Program, information processing method, and information processing system

Abstract

To provide an information processing system that strictly performs identity verification of a user when using service while suppressing a burden on the user.SOLUTION: An information processing system includes: an acquisition unit that acquires first biometric information, which is information related to biological information of a user, read by a user terminal including certification information, which is information related to a public certificate of the user, and second biometric information, which is information related to the biological information of the user and is associated with the certification information; an authentication unit that performs, on the basis of the first biometric information and the second biometric information, biometric authentication of the user; a registration unit that registers information related to the user authenticated by the biometric authentication; and a service provision unit that, when the information related to the user is registered, in response to a request from the user terminal, provides service to the user.SELECTED DRAWING: Figure 2

Description

[Technical Field]

[0001] The present disclosure relates to techniques for verifying the identity of a user. [Background technology]

[0002] Various services may be provided using a user's own terminal. For example, Patent Document 1 discloses a technology for acquiring location information of a user's terminal and settling the user's meal and drink bill when the user is more than a predetermined distance away from a predetermined area of ​​a restaurant. Furthermore, Patent Document 2 discloses a technology for awarding points earned when purchasing products using user identification information read from the user's mobile terminal.

[0003] There are cases where identity verification is required for users who wish to use such services. As a technology related to user identity verification, Patent Document 3 discloses a technology for authenticating a user by acquiring user authentication information from an external server and transmitting the acquired authentication information to an authentication server. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Japanese Patent Publication No. 2020-177288 [Patent Document 2] Japanese Patent Application Laid-Open No. 2013-004064 [Patent Document 3] Japanese Patent Application Publication No. 2017-102842 Summary of the Invention [Problem to be solved by the invention]

[0005] Users who wish to use the above services may be required to register in advance, and strict identity verification is required when registering.

[0006] In the technology disclosed in Patent Document 3, a processing device operated by a user acquires the user's authentication information from an external server via a terminal operated by the user, and then the processing device transmits the authentication information to an authentication server. As such, in the technology disclosed in Patent Document 3, the user needs to own and operate multiple devices in order to verify the user's identity. In other words, this may place a burden on the user.

[0007] Patent Documents 1 and 2 do not disclose any description regarding user identity verification.

[0008] The present disclosure has been made in consideration of the above-mentioned problems, and one of its objectives is to provide an information processing system, etc. that is capable of strictly verifying the identity of users when using services while reducing the burden on users. [Means for solving the problem]

[0009] An information processing system according to one aspect of the present disclosure includes an acquisition means for acquiring first biometric information, which is information about a user's biometrics, read on a user terminal equipped with certification information, which is information about the user's public certificate, and second biometric information, which is information about the user's biometrics linked to the certification information; an authentication means for performing biometric authentication on the user based on the first biometric information and the second biometric information; a registration means for registering information about the user authenticated by the biometric authentication; and a service provision means for providing a service to the user in response to a request from the user terminal when the information about the user is registered.

[0010] An information processing method according to one aspect of the present disclosure acquires first biometric information, which is information about a user's biometrics, and second biometric information, which is information about the user's biometrics linked to the certification information, read by a user terminal equipped with certification information, which is information about the user's public certificate; performs biometric authentication on the user based on the first biometric information and the second biometric information; registers information about the user authenticated by the biometric authentication; and, when the information about the user is registered, provides a service to the user in response to a request from the user terminal.

[0011] A computer-readable storage medium according to one aspect of the present disclosure stores a program that causes a computer to execute the following processes: acquiring first biometric information, which is information about a user's biometrics, read on a user terminal equipped with certification information, which is information about the user's public certificate; and second biometric information, which is information about the user's biometrics linked to the certification information; performing biometric authentication on the user based on the first biometric information and the second biometric information; registering information about the user authenticated by the biometric authentication; and, when the information about the user is registered, providing a service to the user in response to a request from the user terminal. [Effects of the Invention]

[0012] According to the present disclosure, it is possible to strictly verify the identity of a user when using a service while reducing the burden on the user. [Brief explanation of the drawings]

[0013] [Figure 1] FIG. 1 is a diagram illustrating an example of a configuration of an information processing system according to a first embodiment. [Figure 2] 1 is a block diagram illustrating an example of a functional configuration of an information processing system according to a first embodiment. [Figure 3] 4 is a flowchart illustrating an example of the operation of the information processing system according to the first embodiment. [Figure 4] FIG. 10 is a diagram illustrating an example of a configuration of an information processing system according to a second embodiment. [Figure 5] FIG. 10 is a block diagram illustrating an example of a configuration of an information processing system according to a second embodiment. [Figure 6] FIG. 10 is a diagram illustrating an example of information related to a user according to the second embodiment. [Figure 7] FIG. 10 is a diagram illustrating an example of a relationship between authentication levels and services provided according to the second embodiment. [Figure 8] 10 is a flowchart illustrating an example of a user registration operation of the information processing system according to the second embodiment. [Figure 9] 10 is a flowchart illustrating an example of a continuation of the user registration operation of the information processing system according to the second embodiment. [Figure 10] FIG. 10 is a sequence diagram illustrating an example of an operation performed by the information processing system according to the second embodiment when providing a store reservation service to a user. [Figure 11] FIG. 10 is a sequence diagram illustrating an example of an operation performed when the information processing system of the second embodiment provides an order service to a user. [Figure 12] FIG. 10 is a sequence diagram illustrating an example of an operation when the information processing system of the second embodiment provides a payment service to a user. [Figure 13] FIG. 10 is a block diagram showing an example of the configuration of an information processing system according to a first modified example. [Figure 14] FIG. 13 is a block diagram showing an example of the configuration of an information processing system according to a fourth modification. [Figure 15] FIG. 10 is a diagram schematically illustrating an example of the configuration of an information processing system in another application example. [Figure 16] FIG. 2 is a block diagram showing an example of a hardware configuration of a computer device that realizes the information processing systems according to the first and second embodiments of the present disclosure. DETAILED DESCRIPTION OF THE INVENTION

[0014] Hereinafter, embodiments of the present disclosure will be described with reference to the drawings.

