a characteristic of an item that the character wears, possesses, and / or uses, etc. The granularity of the character's motion characteristics can be arbitrarily set by each player, for example.

[0141] When multiple players authenticate simultaneously, the authentication information may include the position of each player's character, or the position and posture of each player's character. When a single player authenticates using multiple characters, the authentication information may include the position of each character, or the position and posture of each character.

[0142] In this embodiment, the space construction data storage unit 664 may store three-dimensional model data constructed by the service provider 20 or the service providing server 120. The space construction data storage unit 664 stores, for example, three-dimensional model data of a store of the service provider 20. The space construction data storage unit 664 stores, for example, three-dimensional model data of the authentication space described above.

[0143] The communication control unit 620 may be an example of an operation information acquisition unit. The personal identification unit 650 may be an example of an authentication device.

[0144] 7 is a schematic diagram showing an example of an internal configuration of the identity verification unit 650. In this embodiment, for the purpose of making the identity verification unit 650 easier to understand, the identity verification unit 650 will be described in detail using an example in which the first player 32 desires to use an internal service provided by the service provider 20.

[0145] In addition, in this embodiment, in order to facilitate understanding of the identity verification unit 650, the details of the identity verification unit 650 will be described by taking as an example a case in which a process for concealing the actions of the character of the first player 32 from the second player 34 is executed. However, it should be noted that the details of the identity verification unit 650 are not limited to this embodiment. In other embodiments, instead of or together with the process for concealing the actions of the character of the first player 32 from the second player 34, a process for making it difficult for the second player 34 to recognize the actions of the character of the first player 32 may be executed.

[0146] In this embodiment, the identity verification unit 650 includes a start event detection unit 720, an authentication mode determination unit 730, a start notification generation unit 740, and an authentication processing unit 750. In this embodiment, the authentication processing unit 750 includes an authentication item determination unit 762, a space construction data storage unit 664, a feature extraction unit 772, a wearable item detection unit 774, and a player determination unit 776.

[0147] In this embodiment, the start event detection unit 720 detects the occurrence of an event (sometimes referred to as a start event) for starting the authentication process (the above-mentioned service authentication) of the first player 32 in the service providing server 120. Examples of the start event include the detection of the entry of the character of the first player 32 into a store, and the reception of a signal indicating that the first player 32 is requesting the provision of a service. The above-mentioned service may be a service that requires service authentication prior to the provision of the service. When the occurrence of the start event is detected, the start event detection unit 720, for example, determines to start the authentication process of the first player 32. The start event detection unit 720 outputs information indicating the determination result to, for example, the authentication mode determination unit 730.

[0148] In one embodiment, the start event detection unit 720 acquires image data of the inside or outside of a store of the service provider 20 transmitted from the management server 110. In this way, when the character of the first player 32 is present in the vicinity of the above-mentioned store, the start event detection unit 720 can acquire information indicating the movement of the character of the first player 32. The start event detection unit 720 may analyze the above-mentioned image data and detect that the character of the first player 32 has entered the store. In another embodiment, the start event detection unit 720 acquires information indicating that the character of the first player 32 has entered the store from the management server 110. In this way, the start event detection unit 720 can detect that the character of the first player 32 has entered the above-mentioned store.

[0149] In this embodiment, the authentication mode determination unit 730 determines a mode for authenticating the first player 32. For example, the authentication mode determination unit 730 determines whether an authentication space is used for authenticating the first player 32, whether an item is used for authenticating the first player 32, whether an avatar of the first player 32 is used when authenticating the first player 32, whether the first player 32 is authenticated by a single operation of the first player 32, whether the first player 32 is authenticated by a collaborative operation of a plurality of players, and the like. The authentication mode determination unit 730 outputs information indicating the determination result to, for example, the start notification generation unit 740 and the authentication processing unit 750.

[0150] In one embodiment, the authentication mode determination unit 730 determines a mode for authenticating the first player 32 based on an instruction or setting by the service provider 20. For example, the authentication mode determination unit 730 determines to move the character of the first player 32 into the authentication space during the period in which the service authentication is being performed.

[0151] In another embodiment, the authentication mode determination unit 730 determines a mode for authenticating the first player 32 based on registered information predetermined by the first player 32. For example, the authentication mode determination unit 730 refers to the authentication data storage unit 662 to obtain information indicating a mode for authenticating the first player 32.