[0015] First Embodiment An overview of the information processing system according to the first embodiment will be described.

[0016] 1 is a diagram schematically illustrating an example of the configuration of an information processing system 1000. The information processing system 1000 includes, for example, a user terminal 100 and a server 200. The user terminal 100 and the server 200 are communicatively connected. Note that the configuration example of the information processing system 1000 is not limited to this example, and may further include other devices.

[0017] The user terminal 100 is a terminal operated by a user. For example, the user terminal 100 may be a smartphone, a tablet terminal, a laptop-type personal computer, or the like. The server 200 is, for example, a device that provides services. The server 200 provides services to, for example, registered users. For example, user information is input to the user terminal 100 by the user's operation. For example, the user terminal 100 transmits the user information to the server. Then, the server 200 performs user registration by, for example, registering the user information. Note that a service in this disclosure refers to, for example, interactions between a private company or public institution and a user using the user terminal 100. For example, the service may be, but is not limited to, a reservation for a visit at a restaurant or retail store, ordering a product, and making a payment.

[0018] The user terminal 100 is loaded with certification information, which is information related to the user's official certificate. An official certificate refers to a document that contains information such as the user's name and date of birth and can be used to verify the user's identity. For example, the official certificate may be a My Number card or a driver's license. The certification information is information related to the official certificate. The certification information may also include information indicating the name, date of birth, gender, address, etc., that is written on the official certificate. The certification information may also include the personal number on the My Number card and the license number on the driver's license, etc.

[0019] The authentication information is linked to biometric information, which is information about the user's biometrics. The biometric information is information used in biometric authentication, which will be described later. The biometric information may be, for example, information indicating the user's biometric features or an image of the user's biometrics, but is not limited to these examples. Examples of biometrics include the user's face, iris, fingerprint, palm print, and veins. The biometric information may be included in the authentication information, or may be associated with the authentication information and stored in the user terminal 100 or another device.

[0020] 2 is a block diagram showing an example of the functional configuration of the information processing system 1000. As shown in FIG. 2, the information processing system 1000 includes an acquisition unit 110, an authentication unit 120, a registration unit 130, and a service provision unit 140.

[0021] The acquiring unit 110 acquires biometric information read by the user terminal 100 and biometric information linked to the certification information. In the present disclosure, the biometric information read by the user terminal 100 is referred to as first biometric information, and the biometric information linked to the certification information is referred to as second biometric information. For example, it is assumed that the user terminal 100 is equipped with a camera. In this case, for example, the camera of the user terminal 100 captures an image of the user's face. Then, the acquiring unit 110 may acquire, for example, a captured image of the user's face as the first biometric information. Also, for example, it is assumed that the user terminal 100 is equipped with a sensor that reads a fingerprint. In this case, the acquiring unit 110 may acquire, for example, an image of a fingerprint read by the sensor or information indicating the feature quantities of the fingerprint as the first biometric information. Then, the acquiring unit 110 acquires the second biometric information linked to the certification information. In this way, the acquiring unit 110 acquires the first biometric information, which is information about the user's biometrics, read by the user terminal 100 equipped with the certification information, which is information about the user's official certificate, and the second biometric information, which is information about the user's biometrics linked to the certification information. The acquiring unit 110 is an example of an acquiring means.

[0022] The authentication unit 120 performs biometric authentication. For example, the authentication unit 120 performs facial authentication on the user. In this case, for example, the first biometric information is an image of the user's face, and the second biometric information is an image of the face photograph on an official certificate. The authentication unit 120, for example, extracts facial features from each image and compares the extracted features. Also, for example, the first biometric information is facial features extracted from an image of the user's face, and the second biometric information is facial features extracted from an image of the face photograph on an official certificate. In this case, the authentication unit 120, for example, compares the first biometric information with the second biometric information. If the comparison results in a match, the authentication unit 120 determines that the user operating the user terminal 100 is the person on the official certificate (i.e., the authentication unit 120 authenticates the user). Note that the method of authenticating the user is not limited to this example. In this way, the authentication unit 120 performs biometric authentication on the user based on the first biometric information and the second biometric information. Authentication unit 120 is an example of authentication means.

[0023] The registration unit 130 registers information about the user. For example, the registration unit 130 accepts input of information about the user from a user authenticated by the authentication unit 120. The information about the user is, for example, personal information input by the user to receive a service. For example, the information about the user is the user's name, age, sex, address, email address, telephone number, credit card information, etc. Then, the registration unit 130 registers the input information about the user. In this way, the registration unit 130 registers information about the user authenticated by biometric authentication. The registration unit 130 is an example of a registration means.

[0024] The service providing unit 140 provides a service. For example, suppose a user orders a product at a restaurant using the user terminal 100. At this time, for example, the user terminal 100 makes a request for the product order to the server 200. The server 200, for example, accepts the order from the user terminal 100 and notifies a store terminal at the restaurant. Also, for example, the user pays for the product at the restaurant using the user terminal 100. At this time, for example, the user terminal 100 makes a request for the product payment to the server 200. The server 200, for example, accepts the payment request from the user terminal 100 and completes the payment. In this way, when information about the user is registered, the service providing unit 140 provides a service to the user in response to a request from the user terminal. The service providing unit 140 is an example of a service providing means.

[0025] Next, an example of the operation of the information processing system 1000 will be described with reference to Fig. 3. In this disclosure, each step in a flowchart will be represented by a number assigned to the step, such as "S1".

[0026] 3 is a flowchart illustrating an example of the operation of the information processing system 1000. The acquisition unit 110 acquires first biometric information read by a user terminal equipped with certification information and second biometric information linked to the certification information (S1). The authentication unit 120 performs biometric authentication on the user based on the first biometric information and the second biometric information (S2). The registration unit 130 registers information about the user authenticated by biometric authentication (S3). When the information about the user is registered, the service providing unit 140 provides a service to the user in response to a request from the user terminal (S4).