[0152] In another embodiment, the authentication mode determination unit 730 determines the mode of authenticating the first player 32 based on a setting related to the display of a character of the first player 32. For example, the authentication mode determination unit 730 accesses the management server 110 to obtain information indicating a setting related to the display of a character of the first player 32.

[0153] In this embodiment, the start notification generating unit 740 generates the above-described start notification. As described above, the start notification includes various commands for changing the character settings. The start notification generating unit 740 may transmit the generated start notification to the management server 110. Thus, when the start event detecting unit 720 determines to start the authentication process of the first player 32, the start notification is transmitted to the management server 110.

[0154] As described above, according to the present embodiment, the start notification is transmitted to the communication terminal 130 of the first player 32 via the management server 110. The above procedure may be an example of a procedure for transmitting the first request signal, the second request signal, the third request signal, and the fourth request signal to a user terminal.

[0155] In other embodiments, depending on the specifications of the metaverse provided by the metaverse management system 100, the start notification may be sent directly to the communication terminal 130 of the first player 32. The above procedure may be an example of a procedure for sending the first request signal, the second request signal, the third request signal, and the fourth request signal to a user terminal.

[0156] As described above, according to the present embodiment, before motion authentication is performed in the service providing server 120, a character concealment process is performed to conceal the action of the character of the first player 32 from the second player 34. According to one embodiment, the management server 110 changes settings related to the position of the character of the first player 32, thereby executing the character concealment process. According to another embodiment, the management server 110 changes settings related to the display of the character of the first player 32, thereby executing the character concealment process. The start notification generation process and / or transmission process constitute a part of the concealment process.

[0157] Although the procedure for generating the start notification is not particularly limited, the start notification is generated, for example, by the following procedure. In this embodiment, the start notification generation unit 740 acquires the determination result of the authentication mode determination unit 730. The start notification generation unit 740 generates a start notification based on the determination result of the authentication mode determination unit 730.

[0158] For example, when the authentication mode determination unit 730 determines to perform motion authentication of the first player 32 using the authentication space, the start notification generation unit 740 creates a start notification including the above-mentioned second request signal. Specifically, the start notification generation unit 740 determines the URI of the authentication space used for authentication of the first player 32. In addition, the start notification generation unit 740 creates commands to cause the computer of the communication terminal 130 to execute (i) a procedure for accessing the management server 110, and (ii) a procedure for requesting the computer of the management server 110 to move all or a part of the character of the first player 32 to the authentication space indicated by the above-mentioned URI. The start notification generation unit 740 creates a start notification including the above-mentioned commands.

[0159] For example, when the authentication mode determination unit 730 determines to execute a motion of the first player 32 after the setting related to the display of the character of the first player 32 is changed, the start notification generation unit 740 creates a start notification including the above-mentioned first request signal, third request signal, and / or fourth request signal. The start notification generation unit 740 creates commands to cause the computer of the communication terminal 130 to execute (i) a procedure for accessing the management server 110, and (ii) a procedure for concealing all or a part of the character of the first player 32 in the computer of the management server 110. The start notification generation unit 740 creates a start notification including the above-mentioned commands.

[0160] In this embodiment, the authentication processing unit 750 performs motion authentication of the first player 32. This verifies that the first player 32 is a legitimate user of the service provided by the service provider 20, or that the first player 32 is the person in question.

[0161] In this embodiment, the authentication item determination unit 762 determines the type and appearance of an item used for authenticating the first player 32. In motion authentication of the first player 32, when the character of the first player 32 exhibits a specific movement or movement pattern while wearing, holding, or using a specific item, the first player 32 may be determined to be a legitimate user or the person himself / herself.

[0162] The authentication item determination unit 762 may determine the specifications of the correct item and the incorrect item. For example, the authentication item determination unit 762 accesses the authentication data storage unit 662 to obtain information indicating the type of the correct item. When information indicating the appearance of the correct item is stored in the authentication data storage unit 662, the authentication item determination unit 762 determines the appearance of the correct item based on the information. On the other hand, when information indicating the appearance of the correct item is not stored in the authentication data storage unit 662, the appearance of the item may be arbitrarily determined. Therefore, the authentication item determination unit 762 determines the appearance of the correct item according to, for example, a predetermined procedure. Examples of the predetermined procedure include a procedure of selecting from a plurality of options in order, a procedure of selecting from a plurality of options at random, and the like.