[0027] In this way, the information processing system 1000 of the first embodiment acquires first biometric information, which is information about a user's biometrics, read by a user terminal equipped with certification information, which is information about the user's official certificate, and second biometric information, which is information about the user's biometrics linked to the certification information. Furthermore, the information processing system 1000 performs biometric authentication on the user based on the first biometric information and the second biometric information, and registers information about the user authenticated by biometric authentication. Then, when the information about the user is registered, the information processing system 1000 provides a service to the user in response to a request from the user terminal.

[0028] During user registration, the information processing system 1000 authenticates a user who owns a user terminal equipped with certification information, which is information related to the user's official certificate. Therefore, the user must use a user terminal equipped with the certification information when registering. This allows the information processing system 1000 to perform authentication equivalent to authenticating the user's possessions. Furthermore, the information processing system 1000 performs biometric authentication on the user using biometric information read by the user terminal. In other words, the information processing system 1000 authenticates the user using both possession authentication and biometric authentication. Furthermore, the information processing system 1000 authenticates the user based on information from the user terminal. In other words, the information processing system 1000 does not require the user to operate multiple devices during user registration. That is, the information processing system 1000 of the first embodiment can strictly verify the user's identity when using a service while minimizing the burden on the user.

[0029] <Second embodiment> Next, an information processing system 1000 according to a second embodiment will be described. In the second embodiment, the information processing system 1000 described in the first embodiment will be described in more detail. Note that some of the description overlapping with the first embodiment will be omitted.

[0030] FIG. 4 is a diagram schematically illustrating an example of a configuration including an information processing system 1000 according to the second embodiment. As illustrated in FIG. 4, a user terminal 100 is communicably connected to a server 200. The server 200 is communicably connected to a store terminal 300. The user terminal 100 is a device used by a user who wishes to use a service. The server 200 is a device used by a service provider (such as a company or a public institution) to provide a service. The store terminal 300 is a terminal located in a facility such as a restaurant, a retail store, a government office, or a hospital. The store terminal 300 may be a personal computer, a smartphone, a tablet terminal, or the like. There may be multiple store terminals 300, and each of the multiple store terminals 300 may have different functions. The store terminal 300 may be connected to other devices such as a camera and a two-dimensional code reader. While the present embodiment describes an example in which the information processing system 1000 is applied to a restaurant, the application of the information processing system 1000 is not limited to this example.

[0031] [Details of Information Processing System 1000] 5 is a block diagram showing an example of the configuration of an information processing system 1000 according to the second embodiment. First, the user terminal 100 will be described. As shown in FIG. 5, the user terminal 100 includes a reading unit 10, an input unit 11, an output unit 12, and an acquisition unit 110. The user terminal 100 also includes a storage device 19.

[0032] The reading unit 10 reads the user's biometric information. For example, the reading unit 10 takes a photograph and generates a captured image. In this case, the reading unit 10 has the function of a camera mounted on the user terminal 100, for example. That is, in the present disclosure, taking a photograph of a user is also expressed as "reading." Not limited to this example, the reading unit 10 reads the user's biometric information such as the iris, fingerprint, palm print, and veins. In the second embodiment, an example will be described in which the information processing system 1000 takes a photograph of the user's face in the reading unit 10 and performs face authentication in the authentication unit 120. Other examples of biometric authentication will be described later.

[0033] The input unit 11 accepts various inputs in response to user operations, such as the input of information about the user described above.

[0034] The output unit 12 outputs various types of information. For example, the output unit 12 displays information transmitted from the server 200 on a display mounted on the user terminal 100.

[0035] The acquisition unit 110 acquires the first biometric information and the second biometric information linked to the certification information. Specifically, the acquisition unit 110 acquires the captured image captured by the reading unit 10 as the first biometric information. Then, the acquisition unit 110 acquires the second biometric information linked to the certification information, which is information related to the user's official certificate. Here, the official certificate may be a document containing the user's personal information and issued by a government agency. For example, the official certificate is a My Number card. The official certificate may also be a driver's license, national health insurance card, passport, basic resident registration card, residence card, etc. The certification information is information indicating the validity of the official certificate and may be an electronic certificate issued by an external certification authority or the like. Some cards, such as My Number cards, include an IC (Integrated Circuit) chip and become usable when an electronic certificate is installed on the IC chip. In other words, a user terminal 100 equipped with an electronic certificate functions as a terminal with an official certificate. Such a terminal with an official certificate function is sometimes called an official certificate-integrated terminal. For example, a user terminal 100 equipped with an electronic certificate for a My Number card has the functions of a My Number card and is sometimes called a My Number card integrated terminal.

[0036] The certification information is linked to second biometric information, which is biometric information of the user. As described above, the second biometric information is used when performing biometric authentication. The second biometric information may be an image showing a part of the user, or may be information indicating a part of the user's features. The second biometric information may be, for example, a facial photograph included in an official certificate. The second biometric information may be associated with the certification information or may be included in the certification information. In this embodiment, the certification information and the second biometric information are associated with each other and stored in the storage device 19. The storage device 19 is an example of a storage means.

[0037] Here, the acquiring unit 110 may acquire the second biometric information when authentication is performed using a predetermined password. For example, when a user attempts to access the certification information of the user terminal 100, the output unit 12 requests input of a password. At this time, the output unit 12 displays a message requesting a password on the display of the user terminal 100. Then, the input unit 11 accepts input of the password from the user. The password may be, for example, a personal identification number called a PIN (Personal Identification Number) code. For example, when the input password matches the setting information, the acquiring unit 110 is able to access the certification information and acquires the second biometric information linked to the certification information. Here, the setting information is information indicating a preset password. The setting information is stored, for example, in the storage device 19. In this way, the acquiring unit 110 may acquire the second biometric information when the password input by the user matches the preset setting information.