[0163] Furthermore, the authentication item determination unit 762 determines the number of incorrect items and the type and appearance of each of the incorrect items. The number, type, and appearance of the incorrect items may be determined arbitrarily. Therefore, the authentication item determination unit 762 determines the number, type, and appearance of the incorrect items, for example, according to a predetermined procedure. Examples of the predetermined procedure include a procedure of selecting from a plurality of options in order, a procedure of selecting from a plurality of options at random, and the like.

[0164] In this embodiment, the authentication space construction unit 764 constructs the authentication space. For example, the authentication space construction unit 764 constructs the authentication space when the authentication space is used to authenticate the first player 32. When the authentication space is not used to authenticate the first player 32, the authentication space construction unit 764 does not need to construct the authentication space.

[0165] The authentication space construction unit 764 constructs the authentication space by using, for example, model data stored in the space construction data storage unit 664. When the above-mentioned items are used in the motion authentication of the first player 32, the authentication space construction unit 764 constructs an authentication space in which the correct items and incorrect items determined by the authentication item determination unit 762 are arranged. The authentication space construction unit 764 may output the URI of the authentication space constructed for authentication of the first player 32 to the start notification generation unit 740.

[0166] In this embodiment, the feature extraction unit 772 obtains image data of the character of the first player 32 from the management server 110. The feature extraction unit 772 analyzes the image data to extract features of the character of the first player 32. In one embodiment, the feature extraction unit 772 analyzes the image data to extract movement features of the character of the first player 32. In another embodiment, the feature extraction unit 772 analyzes the image data to extract external appearance features of the character of the first player 32.

[0167] In this embodiment, the wearable item detection unit 774 detects items worn, possessed, or used by the character of the first player 32. The wearable item detection unit 774 also extracts features of the above-mentioned items. Examples of the feature of an item include the type and / or the appearance of the item.

[0168] In one embodiment, the wearing item detection unit 774 acquires image data of the character of the first player 32 from the management server 110. The wearing item detection unit 774 analyzes the image data to detect items worn, possessed, or used by the character of the first player 32. The wearing item detection unit 774 also analyzes the image data to extract features of the items.

[0169] In another embodiment, the wearable item detection unit 774 obtains information about items worn, possessed, or used by the character of the first player 32 from the management server 110. Examples of the information about the items include the type and / or appearance of the items.

[0170] In this embodiment, the player determination unit 776 performs motion authentication of the character of the first player 32 and determines whether or not the first player 32 is a legitimate user or the person himself / herself. The player determination unit 776 determines whether or not the first player 32 is a legitimate user or the person himself / herself, for example, by using the characteristics of the character's movements extracted by the characteristics extraction unit 772.

[0171] Specifically, the player determination unit 776 determines whether or not the motion characteristics of the character of the first player 32 extracted by the characteristic extraction unit 772 match or are similar to the motion characteristics of the character of the first player 32 registered in advance in the authentication data storage unit 662. When the motion characteristics of the character extracted by the characteristic extraction unit 772 match or are similar to the motion characteristics registered in advance in the authentication data storage unit 662, the player determination unit 776 determines, for example, that the first player 32 is a legitimate user or the person himself / herself. On the other hand, when the motion characteristics of the character extracted by the characteristic extraction unit 772 do not match or are similar to the motion characteristics registered in advance in the authentication data storage unit 662, the player determination unit 776 determines, for example, that the first player 32 is not a legitimate user or the person himself / herself, or determines that the first player 32 is not a legitimate user or the person himself / herself.

[0172] The player determination unit 776 may determine whether or not the first player 32 is a legitimate user or the person himself / herself, using the motion characteristics and appearance characteristics of the character extracted by the feature extraction unit 772. Specifically, the player determination unit 776 determines whether or not the motion characteristics and appearance characteristics of the character of the first player 32 extracted by the feature extraction unit 772 match or are similar to the motion characteristics and appearance characteristics of the character of the first player 32 registered in advance in the authentication data storage unit 662.

[0173] If (a) the movement characteristics of the character extracted by the characteristic extraction unit 772 match or are similar to the movement characteristics registered in advance in the authentication data storage unit 662, and (b) the appearance characteristics of the character extracted by the characteristic extraction unit 772 match or are similar to the appearance characteristics registered in advance in the authentication data storage unit 662, the player determination unit 776 determines, for example, that the first player 32 is a legitimate user or the person himself / herself. If either the above condition (a) or the above condition (b) is not satisfied, the player determination unit 776, for example, does not determine that the first player 32 is a legitimate user or the person himself / herself, or determines that the first player 32 is not a legitimate user or the person himself / herself.