[0038] Next, a description will be given of the server 200. The server 200 includes an authentication unit 120, a registration unit 130, and a service providing unit 140. The server 200 also includes a storage device 29. The storage device 29 is an example of a storage means.

[0039] The authentication unit 120 authenticates the user. Specifically, the authentication unit 120 acquires, for example, first biometric information and second biometric information from the user terminal 100. Then, the authentication unit 120 performs biometric authentication based on the first biometric information and the second biometric information. The authentication unit 120 may accept a selection of an authentication method from the user in advance. For example, if an authentication method other than biometric authentication using certification information, such as SMS (Short Message Service) authentication, is selected, the authentication unit 120 performs authentication according to the selected authentication method. The authentication method other than biometric authentication using certification information may be an existing method.

[0040] The registration unit 130 registers information about a user. FIG. 6 is a diagram illustrating an example of the information about a user. In the example of FIG. 6, the information about a user includes the user's identification information, name, gender, date of birth, address, email address, and credit card information. The identification information is information that is different for each user and identifies the user. Furthermore, in the example of FIG. 6, the information about a user includes information indicating a captured image of the user and an authentication level. When a user is authenticated by biometric authentication using certification information, the registration unit 130 may register the first biometric information used for the biometric authentication as information about the user. When face authentication is performed as the biometric authentication, the first biometric information to be registered is, for example, a captured image showing the user's face. The biometric information registered at this time is also referred to as registered biometric information. The registration unit 130 may also register information about users authenticated by an authentication method other than biometric authentication using certification information and users who have not been authenticated. In this case, the information about the user includes information indicating the authentication method used for the user. In the present disclosure, information indicating the type of authentication used for the user is also referred to as an authentication level. For example, the registration unit 130 registers information about users, with a user authenticated by biometric authentication using certification information as authentication level 2, a user authenticated by other authentication as authentication level 1, and a user not authenticated as authentication level 0. In the example of Fig. 6, information about authentication level 2, which indicates a user authenticated by biometric authentication using certification information, is registered. The information about users is stored in, for example, the storage device 29.

[0041] The service providing unit 140 provides services using the user terminal 100. For example, in a restaurant, the service providing unit 140 provides services such as restaurant reservations, product ordering, payment, and point awarding in response to a request from the user terminal 100. For example, assume that a user requests a restaurant reservation using the user terminal 100. The restaurant reservation request may include information such as the user's identification information, the reservation date and time, and the number of people making the reservation. In this case, the service providing unit 140 accepts the reservation in response to the request and generates a reservation code. The service providing unit 140 then transmits the reservation code to the user terminal 100. Here, the reservation code is information identifying the user who made the reservation. For example, the reservation code may be data obtained by converting information about the restaurant reservation, including information about the user who made the reservation, the reservation date and time, and the number of people making the reservation. For example, the user can prove that they are the user who made the reservation by displaying the reservation code on the user terminal 100 and having the store terminal 300 read it. The reservation code may be, for example, a one-dimensional barcode or a two-dimensional barcode. There are cases where customers who have made reservations at a restaurant or the like do not show up without canceling the reservation. This is called reservation abandonment. Reservation abandonment causes damage to the restaurant. The information processing system 1000 can prevent users from abandoning reservations by accepting restaurant reservations from users who have undergone strict identity verification.

[0042] Also, for example, suppose a user uses the user terminal 100 to make a product order request. The service providing unit 140 accepts the order and presents order information, which is information about the ordered product, to the store terminal 300 used by an employee of the restaurant. This allows the user to order the product using the user terminal 100. At this time, the service providing unit 140 may be configured to allow the user of the user terminal 100 to order the product after, for example, having the user terminal 100 read a code, such as a two-dimensional barcode, attached to the table where the user is seated or on a menu. At this time, the code may include, for example, information identifying the table. The order request from the user terminal may also include information identifying the table. This allows the service providing unit 140 to associate the order information with the table to which the product should be delivered.

[0043] Also, for example, suppose a user makes a payment request using the user terminal 100. The payment request may include, for example, information about the amount to be paid by the user. For example, the input unit 11 may acquire the amount information by accepting information input by the user. At this time, the input unit 11 may acquire the amount information by reading a code, such as a two-dimensional code, that includes the amount information. The service providing unit 140 performs payment processing, for example, using the user's credit card information. The service providing unit 140 may then notify the user terminal 100 that payment has been completed. Note that the service providing unit 140 may also perform a null payment when a product order is placed. That is, the service providing unit 140 may perform a null payment for the order when an order request is received from the user terminal 100, and may complete the payment for the order when a payment request is received from the user terminal 100. In this case, the payment request does not need to include information about the amount. Furthermore, the service providing unit 140 may complete the payment for the order even if no payment request is received from the user terminal 100 if no order request is received for a predetermined period of time. This allows the information processing system 1000 to prevent users from running away without paying.

[0044] The service providing unit 140 may also award points to the user according to the amount of payment. Points are data that indicate economic value. Points may be, for example, data that indicates a value similar to currency and that can be exchanged for goods or services. Points are, for example, included in information about the user.

[0045] In this way, the information processing system 1000 can reduce the number of times a user comes face-to-face with restaurant staff when visiting a restaurant, for example. This allows the information processing system 1000 to contribute to infection control measures.

[0046] Without being limited to the above example, the service providing unit 140 provides services in response to requests from the user terminal 100. Here, the services to be provided may be set according to the authentication level. FIG. 7 is a diagram showing an example of the relationship between the authentication level and the services to be provided. For example, it is shown that a user with authentication level 2 can receive points, make a reservation to visit a store using the user terminal 100, place an order using the user terminal 100, and make a payment using the user terminal 100. It is also shown that a user with authentication level 1 can only receive points and place an order using the user terminal 100. It is also shown that a user with authentication level 0 can only receive points. In this way, the service providing unit 140 may gradually increase the number of available services according to the authentication level. Furthermore, without being limited to this, the service providing unit 140 may provide services that give preferential treatment to users according to the authentication level, such as by increasing the number of points to be provided according to the authentication level. That is, the service providing unit 140 may set the services to be provided to users according to the authentication level.

[0047] [Operation 1 of Information Processing System 1000] Next, an example of the operation of the information processing system 1000 will be described. First, a scene in which the information processing system 1000 performs user registration will be described with reference to Fig. 8 and Fig. 9. In this operation example, it is assumed that the correspondence between the authentication level and the authentication method is the same as that shown in the example of Fig. 7.

[0048] 8 is a flowchart showing an example of the user registration operation of the information processing system 1000. First, the authentication unit 120 accepts the selection of an authentication method (S101). At this time, for example, the output unit 12 of the user terminal 100 displays the authentication level and the authentication method corresponding to the authentication level on the display of the user terminal 100. Then, the input unit 11 accepts the user's input regarding the selection of the authentication method. If the authentication level of the selected authentication method is 2 ('Yes' in S102), the acquisition unit 110 acquires second biometric information linked to the certification information (S103). At this time, the acquisition unit 110 may acquire the second biometric information if the password entered by the user matches the setting information. The acquisition unit 110 also acquires first biometric information (S104). At this time, the acquisition unit 110 acquires, for example, a captured image of the user as the first biometric information. The image is captured by the reading unit 10. If the biometric authentication is face authentication, the captured image is an image of the user's face. At this time, the output unit 12 may, for example, display on the display of the user terminal 100 a message to operate the user terminal 100 so that the face can be captured.

[0049] Then, the authentication unit 120 acquires the first biometric information and the second biometric information from the user terminal 100, and performs biometric authentication based on the first biometric information and the second biometric information (S105). If the user is not authenticated ("No" in S106), the authentication unit 120 notifies the user terminal 100 that the user has not been authenticated (S107). If the user is authenticated ("Yes" in S106), the input unit 11 accepts input of information about the user (S108). At this time, the user terminal 100 transmits the input information to the server 200. The registration unit 130 registers the information about the user (S109).

[0050] In the process of S102, if the authentication level is not 2 ("No" in S102), the information processing system 1000 proceeds to the operation shown in FIG. 9. FIG. 9 is a flowchart showing an example of the continuation of the user registration operation of the information processing system 1000. If the authentication level of the selected authentication is 1 ("Yes" in S110), the authentication unit 120 performs authentication other than biometric authentication using certification information. The authentication method at this time is not particularly limited and may be an existing method. If the user is not authenticated ("No" in S111), the authentication unit 120 notifies the user terminal 100 that the user has not been authenticated (S114). If the user is authenticated ("Yes" in S106), the input unit 11 accepts input of information about the user (S112). Then, the registration unit 130 registers the information about the user (S113).

[0051] If the authentication level is 0, that is, if authentication is not performed ("No" in S110), the input unit 11 accepts input of information about the user (S112), and the registration unit 130 registers the information about the user (S113).

[0052] [Operation 2 of Information Processing System 1000] Next, an example of the operation when the information processing system 1000 provides a service will be described with reference to Figs. 10 to 12. In this operation example, the user is assumed to have been authenticated at authentication level 2. This operation example is an example of the operation when the information processing system 1000 is applied to a restaurant.

[0053] FIG. 10 is a sequence diagram showing an example of the operation of the information processing system 1000 when providing a restaurant reservation service to a user. The user terminal 100 requests a restaurant reservation (S201). At this time, for example, the input unit 11 may accept input of information related to the restaurant reservation through a user operation and transmit the information to the server 200 to request the restaurant reservation. The service providing unit 140 of the server 200 accepts the restaurant reservation (S202). At this time, the service providing unit 140 may store information related to the restaurant reservation, such as information about the user who made the reservation, the reservation date and time, and the number of people who made the reservation, in the storage device 29. The service providing unit 140 then generates a reservation code and transmits the reservation code to the user terminal 100 (S203). The user terminal 100 receives the reservation code (S204). The output unit 12 of the user terminal then displays the reservation code (S205). At this time, for example, when the user visits a restaurant, the user operates the user terminal 100 and presents the reservation code. The shop terminal 300 reads the reservation code (S206), which allows the shop terminal 300 to confirm that the user who has come to the shop is the user who made the reservation to visit the shop.

[0054] FIG. 11 is a sequence diagram showing an example of the operation when the information processing system 1000 serves an order to a user. In this case, the user does not need to have made a restaurant reservation as shown in the example of FIG. 10. Assume that the user is seated at a table in a restaurant, for example. At this time, the user terminal 100 reads a code through the user's operation (S211). For example, the input unit 11 of the user terminal 100 reads a code placed on the table. The service providing unit 140 of the server 200 transmits product information to the user terminal 100 (S212). Here, the product information is, for example, information indicating the restaurant's menu. The product information may be stored in advance in the storage device 29. The output unit 12 of the user terminal 100 displays the product information on the display (S213). The user terminal 100 makes an order request. At this time, for example, the input unit 11 may accept an input of a product order through the user's operation, and transmit order information including information on the ordered product and table information to the server 200, thereby requesting a restaurant reservation. When the service providing unit 140 receives the order information, it performs a null payment according to the order information (S215). Then, the service providing unit 140 transmits the order information to the store terminal 300 (S216). The store terminal 300 presents the order information (S217). At this time, the store terminal 300 may display the order information on a display or the like, or may print and output the order information. This allows the restaurant staff to confirm the order placed by the user using the user terminal 100.