[0174] The player determination unit 776 may determine whether the first player 32 is a legitimate user or the person himself / herself, using the motion characteristics of the character extracted by the feature extraction unit 772 and the feature of the item detected by the wearable item detection unit 774. Specifically, the player determination unit 776 determines whether the motion characteristics of the character of the first player 32 extracted by the feature extraction unit 772 match or are similar to the motion characteristics of the character of the first player 32 registered in advance in the authentication data storage unit 662. The player determination unit 776 determines whether the feature of the item detected by the wearable item detection unit 774 match or are similar to the feature of the item registered in advance in the authentication data storage unit 662. The feature of the item may be the type of the item, the appearance of the item, or the type and appearance of the item.

[0175] If (a) the movement characteristics of the character extracted by the characteristic extraction unit 772 match or are similar to the movement characteristics previously registered in the authentication data storage unit 662, and (c) the item characteristics detected by the wearable item detection unit 774 match or are similar to the item characteristics previously registered in the authentication data storage unit 662, the player determination unit 776 determines that the first player 32 is a legitimate user or the person himself / herself. If either the above condition (a) or the above condition (c) is not satisfied, the player determination unit 776, for example, does not determine that the first player 32 is a legitimate user or the person himself / herself, or determines that the first player 32 is not a legitimate user or the person himself / herself.

[0176] The start event detection unit 720 may be an example of a motion information acquisition unit or a start determination unit. The start notification generation unit 740 may be an example of an information management unit. The authentication processing unit 750 may be an example of an authentication device. The feature extraction unit 772 may be an example of a motion information acquisition unit, a motion detection unit, or an appearance detection unit. The wearable item detection unit 774 may be an example of a motion information acquisition unit or an object detection unit. The player determination unit 776 may be an example of a determination unit.

[0177] 8 illustrates an example of an internal configuration of the communication terminal 130. In this embodiment, the communication terminal 130 includes a communication unit 822, an input unit 824, an output unit 826, and a control unit 840, for example.

[0178] In this embodiment, for the purpose of simplifying the explanation, the details of the communication terminal 130 will be explained using as an example a case where the first player 32 uses the communication terminal 130. The communication terminal 130 used by the second player 34 may have a similar configuration to the communication terminal 130 used by the first player 32.

[0179] In this embodiment, the communication unit 822 transmits and receives information to and from the metaverse management system 100 via the communication network 10. The communication unit 822 may transmit and receive information to and from the management server 110, or may transmit and receive information to and from the service providing server 120.

[0180] In this embodiment, the input unit 824 accepts an input from the first player 32. The input unit 824 accepts, for example, an input from the first player 32, related to the operation of a character of the first player 32. The input unit 824 may accept the input related to the operation of the character by detecting a change in the position and posture of the first player 32. The input unit 824 accepts, for example, an input from the first player 32, related to the setting of the character of the first player 32. Examples of the input unit 824 include a keyboard, a pointing device, a touch panel, a microphone, a voice input device, a gesture input device, and a motion input device.

[0181] In this embodiment, the output unit 826 outputs information to the first player 32. The output unit 826 acquires image data from the management server 110, and outputs an image shown in the image data. Examples of the output unit 826 include a display and a projector.

[0182] In this embodiment, the control unit 840 controls the operation of each unit of the communication terminal 130. The control unit 840 controls various operations related to the communication terminal 130 described above.

[0183] For example, the control unit 840 generates the above-described operation data based on an input related to a character operation received by the input unit 824. The control unit 840 may transmit the generated operation data to the management server 110.

[0184] For example, the control unit 840 generates the above-described setting change data based on an input related to the character settings received by the input unit 824. The control unit 840 may transmit the generated setting change data to the management server 110.

[0185] For example, the control unit 840 executes a process for registering authentication information of the first player 32. The control unit 840 may cooperate with the management server 110 and / or the service providing server 120 to register the authentication information of the first player 32 in the authentication data storage unit 662 of the service providing server 120.

[0186] For example, the control unit 840 obtains the above-described start notification 312. The control unit 840 executes various commands included in the start notification 312 and generates the above-described first change request 314. The control unit 840 may transmit the generated first change request 314 to the management server 110.

[0187] For example, the control unit 840 obtains the above-mentioned end notification. The control unit 840 executes various commands included in the end notification and generates the above-mentioned second change request. The control unit 840 may transmit the generated second change request to the management server 110.