[0055] FIG. 12 is a sequence diagram showing an example of the operation when the information processing system 1000 provides a payment service to a user. In this situation, it is assumed that a null payment is being made in response to an order, as shown in the example of FIG. 11. The user terminal 100 requests payment (S221). At this time, for example, the input unit 11 may accept input of information for making the payment through a user operation and transmit the information to the server 200 to make the payment request. The service providing unit 140 performs payment processing (S222). For example, the service providing unit 140 confirms payment using the user's credit card. At this time, the service providing unit 140 may award points to the user according to the amount. Then, the service providing unit 140 notifies the user that payment has been completed (S223). The output unit 12 of the user terminal 100 displays a message indicating that payment has been completed (S224).

[0056] In this way, the information processing system 1000 of the second embodiment acquires first biometric information, which is information about a user's biometrics, read by a user terminal equipped with certification information, which is information about the user's official certificate, and second biometric information, which is information about the user's biometrics linked to the certification information. Furthermore, the information processing system 1000 performs biometric authentication on the user based on the first biometric information and the second biometric information, and registers information about the user authenticated by biometric authentication. Then, when the information about the user is registered, the information processing system 1000 provides a service to the user in response to a request from the user terminal.

[0057] With this configuration, the information processing system 1000 can require the user to use a user terminal equipped with authentication information when registering the user. That is, the information processing system 1000 can perform both authentication equivalent to authentication of the user's possessions and biometric authentication. Furthermore, the information processing system 1000 performs authentication based on information from the user terminal when authenticating the user. In other words, the information processing system 1000 does not require the user to operate multiple devices when registering the user. That is, the information processing system 1000 of the second embodiment can strictly verify the identity of the user when using a service while minimizing the burden on the user.

[0058] Furthermore, the information processing system 1000 of the second embodiment may acquire second biometric information when the password entered by the user matches preset setting information. This allows the information processing system 1000 to perform authentication equivalent to knowledge authentication. In other words, the information processing system 1000 authenticates the user using possession authentication, knowledge authentication, and biometric authentication, thereby enabling more rigorous identification of the user.

[0059] Furthermore, in the second embodiment, information about a user includes an authentication level indicating the type of authentication performed on the user, and the information processing system 1000 registers information about a user who has not undergone biometric authentication and sets services that can be provided to the user according to the user's authentication level. In this way, the information processing system 1000 registers users even if they do not undergo biometric authentication using a user terminal equipped with certification information. In other words, the information processing system 1000 does not require all users to perform all authentications uniformly. In addition, the information processing system 1000 sets services that can be provided according to the authentication level, thereby promoting user registration while ensuring appropriate security.

[0060] [Variation 1] In the above example, the server 200 performs biometric authentication, but the biometric authentication may be performed in the user terminal 100. That is, the authentication unit 120 that performs the biometric authentication may also be provided in the user terminal 100.

[0061] Fig. 13 is a block diagram showing an example of the configuration of an information processing system 1000 of Modification 1. As shown in Fig. 13, the user terminal 100 of Modification 1 includes a reading unit 10, an input unit 11, an output unit 12, an acquisition unit 110, and an authentication unit 120. The server 200 of Modification 1 also includes a registration unit 130 and a service providing unit 140.

[0062] In this case, the first biometric information and the second biometric information are acquired in the user terminal 100. Then, biometric authentication is performed based on the first biometric information and the second biometric information in the user terminal 100. For example, in the process of S105 in the flowchart of Fig. 8, the authentication unit 120 in the user terminal 100 performs biometric authentication.

[0063] [Variation 2] In the above example, the biometric authentication is mainly performed using facial recognition, but the biometric authentication is not limited to facial recognition. The biometric authentication may be performed using, for example, an iris, a fingerprint, a palm print, or veins.

[0064] For example, when the authentication unit 120 performs iris authentication, the acquisition unit 110 acquires information about the iris. In this case, the reading unit 10 has a function of reading information about the iris. For example, the reading unit 10 may have a function of an infrared camera. That is, the user terminal 100 may be equipped with an infrared camera. The acquisition unit 110 acquires an iris image captured by the infrared camera or information indicating iris feature amounts as the first biometric information. In this case, the user's iris image or information indicating iris feature amounts is linked in advance to the certification information.

[0065] For example, when the authentication unit 120 performs fingerprint authentication, the acquisition unit 110 acquires information about the fingerprint. In this case, the acquisition unit 110 has a function of reading information about the fingerprint. For example, the reading unit 10 may have a function of a camera that photographs a fingerprint, or a function of a sensor that reads a fingerprint. The acquisition unit 110 acquires a fingerprint image generated by the reading unit 10 or information indicating fingerprint features as the first biometric information. In this case, the user's fingerprint image or information indicating fingerprint features is linked to the certification information in advance.

[0066] Similarly, when palm print authentication or vein authentication is performed, the acquisition unit 110 acquires information about the palm print or vein, which is obtained using a camera or sensor provided in the user terminal 100 .

[0067] In this way, the information processing system 1000 of the present disclosure may perform biometric authentication using the user's face, iris, fingerprint, palm print, veins, etc. The acquisition unit 110 may acquire, as the first biometric information, biometric information obtained from various cameras and sensors provided in the user terminal 100, depending on the authentication method.

[0068] [Variation 3] In the example of FIG. 11, an example of placing an order from the user terminal 100 has been described, but the method of placing an order is not limited to this example. For example, in the example of FIG. 11, a store terminal 300 for placing an order is installed at a table. In this case, when the user terminal 100 reads a code including information for identifying the table (S211), the service providing unit 140 sets the store terminal 300 associated with the table so that it can accept orders from the user. The store terminal 300 associated with the table is, for example, a terminal for placing orders installed at the table where the user is seated. For example, the service providing unit 140 associates the order from the store terminal 300 with the user's identification information. Then, a request for an order is made from the store terminal 300 in response to a user operation. The information processing system 1000 then performs the processes from S215 onwards.

[0069] [Variation 4] The information processing system 1000 may perform biometric authentication when providing a service.

[0070] Fig. 14 is a block diagram showing an example of the configuration of an information processing system 1000 of Modification 4. As shown in Fig. 14, the server 200 of Modification 3 includes a second authentication unit 150 in addition to the authentication unit 120, the registration unit 130, and the service providing unit 140.

[0071] The second authentication unit 150 performs biometric authentication on a user upon receiving a request from the user terminal 100. For example, in the example of FIG. 10, assume that a user uses the user terminal 100 to make a store reservation (S201). At this time, the second authentication unit 150 requests the user terminal 100 to read biometric information. For example, the second authentication unit 150 requests the user terminal 100 to take a photo. Here, information about the user's biometric information generated by the reading requested by the second authentication unit 150 is also referred to as third biometric information. The reading unit 10 of the user terminal 100, for example, takes a photo of the user and generates a captured image. The second authentication unit 150 performs biometric authentication based on the third biometric information, which is the captured image sent from the user terminal 100, and the registered biometric information. If the user is authenticated, the server 200 performs the processes from S202 onward in FIG. 10. If the user is not authenticated, the second authentication unit 150 notifies the user terminal 100 that the user has not been authenticated. At this time, the server 200 does not perform the processes from S202 onwards in Fig. 10. That is, the second authentication unit 150 performs biometric authentication based on the registered image and the third biometric information, which is information about the user's biometrics, read upon receiving a request from the user terminal 100. The second authentication unit 150 is an example of a second authentication means.

[0072] In this way, the information processing system 1000 of the fourth modification performs biometric authentication based on the registered biometric information and the third biometric information, which is information about the user's biometrics and is read upon a request from the user terminal. Then, when the user is authenticated by the biometric authentication, the information processing system 1000 provides a service in response to a request from the user terminal. This allows the information processing system 1000 to verify the user's identity even when providing a service, thereby preventing fraudulent use such as user impersonation.

[0073] Also, for example, in the example of FIG. 10, it is assumed that the store terminal 300 reads the reservation code (S206). At this time, the store terminal 300 may photograph the user and generate a captured image of the user (i.e., third biometric information). In this case, the second authentication unit 150 acquires the third biometric information from the store terminal 300. Then, the second authentication unit 150 performs biometric authentication based on the third biometric information and the registered biometric information. In this way, the second authentication unit 150 may perform biometric authentication using the third biometric information generated in a terminal different from the user terminal 100.

[0074] [Variation 5] The information processing system 1000 may provide services to multiple users. For example, suppose that a user is eating at a restaurant with another user who is different from the user, and the user and the other user want to split the bill.

[0075] In such a case, for example, the input unit 11 of the user terminal 100 accepts input of information about the other user through a user operation. At this time, the input unit 11 may accept input of information about the other user by reading a two-dimensional code indicating information about the other user displayed on the user terminal of the other user. Here, the information about the other user may be information including identification information of the other user, or may be information such as that shown in FIG. 6. Then, the input unit 11 of the user terminal 100 may accept input of the amount to be paid by the user and the amount to be paid by the other user through a user operation. Then, the input unit 11 of the user terminal 100 makes a payment request including information about the other user and information indicating the amount to be paid by the user and the amount to be paid by the other user. Then, the service providing unit 140 performs payment processing for the amount to be paid by the user to the user, and performs payment processing for the amount to be paid by the other user to the other user.

[0076] In this way, the information processing system 1000 of the fifth modification may provide a service to the user and the other user when a request from a user terminal includes information about a user different from the user.

[0077] [Other application examples] In the above example, the information processing system 1000 is mainly applied to a restaurant, but the information processing system 1000 can also be applied in other situations.

[0078] For example, if the user visits a retail store, the service providing unit 140 may provide services such as store reservations, product ordering, payment, and point awarding in response to requests from the user terminal 100.

[0079] The information processing system 1000 can also be applied to a home delivery restaurant. For example, the service providing unit 140 may provide services such as ordering products, making payments, and awarding points in response to a request from the user terminal 100. FIG. 15 is a diagram schematically illustrating an example of the configuration of the information processing system 1000 in another application example. Specifically, FIG. 15 schematically illustrates an example of the configuration of the information processing system 1000 when applied to a home delivery restaurant. As illustrated in FIG. 15, the user terminal 100 is communicatively connected to a server 200. The server 200 is also communicatively connected to a store terminal 300 and a deliveryperson terminal 400. The deliveryperson terminal 400 is a terminal used by a deliveryperson who delivers products. The deliveryperson terminal 400 may be a portable terminal such as a smartphone or a tablet terminal.

[0080] When the user operates the user terminal 100 to request an order, the service providing unit 140 performs a null payment (S215) and transmits the order information to the store terminal 300 (S216), similar to the example in Fig. 11. In this way, the user can use the user terminal 100 to place an order for a product.

[0081] Furthermore, when the delivery person delivers the product to the user, the user terminal 100 requests payment in response to an operation by the user. Then, as in the example of FIG. 12, the service providing unit 140 performs payment processing (S222) and notifies the user terminal 100 that payment has been completed (S223). The service providing unit 140 may perform payment processing when the user terminal 100 requests payment and the delivery person terminal 400 notifies the server 200 that delivery has been completed. In this case, the delivery person operates the delivery person, and the delivery person terminal 400 notifies the server 200 that delivery has been completed. This allows the information processing system 1000 to complete payment only if delivery has been made without fail.

[0082] Similarly, the information processing system 1000 can also be applied to home delivery services. For example, suppose a cash-on-delivery item is delivered to a user by a home delivery service. In this case, for example, the delivery person operates the delivery person terminal 400 to display a two-dimensional barcode including payment information and the like. When the input unit 11 of the user terminal 100 reads the two-dimensional barcode, the output unit 12 of the user terminal 100 presents the payment information and the like. Thereafter, when a payment request is made from the user terminal 100 by the user's operation, the service providing unit 140 performs payment processing. Thereafter, the service providing unit 140 may, for example, notify the user terminal 100 and the delivery person terminal 400 of the completion of payment.