[0188] 9 illustrates an example of a computer 3000 in which aspects of the present invention may be embodied in whole or in part. At least a portion of the metaverse management system 100 may be realized by the computer 3000. For example, at least a portion of the management server 110 is realized by the computer 3000. For example, at least a portion of the service providing server 120 is realized by the computer 3000. For example, at least a portion of the communication terminal 130 is realized by the computer 3000.

[0189] A program installed on the computer 3000 may cause the computer 3000 to function as or perform operations associated with an apparatus according to an embodiment of the present invention or one or more "parts" of the apparatus, and / or to perform a process or steps of the process according to an embodiment of the present invention. Such a program may be executed by the CPU 3012 to cause the computer 3000 to perform certain operations associated with some or all of the blocks of the flowcharts and block diagrams described herein.

[0190] The computer 3000 according to this embodiment includes a CPU 3012, a RAM 3014, a graphic controller 3016, and a display device 3018, which are connected to each other by a host controller 3010. The computer 3000 also includes input / output units such as a communication interface 3022, a hard disk drive 3024, a DVD-ROM drive 3026, and an IC card drive, which are connected to the host controller 3010 via an input / output controller 3020. The computer also includes legacy input / output units such as a ROM 3030 and a keyboard 3042, which are connected to the input / output controller 3020 via an input / output chip 3040.

[0191] The CPU 3012 operates according to a program stored in the ROM 3030 and the RAM 3014, thereby controlling each unit. The graphic controller 3016 acquires image data generated by the CPU 3012 into a frame buffer or the like provided in the RAM 3014 or into itself, and causes the image data to be displayed on the display device 3018.

[0192] The communications interface 3022 communicates with other electronic devices via a network. The hard disk drive 3024 stores programs and data used by the CPU 3012 in the computer 3000. The DVD-ROM drive 3026 reads programs or data from the DVD-ROM 3001 and provides the programs or data to the hard disk drive 3024 via the RAM 3014. The IC card drive reads programs and data from an IC card and / or writes programs and data to an IC card.

[0193] The ROM 3030 stores therein a boot program or the like executed by the computer 3000 upon activation, and / or a program that depends on the hardware of the computer 3000. The input / output chip 3040 may also connect various input / output units to the input / output controller 3020 via a parallel port, a serial port, a keyboard port, a mouse port, etc.

[0194] The programs are provided by a computer-readable storage medium such as a DVD-ROM 3001 or an IC card. The programs are read from the computer-readable storage medium, installed in the hard disk drive 3024, the RAM 3014, or the ROM 3030, which are also examples of computer-readable storage media, and executed by the CPU 3012. Information processing described in these programs is read by the computer 3000, and brings about cooperation between the programs and the various types of hardware resources described above. An apparatus or method may be constructed by realizing an operation or processing of information according to the use of the computer 3000.

[0195] For example, when communication is performed between computer 3000 and an external device, CPU 3012 may execute a communication program loaded in RAM 3014 and instruct communication interface 3022 to perform communication processing based on the processing described in the communication program. Under the control of CPU 3012, communication interface 3022 reads transmission data stored in a transmission buffer area provided in RAM 3014, hard disk drive 3024, DVD-ROM 3001, or a recording medium such as an IC card, and transmits the read transmission data to the network, or writes reception data received from the network to a reception buffer area or the like provided on the recording medium.

[0196] Furthermore, CPU 3012 may cause all or a necessary portion of a file or database stored in an external recording medium such as hard disk drive 3024, DVD-ROM drive 3026 (DVD-ROM 3001), an IC card, etc. to be read into RAM 3014, and perform various types of processing on the data on RAM 3014. CPU 3012 may then write back the processed data to the external recording medium.

[0197] Various types of information, such as various types of programs, data, tables, and databases, may be stored in the recording medium and undergo information processing. The CPU 3012 may perform various types of processing on the data read from the RAM 3014, including various types of operations, information processing, conditional judgment, conditional branching, unconditional branching, information search / replacement, etc., as described throughout this disclosure and specified by the instruction sequence of the program, and writes back the results to the RAM 3014. The CPU 3012 may also search for information in a file, database, etc. in the recording medium. For example, when a plurality of entries each having an attribute value of a first attribute associated with an attribute value of a second attribute are stored in the recording medium, the CPU 3012 may search for an entry whose attribute value of the first attribute matches a specified condition from among the plurality of entries, read the attribute value of the second attribute stored in the entry, and thereby obtain the attribute value of the second attribute associated with the first attribute that satisfies a predetermined condition.