[0083] <Example of hardware configuration for information processing system> The hardware constituting the information processing systems of the first and second embodiments described above will be described. Fig. 16 is a block diagram showing an example of the hardware configuration of a computer device that realizes the information processing system in each embodiment. The information processing system and information processing method described in each embodiment and each modified example are realized in a computer device 30. For example, each of the user terminal and server described in each embodiment and each modified example may have the hardware configuration shown in Fig. 16.

[0084] 16, a computer device 30 includes a processor 31, a RAM (Random Access Memory) 32, a ROM (Read Only Memory) 33, a storage device 34, an input / output interface 35, a bus 36, and a drive device 37. Note that the information processing system may be realized by a plurality of electric circuits.

[0085] The storage device 34 stores a program (computer program) 38. The processor 31 executes the program 38 of the information processing system using the RAM 32. Specifically, the program 38 includes, for example, a program that causes a computer to execute the processes shown in FIGS. 3, 8, 9, 10, 11, and 12. The processor 31 executes the program 38 to realize the functions of the components of the information processing system. The program 38 may be stored in the ROM 33. The program 38 may also be recorded on a storage medium 40 and read out using the drive device 37, or may be transmitted to the computer device 30 from an external device (not shown) via a network (not shown).

[0086] The input / output interface 35 exchanges data with peripheral devices (such as a keyboard, a mouse, and a display device) 39. The input / output interface 35 functions as a means for acquiring or outputting data. The bus 36 connects the various components.

[0087] There are various variations in the method for realizing the information processing system. For example, the information processing system can be realized as a dedicated device. Furthermore, the information processing system can be realized based on a combination of multiple devices.

[0088] The scope of each embodiment also includes a processing method for recording a program for realizing each component of the function of each embodiment on a storage medium, reading the program recorded on the storage medium as code, and executing it on a computer. That is, a computer-readable storage medium is also included in the scope of each embodiment. Furthermore, the storage medium on which the above-mentioned program is recorded and the program itself are also included in each embodiment.

[0089] The storage medium may be, but is not limited to, a floppy disk, a hard disk, an optical disk, a magneto-optical disk, a CD (Compact Disc)-ROM, a magnetic tape, a non-volatile memory card, or a ROM. The programs recorded on the storage medium are not limited to standalone programs that execute processes, but also include programs that run on an OS (Operating System) in cooperation with other software and functions of an expansion board.

[0090] Although the present invention has been described above with reference to the embodiments, the present invention is not limited to the above embodiments. Various modifications that can be understood by those skilled in the art can be made to the configuration and details of the present invention within the scope of the present invention. Furthermore, the above embodiments and modifications can be appropriately combined in various application examples.

[0091] This application claims priority based on Japanese Patent Application No. 2021-125258, filed on July 30, 2021, the disclosure of which is incorporated herein in its entirety. [Explanation of symbols]

[0092] 10 Reading unit 11 Input section 12 Output section 100 user terminals 110 Acquisition Department 120 Authentication Department 130 Registration Department 140 Service Provision Department 150 Second Certification Section 200 servers

Claims

1. an acquisition means for acquiring first biometric information, which is information about a biometric of a user, read by a user terminal equipped with certification information, which is information about a public certificate of a user, and second biometric information, which is information about a biometric of the user and is linked to the certification information; an authentication means for performing biometric authentication on the user based on the first biometric information and the second biometric information; a registration means for registering information about the user authenticated by the biometric authentication; a service providing means for providing a service to the user in response to a request from the user terminal when information about the user is registered; The registration means also registers information about the user for which the biometric authentication has not been performed, The information about the user includes an authentication level indicating a type of authentication performed on the user; the service providing means sets the service that can be provided to the user in accordance with the authentication level of the user. Information processing system.

2. the acquiring means acquires the second biometric information when the password input by the user matches preset setting information. The information processing system according to claim 1 .

3. the service providing means, when receiving an order request from the user terminal, performs a null settlement for the order, and when receiving a settlement request from the user terminal, completes the settlement for the order; 3. The information processing system according to claim 1 or 2.

4. The registration means registers the first biometric information as registered biometric information when the user is authenticated by the biometric authentication. The information processing system according to claim 1 .

5. a second authentication means for performing the biometric authentication based on the registered biometric information and third biometric information, which is information on the biometrics of the user and is read upon a request from the user terminal; the service providing means provides the service in response to a request from the user terminal when the user is authenticated by the second authentication means.

5. The information processing system according to claim 4.

6. the service providing means, when the request from the user terminal includes information about a user different from the user, provides the service to the user and the other user. The information processing system according to any one of claims 1 to 5.

7. The official certificate is a My Number Card, The certification information is an electronic certificate indicating the validity of the My Number card.

7. An information processing system according to claim 1.

8. The computer Acquiring first biometric information, which is information about a biometric of a user, read by a user terminal equipped with certification information, which is information about a public certificate of a user, and second biometric information, which is information about a biometric of the user linked to the certification information; performing biometric authentication on the user based on the first biometric information and the second biometric information; registering information about the user authenticated by the biometric authentication; Registering information about the user for whom the biometric authentication has not been performed; When information about the user is registered, providing a service to the user in response to a request from the user terminal; The information about the user includes an authentication level indicating a type of authentication performed on the user; In providing the service, the service that can be provided to the user is set according to the authentication level of the user. Information processing methods.

9. A process of acquiring first biometric information, which is information about a biometric of a user, read by a user terminal equipped with certification information, which is information about a public certificate of a user, and second biometric information, which is information about a biometric of the user and is linked to the certification information; A process of performing biometric authentication on the user based on the first biometric information and the second biometric information; A process of registering information about the user authenticated by the biometric authentication; A process of registering information about a user for whom the biometric authentication has not been performed; when information about the user is registered, a process of providing a service to the user in response to a request from the user terminal; The information about the user includes an authentication level indicating a type of authentication performed on the user; a computer program for setting the service that can be provided to the user in accordance with the authentication level of the user in a process of providing the service;

Images