[0198] The above-described programs or software modules may be stored in a computer-readable storage medium on the computer 3000 or in the vicinity of the computer 3000. In addition, a recording medium such as a hard disk or a RAM provided in a server system connected to a dedicated communication network or the Internet can be used as a computer-readable storage medium, thereby providing the above-described programs to the computer 3000 via the network.

[0199] The blocks in the flowcharts and block diagrams in the above embodiments may represent stages of a process in which an operation is performed or "parts" of an apparatus responsible for performing the operation. Particular stages and "parts" may be implemented by dedicated circuitry, programmable circuitry provided with computer readable instructions stored on a computer readable storage medium, and / or a processor provided with computer readable instructions stored on a computer readable storage medium. The dedicated circuitry may include digital and / or analog hardware circuits, and may include integrated circuits (ICs) and / or discrete circuits. The programmable circuitry may include reconfigurable hardware circuits, such as, for example, field programmable gate arrays (FPGAs), programmable logic arrays (PLAs), and the like, including AND, OR, XOR, NAND, NOR, and other logical operations, flip-flops, registers, and memory elements.

[0200] A computer-readable storage medium may include any tangible device capable of storing instructions that are executed by a suitable device, such that a computer-readable storage medium having instructions stored thereon comprises an article of manufacture that includes instructions that can be executed to create means for performing the operations specified in the flowcharts or block diagrams. Examples of computer-readable storage media may include electronic storage media, magnetic storage media, optical storage media, electromagnetic storage media, semiconductor storage media, and the like. More specific examples of computer-readable storage media may include floppy disks, diskettes, hard disks, random access memories (RAMs), read-only memories (ROMs), erasable programmable read-only memories (EPROMs or flash memories), electrically erasable programmable read-only memories (EEPROMs), static random access memories (SRAMs), compact disk read-only memories (CD-ROMs), digital versatile disks (DVDs), Blu-ray disks, memory sticks, integrated circuit cards, and the like.

[0201] The computer readable instructions may include either assembler instructions, instruction set architecture (ISA) instructions, machine instructions, machine-dependent instructions, microcode, firmware instructions, state setting data, or source or object code written in any combination of one or more programming languages, including object-oriented programming languages ​​such as Smalltalk®, JAVA®, C++, etc., and conventional procedural programming languages ​​such as the “C” programming language or similar programming languages.

[0202] Computer readable instructions may be provided to a processor of a general purpose computer, special purpose computer, or other programmable data processing apparatus, or to a programmable circuit, either locally or over a local area network (LAN), a wide area network (WAN), such as the Internet, etc., to cause the processor of the general purpose computer, special purpose computer, or other programmable data processing apparatus, or to a programmable circuit, to execute the computer readable instructions to generate means for performing the operations specified in the flowcharts or block diagrams. Examples of processors include computer processors, processing units, microprocessors, digital signal processors, controllers, microcontrollers, etc.

[0203] Although the present invention has been described above using the embodiments, the technical scope of the present invention is not limited to the scope described in the above embodiments. It is clear to those skilled in the art that various modifications or improvements can be made to the above embodiments. Furthermore, the matters described for a specific embodiment can be applied to other embodiments to the extent that they are not technically inconsistent. Furthermore, each component may have the same features as other components having the same name and different reference numerals. It is clear from the claims that such modified or improved forms may also be included in the technical scope of the present invention.

[0204] It should be noted that the order of execution of each process, such as operations, procedures, steps, and stages, in the devices, systems, programs, and methods shown in the claims, specifications, and drawings is not specifically stated as "before," "prior to," etc., and may be realized in any order unless the output of a previous process is used in a later process. Even if the operational flow in the claims, specifications, and drawings is explained using "first," "next," etc. for convenience, it does not mean that it is essential to perform the process in this order. [Explanation of symbols]

[0205] 10. Communications Networks 20 Service Providers 32 First Player 34 Second Player 100 Metaverse Management System 110 Management Server 120 Service provider server 130 Communication terminal 312 Start notification 314 First Change Request 412 Image data 414 Image data 416 Image data 520 Storage Unit 522 Space Construction Data Storage Unit 524 Login data storage section 526 Setting data storage section 530 Communication Control Unit 542 Entrance and Exit Control Department 544 Settings Management Department 546 Operation Data Acquisition Unit 550 Display control unit 552 Virtual Space Construction Department 554 Image data generation unit 620 Communication Control Unit 630 Service Provision Department 640 Authentication Data Registration Section 650 Identification Department 660 Storage Unit 662 Authentication data storage section 664 Space Construction Data Storage Unit 720 Start Event Detector 730 Authentication mode determination unit 740 Start notification generation unit 750 Authentication processing unit 762 Authentication item determination unit 764 Authentication Space Construction Department 772 Feature Extraction Unit 774 Wearable Item Detection Unit 776 Player Judgment Department 822 Communications Department 824 Input section 826 Output section 840 Control Unit 3000 Computers 3001 DVD-ROM 3010 Host Controller 3012 CPU 3014 RAM 3016 Graphics Controller 3018 Display Device 3020 I / O Controller 3022 Communication Interface 3024 Hard Disk Drive 3026 DVD-ROM drive 3030 ROM 3040 I / O chip 3042 Keyboard

Claims

1. An authentication device for authenticating a first user who wishes to use a service provided in a virtual space that can be shared or interacted with by a plurality of users, comprising: a motion information acquisition unit that acquires motion information indicating a motion of a first character, which is a virtual character that moves in response to an operation of the first user within the virtual space; an authentication unit that authenticates the first user using a feature of the movement of the first character indicated by the movement information acquired by the movement information acquisition unit; Equipped with Authentication device.

2. a start determination unit that determines to start an authentication process of the first user in the authentication unit; an information management unit that, when the start determination unit determines to start the authentication process for the first user, executes an information management process, which is (i) a process for concealing an action of the first character based on an operation of the first user from a second user who is a user different from the first user, or (ii) a process for making it difficult for the second user to recognize the action of the first character based on an operation of the first user; Further comprising: The authentication device according to claim 1 .

3. The information management process includes: a procedure for transmitting at least one of the following to a user terminal that is an information processing device used by the first user to use the virtual space or the service, or to a virtual space construction device that is an information processing device that constructs and / or operates the virtual space: (i) a first request signal that requests the construction of a virtual object around the first character that is capable of blocking at least a part of the first character; (ii) a second request signal that requests the movement of at least a part of the first character into an authentication space that is a virtual space constructed inside the virtual space, the interior of which is not presented to the second user; (iii) a third request signal that requests the replacement of at least a part of an image of the first character presented to the second user with another image; and (iv) a fourth request signal that requests that an image of at least a part of the first character not be presented to the second user; having The authentication device according to claim 2 .

4. the information management process includes a procedure for transmitting the first request signal, the second request signal, the third request signal, and / or the fourth request signal to the user terminal; each of the first request signal, the second request signal, the third request signal, and the fourth request signal includes an instruction for a computer of the user terminal to access the virtual space construction device and cause the virtual space construction device to change a position or a setting of the first character; The authentication device according to claim 3.

5. The authentication unit A motion detection unit that detects a feature of a motion of the first character; an appearance detection unit that detects an appearance feature of the first character; (a) a determination unit that determines that the first user is a legitimate user or a person in question when a feature of the movement detected by the movement detection unit matches or is similar to a feature of a movement registered in advance, and (b) a feature of the appearance detected by the appearance detection unit matches or is similar to a feature of the appearance registered in advance; having The authentication device according to claim 1 .

6. The authentication unit A motion detection unit that detects a feature of a motion of the first character; an object detection unit that detects a virtual object that is a virtual item worn, held, and / or used by the first character; (a) a determination unit that determines that the first user is a legitimate user or a person in question when a feature of the movement detected by the movement detection unit matches or is similar to a feature of a movement registered in advance, and (c) a type of the virtual object detected by the object detection unit matches or is similar to a type of a virtual object registered in advance; having The authentication device according to claim 1 .

7. A program for causing a computer to function as the authentication device according to any one of claims 1 to 6.

8. 1. An authentication method for authenticating a first user who wishes to use a service provided in a virtual space that can be shared or interacted with by a plurality of users, using a computer, comprising: a motion information acquisition step in which the computer acquires motion information indicating a motion of a first character, which is a virtual character that moves in response to an operation of the first user within the virtual space; an authentication step in which the computer authenticates the first user using characteristics of the movement of the first character indicated by the movement information acquired in the movement information acquisition step; 1. An authentication method comprising:

Images